Edit tour

Windows Analysis Report
https://ennexhorpps.com/apart/book244102ashotxxx22214

Overview

General Information

Sample URL:	https://ennexhorpps.com/apart/book244102ashotxxx22214
Analysis ID:	1470508
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Multi AV Scanner detection for submitted file

Posts data to a JPG file (protocol mismatch)

HTTP GET or POST without a user agent

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2160,i,7866435718271725811,6030177856115719488,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ennexhorpps.com/apart/book244102ashotxxx22214" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: https://ennexhorpps.com/apart/book244102ashotxxx22214

Virustotal: Detection: 5%

Perma Link

Phishing

AI detected phishing page

Source: https://ennexhorpps.com

LLM: Score: 9 brands: Booking.com Reasons: The URL 'https://ennexhorpps.com' does not match the legitimate domain 'booking.com' associated with Booking.com. The webpage prominently displays a login form, which is a common feature in phishing sites to capture user credentials. The domain name 'ennexhorpps.com' is suspicious and unrelated to Booking.com. The presence of social engineering techniques, such as mimicking the legitimate Booking.com login page, further indicates that this is a phishing site. DOM: 0.0.pages.csv

Source: https://partner.booking.com/themes/custom/booking/images/1px.gif

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49759 version: TLS 1.2

Networking

Posts data to a JPG file (protocol mismatch)

Source: unknown

HTTP traffic detected: POST /g/collect?v=2&tid=G-LVHK6H547B&gtm=45je4730v889588973z8811498483za200zb811498483&_p=1720575890702&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&tag_exp=0&gdid=dYWJhMj&cid=1532117314.1720575878&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=6&sid=1720575877&sct=1&seg=1&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&dt=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&en=chatbot_other_action&ep.custom_page_title=NEW%20Homepage-64867&ep.article_author=Calum%20McSwiggan&ep.article_publish_time=2021-03-17&ep.article_modify_time=2024-01-18&ep.chatbot_page=0&ep.url_passthrough=true&ep.chatbot_label=Why%20being%20Travel%20Proud%20Certified%20matters%20to%20our%20partners%20-%20https%3A%2F%2Fpartner.booking.com%2Fsites%2Fdefault%2Ffiles%2Fstyles%2Fmedium_400_width%2Fpublic%2F2024-06%2Fukb5394_asset_bank_shot_10_0719.jpg%3Fitok%3DCkxCwpmv%20%7C%201&ep.action_name=open-chatbubble&ep.action_source=programmatic&ep.chatbot_next_page=welcome-page&_et=1324&tfd=35001&_z=fetch HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://partner.booking.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.205.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.205.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.205.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.205.0
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apart/book244102ashotxxx22214 HTTP/1.1Host: ennexhorpps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuz HTTP/1.1Host: ennexhorpps.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA
Source: global traffic	HTTP traffic detected: GET /static/booking/styles/main_jlksgegksel32232v5.css HTTP/1.1Host: ennexhorpps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ennexhorpps.com/sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA
Source: global traffic	HTTP traffic detected: GET /static/stylesheets/banner.css HTTP/1.1Host: ennexhorpps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ennexhorpps.com/sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA
Source: global traffic	HTTP traffic detected: GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ennexhorpps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ennexhorpps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ennexhorpps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io-3.0.1.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ennexhorpps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: s/fJ6cIf0d+knToVZEAF+A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /static/booking/favicon.ico HTTP/1.1Host: ennexhorpps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ennexhorpps.com/sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA
Source: global traffic	HTTP traffic detected: GET /backend_static/common/flags/new/48-squared/us.png HTTP/1.1Host: q-xx.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ennexhorpps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: yO/SlrMvweJ4j1OafrV/ag==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /static/booking/favicon.ico HTTP/1.1Host: ennexhorpps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /backend_static/common/flags/new/48-squared/us.png HTTP/1.1Host: q-xx.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: aRzQDdHJPjes2/GLQA0SUQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /en-us?utm_source=extranet_login_page HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/fonts/icons/icons.woff?v=1.3.3 HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://partner.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: XoQTcXdIixvtgzb62DpjxQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/OtAutoBlock.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optimize.js?id=GTM-MVTHSWF HTTP/1.1Host: www.googleoptimize.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/bookingdotcomb2b/booking_prod/scripts/evergage.min.js HTTP/1.1Host: cdn.evgnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/bui/9.5.6/bui.min.js HTTP/1.1Host: bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/1px.gif HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/initiator.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/1px.gif HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/main.1afc28a1a9a2da762946.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/me.7d4a349527f92fc578d9.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/initiator.js HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/huge_slider_teaser/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?h=a0c51cab&itok=O6kEyqHx HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202404.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/huge_slider_teaser/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?h=a0c51cab&itok=O6kEyqHx HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kindly-chat.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/favicons/site.webmanifest HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rc/19174/scripts/s.js HTTP/1.1Host: cdn.spinnaker-js.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/favicons/favicon.svg HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202404.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: qNnunTcxE64/WqywCQjDpA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/favicons/favicon.ico HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/commons.9b20dd57c6f12e1beb80.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /KindlyChat-2f88cfbafafa555baa4d.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202404.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/favicons/favicon.svg HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
Source: global traffic	HTTP traffic detected: GET /v1/ua-parser HTTP/1.1Host: dcinfos-cache.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/geoip?weather=false HTTP/1.1Host: dcinfos-cache.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22}; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/favicons/favicon.ico HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22}; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=
Source: global traffic	HTTP traffic detected: GET /content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%20sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ&sid%20=930746e7f78d5b33410375991db31657 HTTP/1.1Host: www.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /v1/geoip?weather=false HTTP/1.1Host: dcinfos-cache.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ua-parser HTTP/1.1Host: dcinfos-cache.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/images/1px.gif HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_8QaRnHRXZpp4JmK9lZ0mC_x1wXnsBgkI1SW4VYyWADE.css?delta=0&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main_cft.iq_ltr/7e335c31008a447192abd83491a4ee057583a557.css HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/core-deps-inlinedet_cft/9fc72199a3b8ae2b967821deb6fa10d92ce308fc.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main_exps_cft.iq_ltr/5e62043f93e28ff1fa2317e78b13f494ca8b061b.css HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/gprof_icons_cft.iq_ltr/e4765aae192d514fe8551e34b170c5bcdba4f06c.css HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/css/bui-react-9.12548206.css HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/jquery_cft/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main_cft/e77ceeb677e7749eed78fc0ec1e617c3e5c210c2.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/searchbox_cft/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/error_catcher_bec_cft/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/crossorigin_check_cft/2454015045ef79168d452ff4e7f30bdadff0aa81.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/css/client.99a1ce89.css HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/css/256aa323.65a94ca2.chunk.css HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_VkmDSMYWYbk1GzPhN1O6VYri69gfmqRRB6Kq_M8CTg8.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_85stE81WnP63Pe_YSFFXekOQfuabHUZm1w0Qt0kOxRM.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone
Source: global traffic	HTTP traffic detected: GET /shared/analytics.47cf758c4d585426c29d.js HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/static_cft.iq_ltr/ab3ca68bec5c969c1d26aca0ec2c584dfa312105.css HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/privacy-consent/releases/2.1.55/customer/cookie-banner.min.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/sp-on-maps_cft/1d69e13e40d03fc59f58d76b31735d5d8c37416a.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sidebar-banner-ajax-render/136846/node HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/html, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone
Source: global traffic	HTTP traffic detected: GET /themes/custom/booking/js/libraries/addtoany.min.js?v=1.0.0 HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=If-None-Match: "605f0374-750"If-Modified-Since: Sat, 27 Mar 2021 10:05:40 GMT
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/1260644.1562364.json?89b5bf9a6316eb30dcfc5b1f740c76c8 HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=If-None-Match: "605f0374-1ed1"If-Modified-Since: Sat, 27 Mar 2021 10:05:40 GMT
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/content_cft/ece690fd13c824529e3870e0e662c417931b8461.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/plugable-access-form_cft/3ae2aaac8c7322f2908109b6a9e7446001225f2b.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/sm.25.html HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=; cors_js=1
Source: global traffic	HTTP traffic detected: GET /static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design-assets/assets/v3.81.0/fonts-brand/BookingBold.woff HTTP/1.1Host: t-cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cf2.bstatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=070937457e9a146494e54253f9387735ba4ce91d&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters&url=click.%20magazine-499%7Cindustry%20perspectives-7%7Cwhy%20being%20travel%20proud%20certified%20matters%20to%20our%20partners-136846&ref=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&title=Why%20being%20Travel%20Proud%20Certified%20matters%20to%20our%20partners%20%7C%20Click.%20Magazine&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=3566&pxr=1&gdpr=0&pst=1720575877370 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design-assets/assets/v3.81.0/fonts-brand/BookingRegular.woff HTTP/1.1Host: t-cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cf2.bstatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.2.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/sidebar-banner-ajax-render/136846/node HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\|18.07\|84.25094
Source: global traffic	HTTP traffic detected: GET /menu/modules/core.Ep5bSEmr.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://partner.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo?ver=1&sid=8ac6b1f85386b93507ae3cb6dc426561&t=17205758751 HTTP/1.1Host: www.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%20sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ&sid%20=930746e7f78d5b33410375991db31657Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\|18.07\|84.25094; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575877.60.0.0; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-LVHK6H547B&gacid=1532117314.1720575878&gtm=45je4730v889588973z8811498483za200zb811498483&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1625852243 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/1260644.1562364.json?89b5bf9a6316eb30dcfc5b1f740c76c8 HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/click_article_header_desktop/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?itok=cVuzdpd9 HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\|18.07\|84.25094; _ga=GA1.1.1532117314.1720575878; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575877.60.0.0
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=On+xTOYeemMB9shD/iSG2ouVqMJJOx6T5qnMTQ0tr89lwXsVC97GVLw/YbCd/RV17RieuwjRBsJ+T87J1TlgwTf6DUZnkEoVAH6MkjY5KmPkGgd0sd1yOoS6VFxVqAmyPO8YOL9srn0/dpT9ISLu9bqY0WHA1FGbZkqmwDgLWii23TwEADI=
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/avatar_default/public/2024-03/alice-piercy.png.webp?itok=dIxqODVk HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\|18.07\|84.25094; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575877.60.0.0; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: LLTXEcLd+cWVhCUM30taHg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/bui-react-9.1fa6c1cb.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/client.2cc28297.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/034e4287.d0fe97f0.chunk.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/booking-iconset-original/29bca18dce5a8e111855e31314a9b1d750ea9beb.woff2 HTTP/1.1Host: t-cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cf2.bstatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/a72063b1.759d5807.chunk.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psb/capla/static/js/256aa323.0c14bd53.chunk.js HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-gb.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css HTTP/1.1Host: t-cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js_tracking?sid=8ac6b1f85386b93507ae3cb6dc426561&lang=en-gb&ref_action=content&pid=c35a0c4170650183&stype=1&aid=304142&ver=2&ete=&etg=&etcg=&ets=HWAJLGbbeQHUYbcJTGZZOeUPEHVKNFET\|1&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YfvDZInTinoYhY4knAbL7w_mEXyQKYcwcjTpmBXsv2Bh18CclNSio9NQZcrqdMJxNZXE1blbaDHSW17RZS8KVAgGOhagDN06R-Ne6EDV7Y-1QK5oslz8959qkrNqEk5rrsf_8ChOy73oMSgnPOXt79ZUrAuF5W3JVeZh0YUiyCSK2N2tvKyFl_UvoX9QpVZyJD0gXajrryNdUNpjtSdiBM4 HTTP/1.1Host: www.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Booking-Language-Code: en-gbX-Booking-Client-Info: HWAJLGbbeQHUYbcJTGZZOeUPEHVKNFET\|1X-Booking-CSRF: wx+OZgAAAAA=MBxK0yDEHOSN2TrW5WAQWWiRCurZc4ENx1d5zPH8lf1-jAarfaosRU4r8Sd-UlWhhwpQlmKR8S6qvQPcCC2Cd_DhdpHQ-gyxadPuBthxYA651c4uZgxVUwjd3laYfRQB5Jw6gF6MI9f9A33eCWisVYu_G1IXM0NIl4P_MPldAMjeDsNppdLDewLy72BLJYNEk8lamn2itRAEJ7v4sec-ch-ua-mobile: ?0X-Booking-AID: 304142X-Partner-Channel-Id: 3X-Booking-Label: gen173bo-122AEB2AIBUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Booking-Pageview-Id: c35a0c4170650183X-Booking-Info: 2009420,2014880,2027000,HWAJLGbbeQHUYbcJTGZZOeUPEHVKNFET\|1,2009420\|1X-Booking-SiteType-Id: 1X-Requested-With: XMLHttpRequestX-Booking-Session-Id: 8ac6b1f85386b93507ae3cb6dc426561sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%20sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ&sid%20=930746e7f78d5b33410375991db31657Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\|18.07\|84.25094; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575878.59.0.0;
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=070937457e9a146494e54253f9387735ba4ce91d&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters&url=click.%20magazine-499%7Cindustry%20perspectives-7%7Cwhy%20being%20travel%20proud%20certified%20matters%20to%20our%20partners-136846&ref=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&title=Why%20being%20Travel%20Proud%20Certified%20matters%20to%20our%20partners%20%7C%20Click.%20Magazine&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=3566&pxr=1&gdpr=0&pst=1720575877370 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo?ver=1&sid=8ac6b1f85386b93507ae3cb6dc426561&t=17205758751 HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\|18.07\|84.25094; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575878.59.0.0; BJS=-
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ariane.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/avatar_default/public/2024-03/alice-piercy.png.webp?itok=dIxqODVk HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\|18.07\|84.25094; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575878.59.0.0; BJS=-
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png HTTP/1.1Host: cf2.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/click_article_header_desktop/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?itok=cVuzdpd9 HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\|18.07\|84.25094; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575878.59.0.0; BJS=-
Source: global traffic	HTTP traffic detected: GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-gb.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-6284728-15&cid=1532117314.1720575878&jid=1215440777&gjid=1257214960&_gid=2146032038.1720575878&_u=YADAAEAAAAAAACAAI~&z=1851517657 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /c360/v1/track HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\|18.07\|84.25094; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575878.59.0.0; BJS=-; _gat=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5vZ9AyTV5G5PMTezVNKPsjm3ty35ePBizONV2I7D93HClkyVFNrGKmsCO6ChIgtz5ZQIHMbHdrBlzvK7HaRDFY5UW5i5pfzPeHTvOyvjen6Eoe42YQ%2FM%2BaxTdqiNKVMsjHfEzuD6NpIm78Zu7Qq3YKU79BNwSFvVz0%3D; lastSeen=0; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A39+GMT-0400+(Eastern+Daylight+Time)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=6767f47d-3b8f-4afa-8268-3d0b7be68c35&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.booking.com%2Fcontent%2Fprivacy.en-gb.html%3Flabel%3Dgen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%2520sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ%26sid%2520%3D930746e7f78d5b33410375991db31657
Source: global traffic	HTTP traffic detected: GET /js_tracking?sid=8ac6b1f85386b93507ae3cb6dc426561&lang=en-gb&ref_action=content&pid=c35a0c4170650183&stype=1&aid=304142&ver=2&ete=&etg=&etcg=&ets=HWAJLGbbeQHUYbcJTGZZOeUPEHVKNFET\|1&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YfvDZInTinoYhY4knAbL7w_mEXyQKYcwcjTpmBXsv2Bh18CclNSio9NQZcrqdMJxNZXE1blbaDHSW17RZS8KVAgGOhagDN06R-Ne6EDV7Y-1QK5oslz8959qkrNqEk5rrsf_8ChOy73oMSgnPOXt79ZUrAuF5W3JVeZh0YUiyCSK2N2tvKyFl_UvoX9QpVZyJD0gXajrryNdUNpjtSdiBM4 HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\|18.07\|84.25094; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575878.59.0.0; BJS=-; _gat=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5vZ9AyTV5G5PMTezVNKPsjm3ty35ePBizONV2I7D93HClkyVFNrGKmsCO6ChIgtz5ZQIHMbHdrBlzvK7HaRDFY5UW5i5pfzPeHTvOyvjen6Eoe42YQ%2FM%2BaxTdqiNKVMsjHfEzuD6NpIm78Zu7Qq3YKU79BNwSFvVz0%3D; lastSeen=0; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A39+GMT-0400+(Eastern+Daylight+Time)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=6767f47d-3b8f-4afa-8268-3d0b7be68c35&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.booking.com%2Fcontent%2Fprivacy.en-gb.html%3Flabel%3Dgen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%2520sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ%26sid%2520%3D930746e7f78d5b33410375991db31657
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-116109-18&cid=1532117314.1720575878&jid=2002002835&gjid=388366771&_gid=2146032038.1720575878&_u=SCCAgAIJAAAAAGgMI~&z=1781082644 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js_tracking?ref_action=content&ver=2&stype=1&lang=en-gb&pid=c35a0c4170650183&ete=&etg=&etcg=eWfCDMeICKFNcfEEHFRT\|4&ets=&etgwv= HTTP/1.1Host: www.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Booking-ET-Serialized-State: E3nZ0SNJy_IalMCdenag599CGTgPwrLw_zdh1kNFd9_BQjk_WwpskrAa7o2vWeN-YX-Booking-Language-Code: en-gbX-Booking-Client-Info: sec-ch-ua-mobile: ?0X-Booking-AID: 304142User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Booking-Pageview-Id: c35a0c4170650183X-Booking-Info: X-Booking-SiteType-Id: 1X-Booking-Session-Id: 17b8016d16fbaac6374f0773b501b9fdsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%20sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ&sid%20=930746e7f78d5b33410375991db31657Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _gat=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5vZ9AyTV5G5PMTezVNKPsjm3ty35ePBizONV2I7D93HClkyVFNrGKmsCO6ChIgtz5ZQIHMbHdrBlzvK7HaRDFY5UW5i5pfzPeHTvOyvjen6Eoe42YQ%2FM%2BaxTdqiNKVMsjHfEzuD6NpIm78Zu7Qq3YKU79BNwSFvVz0%3D; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A39+GMT-0400+(Eastern+Daylight+Time)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=6767f47d-3b8f-4afa-8268-3d0b7be68c35&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.booking.com%2Fcontent%2Fprivacy.en-gb.html%3Flabel%3Dgen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%2520sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ%26sid%2520%3D930746e7f78d5b33410375991db31657; lastSeen=0; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575879.58.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575880045\|2071166924_-791013993\|0\|\|\|\|0\|18.07\|84.25094
Source: global traffic	HTTP traffic detected: GET /static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css HTTP/1.1Host: cf2.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy-consents/implicit HTTP/1.1Host: account.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _gat=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5vZ9AyTV5G5PMTezVNKPsjm3ty35ePBizONV2I7D93HClkyVFNrGKmsCO6ChIgtz5ZQIHMbHdrBlzvK7HaRDFY5UW5i5pfzPeHTvOyvjen6Eoe42YQ%2FM%2BaxTdqiNKVMsjHfEzuD6NpIm78Zu7Qq3YKU79BNwSFvVz0%3D; lastSeen=0; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575879.58.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575880045\|2071166924_-791013993\|0\|\|\|\|0\|18.07\|84.25094; bkng_sso_session=e30; bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJkYXRhX3N1YmplY3RfaWQiOiIwMWEzYzgwMC01NmUyLTRmMjctYTUxZS0xYmU0NjczNGVmOWEiLCJzZXNzaW9ucyI6W119fQ; bkng_sso_ses=e30
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons.37.svg.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-6284728-15&cid=1532117314.1720575878&jid=1606083481&gjid=1192171928&_gid=2146032038.1720575878&_u=aCDACEABBAAAACAAI~&z=2139570125 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /signals/config/137657823624702?v=2.9.160&r=stable&domain=partner.booking.com&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-6284728-15&cid=1532117314.1720575878&jid=1215440777&_u=YADAAEAAAAAAACAAI~&z=1195573703 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-116109-18&cid=1532117314.1720575878&jid=2002002835&_u=SCCAgAIJAAAAAGgMI~&z=514388935 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js_tracking?ref_action=content&ver=2&stype=1&lang=en-gb&pid=c35a0c4170650183&ete=&etg=&etcg=eWfCDMeICKFNcfEEHFRT\|4&ets=&etgwv= HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _gat=1; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5vZ9AyTV5G5PMTezVNKPsjm3ty35ePBizONV2I7D93HClkyVFNrGKmsCO6ChIgtz5ZQIHMbHdrBlzvK7HaRDFY5UW5i5pfzPeHTvOyvjen6Eoe42YQ%2FM%2BaxTdqiNKVMsjHfEzuD6NpIm78Zu7Qq3YKU79BNwSFvVz0%3D; lastSeen=0; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575879.58.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575880045\|2071166924_-791013993\|0\|\|\|\|0\|18.07\|84.25094; bkng_sso_session=e30; bkng_sso_ses=e30; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A40+GMT-0400+(Eastern+Daylight+Time)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=6767f47d-3b8f-4afa-8268-3d0b7be68c35&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.booking.com%2Fcontent%2Fprivacy.en-gb.html%3Flabel%3Dgen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%2520sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ%26sid%2520%3D930746e7f78d5b33410375991db31657&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&implicitConsentCountry=nonGDPR&implicitConsentDate=1720575880712
Source: global traffic	HTTP traffic detected: GET /static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg HTTP/1.1Host: cf2.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/challenge.js HTTP/1.1Host: d8c14d4960ca.edge.sdk.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /html?website=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&session=1081587288e1c42126592dee7a0498ee&page=070937457e9a146494e54253f9387735ba4ce91d&gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-6284728-15&cid=1532117314.1720575878&jid=1606083481&_u=aCDACEABBAAAACAAI~&z=1836055723 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-6284728-15&cid=1532117314.1720575878&jid=1215440777&_u=YADAAEAAAAAAACAAI~&z=1195573703 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters&rl=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&if=false&ts=1720575882373&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&cdl=API_unavailable&it=1720575878005&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-116109-18&cid=1532117314.1720575878&jid=2002002835&_u=SCCAgAIJAAAAAGgMI~&z=514388935 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters&rl=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&if=false&ts=1720575882373&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&cdl=API_unavailable&it=1720575878005&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c360/v1/track HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _gat=1; lastSeen=0; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575879.58.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575880045\|2071166924_-791013993\|0\|\|\|\|0\|18.07\|84.25094; bkng_sso_session=e30; bkng_sso_ses=e30; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A40+GMT-0400+(Eastern+Daylight+Time)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=6767f47d-3b8f-4afa-8268-3d0b7be68c35&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.booking.com%2Fcontent%2Fprivacy.en-gb.html%3Flabel%3Dgen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%2520sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ%26sid%2520%3D930746e7f78d5b33410375991db31657&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&implicitConsentCountry=nonGDPR&implicitConsentDate=1720575880712; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/challenge.js HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-6284728-15&cid=1532117314.1720575878&jid=1606083481&_u=aCDACEABBAAAACAAI~&z=1836055723 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters&rl=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&if=false&ts=1720575882373&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&cdl=API_unavailable&it=1720575878005&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters&rl=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&if=false&ts=1720575882373&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&cdl=API_unavailable&it=1720575878005&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: vyRyX/7+xkclWfs7hkZOlg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/verify HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/telemetry HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070937457e9a146494e54253f9387735ba4ce91d&v=18.07&pst=1720575877370&q=1&li=0&lh=0&ls=0&d=AAPUAN0AAAAFAAOLBBYSAAAEGRIAAQQaEgACBBoSAAMEGhIABAUPBgQ2AxIABQUkBwQxAw4ABQUlKAVLKgABAAD__wAFXQYENgMSAAUFagcENgMSAAUFaygFayoAAAAA__8BBcgGBDYDEgAFBdcHBDYDEgAFBdgoBdgqAAAAAP__AgZMJgABAAAGmQIENgMSBp8psY-Y4gAFDzUmAAIAABZODgAAFasWVSYAAwAAFlgmAAQAABjVJgAFAAAY3iYABgAAIZEmAAcAACGqJgAIAAAlNyYACQAAJU4mAAoAACb6Ew*.MDplbi11cw==,MTp2RTdRcQ==,MjpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,Mzo3Y0hNRA==,NDpFeHBlcmllbmNlIDE=,NTojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXY6WzJdID4gZGl2OlszXSA+IGRpdjpbMl0gPiB1bCA+IGxp.bW91c2Utb3V0,bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /*Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/telemetry HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us?utm_source=extranet_login_page HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575879.58.0.0; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=0; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575880045\|2071166924_-791013993\|1\|\|\|\|0\|18.07\|84.25094; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJE
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070937457e9a146494e54253f9387735ba4ce91d&v=18.07&pst=1720575877370&q=1&li=0&lh=0&ls=0&d=AAPUAN0AAAAFAAOLBBYSAAAEGRIAAQQaEgACBBoSAAMEGhIABAUPBgQ2AxIABQUkBwQxAw4ABQUlKAVLKgABAAD__wAFXQYENgMSAAUFagcENgMSAAUFaygFayoAAAAA__8BBcgGBDYDEgAFBdcHBDYDEgAFBdgoBdgqAAAAAP__AgZMJgABAAAGmQIENgMSBp8psY-Y4gAFDzUmAAIAABZODgAAFasWVSYAAwAAFlgmAAQAABjVJgAFAAAY3iYABgAAIZEmAAcAACGqJgAIAAAlNyYACQAAJU4mAAoAACb6Ew*.MDplbi11cw==,MTp2RTdRcQ==,MjpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,Mzo3Y0hNRA==,NDpFeHBlcmllbmNlIDE=,NTojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IHNlY3Rpb24gPiBkaXYgPiBkaXY6WzJdID4gZGl2OlszXSA+IGRpdjpbMl0gPiB1bCA+IGxp.bW91c2Utb3V0,bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575879.58.0.0; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-ma
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: AVtjKWerBIo1De30U2TNKw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575879.58.0.0; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matter
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575879.58.0.0; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-ma
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575879.58.0.0; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-ma
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; _ga_LVHK6H547B=GS1.1.1720575877.1.0.1720575879.58.0.0; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-ma
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mattersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _ga=GA1.2.1532117314.1720575878; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575880045\|2071166924_-791013993\|1\|\|\|\|0\|18.07\|84.25094; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZx
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content&rl=&if=false&ts=1720575893325&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575893041&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content&rl=&if=false&ts=1720575893325&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575893041&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=07095244509cf44a1110525e1381dfa2e15f441a&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=2020&pxr=1&gdpr=0&pst=1720575893386 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=2&pvis=2&th=1260644.1562364.1.1.1.1.1720575877762.1720575877762.0.1; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A52+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575893.44.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370$07095244509cf44a1110525e1381dfa2e15f441a.-2069667428.1720575893386\|1720575880045\|2071166924_-791013993\|1\|\|\|\|0\|18.07\|84.25094If-Modified-Since: F
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJIb21lcGFnZSIsImxvY2FsZSI6ImVuX1VTIiwidXJsIjoiaHR0cHM6Ly9wYXJ0bmVyLmJvb2tpbmcuY29tL2VuLXVzP3V0bV9zb3VyY2U9ZXh0cmFuZXRfbG9naW5fcGFnZSNtYWluLWNvbnRlbnQiLCJ1cmxSZWZlcnJlciI6IiIsImNoYW5uZWwiOiJXZWIiLCJiZWFjb25WZXJzaW9uIjoxNiwiY29uZmlnVmVyc2lvbiI6IjEzOCIsImNvbnRlbnRab25lcyI6WyJzaWRlYmFyX2Jhbm5lciIsInBvcHVwX3N1cnZleSIsImJvb2tpbmdfbWNwX2dhIiwiaG9tZXBhZ2VfY2Fyb3VzZWwiLCJob21lcGFnZV9taW5pX2hlcm9fYmFubmVyIiwiaG9tZXBhZ2VfcmVjb21tZW5kZWRfcmVhZHMiLCJob21lcGFnZV9yZWNvbW1lbmRlZF9yZWFkc18xc3RfdGVhc2VyIiwiaG9tZXBhZ2VfY3RhIl19LCJ1c2VyIjp7ImFub255bW91c0lkIjoiMmJhNTI2YWY2ZjhkMTRmMiIsImlkZW50aXRpZXMiOnsiZ2FDbGllbnRJZCI6IjE1MzIxMTczMTQuMTcyMDU3NTg3OCJ9fSwiaW50ZXJhY3Rpb24iOnsibmFtZSI6IlZpZXdlZCBIb21lcGFnZSJ9LCJwYWdlVmlldyI6dHJ1ZSwiY29uc2VudHMiOltdLCJhY2NvdW50Ijp7fSwiX3Rvb2xzRXZlbnRMaW5rSWQiOiI5OTI4MjE0MTU4MDY2MyIsImV4cGxhaW4iOnRydWV9 HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=tCLNN48j6+FOCH1/c3dHTUL4sIS7IKj+SE1XZ4hf4kfSLezCn/vBDzZ9lE0Aid83j/5oY20CjukoQz4nhQFLXA8jfaMmEw/n/KSZFAhKDvABGrR2cnaOYXy0LWqdzs08Usr6gcjTbpJ7+k6W+Mjrd1KJblh4RiSbijBkEs2/h3I3WFFv8DE=
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a895dc1dddcc9e033aa41147e7a69cd2"If-Modified-Since: Mon, 08 Jul 2024 12:19:42 GMT
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content&rl=&if=false&ts=1720575893325&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575893041&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content&rl=&if=false&ts=1720575893325&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575893041&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A53+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=3&pvis=3&th=1260644.1562364.2.2.1.1.1720575877762.1720575893633.0.1; Drupal.hideEntity__signinTooltip=true; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575893122\|2071166924_-791013993\|1\|\|\|\|0\|18.07\|84.25094; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575894.43.0.0
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=07095244509cf44a1110525e1381dfa2e15f441a&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=2020&pxr=1&gdpr=0&pst=1720575893386 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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 HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTG=tCLNN48j6+FOCH1/c3dHTUL4sIS7IKj+SE1XZ4hf4kfSLezCn/vBDzZ9lE0Aid83j/5oY20CjukoQz4nhQFLXA8jfaMmEw/n/KSZFAhKDvABGrR2cnaOYXy0LWqdzs08Usr6gcjTbpJ7+k6W+Mjrd1KJblh4RiSbijBkEs2/h3I3WFFv8DE=; AWSALBTGCORS=uA+fmrE1hIa0g6q6iC+VR0sq8zp9/lecTJAG8hZuP0Bg99cq8t0SMe74uO/P2x9TpmoVDl2qXLI9KfFSB9AOg/4uy4KeDzH7aCZykztiu9mw4F5w53Mq6V3xSui/a01X7B/lLIbEuXFxIxhiUkmqOezrTMCEmTtF7GQF/IerLYrPkA1f+M8=
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A53+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=3&pvis=3&th=1260644.1562364.2.2.1.1.1720575877762.1720575893633.0.1; Drupal.hideEntity__signinTooltip=true; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.17205
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A53+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=3&pvis=3&th=1260644.1562364.2.2.1.1.1720575877762.1720575893633.0.1; Drupal.hideEntity__signinTooltip=true; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575893122\|20
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a895dc1dddcc9e033aa41147e7a69cd2"If-Modified-Since: Mon, 08 Jul 2024 12:19:42 GMT
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ariane.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /html?website=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&session=1081587288e1c42126592dee7a0498ee&page=07095244509cf44a1110525e1381dfa2e15f441a&gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: x2mcNxYEXCP3St8ujZw+7g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /src/assets/fonts/IBMPlexSans-Medium.c4877bdfa15aef22d9255288b16899c5.ttf HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://partner.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A53+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=3&pvis=3&th=1260644.1562364.2.2.1.1.1720575877762.1720575893633.0.1; Drupal.hideEntity__signinTooltip=true; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575894.43.0.0; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A53+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070937457e9a146494e54253f9387735ba4ce91d&v=18.07&pst=1720575877370&q=2&li=2675&lh=907&ls=0&d=AC_3AF4AACYACwAACSMCAoABswkkJgAMAAAJQiYADQAACVMmAA4AAA1tKA1tKgAAAAD__wANkSmB9lMSAAYOPiYADwAAEjsmABAAABI8JgARAAASwCgSwCoAAAAA__8BIekT.NjojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IGhlYWRlciA+IGRpdjpbMl0=.bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A53+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=17205
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A53+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=17205
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A53+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A53+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A53+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070937457e9a146494e54253f9387735ba4ce91d&v=18.07&pst=1720575877370&q=2&li=2675&lh=907&ls=0&d=AC_3AF4AACYACwAACSMCAoABswkkJgAMAAAJQiYADQAACVMmAA4AAA1tKA1tKgAAAAD__wANkSmB9lMSAAYOPiYADwAAEjsmABAAABI8JgARAAASwCgSwCoAAAAA__8BIekT.NjojYmxvY2stYm9va2luZy1jb250ZW50ID4gYXJ0aWNsZSA+IGhlYWRlciA+IGRpdjpbMl0=.bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a895dc1dddcc9e033aa41147e7a69cd2"If-Modified-Since: Mon, 08 Jul 2024 12:19:42 GMT
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us&rl=&if=false&ts=1720575899948&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575899743&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us&rl=&if=false&ts=1720575899948&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575899743&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=07095917e3a271e8b1cc5a51e2d88391ac470507&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-us&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=857&pxr=1&gdpr=0&pst=1720575900009 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=3&pvis=3&th=1260644.1562364.2.2.1.1.1720575877762.1720575893633.0.1; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A59+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.15321173
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAeDMMIV4bAAAA:kcLNgyCfSiglOq+G0LuMND973N3EJrCPmownHsHrRNL7B7FNfstXWSgPWWdFJuU/21juytqUgiW9FNAoHG7ofAhRGdZxXtksqkuyVdHknszcJjJEQKBfvoVfQaqy4efWUOdng/G8LVzm2h57Ozi6gdlS0LYqZvOprJSJrWTwEaBGVzAhic1UFi9rlCXEM3CjGlZ+tBORoT/NNTPFnkgypDKZ+3fO4YDmAUVgPvZkk3p2snW+; lastSeen=1720575889561; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=3&pvis=3&th=1260644.1562364.2.2.1.1.1720575877762.1720575893633.0.1; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A59+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; _ga_LVHK6H
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJIb21lcGFnZSIsImxvY2FsZSI6ImVuX1VTIiwidXJsIjoiaHR0cHM6Ly9wYXJ0bmVyLmJvb2tpbmcuY29tL2VuLXVzIiwidXJsUmVmZXJyZXIiOiIiLCJjaGFubmVsIjoiV2ViIiwiYmVhY29uVmVyc2lvbiI6MTYsImNvbmZpZ1ZlcnNpb24iOiIxMzgiLCJjb250ZW50Wm9uZXMiOlsic2lkZWJhcl9iYW5uZXIiLCJwb3B1cF9zdXJ2ZXkiLCJib29raW5nX21jcF9nYSIsImhvbWVwYWdlX2Nhcm91c2VsIiwiaG9tZXBhZ2VfbWluaV9oZXJvX2Jhbm5lciIsImhvbWVwYWdlX3JlY29tbWVuZGVkX3JlYWRzIiwiaG9tZXBhZ2VfcmVjb21tZW5kZWRfcmVhZHNfMXN0X3RlYXNlciIsImhvbWVwYWdlX2N0YSJdfSwidXNlciI6eyJhbm9ueW1vdXNJZCI6IjJiYTUyNmFmNmY4ZDE0ZjIiLCJpZGVudGl0aWVzIjp7ImdhQ2xpZW50SWQiOiIxNTMyMTE3MzE0LjE3MjA1NzU4NzgifX0sImludGVyYWN0aW9uIjp7Im5hbWUiOiJWaWV3ZWQgSG9tZXBhZ2UifSwicGFnZVZpZXciOnRydWUsImNvbnNlbnRzIjpbXSwiYWNjb3VudCI6e30sIl90b29sc0V2ZW50TGlua0lkIjoiMTkyMDY3MjIyODQ4ODM4MDQiLCJleHBsYWluIjp0cnVlfQ%3D%3D HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=pm0whgJF/3HlnwGvs4fM6DnCYssmz6v0kuqpY8fs58ESMHvq6TiMWqEnl8alBF1Rh2Z9xzzPvV2iul7wI4LDW29VGIXhl2gvN7IIGHNBMZwl4MXWFXoE0hzJb6UbqQVQd5U8snkx/PFZlPbr7Re/MWKfLFM0Qg+AREoTULcutzM7/k2p9w8=
Source: global traffic	HTTP traffic detected: GET /src/assets/fonts/IBMPlexSans-Regular.2c412e2f77ae69aa2154613095be7130.ttf HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://partner.booking.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us&rl=&if=false&ts=1720575899948&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575899743&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/telemetry HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us&rl=&if=false&ts=1720575899948&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575899743&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a895dc1dddcc9e033aa41147e7a69cd2"If-Modified-Since: Mon, 08 Jul 2024 12:19:42 GMT
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=07095917e3a271e8b1cc5a51e2d88391ac470507&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-us&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=857&pxr=1&gdpr=0&pst=1720575900009 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007; _ga=GA1.2.1532117314.1720575878; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370$07095244509cf44a1110525e1381dfa2e15f441a.-2069667428.1720575893386$07095917e3a271e8b1cc5a51e2d88391ac470507.-2069667428.1720575900009\|1720575897722\|2071166924_-791013993\|1\|\|\|\|0\|18.07\|84.25094; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A00+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAaW4Kn/9BAQAA:5eqNM70w6H040XwaBtRAsh4mzpJAohg/yrXSx6eYDjKbNKXp94Yi8aSQJYvYEBnuDpzj6VNyklfuQ+awfHb7z12BRU9Znf5eXMs6Uz
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJIb21lcGFnZSIsImxvY2FsZSI6ImVuX1VTIiwidXJsIjoiaHR0cHM6Ly9wYXJ0bmVyLmJvb2tpbmcuY29tL2VuLXVzIiwidXJsUmVmZXJyZXIiOiIiLCJjaGFubmVsIjoiV2ViIiwiYmVhY29uVmVyc2lvbiI6MTYsImNvbmZpZ1ZlcnNpb24iOiIxMzgiLCJjb250ZW50Wm9uZXMiOlsic2lkZWJhcl9iYW5uZXIiLCJwb3B1cF9zdXJ2ZXkiLCJib29raW5nX21jcF9nYSIsImhvbWVwYWdlX2Nhcm91c2VsIiwiaG9tZXBhZ2VfbWluaV9oZXJvX2Jhbm5lciIsImhvbWVwYWdlX3JlY29tbWVuZGVkX3JlYWRzIiwiaG9tZXBhZ2VfcmVjb21tZW5kZWRfcmVhZHNfMXN0X3RlYXNlciIsImhvbWVwYWdlX2N0YSJdfSwidXNlciI6eyJhbm9ueW1vdXNJZCI6IjJiYTUyNmFmNmY4ZDE0ZjIiLCJpZGVudGl0aWVzIjp7ImdhQ2xpZW50SWQiOiIxNTMyMTE3MzE0LjE3MjA1NzU4NzgifX0sImludGVyYWN0aW9uIjp7Im5hbWUiOiJWaWV3ZWQgSG9tZXBhZ2UifSwicGFnZVZpZXciOnRydWUsImNvbnNlbnRzIjpbXSwiYWNjb3VudCI6e30sIl90b29sc0V2ZW50TGlua0lkIjoiMTkyMDY3MjIyODQ4ODM4MDQiLCJleHBsYWluIjp0cnVlfQ%3D%3D HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTG=FI0kff42K532MZXlGJAIukVS2h/FVDFiaDS4mB+nj/82na+E3rROraqwSTHmB5AiFCCYAYZzzNyZpsHpz5KkdOjTtyNHNlVu2cZTKCe/kEcO24knYXeHIVJgqh8asfU2D4eV9Oag8nYtBJpzXB+v9Cbado60TPwO3yyEi8eUGqtJfTwwjNo=; AWSALBTGCORS=BDW68JNTeE/3O/7Jx2UawCl/No8fgncgX7QWm385AA4JkCe4VaEjDmCOMcfR1lHaTME8bYJBfNtAo2e9xZ1iV7YMIlVRg+jXzyRNSc+xchNIw0RW8mCdFCaTejHp6EQe6mA/BTG6+vBy2+tNDZhNUshLMxtUamTO4lkLJHeVQvtPZScI5wo=
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ariane.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c810e9b7cb48d30fddd3f3b81476941f"If-Modified-Since: Wed, 05 Jun 2024 08:07:01 GMT
Source: global traffic	HTTP traffic detected: GET /d8c14d4960ca/a18a4859af9c/telemetry HTTP/1.1Host: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-gb HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A00+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: ZKQIQw3C0kRRXngejcytiw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A00+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a1
Source: global traffic	HTTP traffic detected: GET /html?website=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&session=1081587288e1c42126592dee7a0498ee&page=07095917e3a271e8b1cc5a51e2d88391ac470507&gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-gbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A00+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_OQFMChpj4TK2MwcEZQHui-t-iGCpTgvgxnaPbxulWTA.js?scope=footer&delta=0&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-gbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A00+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a9bb-
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-gbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A00+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a9bb-
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-gbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A00+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=07095244509cf44a1110525e1381dfa2e15f441a&v=18.07&pst=1720575893386&q=1&li=0&lh=0&ls=0&d=AACwAYsAAAcCgAGzAAAABwAFAAOLAIEBAAAAEADoAQAAAEEBSgEAAABmAaoBAAAAbgMMEgABA0woA0wqAAEAAP__AAOdAgKAAiEEPCkDZsgdAAIEbBIAAwRtEgAEBG0SAAUEbRIABgd4JgABAAAIgAYCgAIhAAAIhiYAAgAACL8mAAMAAAq_AgKIAikLKykGmZrlAAcMGQ4AABAuDB0mAAQAAAwxJgAFAAAMZiYABgAADGYmAAcAAAxyJgAIAAAMdCYACQAADHkmAAoAAAyrJgALAAAMsCYADAAADLEmAA0AAA4rAgKHAigOjgICgAIhDq4mAA4AAA73KQNmk3kABw_QJgAPAAAP0SYAEAAAD_smABEAAA_8JgASAAAQPwcCgAIhAAAQQCgQQSoAAAAA__8BHJImABMAABycJgAUAAAeaiYAFQAAHmsmABYAACJqJgAXAAAiaiYAGAAAImsmABkAACNlJgAaAAAjZiYAGwAAI2YmABwAACNrJgAdAAAjbCYAHgAAI2wmAB8AACw_Ew*.MDojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYQ==,MTplbi11cw==,MjojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXY=,Mzp2RTdRcQ==,NDpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,NTo3Y0hNRA==,NjpFeHBlcmllbmNlIDE=,NzojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYSA+IGRpdjpbMl0=.bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /*Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-gbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A00+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A00+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755; mf_b18d32a2-
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-gbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370$07095244509cf44a1110525e1381dfa2e15f441a.-2069667428.1720575893386$
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/en-gbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370$07095244509cf44a1110525e1381dfa2e15f441a.-2069667428.1720575893386$07095917e3a271e8b1cc5a51e
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/en-gbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; _ga=GA1.2.1532117314.1720575878; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A00+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=4&pvis=4&th=1260644.1562364.3.3.1.1.1720575877762.1720575900569.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575901.36.0.0; aws-waf-token=c82b580f-5eec-42c4-a
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a895dc1dddcc9e033aa41147e7a69cd2"If-Modified-Since: Mon, 08 Jul 2024 12:19:42 GMT
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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 HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=vqvWr6J7Am+pF79SWTj9yoPoTnYDsZUb2J6ZdywBdJwrekPhUMbcnRcnINVHZbYqjaVCmj2o0vzG4jUCNWHs18MLzCUFeetpvuPBy5eltsGoYXKwVpK5J2YhdqYbWV7TFnt5DdTDXRzHjymY6URnIaKDL9dQyk7vNY+Bfu96aoaxwnJu0lc=
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-gb&rl=&if=false&ts=1720575907113&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575906412&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-gb&rl=&if=false&ts=1720575907113&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575906412&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=0709061588d8dee5ac53b81ef23caec10ce4b9be&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-gb&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=2458&pxr=1&gdpr=0&pst=1720575906417 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=5&pvis=5&th=1260644.1562364.4.4.1.1.1720575877762.1720575907545.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575907.30.0.0; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|0709374
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070937457e9a146494e54253f9387735ba4ce91d&v=18.07&pst=1720575877370&q=3&li=15752&lh=907&ls=0&d=AFIwAEAAACgAACoAAAAA__8ACnsmABIAAA8JJgATAAAPCiYAFAAAD7ooD7oqAAAAAP__ARL_JgAVAAATAiYAFgAAJRMT..bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=07095244509cf44a1110525e1381dfa2e15f441a&v=18.07&pst=1720575893386&q=1&li=0&lh=0&ls=0&d=AACwAYsAAAcCgAGzAAAABwAFAAOLAIEBAAAAEADoAQAAAEEBSgEAAABmAaoBAAAAbgMMEgABA0woA0wqAAEAAP__AAOdAgKAAiEEPCkDZsgdAAIEbBIAAwRtEgAEBG0SAAUEbRIABgd4JgABAAAIgAYCgAIhAAAIhiYAAgAACL8mAAMAAAq_AgKIAikLKykGmZrlAAcMGQ4AABAuDB0mAAQAAAwxJgAFAAAMZiYABgAADGYmAAcAAAxyJgAIAAAMdCYACQAADHkmAAoAAAyrJgALAAAMsCYADAAADLEmAA0AAA4rAgKHAigOjgICgAIhDq4mAA4AAA73KQNmk3kABw_QJgAPAAAP0SYAEAAAD_smABEAAA_8JgASAAAQPwcCgAIhAAAQQCgQQSoAAAAA__8BHJImABMAABycJgAUAAAeaiYAFQAAHmsmABYAACJqJgAXAAAiaiYAGAAAImsmABkAACNlJgAaAAAjZiYAGwAAI2YmABwAACNrJgAdAAAjbCYAHgAAI2wmAB8AACw_Ew*.MDojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYQ==,MTplbi11cw==,MjojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXY=,Mzp2RTdRcQ==,NDpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,NTo3Y0hNRA==,NjpFeHBlcmllbmNlIDE=,NzojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYSA+IGRpdjpbMl0=.bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a895dc1dddcc9e033aa41147e7a69cd2"If-Modified-Since: Mon, 08 Jul 2024 12:19:42 GMT
Source: global traffic	HTTP traffic detected: GET /settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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 HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTG=vqvWr6J7Am+pF79SWTj9yoPoTnYDsZUb2J6ZdywBdJwrekPhUMbcnRcnINVHZbYqjaVCmj2o0vzG4jUCNWHs18MLzCUFeetpvuPBy5eltsGoYXKwVpK5J2YhdqYbWV7TFnt5DdTDXRzHjymY6URnIaKDL9dQyk7vNY+Bfu96aoaxwnJu0lc=; AWSALBTGCORS=4xQ2Rr5MJbXZyKxCuRqg29W1qWGt4FONsO4sj5c9LsfE7Z8+G6/ytQPlDV7aEZ3nrvauH9la/0l9uXFfvUzxMy/BNW3y6kJeBec9shc2tuCXE8ECe8woQN0Zj7BxKZlEnvUD5usnZC+rChDu9ru9Ygm6z5MAFOTNe2myCrruJogw3qYcpuk=
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-gb&rl=&if=false&ts=1720575907113&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575906412&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=0709061588d8dee5ac53b81ef23caec10ce4b9be&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-gb&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=2458&pxr=1&gdpr=0&pst=1720575906417 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-gb&rl=&if=false&ts=1720575907113&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575906412&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070937457e9a146494e54253f9387735ba4ce91d&v=18.07&pst=1720575877370&q=3&li=15752&lh=907&ls=0&d=AFIwAEAAACgAACoAAAAA__8ACnsmABIAAA8JJgATAAAPCiYAFAAAD7ooD7oqAAAAAP__ARL_JgAVAAATAiYAFgAAJRMT..bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ariane.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/en-gbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_sour
Source: global traffic	HTTP traffic detected: GET /settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c810e9b7cb48d30fddd3f3b81476941f"If-Modified-Since: Wed, 05 Jun 2024 08:07:01 GMT
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: Uo9/KSgWydOjK3cZWggqGw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=07095917e3a271e8b1cc5a51e2d88391ac470507&v=18.07&pst=1720575900009&q=1&li=0&lh=0&ls=0&d=AAEMAL8AAAAFAAOLAvESAAAEnhIAAQSeEgACBJ8SAAMEnxIABAZeDgAAEC4HvSYAAQAACBsHAoABswAFCBwoCBwqAAEAAP__AAg1BgKAAbMABQhjAgKAAbMIwCkDZi1yAAYIwyYAAgAACNYHAoABswAFCNYoCNYqAAAAAP__AQj_JgADAAAI_yYABAAACQsGAoABswAFCmgmAAUAAAp4JgAGAAAMDAcCgAGzAAUMDSgMDSoAAAAA__8CFCwmAAcAACc6Ew*.MDplbi11cw==,MTp2RTdRcQ==,MjpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,Mzo3Y0hNRA==,NDpFeHBlcmllbmNlIDE=,NTojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYQ==,NjojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYSA+IGRpdjpbMl0=.bW91c2Utb3V0,bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /*Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=5&pvis=5&th=1260644.1562364.4.4.1.1.1720575877762.1720575907545.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575908.29.0.0; mf_b18d32a2-
Source: global traffic	HTTP traffic detected: GET /html?website=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&session=1081587288e1c42126592dee7a0498ee&page=0709061588d8dee5ac53b81ef23caec10ce4b9be&gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=07095917e3a271e8b1cc5a51e2d88391ac470507&v=18.07&pst=1720575900009&q=1&li=0&lh=0&ls=0&d=AAEMAL8AAAAFAAOLAvESAAAEnhIAAQSeEgACBJ8SAAMEnxIABAZeDgAAEC4HvSYAAQAACBsHAoABswAFCBwoCBwqAAEAAP__AAg1BgKAAbMABQhjAgKAAbMIwCkDZi1yAAYIwyYAAgAACNYHAoABswAFCNYoCNYqAAAAAP__AQj_JgADAAAI_yYABAAACQsGAoABswAFCmgmAAUAAAp4JgAGAAAMDAcCgAGzAAUMDSgMDSoAAAAA__8CFCwmAAcAACc6Ew*.MDplbi11cw==,MTp2RTdRcQ==,MjpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,Mzo3Y0hNRA==,NDpFeHBlcmllbmNlIDE=,NTojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYQ==,NjojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYSA+IGRpdjpbMl0=.bW91c2Utb3V0,bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=5&pvis=5&th=1260644.1562364.4.4.1.1.1720575877762.1720575907545.0.1; _ga_LVHK6H547B=GS1.1.1720575877.1.1.1720575908.29.0.0; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matter
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: nGRYaNkkuknghgQI3kBbfA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /beacon/bookingdotcomb2b/booking_prod/scripts/evergage.min.js HTTP/1.1Host: cdn.evgnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6bf39376ae68c5f03b0a46144bb70d6a"If-Modified-Since: Tue, 09 Jul 2024 12:26:48 GMT
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/bgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpa
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=0709061588d8dee5ac53b81ef23caec10ce4b9be&v=18.07&pst=1720575906417&q=1&li=0&lh=0&ls=0&d=AABqAW8AAAAFAAOLAicHAowBvwAACA8GAowBvwAACBYSAAEIQhIAAghCEgADCEISAAQIQxIABQvbBwKMAb8AAAvdKAvdKgABAAD__wAMQwYCjAG_AAAMUQcCjAG_AAAMUigMUioAAAAA__8BDGAGAowBvwAADG8CAowBvwxwKQgzOJQABgxxDgAAEC4MdSYAAQAADHgmAAIAAAyGJgADAAAMmyYABAAADKQmAAUAAAykJgAGAAAMrSYABwAADLEmAAgAAAzKJgAJAAAMzyYACgAADNAmAAsAAAz8JgAMAAANCyYADQAADcAmAA4AAA3AJgAPAAANzyYAEAAADc8mABEAAA8OJgASAAARIiYAEwAAEY8CAocBuhHyAgKAAbUSKykDZi1yAAYSYQICgAGzFYEmABQAABWCJgAVAAAYMgICgQG0GQApA8wuYAAGGYUmABYAABmGJgAXAAAalQcCgQG0AAAaligalioAAAAA__8CKjMT.MDojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYQ==,MTplbi1nYg==,Mjp2RTdRcQ==,MzpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,NDo3Y0hNRA==,NTpFeHBlcmllbmNlIDE=,NjojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYSA+IGRpdjpbMl0=.bW91c2Utb3V0,bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_J-ns2p5_JxZ8i6--J9QPWWQZl2yX7MLYJFdUOLE4yxk.js?scope=footer&delta=0&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/bgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartne
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/bgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartne
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/bgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpa
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/bgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpa
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/bgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.1.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpa
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/bg.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=0709061588d8dee5ac53b81ef23caec10ce4b9be&v=18.07&pst=1720575906417&q=1&li=0&lh=0&ls=0&d=AABqAW8AAAAFAAOLAicHAowBvwAACA8GAowBvwAACBYSAAEIQhIAAghCEgADCEISAAQIQxIABQvbBwKMAb8AAAvdKAvdKgABAAD__wAMQwYCjAG_AAAMUQcCjAG_AAAMUigMUioAAAAA__8BDGAGAowBvwAADG8CAowBvwxwKQgzOJQABgxxDgAAEC4MdSYAAQAADHgmAAIAAAyGJgADAAAMmyYABAAADKQmAAUAAAykJgAGAAAMrSYABwAADLEmAAgAAAzKJgAJAAAMzyYACgAADNAmAAsAAAz8JgAMAAANCyYADQAADcAmAA4AAA3AJgAPAAANzyYAEAAADc8mABEAAA8OJgASAAARIiYAEwAAEY8CAocBuhHyAgKAAbUSKykDZi1yAAYSYQICgAGzFYEmABQAABWCJgAVAAAYMgICgQG0GQApA8wuYAAGGYUmABYAABmGJgAXAAAalQcCgQG0AAAaligalioAAAAA__8CKjMT.MDojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYQ==,MTplbi1nYg==,Mjp2RTdRcQ==,MzpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,NDo3Y0hNRA==,NTpFeHBlcmllbmNlIDE=,NjojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYSA+IGRpdjpbMl0=.bW91c2Utb3V0,bW91c2Utb3V0,bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/bgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=5&pvis=5&th=1260644.1562364.4.4.1.1.1720575877762.1720575907545.0.1; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartne
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/bgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=5&pvis=5&th=1260644.1562364.4.4.1.1.1720575877762.1720575907545.0.1; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~172
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a895dc1dddcc9e033aa41147e7a69cd2"If-Modified-Since: Mon, 08 Jul 2024 12:19:42 GMT
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=070920231620304b5530ea4fe94634ee7de03eee&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fbg&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=2952&pxr=1&gdpr=0&pst=1720575920528 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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 HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=NcDqI4mn6gdw2ixwE8uPk6XCg1y9+ANLGy3qipidNLPNNab+eAC2Rbi9/kJY6y2diEQwVxGi47iplr5Z3pNING5hpJ8BHomYog+M+8psVrRzsuPTDjh6t5n3AsStEYsISnwsjLUD1YVyn+zimx3g+l91wb0QzYsG71+TviyQBbId1rXIb14=
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fbg&rl=&if=false&ts=1720575921264&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575920547&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fbg&rl=&if=false&ts=1720575921264&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575920547&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/bg.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A20+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370$07095244509cf44a1110525e1381dfa2e15f441a.-2069667428.1720575893386$07095917e3a271e8b1cc5a51e2d88391ac470507.-2069667428.1720575900009$0709061588d8dee5ac53b81ef23caec10ce4b9be.-2069667428.1720575906417$070920231620304b5530ea4fe94634ee7d
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a895dc1dddcc9e033aa41147e7a69cd2"If-Modified-Since: Mon, 08 Jul 2024 12:19:42 GMT
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=070920231620304b5530ea4fe94634ee7de03eee&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fbg&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=2952&pxr=1&gdpr=0&pst=1720575920528 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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 HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTG=NcDqI4mn6gdw2ixwE8uPk6XCg1y9+ANLGy3qipidNLPNNab+eAC2Rbi9/kJY6y2diEQwVxGi47iplr5Z3pNING5hpJ8BHomYog+M+8psVrRzsuPTDjh6t5n3AsStEYsISnwsjLUD1YVyn+zimx3g+l91wb0QzYsG71+TviyQBbId1rXIb14=; AWSALBTGCORS=O6/36E2yY26fJbeY9wwPVWnl565goiMyxp6DVM/ZINloVqTzh3ELARVObe7qU3eynY6x4NttaoU+GsS9hKaDOZ9ttdDWCIGd1U2nmKFz5hGyqOI3KDC0SDi9oj7P4Q3qzZQqC4irw8mUpHUp/ecpASeJ9l8YEkLW6CKdBBNXIoh3WMQN4Mk=
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fbg&rl=&if=false&ts=1720575921264&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575920547&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fbg&rl=&if=false&ts=1720575921264&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575920547&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ariane.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/bgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A20+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: PKfnxXr/opSO+iVzaPJJFw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A20+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; _ga=GA1.1.1532117314.1720575878; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=6&pvis=6&th=1260644.1562364.5.5.1.1.1720575877762.1720575921479.0.1; _ga_LVHK6
Source: global traffic	HTTP traffic detected: GET /html?website=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&session=1081587288e1c42126592dee7a0498ee&page=070920231620304b5530ea4fe94634ee7de03eee&gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=07095244509cf44a1110525e1381dfa2e15f441a&v=18.07&pst=1720575893386&q=2&li=4336&lh=907&ls=110&d=AD-ZAGoAAAYCjAItAAAAEwcCjAItAAAAFCgAFCoAAAAA__8AAJgmACAAAACZJgAhAAAAmiYAIgAAANsCAowCLQDbKQgznpsABwDeJgAjAAAA3yYAJAAAAN8mACUAAAalJgAmAAAGpiYAJwAAOTcT..bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=07095244509cf44a1110525e1381dfa2e15f441a&v=18.07&pst=1720575893386&q=2&li=4336&lh=907&ls=110&d=AD-ZAGoAAAYCjAItAAAAEwcCjAItAAAAFCgAFCoAAAAA__8AAJgmACAAAACZJgAhAAAAmiYAIgAAANsCAowCLQDbKQgznpsABwDeJgAjAAAA3yYAJAAAAN8mACUAAAalJgAmAAAGpiYAJwAAOTcT..bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A20+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_pag
Source: global traffic	HTTP traffic detected: GET /settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c810e9b7cb48d30fddd3f3b81476941f"If-Modified-Since: Wed, 05 Jun 2024 08:07:01 GMT
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/csAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestam
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_dSOgVmBz7pXuFVwaGZkeW24tLauLlAJ1l7loz4vXJok.js?scope=footer&delta=0&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/csAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tu
Source: global traffic	HTTP traffic detected: GET /vendors-react-chat_node_modules_react-hook-form_dist_index_esm_mjs-aeac223be9413b14fbb3.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/csAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tu
Source: global traffic	HTTP traffic detected: GET /Chat-a25fa96ceb91fa439328.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/csAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestam
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/csAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestam
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://partner.booking.com/csAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestam
Source: global traffic	HTTP traffic detected: GET /chatbubble/socket/websocket?vsn=1.0.0 HTTP/1.1Host: sage.kindly.aiConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://partner.booking.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: IV4cUXVDIa9RKZ5Qyx1k+g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/cs.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c810e9b7cb48d30fddd3f3b81476941f"If-Modified-Since: Wed, 05 Jun 2024 08:07:01 GMT
Source: global traffic	HTTP traffic detected: GET /Chat-a25fa96ceb91fa439328.js?cache-bust=true&retry-attempt=1 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a895dc1dddcc9e033aa41147e7a69cd2"If-Modified-Since: Mon, 08 Jul 2024 12:19:42 GMT
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/csAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A20+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; _ga=GA1.1.1532117314.1720575878; ABTasty=uid=y5fdnmttst
Source: global traffic	HTTP traffic detected: GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/csAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A20+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; _ga=GA1.1.1532117314.1720575878; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070920231620304b5530ea4fe94634ee7de03eee&v=18.07&pst=1720575920528&q=1&li=0&lh=0&ls=0&d=AACwAI4AAAcCgwG2AAAABAAFAAOLBHESAAEFyhIAAgXKEgADBcoSAAQFyhIABQX-BgKDAbYAAAhzDgAAES4IeCYAAQAACLAmAAIAAAi8JgADAAALCgICggG1CwopBDMpXwAGC3wCAoABswwMKQNmJ6YABgxsJgAEAAASBgcCgAGzAAASCCgSCCoAAQAA__8AKEgT.MDojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYQ==,MTpiZw==,Mjp2RTdRcQ==,MzpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,NDo3Y0hNRA==,NTpFeHBlcmllbmNlIDE=,NjojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYSA+IGRpdjpbMl0=.bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: 8AnkV9wPYMJjfSwxdPT3Iw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=07093141f39302e457977b601dd50aab9c579430&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fcs&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=2830&pxr=1&gdpr=0&pst=1720575931444 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fcs&rl=&if=false&ts=1720575931602&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575931475&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fcs&rl=&if=false&ts=1720575931602&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575931475&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/cs.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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 HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=YVXI5eA0MZEROlERwsN99gyIE9dCJXt41H0b4uOKqnb7huI/5Grj6WnnSZlqBOBrqWm9uVkfdOQMuXlBYntNy7F8BmoEg0ltVsUfB06aT5G5a28dSHxlFIpEtTxxAHQBpU04Rr2RGNFzYZh3OhTHEW9Wn9NIC3gnsw8KCt0KvAk5uaZx5Ww=
Source: global traffic	HTTP traffic detected: GET /Chat-a25fa96ceb91fa439328.js?cache-bust=true&retry-attempt=2 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chatbubble/socket/websocket?vsn=1.0.0 HTTP/1.1Host: sage.kindly.aiConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://partner.booking.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: Oqsnsb8BBcSVmap33u6MRg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070920231620304b5530ea4fe94634ee7de03eee&v=18.07&pst=1720575920528&q=1&li=0&lh=0&ls=0&d=AACwAI4AAAcCgwG2AAAABAAFAAOLBHESAAEFyhIAAgXKEgADBcoSAAQFyhIABQX-BgKDAbYAAAhzDgAAES4IeCYAAQAACLAmAAIAAAi8JgADAAALCgICggG1CwopBDMpXwAGC3wCAoABswwMKQNmJ6YABgxsJgAEAAASBgcCgAGzAAASCCgSCCoAAQAA__8AKEgT.MDojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYQ==,MTpiZw==,Mjp2RTdRcQ==,MzpbT25nb2luZyAtIGRvIG5vdCBwYXVzZV0gR0EgLSBNQ1AgdG8gZGF0YUxheWVy,NDo3Y0hNRA==,NTpFeHBlcmllbmNlIDE=,NjojcGFyYWdyYXBoLXZpZXdzcmVmZXJlbmNlLTYwNTkgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBkaXYgPiBhcnRpY2xlID4gYSA+IGRpdjpbMl0=.bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1Host: try.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "a895dc1dddcc9e033aa41147e7a69cd2"If-Modified-Since: Mon, 08 Jul 2024 12:19:42 GMT
Source: global traffic	HTTP traffic detected: GET /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A31+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370$07095244509cf44a1110525e1381dfa2e15f441a.-2069667428.1720575893386$07095917e3a271e8b1cc5a51e2d88391ac470507.-2069667428.1720575900009$0709061588d8dee5ac53b81ef23caec10ce4b9be.-2069667428.1720575906417$070920231620304b5530ea4fe94634ee7d
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=07093141f39302e457977b601dd50aab9c579430&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fcs&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=2830&pxr=1&gdpr=0&pst=1720575931444 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fcs&rl=&if=false&ts=1720575931602&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575931475&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fcs&rl=&if=false&ts=1720575931602&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575931475&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ariane.abtasty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/event/booking_prod?event=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 HTTP/1.1Host: bookingdotcomb2b.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTG=wlP9RV+wLb1RzvBJEq2R6/BVFJ+vcnIbpK1pMMrrgoC6x5bLucQSZhnsoJWXcMGgoG1pSMWCfJprGpbjmXBKOkT8z/uGAZHPqNk2LV0sSGDnki1FhhNVBLkA4VH9qGRB0oq0qwtHgW1An4SaDftYWQ4JjTUmS7esTrrO50TqEq9Hgh4sW6M=; AWSALBTGCORS=vCo29Y4AXdeKXodiCrshhcKr84rGXqw8vVdhLyQZxCtaKZKx9mQzq6iG+gYd7lYsDM4IzkNz6C6LmYBr9CQvc7qAuiHibj2Xel6jU/T0RmAEQ167RFhKEwUVGCoJwN370v8+xqmJPPySWZWQMa6nCZzLW9kTW/R819+UkNEBGuAieleO6Zg=
Source: global traffic	HTTP traffic detected: GET /Chat-a25fa96ceb91fa439328.js?cache-bust=true&retry-attempt=3 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://partner.booking.com/csAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A31+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%2
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=07095244509cf44a1110525e1381dfa2e15f441a&v=18.07&pst=1720575893386&q=3&li=16501&lh=907&ls=110&d=AIZWAHMAACYAKAAAAAAmACkAAAABJgAqAAAGQSYAKwAABkomACwAAAZLJgAtAAAGbCYALgAABm0mAC8AAAyKJgAwAAAMjSYAMQAADycmADIAAA8oJgAzAAARaSYANAAAEWwmADUAABaGJgA2AAAWiiYANwAAGgsT.. HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1Host: partner.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; _gid=GA1.2.2146032038.1720575878; _gat_UA-6284728-15=1; BJS=-; _ga=GA1.3.1532117314.1720575878; _gid=GA1.3.2146032038.1720575878; _gat=1; _gat=1; bkng_sso_session=e30; bkng_sso_ses=e30; _fbp=fb.1.1720575882371.240530978967900163; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCr7sZKSWd3D2Lpkoq3qJb1iCTifwiszz5sP4X4XxIiLojG%2FVMVC2sypQKKJa6QWoPB7iTt8GBcDH3lMpxJa78A19DRx%2F0PZAk2ca7krzg54T6VRXxGkaMPIKBq9FdRa7o0ZtUxZqSpp7J%2ByGpUjEQ7mg90suc3787I%3D; lastSeen=1720575889561; Drupal.hideEntity__signinTooltip=true; _mkto_trk=id:261-NRZ-371&token:_mch-booking.com-1720575895796-34593; aws-waf-token=c82b580f-5eec-42c4-a9bb-6a7b9ed2e1f9:EQoAgzAMIGEoAAAA:6N1pQYSg1bFS0UIHVElAVnym6zJwSOnf0ILnYkU3zAhtVzluY1nh4gDM11XGx8REPVlGkZS/G//LMvgaJtVIVcnpSiSrJ8LvQhPM/pANtuMww5psfalEE1ZsnX/oZpzsBCcsHSmV5m2MTlQFRJ/EDyvOJRSpaytbIzcMYngI3QkYmNcscz6duv7YNijva66KF0WI/bwzps77uUjYBb0L02JFqHqKuZIC1eELYhdjR2Y8Be78; QSI_HistorySession=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters~1720575886913%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content~1720575898007%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-us~1720575902755%7Chttps%3A%2F%2Fpartner.booking.com%2Fen-gb~1720575911156; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A45%3A31+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.1532117314.1720575878; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=7&pvis=7&th=1260644.1562364.6.6.1.1.1720575877762.1720575931620.0.1; _ga_LVHK6
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/stats/bot/5062/public/current_wait_time?sources%5B%5D=web HTTP/1.1Host: sage.kindly.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /html?website=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&session=1081587288e1c42126592dee7a0498ee&page=07093141f39302e457977b601dd50aab9c579430&gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chatbubble/socket/websocket?vsn=1.0.0 HTTP/1.1Host: sage.kindly.aiConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://partner.booking.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: NO9FKIsSA6GmC6fbeJ2wWQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=07095244509cf44a1110525e1381dfa2e15f441a&v=18.07&pst=1720575893386&q=3&li=16501&lh=907&ls=110&d=AIZWAHMAACYAKAAAAAAmACkAAAABJgAqAAAGQSYAKwAABkomACwAAAZLJgAtAAAGbCYALgAABm0mAC8AAAyKJgAwAAAMjSYAMQAADycmADIAAA8oJgAzAAARaSYANAAAEWwmADUAABaGJgA2AAAWiiYANwAAGgsT.. HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/stats/bot/5062/public/current_wait_time?sources%5B%5D=web HTTP/1.1Host: sage.kindly.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dom?gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=0709061588d8dee5ac53b81ef23caec10ce4b9be&v=18.07&pst=1720575906417&q=2&li=6912&lh=907&ls=0&d=AFN4ABgAACYAGAAAAAEmABkAAAAFJgAaAAAlOhM.. HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /*Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=0709061588d8dee5ac53b81ef23caec10ce4b9be&v=18.07&pst=1720575906417&q=2&li=6912&lh=907&ls=0&d=AFN4ABgAACYAGAAAAAEmABkAAAAFJgAaAAAlOhM.. HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket HTTP/1.1Host: ennexhorpps.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ennexhorpps.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpASec-WebSocket-Key: aLJ+XTy5l1QiWUo8E4Ho8g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c810e9b7cb48d30fddd3f3b81476941f"If-Modified-Since: Wed, 05 Jun 2024 08:07:01 GMT
Source: global traffic	HTTP traffic detected: GET /settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288 HTTP/1.1Host: chat.kindlycdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c810e9b7cb48d30fddd3f3b81476941f"If-Modified-Since: Wed, 05 Jun 2024 08:07:01 GMT
Source: global traffic	HTTP traffic detected: GET /chatbubble/socket/websocket?vsn=1.0.0 HTTP/1.1Host: sage.kindly.aiConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://partner.booking.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: OahO+YjhDJhDOsoN5hulfg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /Chat-a25fa96ceb91fa439328.js HTTP/1.1Host: chat.kindlycdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=162504-162504If-Range: "0db31d1ab0939d9ac5e5a58cbc723c9a"
Source: global traffic	HTTP traffic detected: GET /events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070920231620304b5530ea4fe94634ee7de03eee&v=18.07&pst=1720575920528&q=2&li=4790&lh=907&ls=0&d=ACj9ADIAAAYCjQHAAAAANwICjQHAADcpCJky2gAGAnsHAo0BwAAAAnwoAnwqAAAAAP__AChEEw*..bW91c2Utb3V0 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /*Origin: https://partner.booking.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_311.2.dr	String found in binary or memory: <div class="field field--name-field-media-video-embed-field field--type-video-embed-field field--label-hidden field__item"><div class="video-embed-field-provider-youtube video-embed-field-responsive-video"><iframe width="854" height="480" frameborder="0" allowfullscreen="allowfullscreen" allow="autoplay" class="lazyload" data-src="https://www.youtube.com/embed/0Y1uQDXDH4o?autoplay=0&start=0&rel=0&cc_load_policy=1" src="/themes/custom/booking/images/1px.gif"></iframe> equals www.youtube.com (Youtube)
Source: chromecache_349.2.dr	String found in binary or memory: buttons work using pieces of code from the individual social media providers, allowing third party cookies to be placed on your device.</p><p>These cookies can be purely functional, but they can also be used to keep track of which websites you visit from their network, to build a profile of your online browsing behaviour and to show you personalised ads. This profile will be partly built using comparable information the providers receive from your visits to other websites in their network.</p><p>To read more about what social media providers do with your personal data, take a look at their cookie and/or privacy statements: <a href="https://www.facebook.com/policies/cookies/" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Facebook</span></a> (includes Instagram, Messenger and Audience Network), <a href="https://www.snap.com/en-US/cookie-policy/" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Snapchat</span></a>, <a href="https://policy.pinterest.com/en/cookies" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Pinterest</span></a> and <a href="https://twitter.com/en/privacy#chapter2.3" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Twitter</span></a>. Be aware that these statements may be updated from time to time.</p></li></ul><p>We work with trusted third parties to collect data. We may also sometimes share information with these third parties, such as your email address or phone number. These third parties might link your data to other information they collect to create custom audiences or deliver targeted ads. For information on how these third parties process your data, please take a look at the following links: <a href="http://www.google.com/policies/privacy/partners/" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>How Google uses information</span></a>, <a href="https://www.facebook.com/policy.php" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Facebook's data policy</span></a>.</p><h4 id="non-cookie-techniques" class="policy_font_display_one">Non-cookie techniques equals www.facebook.com (Facebook)
Source: chromecache_349.2.dr	String found in binary or memory: buttons work using pieces of code from the individual social media providers, allowing third party cookies to be placed on your device.</p><p>These cookies can be purely functional, but they can also be used to keep track of which websites you visit from their network, to build a profile of your online browsing behaviour and to show you personalised ads. This profile will be partly built using comparable information the providers receive from your visits to other websites in their network.</p><p>To read more about what social media providers do with your personal data, take a look at their cookie and/or privacy statements: <a href="https://www.facebook.com/policies/cookies/" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Facebook</span></a> (includes Instagram, Messenger and Audience Network), <a href="https://www.snap.com/en-US/cookie-policy/" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Snapchat</span></a>, <a href="https://policy.pinterest.com/en/cookies" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Pinterest</span></a> and <a href="https://twitter.com/en/privacy#chapter2.3" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Twitter</span></a>. Be aware that these statements may be updated from time to time.</p></li></ul><p>We work with trusted third parties to collect data. We may also sometimes share information with these third parties, such as your email address or phone number. These third parties might link your data to other information they collect to create custom audiences or deliver targeted ads. For information on how these third parties process your data, please take a look at the following links: <a href="http://www.google.com/policies/privacy/partners/" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>How Google uses information</span></a>, <a href="https://www.facebook.com/policy.php" target="_blank" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Facebook's data policy</span></a>.</p><h4 id="non-cookie-techniques" class="policy_font_display_one">Non-cookie techniques equals www.twitter.com (Twitter)
Source: chromecache_459.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_461.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=Q.length,ma=0;ma<oa;ma++)if(!u&&c(Q[ma],E.xe)){$I("https://www.youtube.com/iframe_api");u=!0;break}})}}else I(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_461.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_320.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=nA(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Ob(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},qA=function(){var a=[],b=function(c){return tb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_432.2.dr, chromecache_320.2.dr	String found in binary or memory: return b}BC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_349.2.dr	String found in binary or memory: t use WhatsApp or similar third-party services to request booking or payment confirmations. If you receive, for example, a WhatsApp message asking you to follow a link to guarantee your booking or complete a related payment, do not reply to this message or follow that link. Instead, we ask that you report the message to our <a id="how-to-contact-us--read-more" aria-labelledby="how-to-contact-us--read-more how-to-contact-us" href="#how-to-contact-us" class="bf33709ee1 d6d02bd320 af44803caf"><span>Customer Service</span></a> team.</p><p>Your social media provider will be able to tell you more about how they use and process your data when you connect to Booking.com through them. This can include combining the personal data they collect when you use Booking.com through them with information they collect when you use other online platforms you have also linked to your social media account.</p><p>If you decide to connect using your Facebook or Google account, please review the following links for information about how these parties use data they receive: <a target="_blank" href="https://www.facebook.com/policy.php" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Facebook</span></a> and <a target="_blank" href="https://www.google.com/policies/privacy/partners/" class="bf33709ee1 d6d02bd320 bui-link bui-link--primary af44803caf"><span>Google</span></a>.</p><hr class="privacy-divider"/><h3 id="personal-data-what-security-procedures" class="policy_font_display_two">What security and retention procedures does Booking.com put in place to safeguard your personal data?</h3><p>We have procedures in place to prevent unauthorised access to, and the misuse of, personal data.</p><p>We use appropriate business systems and procedures to protect and safeguard your personal data. We also use security procedures and technical and physical restrictions for accessing and using the personal data on our servers. Only authorised personnel are permitted to access personal data in the course of their work.</p><p>We equals www.facebook.com (Facebook)
Source: chromecache_320.2.dr	String found in binary or memory: var QB=function(a,b,c,d,e){var f=Lz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Lz("fsl","nv.ids",[]):Lz("fsl","ids",[]);if(!g.length)return!0;var k=Qz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ty(k,uy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: ennexhorpps.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: q-xx.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: partner.booking.com
Source: global traffic	DNS traffic detected: DNS query: bstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: rtp-static.marketo.com
Source: global traffic	DNS traffic detected: DNS query: lonrtp1.marketo.com
Source: global traffic	DNS traffic detected: DNS query: try.abtasty.com
Source: global traffic	DNS traffic detected: DNS query: cdn.evgnet.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: chat.kindlycdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.spinnaker-js.com
Source: global traffic	DNS traffic detected: DNS query: zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: dcinfos-cache.abtasty.com
Source: global traffic	DNS traffic detected: DNS query: bookingdotcomb2b.germany-2.evergage.com
Source: global traffic	DNS traffic detected: DNS query: www.booking.com
Source: global traffic	DNS traffic detected: DNS query: shelves.booking.com
Source: global traffic	DNS traffic detected: DNS query: cf2.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.mouseflow.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: t-cf.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: o2.mouseflow.com
Source: global traffic	DNS traffic detected: DNS query: static.addtoany.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: account.booking.com
Source: global traffic	DNS traffic detected: DNS query: ariane.abtasty.com
Source: global traffic	DNS traffic detected: DNS query: accommodations.booking.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: d8c14d4960ca.edge.sdk.awswaf.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com
Source: global traffic	DNS traffic detected: DNS query: zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: partnerfeedback.booking.com
Source: global traffic	DNS traffic detected: DNS query: eu.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: 261-nrz-371.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: apil1.spinnaker-js.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: sage.kindly.ai

Source: unknown

HTTP traffic detected: POST /core/modules/statistics/statistics.php HTTP/1.1Host: partner.booking.comConnection: keep-aliveContent-Length: 9sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://partner.booking.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://partner.booking.com/en-us?utm_source=extranet_login_pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_349.2.dr	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: chromecache_349.2.dr	String found in binary or memory: http://allaboutcookies.org/
Source: chromecache_381.2.dr, chromecache_282.2.dr, chromecache_244.2.dr, chromecache_256.2.dr, chromecache_304.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_241.2.dr	String found in binary or memory: http://benalman.com/about/license/
Source: chromecache_241.2.dr	String found in binary or memory: http://benalman.com/projects/jquery-hashchange-plugin/
Source: chromecache_349.2.dr	String found in binary or memory: http://cars.booking.com/Home.do?affiliateCode=booking-com&adplat=footer&preflang=en
Source: chromecache_372.2.dr	String found in binary or memory: http://github.com/jrburke/almond
Source: chromecache_241.2.dr	String found in binary or memory: http://josscrowcroft.github.com/accounting.js/
Source: chromecache_424.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_381.2.dr, chromecache_282.2.dr, chromecache_424.2.dr, chromecache_244.2.dr, chromecache_256.2.dr, chromecache_304.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_381.2.dr, chromecache_282.2.dr, chromecache_244.2.dr, chromecache_256.2.dr, chromecache_304.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_349.2.dr	String found in binary or memory: http://ogp.me/ns#
Source: chromecache_349.2.dr	String found in binary or memory: http://ogp.me/ns/fb#
Source: chromecache_349.2.dr	String found in binary or memory: http://ogp.me/ns/fb/booking_com#
Source: chromecache_233.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_338.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLHow
Source: chromecache_354.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLIBM
Source: chromecache_338.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLsimple
Source: chromecache_424.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_240.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_338.2.dr	String found in binary or memory: http://www.boldmonday.comhttp://www.ibm.comThis
Source: chromecache_349.2.dr	String found in binary or memory: http://www.opentable.co.uk?ref=13850
Source: chromecache_349.2.dr	String found in binary or memory: https://account.booking.com/auth/oauth2?redirect_uri=https%3A%2F%2Fsecure.booking.com%2Flogin.html%3
Source: chromecache_349.2.dr	String found in binary or memory: https://account.booking.com/oauth2/authorize?aid=304142;client_id=d1cDdLj40ACItEtxJLTo;redirect_uri=
Source: chromecache_349.2.dr	String found in binary or memory: https://account.booking.com/sso/logout/v3
Source: chromecache_291.2.dr	String found in binary or memory: https://admin.booking.com
Source: chromecache_349.2.dr	String found in binary or memory: https://admin.booking.com/?lang=en&utm_source=extranet_login_footer&utm_medium=frontend&utm_campaign
Source: chromecache_404.2.dr	String found in binary or memory: https://admin.booking.com/?utm_source=partner_hub&utm_medium=go_to_extranet_link&utm_campaig
Source: chromecache_349.2.dr	String found in binary or memory: https://admin.booking.com/hotel/hoteladmin/privacy.html
Source: chromecache_388.2.dr	String found in binary or memory: https://admin.booking.com/hotel/hoteladmin/privacy.html?lang=bg&utm_source=partner_hub&utm_m
Source: chromecache_333.2.dr	String found in binary or memory: https://admin.booking.com/hotel/hoteladmin/privacy.html?lang=cs&utm_source=partnerhub&utm_me
Source: chromecache_364.2.dr	String found in binary or memory: https://admin.booking.com/hotel/hoteladmin/privacy.html?lang=en-gb&utm_source=phc&utm_medium
Source: chromecache_311.2.dr, chromecache_412.2.dr, chromecache_404.2.dr	String found in binary or memory: https://admin.booking.com/hotel/hoteladmin/privacy.html?lang=en-us&utm_source=phc&utm_medium
Source: chromecache_320.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_444.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_233.2.dr	String found in binary or memory: https://animate.style/
Source: chromecache_349.2.dr	String found in binary or memory: https://authorityportal.booking.com/
Source: chromecache_349.2.dr	String found in binary or memory: https://booking.com/articles.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc
Source: chromecache_349.2.dr	String found in binary or memory: https://booking.com/pxgo?lang=en&token=UmFuZG9tSVYkc2RlIyh9YUNSKl4-w02ESLdmCLM3zjyzGzgXlmRa5CzwPWIA8
Source: chromecache_349.2.dr	String found in binary or memory: https://booking.com/pxgo?lang=en&token=UmFuZG9tSVYkc2RlIyh9YdCysO0C2Zam1j6p9dekSMTmzWlYSjGNwZ5Cr9BTe
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://bstatic.com
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://bstatic.com/libs/bui/9.5.6/bui.min.js
Source: chromecache_349.2.dr	String found in binary or memory: https://business.booking.com/?lang=en-gb&aid=304142&label=gen173bo-122AEB2AIB
Source: chromecache_349.2.dr	String found in binary or memory: https://careers.booking.com/
Source: chromecache_349.2.dr	String found in binary or memory: https://careers.booking.com/?utm_source=corporate&utm_medium=footer
Source: chromecache_349.2.dr	String found in binary or memory: https://carrier.booking.com/google/places/webautocompletesimple
Source: chromecache_349.2.dr	String found in binary or memory: https://cars.booking.com
Source: chromecache_432.2.dr, chromecache_461.2.dr, chromecache_320.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://cdn.cookielaw.org
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/OtAutoBlock.js
Source: chromecache_289.2.dr, chromecache_386.2.dr, chromecache_247.2.dr, chromecache_421.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/static/ot_close.svg
Source: chromecache_289.2.dr, chromecache_326.2.dr, chromecache_386.2.dr, chromecache_247.2.dr, chromecache_421.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/static/ot_external_link.svg
Source: chromecache_289.2.dr, chromecache_386.2.dr, chromecache_247.2.dr, chromecache_421.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Source: chromecache_326.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/static/ot_persistent_cookie_icon.png
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: chromecache_291.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js
Source: chromecache_461.2.dr	String found in binary or memory: https://cdn.mouseflow.com/projects/
Source: chromecache_291.2.dr	String found in binary or memory: https://cdn.socket.io/socket.io-3.0.1.min.js
Source: chromecache_291.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css
Source: chromecache_291.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/images/
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/libs/current-script-polyfill/1.0.0/current-script-polyfill.min.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/libs/privacy-consent/releases/2.1.55/customer/cookie-banner.min.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/libs/promise/7.0.4/promise-7.0.4.min.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/psb/capla/
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/psb/capla/static/css/256aa323.65a94ca2.chunk.css
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/psb/capla/static/css/bui-react-9.12548206.css
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/psb/capla/static/css/client.99a1ce89.css
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/psb/capla/static/js/034e4287.d0fe97f0.chunk.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/psb/capla/static/js/256aa323.0c14bd53.chunk.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/psb/capla/static/js/a72063b1.759d5807.chunk.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/psb/capla/static/js/bui-react-9.1fa6c1cb.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/psb/capla/static/js/client.2cc28297.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/css/assistant_entrypoint_cft.iq_ltr/611b70b00745fa4412a0101292fb0a1e4
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/css/async_wpm_overlay_assets_cft.iq_ltr/abb304bf3600a5cf5f7406a27f042
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/css/gprof_icons_cft.iq_ltr/e4765aae192d514fe8551e34b170c5bcdba4f06c.c
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/css/main_cft.iq_ltr/7e335c31008a447192abd83491a4ee057583a557.css
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/css/main_exps_cft.iq_ltr/5e62043f93e28ff1fa2317e78b13f494ca8b061b.css
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/css/ski_lp_overview_panel_cft.iq_ltr/2b3350935410fe4e36d74efed93daf74
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/css/static_cft.iq_ltr/ab3ca68bec5c969c1d26aca0ec2c584dfa312105.css
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/apple-touch-icon/5db9fd30d96b1796883ee94be7dddce50b73bb38.png
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/favicon/40749a316c45e239a7149b6711ea4c48d10f8d89.ico
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/favicon/4a3b40c4059be39cbf1ebaa5f97dbb7d150926b9.png
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/fb/7/19dadf908acc5e43f190a0a901ec12c3dd36421d.jpg
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/ar/9cce2b91336709016282f06432a8b6366069e0c2.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/bg/540f2da5fee31b7385af127619ab5ca4fc3783b5.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/br/0cf5e55d996fdcf96a2d31733addf5c10bad1f74.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/catalonia/8578246a75d8b9dceaacb174072d0c6aca
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/cn/5a221730f540facc62563bfa6192ce155a9f677e.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/cz/32002e60fead55ce886ff9827dfcf4af8cf4e277.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/de/668350ee17050ec21845c27503ae960695f341a9.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/dk/744575dd4e87590a543b7c8cbacaef6c3de4e4d2.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/ee/509074558f4fe7c71ceed57584dec0382274dd16.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/es/b3bd4690290a78b1303198dd6576bdab8d7f9a80.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/fi/465d3b73ff07d1d696cb5dd26fbb91097c175e1b.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/fr/c48bc65c9dc57035fa983df37e9732c0f0a2663f.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/gr/e0e42a97a7b860fc9be71954262902f2a4e94aa6.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/hr/e7a46f4dad977aecafa6a3680972e0c137a1bc41.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/hu/fc7cb24c5c7cb9de74a74fad271d6838daabc4cb.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/id/e7d3d00965d8c994a72807b43b21c648250cf906.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/il/fc1907ccd86aa051f7fbe22649d1e31ac6aee016.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/in/20aa535a5d3c505dd02fea275ed1a36c0fb1fe08.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/is/7d644655f895f8e346b964dc18cf5b6608a98d52.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/it/b8db3771480bd0c7971b9f94cad3640c89521882.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/jp/9bf7e50bc6dc66599aeede9189ca16de461c60b6.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/kr/4cb76b458a73ca4c1de034c7623475278d363ce6.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/lt/5bb712a60a82b7e075deba5b102aa36348bbb255.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/lv/393103a26c1d5f1fbd7d9674732bbdfc42296399.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/mx/f3a3f562a0185d68fb04b2ec01db2062ca6bdb76.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/my/6d811cf6127cea0a957ca0243546a03339fa19ac.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/nl/65e3bcc466c4026a08bdb2671799ca26c3228d19.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/no/827be8d24af5667778b4bc651fe03f738a812b60.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/ph/7048127466891462116ee2774154585fb5607aba.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/pl/4d6b6e962b0b049a03924fc618b959395d60ae39.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/pt/715db1dc3acc79e1e109a9563fbf8a172e873ae5.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/ro/2d67b91f7beb87bd9286975da3e6dadc70d9c64b.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/rs/c1bc4fc1d782713cfec17a071dadca6b755a233e.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/ru/2277320023a64803843c36ca6aa48ad77523dd0d.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/sa/44ab510f37755d1d9d4c4dfa9b1f25bed9b2a95c.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/se/5e126775c25a54a24956ddcc72c8bbcaeed20872.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/si/f0619cdd45548522566c6d72a660ddc011906184.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/sk/29e3667f5aca74c157af9225d5a97a74a41e52ef.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/th/53a76d6856962953d739d07ac61f04adee50a3d1.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/tr/f7ad0cb74f4ea5e7193cb6029c7f977e9786cfa2.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/ua/2ea50f1c1fb480c4557a5578f71657fc3152c3a1.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/us/fa2b2a0e643c840152ba856a8bb081c7ded40efa.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/vn/90b17da2aafaebce7b0c34189747e1e10dba8041.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/flags/new/48-squared/z4/ced4751e6ac2cbb9884a5878fff59a4e24c3e386.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58c
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/img/twitter-image-else/566c7081f1deeaca39957e96365c3908f83b95af.jpg
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/assistant_entrypoint_cft/ef4280b820a27ed734dd50de76d082ea84a13f74.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/async_atlas_v2_cn_cft/bd7e7adbf9731810a79badc567cd4846b1ab4d68.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/async_atlas_v2_non_cn_cft/880672823d34a6cc1366fd38f98c6b4ff90fcf20
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/async_lists_cft/a2299c3f69cdf005cc73075218ac585d89528565.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/async_wpm_overlay_assets_cft/c6cb9b63eea61102d4e96fe72b7c8008652fe
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/atlas_places_async_cft/c94b60c4da2dae6b55fd9eabf168f146fc189acf.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/content_cft/ece690fd13c824529e3870e0e662c417931b8461.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/core-deps-inlinedet_cft/9fc72199a3b8ae2b967821deb6fa10d92ce308fc.j
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/crossorigin_check_cft/2454015045ef79168d452ff4e7f30bdadff0aa81.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/error_catcher_bec_cft/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/jquery_cft/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/main_cft/e77ceeb677e7749eed78fc0ec1e617c3e5c210c2.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/plugable-access-form_cft/3ae2aaac8c7322f2908109b6a9e7446001225f2b.
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/searchbox_cft/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/ski_lp_overview_panel_cft/9d8e7cfd33a37ffb15285d98f6970024f06cf36d
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/js/sp-on-maps_cft/1d69e13e40d03fc59f58d76b31735d5d8c37416a.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cf2.bstatic.com/static/opensearch/en-gb/4e7571db3e3392305a9bed7c8dae0d335160dc74.xml
Source: chromecache_291.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.4.min.js
Source: chromecache_349.2.dr	String found in binary or memory: https://community.booking.com/?profile.language=en-gb
Source: chromecache_349.2.dr	String found in binary or memory: https://d8c14d4960ca.edge.sdk.awswaf.com/d8c14d4960ca/a18a4859af9c/challenge.js
Source: chromecache_445.2.dr, chromecache_254.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_246.2.dr	String found in binary or memory: https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-api.html
Source: chromecache_381.2.dr, chromecache_282.2.dr, chromecache_244.2.dr, chromecache_256.2.dr, chromecache_304.2.dr	String found in binary or memory: https://git.drupalcode.org/project/once/-/raw/v1.0.1/LICENSE.md
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://github.com/aFarkas/lazysizes#automatically-setting-the-sizes-attribute
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://github.com/aFarkas/lazysizes#broken-image-symbol
Source: chromecache_381.2.dr, chromecache_282.2.dr, chromecache_244.2.dr, chromecache_256.2.dr, chromecache_304.2.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_442.2.dr, chromecache_277.2.dr, chromecache_373.2.dr, chromecache_274.2.dr	String found in binary or memory: https://github.com/jquery-form/form
Source: chromecache_442.2.dr, chromecache_277.2.dr, chromecache_373.2.dr, chromecache_274.2.dr	String found in binary or memory: https://github.com/jquery-form/form#license
Source: chromecache_424.2.dr	String found in binary or memory: https://github.com/jquery/jquery-migrate
Source: chromecache_313.2.dr, chromecache_331.2.dr, chromecache_442.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_373.2.dr, chromecache_274.2.dr, chromecache_433.2.dr	String found in binary or memory: https://github.com/kenwheeler/slick/blob/master/LICENSE
Source: chromecache_461.2.dr	String found in binary or memory: https://google.com
Source: chromecache_461.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_361.2.dr	String found in binary or memory: https://istatic.booking.com/internal-static/capla/static/css/256aa323.65a94ca2.chunk.css.map
Source: chromecache_399.2.dr	String found in binary or memory: https://istatic.booking.com/internal-static/capla/static/css/bui-react-9.12548206.css.map
Source: chromecache_462.2.dr	String found in binary or memory: https://istatic.booking.com/internal-static/capla/static/css/client.99a1ce89.css.map
Source: chromecache_327.2.dr	String found in binary or memory: https://istatic.booking.com/internal-static/capla/static/js/034e4287.d0fe97f0.chunk.js.map
Source: chromecache_473.2.dr	String found in binary or memory: https://istatic.booking.com/internal-static/capla/static/js/256aa323.0c14bd53.chunk.js.map
Source: chromecache_405.2.dr	String found in binary or memory: https://istatic.booking.com/internal-static/capla/static/js/a72063b1.759d5807.chunk.js.map
Source: chromecache_458.2.dr	String found in binary or memory: https://istatic.booking.com/internal-static/capla/static/js/bui-react-9.1fa6c1cb.js.map
Source: chromecache_315.2.dr	String found in binary or memory: https://istatic.booking.com/internal-static/capla/static/js/client.2cc28297.js.map
Source: chromecache_349.2.dr	String found in binary or memory: https://join.booking.com/?lang=en-gb&aid=304142&utm_source=footer_menu&utm_medium=fronte
Source: chromecache_349.2.dr	String found in binary or memory: https://join.booking.com/?lang=en-gb&utm_source=topbar&utm_medium=frontend&amp;label=gen
Source: chromecache_349.2.dr	String found in binary or memory: https://lbs.baidu.com/
Source: chromecache_349.2.dr	String found in binary or memory: https://lbs.baidu.com/index.php?title=openprivacy
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://lonrtp1.marketo.com
Source: chromecache_241.2.dr	String found in binary or memory: https://mths.be/cssescape
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://munchkin.marketo.net/
Source: chromecache_349.2.dr	String found in binary or memory: https://news.booking.com/en-us/
Source: chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_432.2.dr, chromecache_461.2.dr, chromecache_320.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/ar
Source: chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/bg
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/bg/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_388.2.dr	String found in binary or memory: https://partner.booking.com/bg/taxonomy/term/3693
Source: chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/cs
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/cs/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_333.2.dr	String found in binary or memory: https://partner.booking.com/cs/taxonomy/term/3693
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/de
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/de/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/el
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/el/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/en-gb
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-gb/click-magazine/industry-perspectives/why-being-proud-certified-mat
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/en-gb/community
Source: chromecache_364.2.dr	String found in binary or memory: https://partner.booking.com/en-gb/taxonomy/term/3693
Source: chromecache_349.2.dr	String found in binary or memory: https://partner.booking.com/en-gb?utm_campaign=footer_list&utm_medium=frontend_footer&utm_so
Source: chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/en-us
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/click-magazine
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/click-magazine/industry-perspectives
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/click-magazine/industry-perspectives/accor-more-inclusive-LGBTQ-gu
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/click-magazine/industry-perspectives/how-travel-proud-helps-cleanb
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/click-magazine/industry-perspectives/welcoming-lgbtq-travelers-how
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-mat
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/click-magazine/trends-insights/5-actions-you-can-take-make-your-pr
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/click-magazine/trends-insights/create-inclusive-stays-lgbtq-guests
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/click-magazine/trends-insights/how-can-you-be-more-inclusive-lgbtq
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/proud-certified
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/taxonomy/term/3468
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/taxonomy/term/3688
Source: chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/en-us/taxonomy/term/3693
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/en-us/taxonomy/term/999
Source: chromecache_291.2.dr	String found in binary or memory: https://partner.booking.com/en-us?utm_source=extranet_login_page
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/es
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/es-ar
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/es-ar/click-magazine/industry-perspectives/why-being-proud-certified-mat
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/es/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/fr
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/fr/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/he
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/he/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/hr
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/hr/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/hu
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/hu/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/id
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/it
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/it/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/ja
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/ja/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/ko
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/ko/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/nl
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/nl/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/node/119556/
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/pl
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/pl/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/pt
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/pt-br
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/pt-br/click-magazine/industry-perspectives/why-being-proud-certified-mat
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/pt/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/ro
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/ro/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/ru
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/ru/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/2023-01/Twowomeninlobby.png
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/2024-06/ukb5394_asset_bank_shot_10_0719.jpg
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/styles/avatar_default/public/2020-08/117966924_61718
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/styles/avatar_default/public/2023-01/jodi.jpg?itok=p
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/styles/avatar_default/public/2024-03/callum_1.png?it
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/styles/medium_400_width/public/2024-06/ukb5394_asset
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/styles/teaser_image_card/public/2023-01/Twowomeninlo
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/sites/default/files/styles/teaser_image_card/public/2024-06/ukb5394_asse
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/sr
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/sr/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/sv
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/sv/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/th
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/th/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/tr
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/tr/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/vi
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/vi/click-magazine/industry-perspectives/why-being-proud-certified-matter
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/zh-cn
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/zh-cn/click-magazine/industry-perspectives/why-being-proud-certified-mat
Source: chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://partner.booking.com/zh-tw
Source: chromecache_311.2.dr	String found in binary or memory: https://partner.booking.com/zh-tw/click-magazine/industry-perspectives/why-being-proud-certified-mat
Source: chromecache_349.2.dr	String found in binary or memory: https://plus.google.com/105443419075154950489
Source: chromecache_311.2.dr	String found in binary or memory: https://q-cf.bstatic.com/static/img/b26logo/booking_logo_retina/22615963add19ac6b6d715a97c8d477e8b95
Source: chromecache_291.2.dr	String found in binary or memory: https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/us.png
Source: chromecache_436.2.dr	String found in binary or memory: https://r.bstatic.com/libs/bui/7.3.1/bui.min.css
Source: chromecache_436.2.dr	String found in binary or memory: https://r.bstatic.com/libs/calango/0.500/bui.css
Source: chromecache_381.2.dr, chromecache_282.2.dr, chromecache_244.2.dr, chromecache_256.2.dr, chromecache_304.2.dr	String found in binary or memory: https://raw.githubusercontent.com/focus-trap/tabbable/v6.2.0/LICENSE
Source: chromecache_442.2.dr, chromecache_277.2.dr, chromecache_373.2.dr, chromecache_274.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jquery-form/form/master/LICENSE
Source: chromecache_381.2.dr, chromecache_428.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_316.2.dr, chromecache_451.2.dr, chromecache_244.2.dr, chromecache_256.2.dr, chromecache_341.2.dr, chromecache_304.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt
Source: chromecache_381.2.dr, chromecache_282.2.dr, chromecache_244.2.dr, chromecache_256.2.dr, chromecache_304.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt
Source: chromecache_442.2.dr, chromecache_285.2.dr, chromecache_277.2.dr, chromecache_373.2.dr, chromecache_274.2.dr	String found in binary or memory: https://raw.githubusercontent.com/muicss/loadjs/4.2.0/LICENSE.txt
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://rtp-static.marketo.com
Source: chromecache_441.2.dr, chromecache_321.2.dr	String found in binary or memory: https://s.qualtrics.com/spoke/all/jam
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com/company/reservations.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f8538
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com/company/search.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b9350
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com/content/complaints.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com/content/cs.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com/help.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com/help.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc4
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com/login.html?op=oauth_return
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com/myreservations.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b9350
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com/mysettings.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3
Source: chromecache_349.2.dr	String found in binary or memory: https://secure.booking.com/reviewtimeline.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b9350
Source: chromecache_349.2.dr	String found in binary or memory: https://shelves.booking.com/
Source: chromecache_441.2.dr, chromecache_321.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com
Source: chromecache_441.2.dr, chromecache_321.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com/dxjsmodule/
Source: chromecache_461.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_408.2.dr	String found in binary or memory: https://static.addtoany.com/menu/
Source: chromecache_408.2.dr	String found in binary or memory: https://static.addtoany.com/menu/sm.25.html#type=core&event=load
Source: chromecache_320.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_444.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_349.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95647?hl=en
Source: chromecache_349.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectloc
Source: chromecache_349.2.dr	String found in binary or memory: https://sustainability.booking.com/
Source: chromecache_444.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_349.2.dr	String found in binary or memory: https://taxi.booking.com
Source: chromecache_289.2.dr, chromecache_386.2.dr, chromecache_247.2.dr, chromecache_421.2.dr	String found in binary or memory: https://tcf.cookiepedia.co.uk
Source: chromecache_432.2.dr, chromecache_461.2.dr, chromecache_320.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr, chromecache_420.2.dr	String found in binary or memory: https://try.abtasty.com
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/_frdtcr?aid=304142
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/accommodations.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/affiliate-program/v2/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/airport.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc4
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/apartments/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/bed-and-breakfast/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f8538
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/booking-home/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b935
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/business.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/city.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc4265
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content-moderation-policy/overview-page.en-gb.html?label=gen173bo-122AEB2AIB
Source: chromecache_388.2.dr	String found in binary or memory: https://www.booking.com/content/about.bg.html?utm_source=partnerhub&utm_medium=about_booking_com
Source: chromecache_333.2.dr	String found in binary or memory: https://www.booking.com/content/about.cs.html?utm_source=partnerhub&utm_medium=about_booking_com
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/about.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3
Source: chromecache_364.2.dr	String found in binary or memory: https://www.booking.com/content/about.en-gb.html?utm_source=phc&utm_medium=about_booking_com_lin
Source: chromecache_311.2.dr, chromecache_412.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.booking.com/content/about.en-us.html?utm_source=phc&utm_medium=about_booking_com_lin
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/ccpa.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/contact-us.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b935
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/dsar.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAE
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/how_we_work.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.ar.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.bg.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.ca.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.cs.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.da.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.de.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.el.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.en-gb.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507a
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-122AEB2AIB&tmpl=docs%2Fprivacy-pol
Source: chromecache_349.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEB
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.es-ar.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.es-mx.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.es.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.et.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.fi.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.fr.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.he.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.hi.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.hr.html
Source: chromecache_349.2.dr, chromecache_336.2.dr, chromecache_325.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.hu.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.id.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.is.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.it.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.ja.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.ko.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.lt.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.lv.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.ms.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.nl.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.no.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.pl.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.pt-br.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.pt-pt.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.ro.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.ru.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.sk.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.sl.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.sr.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.sv.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.th.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.tl.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.tr.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.uk.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.vi.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.zh-cn.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/privacy.zh-tw.html
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/terms.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/content/terms?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/country.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc4
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/covid-19-booking-faqs.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/deals/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/destinationfinderdeals.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/district.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/extended-stays/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b9
Source: chromecache_268.2.dr, chromecache_284.2.dr, chromecache_386.2.dr, chromecache_247.2.dr	String found in binary or memory: https://www.booking.com/general.html?tmpl=docs/privacy-policy
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/genius.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc42
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/guest-house/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b9350
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/help?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiA
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/hostels/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/hotel/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc426
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/landmark.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/packages.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/region.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc42
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/resorts/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/reviews
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/traveller-awards/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/trust-and-safety.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507
Source: chromecache_349.2.dr	String found in binary or memory: https://www.booking.com/villas/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3c
Source: chromecache_349.2.dr	String found in binary or memory: https://www.bookingholdings.com/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.bookingholdings.com/about/compliance-and-ethics/human-rights/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.bookingholdings.com/modern-slavery-statement/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.criteo.com/privacy/
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.drupal.org)
Source: chromecache_381.2.dr, chromecache_264.2.dr, chromecache_413.2.dr, chromecache_428.2.dr, chromecache_323.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_345.2.dr, chromecache_442.2.dr, chromecache_356.2.dr, chromecache_398.2.dr, chromecache_417.2.dr, chromecache_285.2.dr, chromecache_456.2.dr, chromecache_316.2.dr, chromecache_451.2.dr, chromecache_344.2.dr, chromecache_244.2.dr, chromecache_277.2.dr, chromecache_373.2.dr, chromecache_342.2.dr	String found in binary or memory: https://www.drupal.org/licensing/faq
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.google-analytics.com
Source: chromecache_461.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_444.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_444.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_444.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_320.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_444.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_461.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.googleoptimize.com
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.googleoptimize.com/optimize.js?id=GTM-MVTHSWF
Source: chromecache_320.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_461.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_444.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_349.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-5Q664QZ
Source: chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TGMJRCB
Source: chromecache_320.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_289.2.dr, chromecache_386.2.dr, chromecache_247.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.onetrust.com/products/cookie-consent/
Source: chromecache_311.2.dr	String found in binary or memory: https://www.youtube.com/embed/0Y1uQDXDH4o?autoplay=0&start=0&rel=0&cc_load_policy=1
Source: chromecache_461.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_311.2.dr	String found in binary or memory: https://zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_3Eum1ldyL0aIh0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49759 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.troj.win@25/445@170/56

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2160,i,7866435718271725811,6030177856115719488,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ennexhorpps.com/apart/book244102ashotxxx22214"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2160,i,7866435718271725811,6030177856115719488,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://ennexhorpps.com/apart/book244102ashotxxx22214	0%	Avira URL Cloud	safe
https://ennexhorpps.com/apart/book244102ashotxxx22214	5%	Virustotal		Browse

Source	Detection	Scanner	Link
bookingdotcomb2b.germany-2.evergage.com	0%	Virustotal	Browse
d2i5gg36g14bzn.cloudfront.net	0%	Virustotal	Browse
d2uxzmvxe6bz7q.cloudfront.net	0%	Virustotal	Browse
d8c14d4960ca.edge.sdk.awswaf.com	0%	Virustotal	Browse
chat.kindlycdn.com	0%	Virustotal	Browse
cdn.evgnet.com	0%	Virustotal	Browse
ariane.abtasty.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
sage.kindly.ai	0%	Virustotal	Browse
stats.g.doubleclick.net	0%	Virustotal	Browse
bstatic.com	0%	Virustotal	Browse
depzuycudnrzx.cloudfront.net	0%	Virustotal	Browse
scontent.xx.fbcdn.net	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
261-nrz-371.mktoresp.com	0%	Virustotal	Browse
d2df291ti5v5sq.cloudfront.net	0%	Virustotal	Browse
d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	0%	Virustotal	Browse
pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
a.nel.cloudflare.com	0%	Virustotal	Browse
du1b3vb35hc0o.cloudfront.net	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
lonrtp1.marketo.com	0%	Virustotal	Browse
d1of1hbywxxm65.cloudfront.net	0%	Virustotal	Browse
partner.booking.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
static.addtoany.com	0%	Virustotal	Browse
td.doubleclick.net	1%	Virustotal	Browse
o2.mouseflow.com	0%	Virustotal	Browse
www.googleoptimize.com	0%	Virustotal	Browse
d2vgu95hoyrpkh.cloudfront.net	0%	Virustotal	Browse
geolocation.onetrust.com	0%	Virustotal	Browse
dcinfos-cache.abtasty.com	0%	Virustotal	Browse
cdn.cookielaw.org	0%	Virustotal	Browse
analytics-alv.google.com	0%	Virustotal	Browse
de2trjlt8e8rj.cloudfront.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otCommonStyles.css	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://ipinfo.io/	0%	URL Reputation	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://bookingdotcomb2b.germany-2.evergage.com/pr?.top=435&action=Viewed%20Homepage&.dt=3671&.lt=5950&.btdns=9&.bv=16&_ak=bookingdotcomb2b&_ds=booking_prod&.scv=138&channel=Web&_r=533068&.anonId=2ba526af6f8d14f2&_anon=true	0%	Avira URL Cloud	safe
https://chat.kindlycdn.com/react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js	0%	Avira URL Cloud	safe
https://partner.booking.com/ro/click-magazine/industry-perspectives/why-being-proud-certified-matter	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/medium_400_width/public/2024-06/ukb5394_asset	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/cs.json	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58c	0%	Avira URL Cloud	safe
https://secure.booking.com/help.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/js/jquery_cft/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js	0%	Avira URL Cloud	safe
https://partner.booking.com/th	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/img/flags/new/48-squared/se/5e126775c25a54a24956ddcc72c8bbcaeed20872.	0%	Avira URL Cloud	safe
https://partner.booking.com/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-us.json	0%	Avira URL Cloud	safe
https://partner.booking.com/tr	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.png	0%	Avira URL Cloud	safe
https://www.booking.com/content/ccpa.html	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://partner.booking.com/en-us/proud-certified	0%	Avira URL Cloud	safe
https://www.booking.com/booking-home/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b935	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEB	0%	Avira URL Cloud	safe
https://o2.mouseflow.com/init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=07095917e3a271e8b1cc5a51e2d88391ac470507&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-us&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=857&pxr=1&gdpr=0&pst=1720575900009	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json	0%	Avira URL Cloud	safe
https://chat.kindlycdn.com/settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png	0%	Avira URL Cloud	safe
http://www.boldmonday.comhttp://www.ibm.comThis	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA	0%	Avira URL Cloud	safe
https://www.booking.com/apartments/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507	0%	Avira URL Cloud	safe
https://t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingBold.woff	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/js/main_cft/e77ceeb677e7749eed78fc0ec1e617c3e5c210c2.js	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/js/core-deps-inlinedet_cft/9fc72199a3b8ae2b967821deb6fa10d92ce308fc.j	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt	0%	Avira URL Cloud	safe
https://partner.booking.com/sr	0%	Avira URL Cloud	safe
https://rtp-static.marketo.com	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/img	0%	Avira URL Cloud	safe
https://istatic.booking.com/internal-static/capla/static/js/256aa323.0c14bd53.chunk.js.map	0%	Avira URL Cloud	safe
https://partner.booking.com/sv	0%	Avira URL Cloud	safe
https://bookingdotcomb2b.germany-2.evergage.com/pr?.top=2097&action=Viewed%20Homepage&.tt=1531&.dt=2899&.bv=16&_ak=bookingdotcomb2b&_ds=booking_prod&.scv=138&channel=Web&_r=243911&.anonId=2ba526af6f8d14f2&_anon=true	0%	Avira URL Cloud	safe
https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/us.png	0%	Avira URL Cloud	safe
https://join.booking.com/?lang=en-gb&aid=304142&utm_source=footer_menu&utm_medium=fronte	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/js/atlas_places_async_cft/c94b60c4da2dae6b55fd9eabf168f146fc189acf.js	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png	0%	Avira URL Cloud	safe
https://o2.mouseflow.com/init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=07093141f39302e457977b601dd50aab9c579430&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fcs&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=2830&pxr=1&gdpr=0&pst=1720575931444	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/img/flags/new/48-squared/gr/e0e42a97a7b860fc9be71954262902f2a4e94aa6.	0%	Avira URL Cloud	safe
https://www.booking.com/content/about.cs.html?utm_source=partnerhub&utm_medium=about_booking_com	0%	Avira URL Cloud	safe
https://www.booking.com/packages.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc	0%	Avira URL Cloud	safe
https://o2.mouseflow.com/data	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/img/flags/new/48-squared/cz/32002e60fead55ce886ff9827dfcf4af8cf4e277.	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.ar.html	0%	Avira URL Cloud	safe
https://partner.booking.com/en-us/click-magazine/industry-perspectives/welcoming-lgbtq-travelers-how	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/styles/teaser_image_card/public/2024-06/ukb5394_asse	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/img/flags/new/48-squared/ar/9cce2b91336709016282f06432a8b6366069e0c2.	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-gb&rl=&if=false&ts=1720575907113&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575906412&coo=false&rqm=GET	0%	Avira URL Cloud	safe
https://bstatic.com/libs/bui/9.5.6/bui.min.js	0%	Avira URL Cloud	safe
https://siteintercept.qualtrics.com	0%	Avira URL Cloud	safe
https://www.booking.com/logo?ver=1&sid=8ac6b1f85386b93507ae3cb6dc426561&t=17205758751	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json	0%	Avira URL Cloud	safe
https://partner.booking.com/ro	0%	Avira URL Cloud	safe
https://istatic.booking.com/internal-static/capla/static/js/bui-react-9.1fa6c1cb.js.map	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.hr.html	0%	Avira URL Cloud	safe
https://partner.booking.com/ru	0%	Avira URL Cloud	safe
https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/manifest.json	0%	Avira URL Cloud	safe
https://partner.booking.com/core/modules/statistics/statistics.php	0%	Avira URL Cloud	safe
https://account.booking.com/sso/logout/v3	0%	Avira URL Cloud	safe
https://chat.kindlycdn.com/kindly-chat.js	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.it.html	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt	0%	Avira URL Cloud	safe
https://ariane.abtasty.com/	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.es.html	0%	Avira URL Cloud	safe
https://261-nrz-371.mktoresp.com/webevents/visitWebPage?_mchNc=1720575920592&_mchCn=&_mchId=261-NRZ-371&_mchTk=_mch-booking.com-1720575895796-34593&_mchHo=partner.booking.com&_mchPo=&_mchRu=%2Fbg&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchHa=&_mchRe=&_mchQp=	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/libs/promise/7.0.4/promise-7.0.4.min.js	0%	Avira URL Cloud	safe
https://www.booking.com/resorts/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/js/crossorigin_check_cft/2454015045ef79168d452ff4e7f30bdadff0aa81.js	0%	Avira URL Cloud	safe
https://t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingRegular.woff	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	0%	Avira URL Cloud	safe
https://secure.booking.com	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/js/js_VkmDSMYWYbk1GzPhN1O6VYri69gfmqRRB6Kq_M8CTg8.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	0%	Avira URL Cloud	safe
https://www.booking.com/content/dsar.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAE	0%	Avira URL Cloud	safe
https://partner.booking.com/libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js	0%	Avira URL Cloud	safe
https://github.com/jquery-form/form	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.tr.html	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.fr.html	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt	0%	Avira URL Cloud	safe
https://admin.booking.com/hotel/hoteladmin/privacy.html?lang=en-gb&utm_source=phc&utm_medium	0%	Avira URL Cloud	safe
https://admin.booking.com	0%	Avira URL Cloud	safe
https://o2.mouseflow.com/events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070920231620304b5530ea4fe94634ee7de03eee&v=18.07&pst=1720575920528&q=2&li=4790&lh=907&ls=0&d=ACj9ADIAAAYCjQHAAAAANwICjQHAADcpCJky2gAGAnsHAo0BwAAAAnwoAnwqAAAAAP__AChEEw**..bW91c2Utb3V0	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/static/js/error_catcher_bec_cft/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js	0%	Avira URL Cloud	safe
https://cf2.bstatic.com/psb/capla/static/js/client.2cc28297.js	0%	Avira URL Cloud	safe
https://www.booking.com/content/privacy.lt.html	0%	Avira URL Cloud	safe
https://partner.booking.com/sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
d2i5gg36g14bzn.cloudfront.net	18.245.31.129	true	false	0%, Virustotal, Browse	unknown
bstatic.com	18.245.31.53	true	false	0%, Virustotal, Browse	unknown
cdn.evgnet.com	151.101.128.114	true	false	0%, Virustotal, Browse	unknown
chat.kindlycdn.com	104.26.6.229	true	false	0%, Virustotal, Browse	unknown
bookingdotcomb2b.germany-2.evergage.com	18.157.249.141	true	false	0%, Virustotal, Browse	unknown
d2uxzmvxe6bz7q.cloudfront.net	13.33.187.53	true	false	0%, Virustotal, Browse	unknown
ariane.abtasty.com	34.36.178.232	true	false	0%, Virustotal, Browse	unknown
sage.kindly.ai	34.120.99.165	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
d8c14d4960ca.edge.sdk.awswaf.com	18.245.31.103	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	173.194.76.157	true	false	0%, Virustotal, Browse	unknown
depzuycudnrzx.cloudfront.net	13.35.58.25	true	false	0%, Virustotal, Browse	unknown
261-nrz-371.mktoresp.com	134.213.193.62	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.130.137	true	false	1%, Virustotal, Browse	unknown
d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	18.244.18.94	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
www.google.com	216.58.212.132	true	false	0%, Virustotal, Browse	unknown
d2df291ti5v5sq.cloudfront.net	18.66.112.126	true	false	0%, Virustotal, Browse	unknown
pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com	52.212.92.193	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	0%, Virustotal, Browse	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	0%, Virustotal, Browse	unknown
du1b3vb35hc0o.cloudfront.net	99.86.4.128	true	false	0%, Virustotal, Browse	unknown
lonrtp1.marketo.com	162.13.202.201	true	false	0%, Virustotal, Browse	unknown
d1of1hbywxxm65.cloudfront.net	18.245.60.76	true	false	0%, Virustotal, Browse	unknown
partner.booking.com	18.66.147.77	true	true	0%, Virustotal, Browse	unknown
www.googleoptimize.com	142.250.185.238	true	false	0%, Virustotal, Browse	unknown
de2trjlt8e8rj.cloudfront.net	143.204.215.77	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
analytics-alv.google.com	216.239.36.181	true	false	0%, Virustotal, Browse	unknown
ennexhorpps.com	188.114.97.3	true	true		unknown
d2vgu95hoyrpkh.cloudfront.net	18.245.31.89	true	false	0%, Virustotal, Browse	unknown
o2.mouseflow.com	185.17.186.161	true	false	0%, Virustotal, Browse	unknown
static.addtoany.com	172.67.39.148	true	false	0%, Virustotal, Browse	unknown
td.doubleclick.net	142.250.184.226	true	false	1%, Virustotal, Browse	unknown
dcinfos-cache.abtasty.com	34.36.178.232	true	false	0%, Virustotal, Browse	unknown
cdn.cookielaw.org	104.19.177.52	true	false	0%, Virustotal, Browse	unknown
geolocation.onetrust.com	104.18.32.137	true	false	0%, Virustotal, Browse	unknown
try-cloudfront.abtasty.com	18.172.112.27	true	false		unknown
cf2.bstatic.com	unknown	unknown	true		unknown
siteintercept.qualtrics.com	unknown	unknown	true		unknown
zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	unknown	unknown	true		unknown
accommodations.booking.com	unknown	unknown	true		unknown
apil1.spinnaker-js.com	unknown	unknown	true		unknown
cdn.spinnaker-js.com	unknown	unknown	true		unknown
partnerfeedback.booking.com	unknown	unknown	true		unknown
rtp-static.marketo.com	unknown	unknown	true		unknown
t-cf.bstatic.com	unknown	unknown	true		unknown
eu.qualtrics.com	unknown	unknown	true		unknown
connect.facebook.net	unknown	unknown	true		unknown
px.ads.linkedin.com	unknown	unknown	true		unknown
munchkin.marketo.net	unknown	unknown	true		unknown
shelves.booking.com	unknown	unknown	true		unknown
cdn.jsdelivr.net	unknown	unknown	true		unknown
cdn.socket.io	unknown	unknown	true		unknown
try.abtasty.com	unknown	unknown	true		unknown
zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	unknown	unknown	true		unknown
www.facebook.com	unknown	unknown	true		unknown
cdn.mouseflow.com	unknown	unknown	true		unknown
www.linkedin.com	unknown	unknown	true		unknown
www.booking.com	unknown	unknown	true		unknown
snap.licdn.com	unknown	unknown	true		unknown
account.booking.com	unknown	unknown	true		unknown
q-xx.bstatic.com	unknown	unknown	true		unknown
analytics.google.com	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://bookingdotcomb2b.germany-2.evergage.com/pr?.top=435&action=Viewed%20Homepage&.dt=3671&.lt=5950&.btdns=9&.bv=16&_ak=bookingdotcomb2b&_ds=booking_prod&.scv=138&channel=Web&_r=533068&.anonId=2ba526af6f8d14f2&_anon=true	false	Avira URL Cloud: safe	unknown
https://chat.kindlycdn.com/react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/cs.json	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/js/jquery_cft/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otCommonStyles.css	false	URL Reputation: safe	unknown
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-us.json	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.png	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://o2.mouseflow.com/init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=07095917e3a271e8b1cc5a51e2d88391ac470507&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-us&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=857&pxr=1&gdpr=0&pst=1720575900009	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json	false	Avira URL Cloud: safe	unknown
https://chat.kindlycdn.com/settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA	false	Avira URL Cloud: safe	unknown
https://t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingBold.woff	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/js/main_cft/e77ceeb677e7749eed78fc0ec1e617c3e5c210c2.js	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	false	Avira URL Cloud: safe	unknown
https://bookingdotcomb2b.germany-2.evergage.com/pr?.top=2097&action=Viewed%20Homepage&.tt=1531&.dt=2899&.bv=16&_ak=bookingdotcomb2b&_ds=booking_prod&.scv=138&channel=Web&_r=243911&.anonId=2ba526af6f8d14f2&_anon=true	false	Avira URL Cloud: safe	unknown
https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/us.png	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png	false	Avira URL Cloud: safe	unknown
https://o2.mouseflow.com/init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=07093141f39302e457977b601dd50aab9c579430&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fcs&url=new%20homepage-64867&ref=&title=Partner%20Hub%20%7C%20Booking.com%20for%20Partners&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=2830&pxr=1&gdpr=0&pst=1720575931444	false	Avira URL Cloud: safe	unknown
https://o2.mouseflow.com/data	false	Avira URL Cloud: safe	unknown
https://bstatic.com/libs/bui/9.5.6/bui.min.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=137657823624702&ev=PageView&dl=https%3A%2F%2Fpartner.booking.com%2Fen-gb&rl=&if=false&ts=1720575907113&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1720575882371.240530978967900163&cs_est=true&ler=empty&cdl=API_unavailable&it=1720575906412&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://www.booking.com/logo?ver=1&sid=8ac6b1f85386b93507ae3cb6dc426561&t=17205758751	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json	false	Avira URL Cloud: safe	unknown
https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/manifest.json	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/core/modules/statistics/statistics.php	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/	false	URL Reputation: safe	unknown
https://chat.kindlycdn.com/kindly-chat.js	false	Avira URL Cloud: safe	unknown
https://ariane.abtasty.com/	false	Avira URL Cloud: safe	unknown
https://261-nrz-371.mktoresp.com/webevents/visitWebPage?_mchNc=1720575920592&_mchCn=&_mchId=261-NRZ-371&_mchTk=_mch-booking.com-1720575895796-34593&_mchHo=partner.booking.com&_mchPo=&_mchRu=%2Fbg&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchHa=&_mchRe=&_mchQp=	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/js/crossorigin_check_cft/2454015045ef79168d452ff4e7f30bdadff0aa81.js	false	Avira URL Cloud: safe	unknown
https://t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingRegular.woff	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://partner.booking.com/sites/default/files/js/js_VkmDSMYWYbk1GzPhN1O6VYri69gfmqRRB6Kq_M8CTg8.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/en-us?utm_source=extranet_login_page#main-content	false		unknown
https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	false	Avira URL Cloud: safe	unknown
https://o2.mouseflow.com/events?w=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&p=070920231620304b5530ea4fe94634ee7de03eee&v=18.07&pst=1720575920528&q=2&li=4790&lh=907&ls=0&d=ACj9ADIAAAYCjQHAAAAANwICjQHAADcpCJky2gAGAnsHAo0BwAAAAnwoAnwqAAAAAP__AChEEw**..bW91c2Utb3V0	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/js/error_catcher_bec_cft/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/psb/capla/static/js/client.2cc28297.js	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW	false	Avira URL Cloud: safe	unknown
https://ennexhorpps.com/apart/book244102ashotxxx22214	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://partner.booking.com/ro/click-magazine/industry-perspectives/why-being-proud-certified-matter	chromecache_311.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/medium_400_width/public/2024-06/ukb5394_asset	chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58c	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://secure.booking.com/help.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/th	chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/img/flags/new/48-squared/se/5e126775c25a54a24956ddcc72c8bbcaeed20872.	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_444.2.dr	false	URL Reputation: safe	unknown
https://partner.booking.com/tr	chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/ccpa.html	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/en-us/proud-certified	chromecache_311.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/booking-home/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b935	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEB	chromecache_349.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js	chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://www.boldmonday.comhttp://www.ibm.comThis	chromecache_338.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/apartments/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/js/core-deps-inlinedet_cft/9fc72199a3b8ae2b967821deb6fa10d92ce308fc.j	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sr	chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	false	Avira URL Cloud: safe	unknown
https://rtp-static.marketo.com	chromecache_311.2.dr, chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/img	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://istatic.booking.com/internal-static/capla/static/js/256aa323.0c14bd53.chunk.js.map	chromecache_473.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sv	chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	false	Avira URL Cloud: safe	unknown
https://join.booking.com/?lang=en-gb&aid=304142&utm_source=footer_menu&utm_medium=fronte	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/js/atlas_places_async_cft/c94b60c4da2dae6b55fd9eabf168f146fc189acf.js	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/img/flags/new/48-squared/gr/e0e42a97a7b860fc9be71954262902f2a4e94aa6.	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/about.cs.html?utm_source=partnerhub&utm_medium=about_booking_com	chromecache_333.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/packages.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3cb6dc	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/img/flags/new/48-squared/cz/32002e60fead55ce886ff9827dfcf4af8cf4e277.	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.ar.html	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/en-us/click-magazine/industry-perspectives/welcoming-lgbtq-travelers-how	chromecache_311.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/sites/default/files/styles/teaser_image_card/public/2024-06/ukb5394_asse	chromecache_311.2.dr	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/static/img/flags/new/48-squared/ar/9cce2b91336709016282f06432a8b6366069e0c2.	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://siteintercept.qualtrics.com	chromecache_441.2.dr, chromecache_321.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/ro	chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	false	Avira URL Cloud: safe	unknown
https://istatic.booking.com/internal-static/capla/static/js/bui-react-9.1fa6c1cb.js.map	chromecache_458.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.hr.html	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://partner.booking.com/ru	chromecache_364.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_388.2.dr, chromecache_404.2.dr	false	Avira URL Cloud: safe	unknown
https://account.booking.com/sso/logout/v3	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_445.2.dr, chromecache_254.2.dr	false	URL Reputation: safe	unknown
https://www.booking.com/content/privacy.it.html	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt	chromecache_381.2.dr, chromecache_428.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_316.2.dr, chromecache_451.2.dr, chromecache_244.2.dr, chromecache_256.2.dr, chromecache_341.2.dr, chromecache_304.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.es.html	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://cf2.bstatic.com/libs/promise/7.0.4/promise-7.0.4.min.js	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/resorts/index.en-gb.html?label=gen173bo-122AEB2AIB&sid=8ac6b1f85386b93507ae3	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://secure.booking.com	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/dsar.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAE	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery-form/form	chromecache_442.2.dr, chromecache_277.2.dr, chromecache_373.2.dr, chromecache_274.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.tr.html	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.fr.html	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://admin.booking.com/hotel/hoteladmin/privacy.html?lang=en-gb&utm_source=phc&utm_medium	chromecache_364.2.dr	false	Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt	chromecache_381.2.dr, chromecache_282.2.dr, chromecache_244.2.dr, chromecache_256.2.dr, chromecache_304.2.dr	false	Avira URL Cloud: safe	unknown
https://admin.booking.com	chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://www.booking.com/content/privacy.lt.html	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.239.50.78	unknown	United States	16509	AMAZON-02US	false
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
185.17.186.161	o2.mouseflow.com	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
173.194.76.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
108.177.15.157	unknown	United States	15169	GOOGLEUS	false
18.157.249.141	bookingdotcomb2b.germany-2.evergage.com	United States	16509	AMAZON-02US	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
172.67.39.148	static.addtoany.com	United States	13335	CLOUDFLARENETUS	false
151.101.128.114	cdn.evgnet.com	United States	54113	FASTLYUS	false
13.35.58.25	depzuycudnrzx.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
18.172.112.60	unknown	United States	3	MIT-GATEWAYSUS	false
18.66.147.79	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.184.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.147.77	partner.booking.com	United States	3	MIT-GATEWAYSUS	true
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
18.244.18.94	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	United States	16509	AMAZON-02US	false
18.66.147.32	unknown	United States	3	MIT-GATEWAYSUS	false
18.245.60.76	d1of1hbywxxm65.cloudfront.net	United States	16509	AMAZON-02US	false
143.204.215.77	de2trjlt8e8rj.cloudfront.net	United States	16509	AMAZON-02US	false
18.172.112.27	try-cloudfront.abtasty.com	United States	3	MIT-GATEWAYSUS	false
18.66.112.126	d2df291ti5v5sq.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
18.172.112.62	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.185.238	www.googleoptimize.com	United States	15169	GOOGLEUS	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
162.13.202.201	lonrtp1.marketo.com	United Kingdom	15395	RACKSPACE-LONGB	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	ennexhorpps.com	European Union	13335	CLOUDFLARENETUS	true
18.245.60.2	unknown	United States	16509	AMAZON-02US	false
13.33.187.53	d2uxzmvxe6bz7q.cloudfront.net	United States	16509	AMAZON-02US	false
18.245.31.103	d8c14d4960ca.edge.sdk.awswaf.com	United States	16509	AMAZON-02US	false
134.213.193.62	261-nrz-371.mktoresp.com	Ireland	15395	RACKSPACE-LONGB	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
18.185.181.69	unknown	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.26.6.229	chat.kindlycdn.com	United States	13335	CLOUDFLARENETUS	false
104.19.177.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
99.86.4.128	du1b3vb35hc0o.cloudfront.net	United States	16509	AMAZON-02US	false
18.245.31.53	bstatic.com	United States	16509	AMAZON-02US	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
216.58.212.132	www.google.com	United States	15169	GOOGLEUS	false
34.120.99.165	sage.kindly.ai	United States	15169	GOOGLEUS	false
18.245.31.89	d2vgu95hoyrpkh.cloudfront.net	United States	16509	AMAZON-02US	false
52.212.92.193	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com	United States	16509	AMAZON-02US	false
18.244.18.18	unknown	United States	16509	AMAZON-02US	false
18.245.31.49	unknown	United States	16509	AMAZON-02US	false
34.36.178.232	ariane.abtasty.com	United States	2686	ATGS-MMD-ASUS	false
99.86.4.19	unknown	United States	16509	AMAZON-02US	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
18.245.31.129	d2i5gg36g14bzn.cloudfront.net	United States	16509	AMAZON-02US	false
104.22.70.197	unknown	United States	13335	CLOUDFLARENETUS	false
13.35.58.6	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1470508
Start date and time:	2024-07-10 03:43:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ennexhorpps.com/apart/book244102ashotxxx22214
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.troj.win@25/445@170/56
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://partner.booking.com/en-us?utm_source=extranet_login_page Browse: https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%20sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ&sid%20=930746e7f78d5b33410375991db31657 Browse: https://partner.booking.com/en-us?utm_source=extranet_login_page#main-content Browse: https://partner.booking.com/en-us Browse: https://partner.booking.com/en-gb Browse: https://partner.booking.com/bg Browse: https://partner.booking.com/cs

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.174, 64.233.167.84, 34.104.35.123, 104.18.186.31, 104.18.187.31, 142.250.185.138, 142.250.185.234, 172.217.23.106, 172.217.16.138, 216.58.212.138, 142.250.186.138, 142.250.181.234, 142.250.186.106, 142.250.185.170, 142.250.186.170, 142.250.185.202, 172.217.18.10, 142.250.186.42, 142.250.186.74, 142.250.185.106, 142.250.184.202, 52.165.165.26, 199.232.214.172, 13.95.31.18, 192.229.221.95, 142.250.186.142, 23.210.118.178, 23.201.255.149, 216.58.206.72, 216.58.206.74, 172.217.16.202, 104.17.208.240, 104.17.209.240, 104.18.26.50, 104.18.27.50, 2.18.64.212, 2.18.64.220, 13.107.42.14, 142.250.186.78, 23.201.255.206, 95.101.149.99, 142.250.185.163, 142.250.184.206, 2.23.65.88, 23.37.63.218, 216.58.206.42, 142.250.184.234, 142.250.184.238
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, slscr.update.microsoft.com, clientservices.googleapis.com, akamaisecure3.qualtrics.com.edgekey.net, e10776.b.akamaiedge.net, wildcard.marketo.net.edgekey.net, cdn.mouseflow.com.cdn.cloudflare.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, e8999.b.akamaiedge.net, cloudenhanced.qualtrics.com.edgekey.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, e12398.b.akamaiedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, od.linkedin.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, wildcard.marketo.com.edgekey.net, prodlb
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://ennexhorpps.com/sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuz Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a 'Sign in' button which is a part of the login form.","The webpage requests sensitive information such as 'Username' which is a part of the login form."]}
Title: kng.m OCR: Booking.com Sign in to manage your property Username Also known as "Login name" and "Login 'D" Next Having trouble signing in? Questions about your property or the Extranet? Check out Partner Help or ask another partner in the Partner Community Create your partner account By signing in or creating an account, you agree with our Terms & Conditions and Privacy Statement All rights reserved. Copyright (2006-2024) Booking.comw Manage cookies By clicking "Accept" consent to the use of analytical cookies (used to collect information on site usage and to improve our site and services) and tracking cookies (both from Booking.com , as well as from other trusted partners) that help us decide what products to show you on and off our site, by measuring the audience visiting our sites, and by allowing you to like or share items directly on social media. By clicking you can manne wur consent and find more information about the cookies we use.
URL: https://ennexhorpps.com Model: gpt-4o	```json{ "phishing_score": 9, "brands": "Booking.com", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "booking.com", "reasons": "The URL 'https://ennexhorpps.com' does not match the legitimate domain 'booking.com' associated with Booking.com. The webpage prominently displays a login form, which is a common feature in phishing sites to capture user credentials. The domain name 'ennexhorpps.com' is suspicious and unrelated to Booking.com. The presence of social engineering techniques, such as mimicking the legitimate Booking.com login page, further indicates that this is a phishing site."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65449)
Category:	downloaded
Size (bytes):	178551
Entropy (8bit):	5.477881474666592
Encrypted:	false
SSDEEP:	1536:KcHAGNgGDfVBFcNLZM+7zlyeCDZglUAG/Y1pMxpy1uy50/kX57winARFcdrYWH85:KcTrFP+75eDWkEM21u+J7winARFc7O
MD5:	0DB31D1AB0939D9AC5E5A58CBC723C9A
SHA1:	115C1A468CE0458ACFB5EAA616B7E5F16C030A55
SHA-256:	653F35592968178356A897806EB218906CD8646EE58C5A1ECE1175F7391149DF
SHA-512:	FC93AB9F1DD3D4DAC6E756AD86AE96A5F2FB37D4546B91B6FDE9D73D0D91879C2A05EA401A9875369017D0B7C37ED9BFF0179A54331E30339F4EA933631DA6E2
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/Chat-a25fa96ceb91fa439328.js?cache-bust=true&retry-attempt=3
Preview:	/! For license information please see Chat-a25fa96ceb91fa439328.js.LICENSE.txt /.(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["Chat"],{8690:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>bl});var o=n(257),a=n(4328),i=n(9445),r=n(5492);const l=i.Ay.div.withConfig({displayName:"KindlyChatstyles__ChatContainer",componentId:"sc-1y4lzsi-0"})(["font-size:16px;text-align:initial;line-height:18px;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;height:100%;z-index:",";@media ","{max-height:unset;}",""],(e=>e.zIndex+5),r.jO.maxTablet,(e=>{let{inspectorOpen:t}=e;return t&&"display: flex; flex-direction: row-reverse;"}));var s=n(1246),c=n(438),d=n(9755);const u=i.Ay.div.withConfig({displayName:"styles__Section",componentId:"sc-1iatydl-0"})(["margin:20px;display:flex;flex-direction:column;"]),m=i.Ay.hr.withConfig({displayName:"styles__Separator",componentId:"sc-1iatydl-1"})(["border-top:1px solid rgb(243,243,244);width:100%;margin:0;"]),p=i.Ay.button.withConfig({displayNa

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65449)
Category:	downloaded
Size (bytes):	174038
Entropy (8bit):	5.478263222506427
Encrypted:	false
SSDEEP:	1536:KcHAGNgGDfVBFcNLZM+7zlyeCDZglUAG/Y1pMxpy1uy50/kX57winARFcdrYWH8i:KcTrFP+75eDWkEM21u+J7winARFc7z
MD5:	5707A868705398C8FE4C94BDCB69180C
SHA1:	778A5D5AF486608EB3B6E753AE343A93E1E70EE5
SHA-256:	2FAB42029529EC8DD6AE22B0AF282F6C4B097CF73AE87C7106B501235D516483
SHA-512:	6E365AAD4302B91181B6CF856857B4BFCFD6ADDB2CCF22B6A1F0E7B5F6C1E8AF032682EC1B7267FD2F9CB93812CFD062F9C032D3AB4D5221C10942E7D19B1A8A
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/Chat-a25fa96ceb91fa439328.js?cache-bust=true&retry-attempt=1
Preview:	/! For license information please see Chat-a25fa96ceb91fa439328.js.LICENSE.txt /.(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["Chat"],{8690:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>bl});var o=n(257),a=n(4328),i=n(9445),r=n(5492);const l=i.Ay.div.withConfig({displayName:"KindlyChatstyles__ChatContainer",componentId:"sc-1y4lzsi-0"})(["font-size:16px;text-align:initial;line-height:18px;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;height:100%;z-index:",";@media ","{max-height:unset;}",""],(e=>e.zIndex+5),r.jO.maxTablet,(e=>{let{inspectorOpen:t}=e;return t&&"display: flex; flex-direction: row-reverse;"}));var s=n(1246),c=n(438),d=n(9755);const u=i.Ay.div.withConfig({displayName:"styles__Section",componentId:"sc-1iatydl-0"})(["margin:20px;display:flex;flex-direction:column;"]),m=i.Ay.hr.withConfig({displayName:"styles__Separator",componentId:"sc-1iatydl-1"})(["border-top:1px solid rgb(243,243,244);width:100%;margin:0;"]),p=i.Ay.button.withConfig({displayNa

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	229609
Entropy (8bit):	5.69400366825923
Encrypted:	false
SSDEEP:	1536:oVrhhNmfrtvVcEBbYD6ij9DRG8plJYUPR3tMy:oVLIfrtvVcEBbYD6wD3T
MD5:	0C7A06AB70AFF0DC036CE76EA64A13BD
SHA1:	7EED6A409216A1712E70F0CF0DE201A8AA7E2D82
SHA-256:	F9DAB38BE57EAC68B993E3DA39235B49D87FD3B0E05CBD592E0FDCD0A594E4B9
SHA-512:	3F229C44BB5DFF1694943FFE96F520103F9DC91277A57FEA40F129A9B2104781D0957404B61509256FA596713761AFCA666211913A87806521C898F0FCCB370E
Malicious:	false
Reputation:	low
URL:	https://ennexhorpps.com/static/booking/styles/main_jlksgegksel32232v5.css
Preview:	.wkTNdQjAfRVbKvFBiR1T{border:0;margin:0;padding:0}._nwGprfLZfZgMFjsmap7{align-items:flex-end;display:flex;padding:0 0 var(--bui_spacing_1x)}.ZGy7BLCX4XOvfADBFj11,.bqW7graHh09CTNANOrXt{-webkit-margin-start:var(--bui_spacing_1x);display:inline-block;margin-inline-start:var(--bui_spacing_1x)}.tsmwm5pXtK17w2173RXN{flex-grow:1;text-align:end}.CgEr4LoA7GBJSRxe_hwL{margin-top:var(--bui_spacing_1x)}.tpfLkcDxgJdgEODO7d3S{position:relative}.cTdJNASrkbE_mA7Ki5YQ{border:0;height:1px;left:0;margin:0;opacity:0;overflow:hidden;position:absolute;top:0;width:1px}.eaMQKfCQ1dJwRjhqXAoB .cTdJNASrkbE_mA7Ki5YQ,[dir=rtl] .cTdJNASrkbE_mA7Ki5YQ{left:auto;right:0}.EMqACHNFKIrBjLnCdYbI{display:none}@media (max-width:575px){.EMqACHNFKIrBjLnCdYbI{display:block;height:44px;position:absolute;top:50%;transform:translateY(-50%);width:100%}}.gsqI5txJew4n5F74e1ep{cursor:pointer;display:flex}.Jvd7a52AOzT8bz6CbBD1{flex-grow:1;margin-left:var(--bui_spacing_2x)}.eaMQKfCQ1dJwRjhqXAoB .Jvd7a52AOzT8bz6CbBD1,[dir=rtl] .Jvd7a52A

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65348)
Category:	downloaded
Size (bytes):	71750
Entropy (8bit):	5.119130414843615
Encrypted:	false
SSDEEP:	1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo
MD5:	C0BE8E53226AC34833FD9B5DBC01EBC5
SHA1:	B81EF1B22DE26AF8A7A4656F565FBC91A69D7518
SHA-256:	5FBAEB9F8E25D7E0143BAE61D4B1802C16CE7390B96CEB2D498B0D96FF4C853F
SHA-512:	738DAA4D2C3FC0F677FF92C1CC3F81C397FB6D2176A31A2EEB011BF88FE5A9E68A57914321F32FBD1A7BEF6CB88DC24B2AE1943A96C931D83F053979D1F25803
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css
Preview:	@charset "UTF-8";/!. animate.css - https://animate.style/. * Version - 4.1.1. * Licensed under the MIT license - http://opensource.org/licenses/MIT. . Copyright (c) 2020 Animate.css. /:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:1}.animate__animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-duration:var(--animate-duration);animation-duration:var(--animate-duration);-webkit-animation-fill-mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-animation-iteration-count:var(--animate-repeat);animation-iteration-count:var(--animate-repeat)}.animate__animated.animate__repeat-2{-webkit-animation-iteration-count:2;animation-iteration-count:2;-webkit-animation-iteration-count:calc(var(--animate-repeat)2);animation-iteration-count:calc(var(

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5036), with no line terminators
Category:	downloaded
Size (bytes):	5036
Entropy (8bit):	5.02691899528761
Encrypted:	false
SSDEEP:	48:ocwvvR3dn37Kfdx8zf0SBcqGeunymhVRl8hOfEwz4EwEgrTH5exO44H:CXn+fLobBjGeunyma8gN9gOF
MD5:	9478D8D20743C0422A70FDDF04DEB7FA
SHA1:	4D9B919969BCFF2E4E39E7D008A7A0C3F39ABDA1
SHA-256:	F9824E5F4727F34DD4B3F268CC3A51970A763E2E54FBE9934C44B7FFC1159E8B
SHA-512:	68206B543F68B46EFD8004FFCCB156CF3C3ACCB368137CC0228BEBC743E5B2A71CEA35DE6E27768ECE09C0FFA824D2CB33B1FEA7C48655ED012AAF4BF374B62E
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css
Preview:	.logolink,#banner_text,#tagline,#b25newName,#tabs,.help,.helpSmall,.browse,.but,#moreDestinations,#rssFormInc,.placeholder,.noPrint,.popup,.calender,.search h4,#sortAndDest,button,.scoreBarImg,.prevnextbar,div.top,.hotelnav2,.smallImgArea p,.curConv,#currencyConverter,#footer div,#footerbuttons,#footernav,#showReqRoomsHeader,#traveljigsaw_iframe,iframe#traveljigsaw_iframe,td.download-buttons,#bookStageNavInc,#mailafriend,#bookProgressBar,#languageselect,#calendar_popup,#netPromoterScore,#newslettersubscribe,#subheader-wrap,#registration,.breadcrumb_usersalutation,.notice-wrap{display:none!important;height:0!important;overflow:hidden!important}#bodyconstraint-inner{position:absolute!important}#top{background:0}#footer #footercert{display:block}body{margin:0;padding:0 0 18pt;color:#000}body,table,td,p,div,ul,ol,li{font:10pt/12pt "Arial","Helvetica",sans-serif}td,th{vertical-align:top;text-align:left;padding:3pt 6pt 3pt 0}.figure{text-align:right}h1{font-size:14pt;margin:0 0 3pt}h1.specia

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	278
Entropy (8bit):	5.2290771528866244
Encrypted:	false
SSDEEP:	6:YMrTT0dKB4/MzP4iwp+IsTM7pdSQiTdXLPqe1vm9lM8EJaPBOQfc4:YoIXaPra+IsA73+XJWAuEQH
MD5:	901B2C0AB4FC768F490258D3D6119D3D
SHA1:	69368BF9506F776841807655730F161A646C7562
SHA-256:	A2BBAF974DC77E68C485C8804A6E1BF79701BE127E1AD7DDBC4BA3A023856A64
SHA-512:	8B542A40360D3660D028F1AE9629173E814E03C34F44C917FE2458E98D0C0D2690C51060B6FCA424376D73918C417D836D1924651266322B2CE23E1694C66066
Malicious:	false
Reputation:	low
Preview:	{"id":1562364,"name":"Variation 1","modifications":[{"id":5168013,"selector":"","type":"addCSS","value":"#block-secondarynavigation .menu-item.menu-item-level--0 > a[href*=\"join\"]:not(:hover) {\n color: var(--bui_color_complement);\n}"}],"_tagInfo":"2024/07/05 15:13:45 UTC"}

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.993419658168688
Encrypted:	false
SSDEEP:	3:mSp0hkPXoPr4uWthSiNGRnKvVNKk:mSNPXoPruUiynuKk
MD5:	92A7939CD14280FEC910033518E91CCC
SHA1:	ED65EDEAEABA0EB3C4FA26FA5149025C8E084083
SHA-256:	AEE6D5DA1E6BEBCB6077C1A39CE657F3C63436FF7EEDDE66F0F99D8FCF587275
SHA-512:	1A5F0C9462A06BBAD18726F5EAD6D6A74130A2F0F97EB049354917FFB19BE1404310BA71EC2FC1966CC509CD24D1E7F46FF425447EE2D08AB35C05DA7F0AC6BE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgkA34NUPHS5aBIFDS0dZOsSBQ3DEv68EgUNHdzPXhIQCUODqgMY4Io6EgUNLR1k6xIXCeUs9lrRhy8PEgUNwxL-vBIFDR3cz14=?alt=proto
Preview:	ChsKBw0tHWTrGgAKBw3DEv68GgAKBw0d3M9eGgAKCQoHDS0dZOsaAAoSCgcNwxL+vBoACgcNHdzPXhoA

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25844)
Category:	downloaded
Size (bytes):	26698
Entropy (8bit):	5.228730267375416
Encrypted:	false
SSDEEP:	384:4dlTLzKk/LK0bODlFPRhbFld3T6oeUNt5Sj6jUEVKoTg8j3+zPPxD:4/LXy6A5w63VKG3+zPJD
MD5:	5F76DAE4C765B07735E8162CFB6E56EB
SHA1:	80A49F39D621840F7E83B96DAC3A20ABC9F8D242
SHA-256:	C4B82E0483FD6800C1F526644A9485BE39D1B030997F5699A4E252A7A000665C
SHA-512:	66A9D9117A317ACA9EDA2AD5A87B3E9C55D32029D4C4F67C504F4494DDD92C81EA15D90DE4869953AFB2769B18C60AF01B142BABE58AC7FD2AAD3115C1690FF9
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/ScreenCaptureModule.js?Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDID=partnersatbooking
Preview:	./@preserve.Version 2.10.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(e){var t={};function i(n){if(t[n])return t[n].exports;var s=t[n]={i:n,l:!1,exports:{}};return e[n].call(s.exports,s,s.exports,i),s.l=!0,s.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,ge

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11709), with no line terminators
Category:	downloaded
Size (bytes):	11709
Entropy (8bit):	5.434669006077877
Encrypted:	false
SSDEEP:	192:NzVLGVm1aAVLi03IjbQO3ceN4MahHhS4psWB2ZuBUhmXBRAKdvi:NpLGVm1aALi03e/4Msha/8XBRJ4
MD5:	2885FEC5FBF3A9E77DA4BF6AC7838469
SHA1:	C10928FD9A50458024678A435D929052DB47C78F
SHA-256:	84CC7C5D44516D6E6564BDB74456EDF2DF2385F8B6F21B4DAEF362C23D6CE990
SHA-512:	3BBBFCB5E6F02BDB86FA36B6412AAA45F4688E1499CC1D985487FDEE1553DD9B8BC2E56DE9710E466CF549E1F395D46F3A406BF4845F674E69E8C8A8CDABD336
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/libs/privacy-consent/releases/2.1.55/customer/cookie-banner.min.js
Preview:	!function(){var n,e,c=!1,s="C0002",d="C0004",u={analytical:s+"%3A1",marketing:d+"%3A1"},i="%2C",a="bkng_wvpc",t=(-1<(n=window&&window.location?window.location.href:"").indexOf("/")?n.split("/")[2]:n.split("/")[0]).split(":")[0].split("?")[0],o=/booking\.cn/.test(location.origin)?"booking.cn":"booking.com",r=t&&t==="www."+o,p=/\.(?:dev\|dqs)\.booking\.com/.test(location.origin)?"account.dqs.booking.com":"account."+o,l=31536e6,w="function"==typeof XDomainRequest,C=function(){var n=document.querySelector("script[src='privacy-consent']"),e="3ea94870-d4b1-483a-b1d2-faf1d982bb31";n&&n.hasAttribute("data-domain-script")&&(e=n.getAttribute("data-domain-script").trim(),r&&"87b85d0d-3ef2-4e5f-8f3b-5310072d545d"!==e&&"f2c56a5c-067b-4461-b2cd-c837c9f13afa"!==e?e="3ea94870-d4b1-483a-b1d2-faf1d982bb31":"3e90b6d8-de01-4c76-bf9c-161744d4f2f3"===e&&(r=!0));return e}(),_=(e=document.querySelector("script[src='privacy-consent']"))&&e.nonce,f=window.hasOwnProperty("otStubData")\|\|C.endsWith("-test")?"":";

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53979), with CRLF line terminators
Category:	downloaded
Size (bytes):	228783
Entropy (8bit):	5.652449649941862
Encrypted:	false
SSDEEP:	1536:OoCeX3LDj+GMGzwc+0uD6rAONKtWtMxW8AADbfkVNUqdY9SCaP26PFsuiQuyS+VC:fRX3LDyGMGzwc5rtAD70n+EcjcF0yjY
MD5:	3853FBFA7BD3B54C9CC9EF1D81F8AD82
SHA1:	B4A4405F340CBF0FF2E46AE29B26DD9A2D74DB00
SHA-256:	DC6D96B5B7FE119543B0D6417286A973EDD65480913BB2BDF9EDE55CFE433AB2
SHA-512:	3B593DCC48D63289AAB422AC8A396F0AD30B790AF46E47DB5DF18C0E73EAF362D9A80983098049834F3C1CBB428168F044DC078E9E09AD051D206A295FA4C9EF
Malicious:	false
Reputation:	low
URL:	https://cdn.mouseflow.com/projects/b18d32a2-ec35-41cf-9425-b945bb4c2fa5.js
Preview:	//disable autotagging of specific UTM parameter..window.mouseflowAutoTagging = false;..window._mfq = window._mfq \|\| [];.. _mfq.push(mouseflow => {.. const autoTagParameters = ['utm_source', 'utm_medium', 'utm_term', 'utm_content', 'gclid']; // Removed 'utm_campaign'.... for (const parameter of autoTagParameters) {.. let value = getQuerystringParameterByName(window.location.href, parameter);.. if (!value) value = getQuerystringParameterByName(document.referrer, parameter);.. if (value) mouseflow.setVariable(parameter, value);.. }.... function getQuerystringParameterByName(url, name) {.. name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]');.... const regex = new RegExp('[\\?&]' + name + '=([^&#]*)');.. const results = regex.exec(url);.. if (!results) return '';.... return decodeURIComponent(results[1].replace(/\+/g, ' '));.. }....});....//remove UTM campaign parameter per client request..function reconstructQueryString(excludeParam) {.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57572)
Category:	downloaded
Size (bytes):	588902
Entropy (8bit):	5.397759573047319
Encrypted:	false
SSDEEP:	6144:MEcYROipT/Nae/6TduA2a2b242g3iNXpLqSWTRH6gze7moTQaSoTQHA9nQtkAn:MXYMYFa9mhSDk5h+19n6
MD5:	518F3CE7ABE31649A229AE2BD8A51186
SHA1:	709442892EFB0721B1570FD86E64A35798AFED10
SHA-256:	7B048D5389A1CD8E6267A7C432AA98D306325D5F0E83B2580CC0474E72C3EAFA
SHA-512:	E7D11D1A5967ADB9BE8A32464FCA4FF42391FC2F29CC6074B9B1B180DA03100546130E6B879543C01FA118D7BD5A0686C0A18C5E1B8D01C38F5908C367AC5C6A
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/js/main_cft/e77ceeb677e7749eed78fc0ec1e617c3e5c210c2.js
Preview:	var _i_=this._i_\|\|function(){},_r_=this._r_\|\|function(e){return e};function calcage(e,t,i){return _i_("3da:f8784014"),s=(Math.floor(e/t)%i).toString(),LeadingZero&&s.length<2&&(s="0"+s),_r_("<b>"+s+"</b>")}function CountBack(e){if(_i_("3da:732c2356"),e<0){if(document.getElementById("cntdwn"))return document.getElementById("cntdwn").innerHTML=FinishMessage,_r_()}else 86400<e?(DisplayStr_days=DisplayFormat_days.replace(/%%D%%/g,calcage(e,86400,1e5)),document.getElementById("flash_days").innerHTML=DisplayStr_days):document.getElementById("flash_days_wrapper").style.display="none";DisplayStr_hours=DisplayFormat_hours.replace(/%%H%%/g,calcage(e,3600,24)),DisplayStr_minutes=DisplayFormat_minutes.replace(/%%M%%/g,calcage(e,60,60)),DisplayStr_seconds=DisplayFormat_seconds.replace(/%%S%%/g,calcage(e,1,60)),document.getElementById("flash_hours").innerHTML=DisplayStr_hours,document.getElementById("flash_minutes").innerHTML=DisplayStr_minutes,document.getElementById("flash_seconds").innerHTML=Disp

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	downloaded
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202404.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (559)
Category:	downloaded
Size (bytes):	198935
Entropy (8bit):	5.465964409509176
Encrypted:	false
SSDEEP:	3072:xCD1necoktGzsFJdNekqF4Cr3u7E5GOZVOnH2vrWF+PyhMBeEkVGWie2R85ynBFh:IDbk9rWFkBeEoGWie2LjFV
MD5:	2C8EA689EECA9412AA8DAC38941AABDC
SHA1:	144809ED0FA9764FFF07F99DBFD413DF1E95184E
SHA-256:	CF2998333F5129C81ACEE26E6611A4730BFC4B38D6F9E060EAFFEB03465C6926
SHA-512:	CA72D9CECCDA27A3A30CE48B2F2462665B8F584A3810A342588A6709A39C5129F63473FA8009A7274C8DBDF00D718E9F394BE409D8F1E16E66FFBE18E8FA4D0F
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/jfe/themes/templated-skins/qualtrics.2014:null:7c063f083dbda025570e21add043806c3cfff96c/version-1712408860191-ab1b9d/stylesheet.css
Preview:	#css-trigger{font-family:jfe !important}.#SurveyEngineBody{-webkit-text-size-adjust:100%}..Skin .MC .MAHR li,.Skin .MC .SAHR li{float:left}..Skin .QuestionBody .TextEntryBox.TextEntryLarge{width:600px;height:200px;margin:7px 0}..Skin .QuestionBody .TextEntryBox.TextEntryMedium{width:300px;height:100px;margin:7px 0}..Skin .PGR .DragAndDrop .Items ul li.Selected .rank{display:block}..Skin .PGR .DragAndDrop .NotSelected .rank{display:none}..Skin .PGR .DragAndDrop .Items ul li.Selected:hover{border:1px solid #ccc}..Skin .PGR .DragAndDrop .NotSelected:hover{border:none;padding-left:0;padding-right:0}..Skin .PGR .DragAndDrop .NotSelected .rank{display:none}..Skin .PGR .DragAndDrop .Items ul li.Selected .rank{display:inline-block}..Skin .QuestionOverlay{position:absolute;top:0;bottom:0;left:0;right:0;z-index:10000;background-color:#fff;opacity:0;filter:alpha(opacity=0)}..Skin .ResponseSummary~.QuestionOuter.Matrix .DL td.last{width:50%}..OrgHierarchy{padding:0 20px 20px 20px}..OrgHierarchy .O

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65362)
Category:	downloaded
Size (bytes):	147452
Entropy (8bit):	5.278640994442029
Encrypted:	false
SSDEEP:	1536:YRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKAIpg2L:4HNwcv9VBQpLl88SMBQ47GKzjbWykWJR
MD5:	6ECDCBFC2743150B907283C1861D19EE
SHA1:	81760F9CD668F1D6E7FA12F8FFB9AFC77F528B68
SHA-256:	77C4DB8DDBD2F57F9DD1ACFCB74ED71C891FF39ADFBDD2902958B457A63FC9A3
SHA-512:	608D34FEF2E2162E3BDEB6FB435612577DD2D565C6D44F105AE7977093689A2820B831DA1DEF0ADFB23398F2A14A4A80EF9EF53A9DACA1EECFA21D6A7C2E9AE9
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA
Preview:	/* @license MIT https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt /./! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttri

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 11392, version 1.0
Category:	downloaded
Size (bytes):	11392
Entropy (8bit):	7.963368466271997
Encrypted:	false
SSDEEP:	192:pIKJAZPphaoB5CHpDPuSMAnNMjpLfY3jCo7SOcV9PjqBlj6l8YTrXYMGI5:pYxElNPnMzjJIjCizcVZGBlA8PMGI5
MD5:	8D5D8BFE30885B0CCBAEB7C4B90ED145
SHA1:	29972E4BC7A005AEACC4AD6590C50522414EBAC7
SHA-256:	4D106C1974DEF1C1FFF3D3CD3ED3F6D42EAFA1888A036120F2EEFDA9197A5E22
SHA-512:	0CC6671124F579257420AB18F7F9BCDCE6AA165172DF81E417C3DD978E41DBF2ADE34DA3E273F5E8813751520FA8EAA6FBC38E62694DDD99C27423CB3E4AE031
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3
Preview:	wOFF......,.......N.........................GSUB.......;...T .%zOS/2...D...B...V6"H.cmap.......x...`...glyf......$G..>D.x..head..'H...3...6+.l.hhea..'\|.......$.r..hmtx..'....C...(#V..loca..'.........g&Y.maxp..(x....... ....name..(.............post..)........S...x.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d..8.....5.i...C..f\|.`..............08<`\|.....b~....A....8.p..x...gn.@...E.M...{.Uw.r..?r....c......]..@..W)........Z{.No{..W.......S.5..h...E...]t.S..G.~..d.aF.e.q&.d.if.e.y.Xd.eVXe.u6.d.mv......q....q...\q....q...<.........\|.>.....P..w.r.........,.-;.R6.........7.Ce_`........``..;.....v,....d`..;.....v...]..b`........v-.....f`........v/........0.G.=..I`O.{....^..2.W....M`o.{....>..1.O.}..K`_......~..3._.m....d..x..{y...`}U.U.JRUI...Z.>,u.>..n.`w....6`.6....i.'..0.....&~..0....@.2..#.CHf..H2..f&0I.d.q......e.......m........O.KQ..a.P.....(...P..2.T..R.....Q..2^. .x..YP..C.ZE..^.s.\.....[...@z(...U.j...33<...o-.......^Q.gc.$.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65397)
Category:	downloaded
Size (bytes):	1094754
Entropy (8bit):	5.13665296450647
Encrypted:	false
SSDEEP:	12288:OPi3aA0dI1gJHzKXJ82V6DAtBTP8If1cE/UqY6FgvuI180+AMw60FJIW9hDr3Z/Y:OPiYIgHsJtBTP8KAx60UYD7Esi5tB
MD5:	DE3EA963C2EAC42061592739DE5B9570
SHA1:	C9613A5FE6758BE08077E924ED82F56DB75B07B6
SHA-256:	6DC3A4078532782037480A37246517F225AC0D71F9970123A49C4EB56D4223A3
SHA-512:	D0431ED2F806C504BB3CACEF69DACEF0BDD9C29C5AC8F93152EB5B97E578E11521A7813C5BC60CB0F7E45DC2AA63A5BFAD0203B3CFA10AAB66F3A209639C4D3F
Malicious:	false
Reputation:	low
URL:	https://d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com/d8c14d4960ca/a18a4859af9c/challenge.js
Preview:	/! <!-@preserve AWS WAF Integration Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-api.html>--> /.var a2_0x2380=['Franklin\x20Gothic\x20Demi','Chaparral\x20Pro','Minion\x20Pro\x20Cond','prfOid','authorityKeyIdentifier','parameters','publicSuffix','Bodoni\x20MT','input','Colonna\x20MT','encryptionParams','PRIVATE\x20KEY','sha512-256','Britannic\x20Bold','Access\x20denied.','input[type=\x22date\x22]','EnvelopedData.Version','4dkpJhv','\x20(External\x20or\x20Instance\x20of)','FontCollector','flashVersion','recipientInfoValidator','true','Cannot\x20read\x20encrypted\x20private\x20key.\x20Unsupported\x20key\x20derivation\x20function\x20OID.','Minion\x20Pro\x20SmBd','SHA1','1.3.6.1.5.5.7.3.8','PKCS#12\x20MAC\x20could\x20not\x20be\x20verified.\x20Invalid\x20password?','2.5.29.28','getElementsByTagName','Unsupported\x20challenge','2.5.4.11','white','deltaY','color','lastCollection','251444CUudwg','messageLength64','AlgorithmIdentifier.algorithm','certBa

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	95450
Entropy (8bit):	5.791594097344841
Encrypted:	false
SSDEEP:	1536:xWVKHkyyM8/CUVihlaltlvmtJzQS/Lk0G3wUsQBkhDlsSlY0vI16qIBVVG:MV0yZCxhlalSF/Lk0G3wUsQBkhDl1YVj
MD5:	01BFAE208BA21F96B1AEA3E1DB5FF9AD
SHA1:	8E4913D562D14B22DA1258A960FDAF2E538F249F
SHA-256:	3DC61B43BBD540E1DF282CEDA30CF25C3B71E6FF80C689C57496C3300FAFAA8B
SHA-512:	8C9D2A83B1FF728495349F6D60929BBDA02C3D26A68BA6AE78BAB9E62BCE8ADC0471FAADAB751E177C59BF5430CCD93455FBCEFD3B1F71173CB16A18F451404E
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/bg.json
Preview:	{"DomainData":{"pclifeSpanYr":"......","pclifeSpanYrs":"......","pclifeSpanSecs":"....... .......","pclifeSpanWk":".......","pclifeSpanWks":".......","pccontinueWithoutAcceptText":".......... ... .. ........","pccloseButtonType":"Icon","MainText":".......... .. ...... ......... .. .............","MainInfoText":"........ ... ......... ...... .. ........ . Booking.com.","AboutText":"...... .. ........ ..-........ .......... ....... ............ . .......... .. ......... . ...... ........ .. ......... . ..............","AboutCookiesText":"...... .............","ConfirmText":"........... .. ......","AllowAllText":"......... .. ...........","CookiesUsedText":".........

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18056), with no line terminators
Category:	downloaded
Size (bytes):	18056
Entropy (8bit):	5.4905315628033735
Encrypted:	false
SSDEEP:	384:MiVF7ArqMijkMRksM2kWlTE/JyFe2nEod8YCzgbER90bzIlRaRIX3u3pb7qqVspS:LH7AwlTEhyFe2nRdpCzggR9kElRaRRm0
MD5:	2A3D897945ADE4CF51DACA348A3CB9C1
SHA1:	A50D477A6F22A8965A135C129FBE632E5E8C5A16
SHA-256:	EFC424B0A8011230806828B932168F2416E64A900ACB171844EF9D4EE2DB51E9
SHA-512:	B3E55B5F11C43F1E7C13838F9EFE46264771CED310D1A12FBAF1593BCC516349289CA13401E066440790518AE89C89C3E657F73D06CE16F3CA456C8014D0401C
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420-e1a675876deb028268b2.js
Preview:	"use strict";(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["react-chat_src_components_Carousel_Carousel_js-react-chat_src_components_MessageButton_Messag-020420"],{5350:(e,t,n)=>{n.d(t,{A:()=>a});var r=n(257);const o=n(9445).Ay.div.withConfig({displayName:"styles__Carousel",componentId:"sc-os329e-0"})(["transition:all 0.3s ease-in-out;"]),a=function(e){let{children:t,carouselPosition:n,onTouchEnd:a,onTouchMove:l,onTouchStart:i}=e;return r.createElement(o,{onTouchStart:i,onTouchEnd:a,onTouchMove:l,style:{transform:"translateX(".concat(n,"px)")}},t)}},2905:(e,t,n)=>{n.d(t,{A:()=>c});var r=n(257),o=n(5360),a=n(8498),l=n(1714),i=n(8389),s=n(1741);const c=function(e){let{name:t,label:n,control:c,validators:d,register:u,id:p,value:m,isLast:g,inputType:h,...b}=e,f={};d&&(f=(0,s.G8)(d));const x=(0,l.A)({name:t,control:c}),{ref:v,onChange:y,..._}=u?u(t,f):{};return r.createElement(r.Fragment,null,r.createElement(o.hl,{htmlFor:p},r.createElement(o.eo,Object.assign({ref:v,name:t,type:h,id:p,valu

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26708), with no line terminators
Category:	downloaded
Size (bytes):	26708
Entropy (8bit):	5.187654394328841
Encrypted:	false
SSDEEP:	768:RBnfliM5bdz2LYnoszell/WePOCaRmagRbf3AjW/yJo8xuAKep0Axz:RBnNiUdz2LYnowklrOCaRmagRbfQjWAp
MD5:	A2B9BC5819AA624C49A0036B660AB72B
SHA1:	F1A035EBD4B7697E6169EA85951E7237A6AA1E0C
SHA-256:	5D1B3D626EF2FE0A08F49F3EEE2C5A769C36DA469E7F8E7E557658EFFA3DC81A
SHA-512:	F3FDBF6986BA6A62CAC9AFB4EF8955395BF0F549746F96B6A3CE28198F895353F6F6A9328B8FA7E57B0A8154BED33BF78CED9839397390A8E1FD2C8D468A3A73
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/shared/me.7d4a349527f92fc578d9.js
Preview:	"use strict";(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[693],{9290:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.deleteEvents=t.setEvents=t.setModificationDuringClick=t.isModificationDuringClick=t.isClickInProgress=void 0;var n=r(4476),a=r(3478),o=!1,i=!1,u=(t.isClickInProgress=function(){return o},t.isModificationDuringClick=function(){return i},t.setModificationDuringClick=function(e){i=e}),l=function(){o=!1,i&&((0,n.getWindow)().requestAnimationFrame(a.startLoop),u(!1))},d=function(e){var t=e.type;o=!0,"mouseup"===t&&setTimeout((function(){return o&&l()}),16)},c={passive:!0,capture:!0},f={mousedown:d,mouseup:d,click:function(){return setTimeout(l,0)}},s=Object.keys(f);t.setEvents=function(){s.forEach((function(e){document.addEventListener(e,f[e],c)}))},t.deleteEvents=function(){s.forEach((function(e){document.removeEventListener(e,f[e],c)}))}},107:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.rerun=t.simpleRollbackAndStop=t.stop=t.start=t.ro

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14826
Entropy (8bit):	7.985905181758237
Encrypted:	false
SSDEEP:	384:pZ9qYmHNf3cXzDrizA7BcN8Rem2IEs2k5W/+Tu7WT:p4HNfWzD+UlcN8RezFg5t1
MD5:	5D4318F103EEACF6A291E2AFE68257E4
SHA1:	6544605AD29D5287EC04FE9C4411A824F7464E9B
SHA-256:	385BD16B54F7F9BF7122348988E364EBF2721C5DEB28A450915B5C92BA3E976E
SHA-512:	4F490551064F5ABA28D526C01EBA4E7297285A486B62E301FB944D4EAC409BDCAF8B16459FC5B900696166B619506005E5203D75C9431FD1052027942F290B6E
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb
Preview:	RIFF.9..WEBPVP8 .9...........>...A!..a...a(..._..Q.......w..._.?(..}...._.\|.....././....g.........[...'......w....z....s.....?.'......B........'...........w....._....+=..O._.C...>Y./.?........,.O.g./?.....'......e.....?..n~..W.........>B?..U...G.o._.O.......?...............=.7.W.....^......W._....._......../...o......}...O.....?K.....G.....O.......Q.].......O...........s...../...?.S...U(6.M..~.....9@My%.U.....r...I../..>...hC......D].y.kv.L...U{..E...@...........p.c...%..l.......BT}bq.....a...7....7/.z..G.OO"D4....:-8...V....:.o&....m.0x....).Eq\...dU..g{5........5.R^..V.P?...!...u.H....>.I..3..>.....u4O./U ....(..sAbv...{........NC..T.^8h%..Cf+.....o... 'fg....~......w..C..)..o..H\..GW..Zt9.......BY......A^{..}\E4{....o..u0..d."* v.......P)},..dM.;.7...2.2.(.L...s...-.....V@.o.Z...!W..j_.c...>.M+\.k.G ._.m..3..(f....=X.`f.>...`.I83._lvi&.g......\|............6....`!.../..g.v$D;.1K.,C.9...[.Z.g"..m11........*.t1...i.....w.#."_.>..{.=

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	522
Entropy (8bit):	7.314345187121278
Encrypted:	false
SSDEEP:	12:6v/7+1XO8yKb4PHlMb5VrEdliObT7fCg9FGhlt7QN:bytPFaEd8gPfCguhltm
MD5:	925EE33071EF712BDA608EF3BF50EF13
SHA1:	C7D8844E68D5C9BC0294DC5A69F8550C6D6D39D5
SHA-256:	996B0E99FCC7A553EAC6F51569BE5429B1BF8C071A708289FAB808D7660CF74C
SHA-512:	5D62BDC1B38E194C0D2F4B7591E4C06F4B3B1FAD5652694E369F553CDE7D251CDBEAA6EA8C61548A6F8B33BEDD8832EC221E01AE0A4A25712C64018DD39C37C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`......~PLTE..k..k..4...DZ."=.......s..`..0x..j..k..(.....F^..:~.g.....'C......`r..ex........5..........,u.@V.....'B.Uk...Pd..u..Uk.D......tRNS...........Zd.../IDATH...Ir.0.E..`..G...0...........a....t..(hG8.DL{c>..W.................!. ...8....%. ..e.C.@..$.C.@.LR..`.N.%..}.....sAT.V;d.> .O...#.ZJ..Y.A...-9..}O.. .....X6.,tFb.n..].K.l..SJ]/Z3..xYW..1&...W.1..Z.\|.O...y...=....P*.......1 ?...@h.......rms..!..C..=.. ....!G.^Z+.=......q7.^v.(z....E.....L\|.......IEND.B`.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.057426088150192
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyY:YGKed2pHD5YEl5k9zyY
MD5:	B04CD3F8043EF04F417D4B0E4BCBBC03
SHA1:	88F259A4AE3045409B3657E7D7A791D321BA9DCE
SHA-256:	59E58524340CD7AD353BE010374B124C242FDDE10A0ED41047FE2FD4BB9E5A2E
SHA-512:	A285C493B939D2A165D80F87FC830F5D02AFCC7A8EA1C5CAF9CAA87ABD286F1C98598FFD83023044BDB23D344C60EEF6A6C4BFEDEDD42A4297A0AC09E22FA5B2
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64779)
Category:	downloaded
Size (bytes):	104320
Entropy (8bit):	5.418102833090534
Encrypted:	false
SSDEEP:	1536:4TfmxUHKjYkp+ugJzNDor4bMog4JBZa1PqyulHBYHH/R7XcZ5zK090MuDKq:4TYYNutHdR7XizKm0MQ
MD5:	7E294A85E4CF60FA52292408021A1491
SHA1:	C523BDC033AFAE2AE88320A969B89A8932C242B8
SHA-256:	DDFF91EFC1BE8C97F198FE2FC83AC0150C1BB07A8E06B07F3A4A4DEECE76A7A8
SHA-512:	D59177593A1A954E5476EC03F76C1A74DDD54BBEFE3773DC369599C843A4F0AE58FC24F4A79CA2067A44E46AB9F95FCEE6449866172E6AC3BBB68B57C5C78D1B
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDID=partner.booking.com
Preview:	./@preserve.Version 2.10.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,ge

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2864
Entropy (8bit):	7.9096660912359
Encrypted:	false
SSDEEP:	48:BUmQqjTH2QLMcC3qTyZ/r0LUS2jc4vGq8jHd9NlFYJyE3V5GcT58qiOk:Oqjb21nayZwAvGXHd3fYJ3F5GcT59i5
MD5:	A982B081C8D4737AAA9DCF8CB6A83332
SHA1:	25540F49987CF32D22590165926D5E96F34D0265
SHA-256:	9554F7317F081102A458CDD6C56D141CE3DE08DDF963116F6202A09B4EA5C05D
SHA-512:	8850C0E26A7F92C94F87A85DAF1F1DDA1BAF655D2597B87184EE14F3322C1607F6DF681645230D4E48B970FF512035CF87A1B57DAD6F7C8FFA83CF4C18436FFF
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z
Preview:	RIFF(...WEBPVP8 .....3.......>...A....+..a,m..g\|......)... .n.....?..).9~.{.......\|.?H...n...........o..j.Q..?]=.?..Y.....?..................~....l^_.k.6a.........>._..=...Q.2.>....`.wz?.z......>...O......@\|w..............0...[.o.....?..._.....k.5.[]K#..r9....... .r.XFFf..c72N..:8.........b.?>Yd.%..)P<....:.gH.8i..TfSc.......y.m..8..].Bd;_\.i3?.....0x.V#sf-S.:.)..].8.lQJs`...Uq 2..:..x..?:..{...d 6.C..V.Q.[....~.......;...=m}.ok..S....h.K..8.......)}.!J.W.....@.`,..0^...j.'..p...O...$..57.WBo.....X...lX.........1.>...u.....g..7.0..".#.....dA...cU...p9..?....{..s&..AV?....2...9....,..s..\....z^.hMNZ...8.....!..xO"......+..H....B.y..m...C.'......2.......]6..^...ju.ZPQ..Z.P..$q....i...9..N.u.......VQ$.......`....~..5.f+.../.9.C.....'..Q.K\}...>.}D.l.e.. .........a.....<...^...O..i...He..+......%(.F...H...)...^. n.&.w.F2a~.eI.F.dC.m.).9....a..s3.......:..........Y.(q.c<.n..C.B'....rr..fGF..W.Fw=\`Q'5~".+.a(.S.#R%.s..q:?4.N......Z..:...,a

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65362)
Category:	downloaded
Size (bytes):	153612
Entropy (8bit):	5.350647176065889
Encrypted:	false
SSDEEP:	3072:4HNwcv9VBQpLl88SMBQ47GKUWjbWykWJR:4HWK9VC78UBQ47GKdWykWJR
MD5:	CF4A39587C9FC4C8C2A758AAD46423F1
SHA1:	C3F45CC9608D1F4AE2D4C3A3628BC3F7456E7901
SHA-256:	AE800A41DE9BFD66087BD01312ACD11A8FA41406A202DAFED48C2ADCB061AE39
SHA-512:	739BC7A266243D1EF5712C9AD5481896D37CB7C52137519E7005BE9654C977ADFFE86C0104BCFF6ED0B89CB6D0EB66E6B912C02F58C77EFBBDC786FDAE1A9581
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_J-ns2p5_JxZ8i6--J9QPWWQZl2yX7MLYJFdUOLE4yxk.js?scope=footer&delta=0&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license MIT https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt /./! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttri

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9744), with no line terminators
Category:	downloaded
Size (bytes):	9744
Entropy (8bit):	5.48944738290146
Encrypted:	false
SSDEEP:	192:jLkdu0NVSo1eS0dBoqGDiN9b2Bql1saDi97ByKrAqW7iFYUOt22812oz6J8hLeSP:jQdusVSo1eSCoqGuNx1saDi97BfrAqWW
MD5:	7195F60DED6400C64A12E871395B6B82
SHA1:	94AAEF127480B92F7D561540725E54D8034E1A4C
SHA-256:	C8CB0003D4454CA85232FBC283A3BEEDEC1253BF70EB1540284E238D8838785B
SHA-512:	A7FFB4ABC34EC42A71370872F1BDD5BB1C2F61DA526F76468057668E0F917F661B373BC911A3DF03F44A1C7AE0DD40513B5D70D92F16CF0575CEC99D8DAFD196
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/js/sp-on-maps_cft/1d69e13e40d03fc59f58d76b31735d5d8c37416a.js
Preview:	var _i_=this._i_\|\|function(){},_r_=this._r_\|\|function(e){return e};B.define("utils/bind-all",function(e,t,n){_i_("fe3:ca20d562"),n.exports=function(e){for(var t in _i_("fe3:fe723711"),e)"function"==typeof e[t]&&(e[t]=e[t].bind(e));return _r_(e)},_r_()}),B.define("component/sp/map-card-component",function(e,t,n){_i_("fe3:a635e494");var a,i,o=e("utils/bind-all"),s=e("events"),l=booking.env,_=booking.debug("sp_on_maps"),r=B.jstmpl,c=e("et");l.show_rocketmiles_av_frontend&&(a=e("rocketmiles-on-maps"),i=e("rocketmiles-api")),n.exports=e("component").extend({init:function(){_i_("fe3:f68b7edc"),o(this);var e=this;_.log("init sp_on_maps"),e.badgeTemplate=r("loyalty_badges_maps");var t=e.$el.attr("data-loyalty")\|\|"{}";e.loyaltyData=JSON.parse(t);var n=e.$el.attr("data-has-rocketmiles-extra");e.hasRocketmilesExtra=!!n,e.checkExtensions(),l.show_rocketmiles_av_frontend&&s.on(i.events.SR_RENDERED,this.updateRocketmilesExtension.bind(this)),e.bexContentData=JSON.parse(e.$el.attr("data-bex-content")

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	4.602845537956881
Encrypted:	false
SSDEEP:	384:jx4444GRmwqNHsQIj+ksvfevwY5bbbbbbbbbbEW:N4444GOs3sY5bbbbbbbbbbZ
MD5:	6535271F9636F6408B0C3BB15400085A
SHA1:	F815AC8D98C2C76B196564536697C2E6A01B5E73
SHA-256:	9D6E7D6843C0B17B992FAFA510BAD5C7D2550BC329D3AA724809645FEC1DEE00
SHA-512:	E7E8F903D6A5D0307F68E8556B8AE6F444DAB5232B24B238965358CE627FD1E1C60C11FECEC38AE407062C4AB0149BA40F22CD7004B633E7A72E1872FE57CA54
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$.......................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...4...4...................................5.l.5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5.P.5...........................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5.D.4...................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5..5.[~3...............5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/1px.gif
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	7.756974676688925
Encrypted:	false
SSDEEP:	24:zn1XTOSh5oncvg3/pzi9NUvZi/GZu4yVEb6cgfes54AVi8TgBgWPPKWfW:zde/3x+1OZkEbhgft5TbTgdPDW
MD5:	6384185CBE9A4F106857A3CB85CAEA98
SHA1:	0E31A4FE2CE98A8B4FDA60687AA71079B4D3A95B
SHA-256:	5839F0330821CF08029BEDDD6D248170DA1AF16CD7AFF253E7BD075D591F5D42
SHA-512:	E9C784DACADEAB6C3FAD53729701708EC5C21670086AA981953FF2D44DFB08BE13134707A4E7405826CC0D11C68F3AECFD6601AF910C537F6E14AF68175B50B7
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png
Preview:	.PNG........IHDR...O..........w.....IIDATx.....:..sl.g.ym.{ll=.m.m...f^.A.1zhg.i:...ZM..5@.YF.................o....hU9......B.s.h....<......=~........b..'.....5.l`..V...z...b5...E.........8.........f.C[.lS..z.IcI...X..r.:......x.Y.....}+.h^G....3......6.Ni..........G.......S.....W.Is.I..S.`.e..)p.hh..T....`...Q.....V......".}.X8..v........k......84.....-9..d.....lq....FuA.zJ5._..@cX.../....a..y.....;.r.>Lur[.w......O._~..:h+H..>.y...p...4..{.\|aBu..y].....a..w&L0.Y.e..}U...'.s...=.......n..^.r...+].I.-G...r....8].FkR.'.......u..e.c..w..%@.}.e...#..K..w..Ak.[@.R..gY.u.2/..y.Q.n.O.......]y.n..pk8.s7.......y.:..F...M..h......y....`..O....i.zqp..<........Zp..h.+..@...;/.#...0..u..N...v..)..6Oq.d..n<.M../.....0....EMn...3..=Q......r..../....8...'..wv/.w..'MS...[..........<.y}...4.Nm....qk.9d. n.Y....yZ1.?..!..Dg...m....;.N...A...I3.gn.]G.A[.w....7.6Om.........zD....v....._.D3x.v...6.]WR..7........=.."4.....\|.......:...a...Z....~..\..~

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52208)
Category:	downloaded
Size (bytes):	52247
Entropy (8bit):	5.268456730763263
Encrypted:	false
SSDEEP:	768:Wjp+L+sl7x97+om+oCICTUOD3cQ3F1C+SqImCjL/hQBf/MEVgnyzB/c2OiwBaGcj:Up+b0GUOLMPLJQf/CEB6iwOj
MD5:	99714D221DF650B50DA3B7BF97E2987D
SHA1:	493B74178A63429FFF2AAB081B3A1CA73D362085
SHA-256:	8AD11C4CB079BBA93156727270F510292EEDCC0716C6F21725074A59EC8B9B96
SHA-512:	2520851E12838A54D14577BD6A4FC5276F1D729389C7341A09DDD783C33217A5C58CE0E1CBF60C08CF075B44C50DC90D1D651EC16FA47EF8629F8DE12AD27103
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;function o(r,n){try{var a=e[r](n),s=a.value,u=s instanceof t;Promise.resolve(u?s.v:s).then((function(t){if(u){var n="return"===r?"return":"next";if(!s.k\|\|t.done)return o(n,t);t=e[n](t).value}i(a.done?"return":"normal",t)}),(function(e){o("throw",e)}))}catch(e){i("throw",e)}}function i(e,t){switch(e){case"return":r.resolve({value:t,done:!0});break;case"throw":r.reject(t);break;default:r.resolve({value:t,done:!1})}(r=r.next)?o(r.key,r.arg):n=null}this._invoke=function(e,t){return new Promise((function(i,a){var s={key:e,arg:t,resolve:i,reject:a,next:null};n?n=n.next=s:(r=n=s,o(e,t))}))},"function"!=typeof e.return&&(this.return=void 0)}function t(e,t){this.v=e,this.k=t}function r(e){var r={},n=!1;function o(r,o){return n=!0,o=new Promise((fu

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	642
Entropy (8bit):	7.485255326893554
Encrypted:	false
SSDEEP:	12:6v/7+FO+DpBBzM22sBdG4llNTJ6yHfbE8/jALtcq4PsesuZtC6mN:5tj2sBdpXlHfw8chcqgsCZxmN
MD5:	41A0E840AA47C87E19D2BFE0B1231C3F
SHA1:	B5F588CA91FC9E67B5EA658C5FF943B0639E57B9
SHA-256:	A333D02EEDDE7A4DD8643D58B0EA7947268A1762F35F517EB6000EC9E7FCFAE8
SHA-512:	8578A788F605BC27B4326EB38417A71E45A05AC885B971C49AC3C7D23F6DDF747F69F2CCF3DF0C461E1C90268247D6959F248D3001518F56888F6D6B8C1CDD2E
Malicious:	false
Reputation:	low
URL:	https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/us.png
Preview:	.PNG........IHDR...0...0.....`......uPLTE..0<9p..0.'@.....0<:p.s}TS.....a_.HFymk.IFy.;I......yx....HGy..........Wd.........&@...mk.......G^............l.........tRNS...;%j.....IDATH..a..0..`..5..KiA8..S..O.y.....h><..4.......c..0..Pm.v......i...iuo..;..X..H'7LVM.....{..5zM.{.B"-4r[O..L..fw.hY..G...\.@h.U.kS...d.2`{...]i.....Zt@....t.,.z..W..x..........V-lB...S.!...S....U5.....E.+...g..4.....!.?...N..w.7-L[....<j..\|.+r5.u~..a0.<.l..._.h.q..4.....(.>.<.E.I...-t....X.S.77-nX.......^.T.*.....s.m.......~V....Lnz....Y...5......-...\|...{q...'.lN.W.4W]..<.......`!..A......D@...$.....0X.I..1XI.....T....C..@.}....IEND.B`.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 1004, version 1.0
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	6.83404079874172
Encrypted:	false
SSDEEP:	24:0tChrLqdKg+X1t+S9e3YTYeZjlcx/3c1oMZr7MSiZ0LV:0tCRmdD8+SiYMok/3cp0Z0J
MD5:	90CF29AB19DC601F2E5A9F9B3C4898FB
SHA1:	A1A366B0BC23887A1F2645C8F68CB7521706D8E1
SHA-256:	C5550D7F8CC83561C801D3CDC4BB3C1784672CF0413EA79B5B32E890B1558C38
SHA-512:	FE4C726A9176E1D379E48CEBA881FCD7A12CAA38B920604FEE157705F4D7F5FAB7D7F0823D74FA0A3930755A45EA463658FE225B9069FAD99B5566823963A4FE
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/jfe/themes/base-css/basestyles-lfe/version-1678899357872-bbfdc9/files/external-link-icon.woff
Preview:	wOFF...............L........................OS/2.......>...VV.c3cmap...4...<...J...wglyf...p........BQhhead...$...+...6...hhea...P.......$.]..hmtx...h............loca...p.........j..maxp...x... ... ...Tname.......;...m.e$post...........)....x.c`da`........t.....B3.f0b.```b`ef....\S......Y@....0#.........x.c```f.`..F..p....\|... .......,........P.@...@9`$.d0......x.5.A..0.E;`.BP.8e.i..5........Cx...!.......g..3..?s.........w.....C#.BsOD<S.......L]r.#..).S..Z.{@.i....4.@g...5......V...[.....2}.....i.....7E..W.OX:D[.K.0.}Q(.@. .}.._[S#....x.c`d``....'...\|e.fa..[qJ..4..X....D...+...x.c`d``a...0.b32..&..F.m.............j.........H........................x.u.KN.0.........`...b.(}.U7.}.....8r.J=......#..p.~...Rby..7.q...;(.K.=+.2.s.'......W...U4.(\.......p.-8NP.3fwx.Vh.E..s.....+.w...!\CS......p..j......ou.l..7.....:...../l..A..{L.....u..J.l.M.X.9.4......v,>..... .v..yN.1.1D.3...O>d.aM.....".X..>...t..........G.<f..4(&~u'\.&+jK..}PL..}.....]...4co..x.c`b......(..R.....

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1210)
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	5.258297327799955
Encrypted:	false
SSDEEP:	12:UMY+8fuVEGO1wyT7ZYTH9toIRHuxTe7gxyaJRTHx5eTi4Hmr2YLAoCfA0Ixa0YEd:a+NEZWZFuxqU4afDee4GhQZ05VmImK
MD5:	49D03D47BD15DDBEC4926A87821C3278
SHA1:	8D545B020E45D00A775DECA8BCB0A4BBE17C1F2D
SHA-256:	D327ED4B7D3E5878F53B377E35DE67F9A2D9335BD85BE6028C36D3B6B05D4F72
SHA-512:	39ABCD8CB66CBF65282C2CD32BE247477EA6322A32D8E5FD8771254B7FD3F939428CA0462851AF60108BC8FE17CB3BF6769CA45C817859CC27B7E9AAC83801C7
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.body{background:none;color:#000000;font-family:Verdana,Tahoma,sans-serif;font-size:14pt;line-height:1.45;margin:0 !important;padding:0 !important;width:100% !important;}h1,h2,h3,h4,h5,h6{page-break-after:avoid;}h1{font-size:19pt;}h2{font-size:17pt;}h3{font-size:15pt;}h4,h5,h6{font-size:14pt;}p,h2,h3{orphans:3;widows:3;}code{font:12pt Courier,monospace;}blockquote{font-size:12pt;margin:1.2em;padding:1em;}hr{background-color:#cccccc;}img{max-width:100% !important;}a img{border:none;}a:link,a:visited{background:transparent;color:#333333;font-weight:700;text-decoration:underline;}a:link[href^="http://"]:after,a[href^="http://"]:visited:after{content:" (" attr(href) ") ";font-size:90%;}abbr[title]:after{content:" (" attr(title) ")";}a[href^="http://"]{color:#000000;}a[href$='.jpg']:after,a[href$='.jpeg']:after,a[href$='.gif']:after,a[href$='.png']:after{content:" (" attr(href) ") ";display:none;}table{margin:1px;text-a

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65466)
Category:	downloaded
Size (bytes):	223977
Entropy (8bit):	5.361735433214315
Encrypted:	false
SSDEEP:	3072:7NAtCscheWbDYA4MQFWdz0W1S+9D9tJCz7:fszWgA4fgJZZxCz7
MD5:	BE04B851A5C3D08B1C99CA982633C2A8
SHA1:	51E8D2351BE01A893D37D33342FF78C6DA5DC10A
SHA-256:	3B098767055D18F21C7F967F8DDD1F7911B1A10CC8683431D9E8F2F018F48211
SHA-512:	2B0D4734C201D9061A733CA9C6936291669E4DCADA8548FA51C2DE8ECF31278AB45A8F1F46BA676D1048444F4EBEC637182D5289BA316712122F5BB633391C36
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/kindly-chat.js
Preview:	/! For license information please see kindly-chat.js.LICENSE.txt /.(()=>{var e,t,n={8959:(e,t,n)=>{"use strict";n.d(t,{A:()=>r,W:()=>a});const r="v2",a=Object.freeze(["agent","alerts","bot","chatbubble","feedback","privacy","lightbox","nudge"])},2186:(e,t,n)=>{"use strict";n.d(t,{n:()=>a,m:()=>r});const r={default:"'IBMPlex', 'Helvetica Neue', Helvetica, Arial, sans-serif",KindlySans:"KindlySans"},a="\n@font-face {\n font-family: 'KindlySans';\n src: url(".concat("https://chat.kindlycdn.com/src/assets/fonts/KindlySans-Regular.65d6f01a87841a240c37cd04c52f3c2f.otf",") format('OpenType');\n}\n\n@font-face {\n font-family: 'IBMPlex';\n font-weight: 400;\n src: url(").concat("https://chat.kindlycdn.com/src/assets/fonts/IBMPlexSans-Regular.2c412e2f77ae69aa2154613095be7130.ttf",") format('truetype');\n}\n\n@font-face {\n font-family: 'IBMPlex';\n font-weight: 500;\n src: url(").concat("https://chat.kindlycdn.com/src/assets/fonts/IBMPlexSans-Medium.c4877bdfa15aef22d92

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	920
Entropy (8bit):	6.266465771776131
Encrypted:	false
SSDEEP:	12:6v/76H63EhZYYvUfeeTnECABamxvWogDvZ/IbmdSfwdZ1sQ83Iz:3ZYYvUfeyFABUDvZ/ISS4z
MD5:	9E978A98A7F44821484F50FF960CF35C
SHA1:	A6A6033ACFF45C59A28D8953865C02A4EE1941F3
SHA-256:	9AFD59DC0CF67C2BAF372BF7CF482FEBFC4C1722299999DD6BA0A82BBBD4CD3B
SHA-512:	E8F872C11E0845122226ED590372B96FD3BEE8959DD22C82F0883A712FADFA2868353C643DCBFFE907D9A275489C0A076F42F5FD0811316EEF11738DC83C4551
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8k.....qPLTE............@@@+++$$$ ...+++'''$$$""" $$$###!!!+++)))'''$$$"""((('''&&&)))((('''%%%$$$((('''&&&&&&%%%(((''''''&&&'''&&&%%%%%%'''''''''&&&&&&%%%%%%&&&&&&%%%&&&&&&&&&&&&%%%'''&&&&&&%%%&&&%%%'''&&&%%%'''&&&&&&'''&&&%%%%%%'''&&&&&&&&&&&&%%%'''&&&&&&&&&&&&&&&%%%'''&&&&&&%%%&&&&&&&&&&&&&&&&&&'''&&&&&&&&&&&&&&&%%%&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&'''&&&&&&&&&&&&&&&&&&&&&....z.K...ytRNS...................... !"%&')234567@ABDOQRSTUVWXYZ]_adjklnoqstx{......................................................... ..Y....bKGDz8.j...PIDAT.....C.....o+k.$."K..s$.....$..o...{..04..'..........O...S..........o..p.G.v. .......A.0.~h......F[S....X8..\|z... ..=.,..K.h.........Q.J..,g.`<.\...+.....at...#&LD.......8...zt.,.L.;.50.3"">_..Q..B.._n.....j=...~.\.....L..1...s.g..V..^.....H......Z.)h..^....}.P.n.K.$..n..J..}...c[.R. 7.......F.....B.....n.y..rAC...:.....IEND.B`.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	79927
Entropy (8bit):	5.396285912417685
Encrypted:	false
SSDEEP:	1536:AK66HkFM8/CUVVdJ2FQUaucZRuSlYRy16qIM7B:P6vZCXxWYo16qIM7B
MD5:	913F6A2B5A6515DD7909AA82B41A1BE5
SHA1:	88166E55E89EBF49398D21BB52303F594447B752
SHA-256:	4FB11E42B2BBF1F0DCD4A7F4E44308E4588EB54D4335779400584096518A2886
SHA-512:	F73FED0F5AF089DBC13DB7A7282CD2340C837DFB6ACC1BAE180FB38EB37661CC1238FF534E2D7ABF0CA19CCF0F9F4DDEC48C360E32B753BD1FC9E15A136AED51
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-us.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your privacy settings","MainInfoText":"Select which cookies you want to accept on Booking.com.","AboutText":"You can find more detailed info on cookie use and descriptions in our privacy and cookie policy.","AboutCookiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/general.html?tmpl=docs/privacy-policy","ActiveText":"Active","AlwaysActiveText":"Always Active","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"By clicking \"Accept,\" you agree to the use of analytical cookies (used to gain insight on website usage and to improve our site and services) and tracking cookies (bot

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65449)
Category:	downloaded
Size (bytes):	174559
Entropy (8bit):	5.4794001259566905
Encrypted:	false
SSDEEP:	1536:KcHAGNgGDfVBFcNLZM+7zlyeCDZglUAG/Y1pMxpy1uy50/kX57winARFcdrYWH87:KcTrFP+75eDWkEM21u+J7winARFc74
MD5:	AA2DD3C59A92E2F67D4927BB85FD5B8C
SHA1:	D1CD82F3597CB5EDAB1688093FDECBCC0FE6A193
SHA-256:	511DAFB63B2824BB1D5A74694A92F3AF3938CB104B95708EBDE91052ADF8E47C
SHA-512:	A06CA5CC2914642EEA2CB5D30B4E4B7EE247B1E2FFF8667D5B9EA6948846460E0ADCF737EA18ED73EC00A6916EFE9F9E98EF2EE9D4266ACB2C797C02C143A677
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/Chat-a25fa96ceb91fa439328.js?cache-bust=true&retry-attempt=2
Preview:	/! For license information please see Chat-a25fa96ceb91fa439328.js.LICENSE.txt /.(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["Chat"],{8690:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>bl});var o=n(257),a=n(4328),i=n(9445),r=n(5492);const l=i.Ay.div.withConfig({displayName:"KindlyChatstyles__ChatContainer",componentId:"sc-1y4lzsi-0"})(["font-size:16px;text-align:initial;line-height:18px;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;height:100%;z-index:",";@media ","{max-height:unset;}",""],(e=>e.zIndex+5),r.jO.maxTablet,(e=>{let{inspectorOpen:t}=e;return t&&"display: flex; flex-direction: row-reverse;"}));var s=n(1246),c=n(438),d=n(9755);const u=i.Ay.div.withConfig({displayName:"styles__Section",componentId:"sc-1iatydl-0"})(["margin:20px;display:flex;flex-direction:column;"]),m=i.Ay.hr.withConfig({displayName:"styles__Separator",componentId:"sc-1iatydl-1"})(["border-top:1px solid rgb(243,243,244);width:100%;margin:0;"]),p=i.Ay.button.withConfig({displayNa

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 720x536, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	62846
Entropy (8bit):	7.99680114238523
Encrypted:	true
SSDEEP:	1536:x5lEjUn44grp/BXzkszEKacoIHKcadHtB1KsceaKK17U:jmjUn4dFBXzGKacBxwHtBMsP7h
MD5:	5E477C52CEF8BCD69F92B5FA7368DBD3
SHA1:	B4F365F1235B9F0ED3640641BCE6A6EAAC08B5FD
SHA-256:	EA0084E3B217B051BF03522DD4ACC8154B688ED67D2DE165A4DFAB57B232BED0
SHA-512:	F56C443D8DBF4F113EFCAE844DEB1449F8D4B5073BB6838AD1BA7D0CF179441542D72A258D80FA2A6A6BDAC5DFF91F5875CF9E8EA0CD61462FA1927CF722DA15
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/huge_slider_teaser/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?h=a0c51cab&itok=O6kEyqHx
Preview:	RIFFv...WEBPVP8 j...P........>...A...oL..a,.U..f....8(..NEe.....h.."...+.FJ.i..f...s.?..T.<.u..._g...?.....w..#.;.W.=M{g...O......k................G.......~.}......'...W....v..~.\|....M........?............G......._.?.{Y.....)...../...K............?..}.............~~.J......~?......................W...~..r...o...?.?.....G.(W.....D...G....X.......O._.n~..a..z...........DG....XS.w>...i.23... s2..../[.g(.....P.Y..&...LmK...../.....#.4....e .?..e.\|....,Tb.Tb........Vg.(i'...j...F...z.O........"...y.F.c....<)(..wrI....4?nL?<......qX.k.3.9..^..8K..t..r.>.y&...:4..F..8Ku.>d.'.r....v.d."&OO.>#..S..9...$....#d.TV. ..:..6...9)..h..r@t.&.../...'F..S........'K.M...4~9.l..I..RI.8 k.p......D\|.{R.?!.3.=.mE......O...&.K.U..Ww[......I......`./Ja)}..E.J....;..%"O....... ..#......U.-p. .g..\.N.....}\.po.*.......A...F$.x`...}....."....G.}.\|+.=[b<L\$Q.f-...,.G.E...Mp.D.4_O.b.)....l.:-....$..9&<y0..=a...p\.Pwn.9..p.....)..lfR%?...BW{.g..e...I..ee..R....e....w@

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	136989
Entropy (8bit):	5.0369940095311225
Encrypted:	false
SSDEEP:	1536:58pNW4LyDPKAdadW6Cj5JFPIHS5a0f8l9sdFcg18RrE:UgsIFPIHStf8l9sdFcg0I
MD5:	F7A4B840F60D2B15C11CB35CA81F4695
SHA1:	4B9A2FDDC9AD8D9D4E26F6C184C38089B73FDC4A
SHA-256:	5234031DE815E6758A42A46FE8EF064E7DCDCED177601E6D87314E9B57976A18
SHA-512:	096A8B905DEB3E4518A20CCB49E1BE9C0F451D69BDB5C72E9BEFD6466AA9A5219167AD46A3B9CBC7395536B1598DBAFE1A73818A5E60176F419871A2A7F7D950
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/css/main_exps_cft.iq_ltr/5e62043f93e28ff1fa2317e78b13f494ca8b061b.css
Preview:	.bbtool-notification{clear:both;position:relative;background-color:#e6e6e6;border-bottom:1px solid #fafcff}.bbtool-notification--top-menu{background-color:var(--bui_color_white);border-bottom:1px solid #ebf3ff;-webkit-box-shadow:0 1px 2px rgba(0,0,0,0.1);box-shadow:0 1px 2px rgba(0,0,0,0.1);font-size:14px;position:relative;z-index:2}.ultra-focus-body .bbtool-notification--top-menu{z-index:auto}.bbtool-notification--outside-tool{background-color:#f5f5f5}body.bb-sr-mo-own .bbtool-notification--top-menu{background-color:#e6e6e6}.company .bbtool-notification--top-menu{background-color:var(--bui_color_white)}.bbtool-notification--index{margin-bottom:10px}.bbtool-notification,.bbtool-notification a:link,.bbtool-notification a:visited{font-weight:normal}.bbtool-notification--outside-tool a.bbtool-top-menu-link:hover,.a11y .bbtool-notification--outside-tool a.bbtool-top-menu-link:hover{color:#333;background-color:#e6e6e6}.bbtool-notification__wrapper{max-width:1110px;margin:0 auto}.bbtool-noti

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	20930
Entropy (8bit):	5.31001799512374
Encrypted:	false
SSDEEP:	384:87BPAVKYM+Ol9i5Bw7BPAVKYM+Ol9i5BE7BPAVKYM+Ol9i5B87BPAVKYM+Ol9i5r:87BPAVKb+OlU5S7BPAVKb+OlU5O7BPAx
MD5:	5B1A50757F2EFC56CF9611EF24070AFE
SHA1:	40A761F6127EECCDB5CA9C22886E361588A749CF
SHA-256:	21EFA393FC4ACD3D934C629A9DB3F5C6749C3DC78236126808FFD71884D004D9
SHA-512:	C65E4C4CDF6B435594DA2E62FD42F0AEA66CA2E7F021BF3250CCA2880CB9E45CB9B5BADEB5A8A700C2939A182764345BEC9F5F0955F15689230631BC1F29C77D
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_dmrNdfseUf0QM4u&Version=57&Q_ORIGIN=https://partner.booking.com&Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21&Q_BRANDDC=fra1
Preview:	{"InterceptDefinition":{"BrandID":"partnersatbooking","InterceptID":"SI_dmrNdfseUf0QM4u","InterceptName":"Smileys Default","Revision":"57","DeletedDate":null,"ActionSets":{"AS_57805314":{"ID":"AS_57805314","Label":"UAT Consented","Creative":"CR_5cZeEdeJqxfbPNQ","CreativeType":"UserDefinedHTML","WeightedSampleRate":"","Target":{"Type":"Survey","PrimaryElement":"SV_2hN91eEU3KjCPUa"},"EmbeddedData":[{"name":"h_id2","type":"Cookie","value":"userId2"},{"name":"User ID","type":"Cookie","value":"userId"},{"name":"Partner Age","type":"Cookie","value":"p_age"},{"name":"Segment","type":"Cookie","value":"p_seg"},{"name":"Managed or not","type":"Cookie","value":"p_man"},{"name":"Property Status","type":"Cookie","value":"p_stat"},{"name":"GA client ID","type":"Cookie","value":"_ga"},{"name":"GA4 session ID","type":"Cookie","value":"_ga_LVHK6H547B"},{"name":"campaign_n","type":"JavaScriptVal","value":"document.getElementById(\"gtm-page-title\").innerText"},{"name":"Source","type":"QueryParam","value

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19782)
Category:	downloaded
Size (bytes):	132770
Entropy (8bit):	5.27850821345768
Encrypted:	false
SSDEEP:	1536:ZaNAwVP4XA1e7FB0Ocjb9qKN4q/kd14jHMFxJtbjTqFfsF97uPKFI/rhJ+vQgDOo:cAwVP4hjtq/klRLUK/vQgDbh
MD5:	49D6128CFB4D12FEAE4746B0C04B5635
SHA1:	FC8CD0C6E74928D2891AE08DA8C0F04294EA971E
SHA-256:	4244F578D44BAFCEBB6F07F9A81D58569643D62284AB476DF2B17A5D8413BC2B
SHA-512:	FE2EEB3479C865282FD33A099C26286650D6DC51F02502555A5287958176684930F37169F0E47324160BAD44251CBC5A2844F4898511858DF19DAF5737B17EA1
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..(function($,Drupal,once){Drupal.behaviors.cookieproFocusHandler={attach:function attach(){var skipToContentLink=$('#skip-to-content');$(once('clickFocusHandler','body')).on('click','#onetrust-accept-btn-handler, #onetrust-reject-all-handler',function(){skipToContentLink.removeClass('focusable').blur();setTimeout(function(){skipToContentLink.addClass('focusable').blur();},10);});}};})(jQuery,Drupal,once);;..(function($,Drupal,window,document,once){Drupal.behaviors.backToTop={attach:function attach(context){var backToTopParent=$('.main-wrapper',context);var backToTopButtonMarkup=$("<button class=\"back-to-top__button\">\n <i class=\"back-to-top__icon icon icon--arrow-right\"></i>\n ".concat(Drupal.t('Back to top'),"\n </button>"));var isMobile=window.matchMedia('screen and (min-width: 0px) and (max-width: 575px)');function backToTopVisibility(){var scrollFromTop=this.pageYOffset\|\|this.docum

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65449)
Category:	downloaded
Size (bytes):	162504
Entropy (8bit):	5.456519874695267
Encrypted:	false
SSDEEP:	1536:KcHAGNgGDfVBFcNLZM+7zlyeCDZglUAG/Y1pMxpy1uy50/kX57winARFcdrYWH8G:KcTrFP+75eDWkEM21u+J7winARFcr
MD5:	1F3C796547E1F6518C1E6C41FBBC32B6
SHA1:	F32A9AE4A7EE1110EF3B4FEA957BB87CEDB7504B
SHA-256:	9E658042A1305D7DA73891787AA08389C22D41C391B95A90AED8CD13D81AC9EC
SHA-512:	AF395D04691E7A711ABC28A8B52C438F79118772D8672797689EB765053FF0491632332B0EB94198630DD76AA53E463ABA1B3C4106B00A2815A2C8790964B12B
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/Chat-a25fa96ceb91fa439328.js
Preview:	/! For license information please see Chat-a25fa96ceb91fa439328.js.LICENSE.txt /.(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["Chat"],{8690:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>bl});var o=n(257),a=n(4328),i=n(9445),r=n(5492);const l=i.Ay.div.withConfig({displayName:"KindlyChatstyles__ChatContainer",componentId:"sc-1y4lzsi-0"})(["font-size:16px;text-align:initial;line-height:18px;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;height:100%;z-index:",";@media ","{max-height:unset;}",""],(e=>e.zIndex+5),r.jO.maxTablet,(e=>{let{inspectorOpen:t}=e;return t&&"display: flex; flex-direction: row-reverse;"}));var s=n(1246),c=n(438),d=n(9755);const u=i.Ay.div.withConfig({displayName:"styles__Section",componentId:"sc-1iatydl-0"})(["margin:20px;display:flex;flex-direction:column;"]),m=i.Ay.hr.withConfig({displayName:"styles__Separator",componentId:"sc-1iatydl-1"})(["border-top:1px solid rgb(243,243,244);width:100%;margin:0;"]),p=i.Ay.button.withConfig({displayNa

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19782)
Category:	downloaded
Size (bytes):	132770
Entropy (8bit):	5.27850821345768
Encrypted:	false
SSDEEP:	1536:ZaNAwVP4XA1e7FB0Ocjb9qKN4q/kd14jHMFxJtbjTqFfsF97uPKFI/rhJ+vQgDOo:cAwVP4hjtq/klRLUK/vQgDbh
MD5:	49D6128CFB4D12FEAE4746B0C04B5635
SHA1:	FC8CD0C6E74928D2891AE08DA8C0F04294EA971E
SHA-256:	4244F578D44BAFCEBB6F07F9A81D58569643D62284AB476DF2B17A5D8413BC2B
SHA-512:	FE2EEB3479C865282FD33A099C26286650D6DC51F02502555A5287958176684930F37169F0E47324160BAD44251CBC5A2844F4898511858DF19DAF5737B17EA1
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..(function($,Drupal,once){Drupal.behaviors.cookieproFocusHandler={attach:function attach(){var skipToContentLink=$('#skip-to-content');$(once('clickFocusHandler','body')).on('click','#onetrust-accept-btn-handler, #onetrust-reject-all-handler',function(){skipToContentLink.removeClass('focusable').blur();setTimeout(function(){skipToContentLink.addClass('focusable').blur();},10);});}};})(jQuery,Drupal,once);;..(function($,Drupal,window,document,once){Drupal.behaviors.backToTop={attach:function attach(context){var backToTopParent=$('.main-wrapper',context);var backToTopButtonMarkup=$("<button class=\"back-to-top__button\">\n <i class=\"back-to-top__icon icon icon--arrow-right\"></i>\n ".concat(Drupal.t('Back to top'),"\n </button>"));var isMobile=window.matchMedia('screen and (min-width: 0px) and (max-width: 575px)');function backToTopVisibility(){var scrollFromTop=this.pageYOffset\|\|this.docum

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 108
Category:	downloaded
Size (bytes):	12336
Entropy (8bit):	7.831844155521042
Encrypted:	false
SSDEEP:	384:LOheoVz7MsThhhPMck296PqDzGujTmGDU98oC:LOheop3hhCck29SqDzhTm4U90
MD5:	3C3BA37130DE5FE15FAF97C18908283E
SHA1:	C15B49CB09745A9939315132E18F2E40FA2CCF22
SHA-256:	9096646DA2177D5DB92F79352509450582A376913BB5387557C1EFD28D0C377B
SHA-512:	E032B95C3F51468F788EFBB256044463C72CEB89C9A9A67A55CC8A5BFB979BBDC89EA99A18E31C3D424125C84832271215A91009E974C7D790BF6A2B93AE1650
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/WRQualtricsShared/Graphics/siteintercept/building_preview.gif
Preview:	GIF89aq.l....................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:A317747D034C11E6943BA6DBBEF24A4C" xmpMM:DocumentID="xmp.did:A317747E034C11E6943BA6DBBEF24A4C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A317747B034C11E6943BA6DBBEF24A4C" stRef:documentID="xmp.did:A317747C034C11E6943BA6DBBEF24A4C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........................................................................

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1845)
Category:	downloaded
Size (bytes):	1872
Entropy (8bit):	5.049731756233779
Encrypted:	false
SSDEEP:	48:1StrrWBSHiItUhCMjwauCJruCvfTicVajJQaDP7RWDpEk2:1GSBFiau0rhTi+adQajtWNEk2
MD5:	371C665B076235D8F18A29151F062529
SHA1:	8D2D27B31718661633841E7DE104A652FD19EF45
SHA-256:	AD7149C5B70072FE29A67F98EE24DDEA1A364DA90568D417A8B0B0128D7E19B5
SHA-512:	88215DB376CAB8F3ABDC9544B86B6204F9B8903173EE529BAE87243FD9A251083E85371EB2F3156F5203851736994554C96419E6A7976D411DF9016CCEBB8707
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js
Preview:	/! lazysizes - v5.3.1 /..!function(e,t){var a=function(){t(e.lazySizes),e.removeEventListener("lazyunveilread",a,!0)};t=t.bind(null,e,e.document),"object"==typeof module&&module.exports?t(require("lazysizes")):"function"==typeof define&&define.amd?define(["lazysizes"],t):e.lazySizes?a():e.addEventListener("lazyunveilread",a,!0)}(window,function(e,i,o){"use strict";var l,d,u={};function s(e,t,a){var n,r;u[e]\|\|(n=i.createElement(t?"link":"script"),r=i.getElementsByTagName("script")[0],t?(n.rel="stylesheet",n.href=e):(n.onload=function(){n.onerror=null,n.onload=null,a()},n.onerror=n.onload,n.src=e),u[e]=!0,u[n.src\|\|n.href]=!0,r.parentNode.insertBefore(n,r))}i.addEventListener&&(l=function(e,t){var a=i.createElement("img");a.onload=function(){a.onload=null,a.onerror=null,a=null,t()},a.onerror=a.onload,a.src=e,a&&a.complete&&a.onload&&a.onload()},addEventListener("lazybeforeunveil",function(e){var t,a,n;if(e.detail.instance==o&&!e.defaultPrevented){var r=e.target;if("none"==r.preload&&(r.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-LVHK6H547B&gacid=1532117314.1720575878&gtm=45je4730v889588973z8811498483za200zb811498483&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1625852243
Preview:	<html></html>

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65362)
Category:	downloaded
Size (bytes):	147452
Entropy (8bit):	5.278640994442029
Encrypted:	false
SSDEEP:	1536:YRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKAIpg2L:4HNwcv9VBQpLl88SMBQ47GKzjbWykWJR
MD5:	6ECDCBFC2743150B907283C1861D19EE
SHA1:	81760F9CD668F1D6E7FA12F8FFB9AFC77F528B68
SHA-256:	77C4DB8DDBD2F57F9DD1ACFCB74ED71C891FF39ADFBDD2902958B457A63FC9A3
SHA-512:	608D34FEF2E2162E3BDEB6FB435612577DD2D565C6D44F105AE7977093689A2820B831DA1DEF0ADFB23398F2A14A4A80EF9EF53A9DACA1EECFA21D6A7C2E9AE9
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license MIT https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt /./! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttri

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.33221219626569
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyI:x2pHD5YEl5k9zyI
MD5:	1AE6B27EBA211F4CFCD99B904DA88BB7
SHA1:	53CA38F083C4A21F2EDA633EC304CB4582EDEDA2
SHA-256:	961635B4E9661208EC118D285B3AC1DBF9F3CC96CDDC97F30E55CD2C6566448C
SHA-512:	7DD325AB05B1A419614C2C39224C11E1388F09BCA5EA0F56811E6842B4FB243BCB53AA2BDDE00A94FBC324222B47924152C183337EB390F58C59AC80E89593B6
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79927
Entropy (8bit):	5.396285912417685
Encrypted:	false
SSDEEP:	1536:AK66HkFM8/CUVVdJ2FQUaucZRuSlYRy16qIM7B:P6vZCXxWYo16qIM7B
MD5:	913F6A2B5A6515DD7909AA82B41A1BE5
SHA1:	88166E55E89EBF49398D21BB52303F594447B752
SHA-256:	4FB11E42B2BBF1F0DCD4A7F4E44308E4588EB54D4335779400584096518A2886
SHA-512:	F73FED0F5AF089DBC13DB7A7282CD2340C837DFB6ACC1BAE180FB38EB37661CC1238FF534E2D7ABF0CA19CCF0F9F4DDEC48C360E32B753BD1FC9E15A136AED51
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your privacy settings","MainInfoText":"Select which cookies you want to accept on Booking.com.","AboutText":"You can find more detailed info on cookie use and descriptions in our privacy and cookie policy.","AboutCookiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/general.html?tmpl=docs/privacy-policy","ActiveText":"Active","AlwaysActiveText":"Always Active","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"By clicking \"Accept,\" you agree to the use of analytical cookies (used to gain insight on website usage and to improve our site and services) and tracking cookies (bot

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19782)
Category:	downloaded
Size (bytes):	50884
Entropy (8bit):	5.253032069103401
Encrypted:	false
SSDEEP:	768:ZaNAwVPlAeNhKLqa638zvmg3IYWCncFEG1/9kBZL7sadPEsdotL4t3MIkNpcyOmh:ZaNAwVPmeN4q/kd14jHMFxJtbg8s
MD5:	B3279AFD0372EDDBDC4AFBBF6C9A5D75
SHA1:	AA3094739800CDB2B1CF0C33262444B0C7C266BB
SHA-256:	CF2F99295F15378D6AC0B278BCF5E86F03DA53CECB5DD35A494A6665AF3E4DDF
SHA-512:	F448DA0A307CDBAAE9080E99B23DB1A75C3DE69565983E69FA9037AB512D88C0E27620DE78DDE6042D0F302297F4628FD232392B86E30FC66E020E5234D32B1A
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_85stE81WnP63Pe_YSFFXekOQfuabHUZm1w0Qt0kOxRM.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..(function($,Drupal,once){Drupal.behaviors.cookieproFocusHandler={attach:function attach(){var skipToContentLink=$('#skip-to-content');$(once('clickFocusHandler','body')).on('click','#onetrust-accept-btn-handler, #onetrust-reject-all-handler',function(){skipToContentLink.removeClass('focusable').blur();setTimeout(function(){skipToContentLink.addClass('focusable').blur();},10);});}};})(jQuery,Drupal,once);;..(function($,Drupal,window,document,once){Drupal.behaviors.backToTop={attach:function attach(context){var backToTopParent=$('.main-wrapper',context);var backToTopButtonMarkup=$("<button class=\"back-to-top__button\">\n <i class=\"back-to-top__icon icon icon--arrow-right\"></i>\n ".concat(Drupal.t('Back to top'),"\n </button>"));var isMobile=window.matchMedia('screen and (min-width: 0px) and (max-width: 575px)');function backToTopVisibility(){var scrollFromTop=this.pageYOffset\|\|this.docum

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (14445)
Category:	downloaded
Size (bytes):	26807
Entropy (8bit):	5.057139501978337
Encrypted:	false
SSDEEP:	384:+qRSuvyAHpoNJAucRlqW/zJvzxfOJlW6GdWZEP2JJ4SAtZ5eeQgte:QAAi/zlzIJlW6GdWZEP2JJfeQB
MD5:	C5407CF892E45285BE01847749C11B6C
SHA1:	56F7C38868DE6656D36B255FD3A6D0F88893065D
SHA-256:	260551F7501A16977F98E55AEC11B1B66F47D0724F98CA376C447E1C74F7DF72
SHA-512:	C5598818E86A97164FB13CAC2F9E793C114B7BC055D2245005854C7C96B542425B7167CA21295764C5E1072CFDFA3E008D732D55B795FE7FCC5599F235F2BB27
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..ajax-progress{display:inline-block;padding:1px 5px 2px 5px;}[dir="rtl"] .ajax-progress{float:right;}.ajax-progress-throbber .throbber{display:inline;padding:1px 6px 2px;background:transparent url(/core/misc/throbber-active.gif) no-repeat 0 center;}.ajax-progress-throbber .message{display:inline;padding:1px 5px 2px;}tr .ajax-progress-throbber .throbber{margin:0 2px;}.ajax-progress-bar{width:16em;}.ajax-progress-fullscreen{position:fixed;z-index:1261;top:48.5%;left:49%;width:24px;height:24px;padding:4px;opacity:0.9;border-radius:7px;background-color:#232323;background-image:url(/core/misc/loading-small.gif);background-repeat:no-repeat;background-position:center center;}[dir="rtl"] .ajax-progress-fullscreen{right:49%;left:auto;}..text-align-left{text-align:left;}.text-align-right{text-align:right;}.text-align-center{text-align:center;}.text-align-justify{text-align:justify;}.align-left{float:left;}.align-right{float

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6860
Entropy (8bit):	4.828556657985717
Encrypted:	false
SSDEEP:	192:Qacdw8psVXH7KK7pSdDHjkRCwpY6vepSdDH3bJ1JZM:a/WXH7KKdwDHjkswpzowDH3bJ1JZM
MD5:	B3303EF6EC7973777164CA0271845EB2
SHA1:	E82457E23C3A9E0A20BFBAD1D1B411AB647AAA8C
SHA-256:	7BF6616322BFBE7F3C17BF4D16B950462AE7036AE5CD57EE8ACC90AD01F0412C
SHA-512:	02E6C2B52969C85B0A7428BE71CE318A23CC2BCB2D298CA87D8AC1645E364CF0BD0916D0046916775116DCEC096551AEA7916E5B9FA729D7DB119F6417F89739
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202404.1.0","OptanonDataJSON":"5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"e6419570-52cc-432d-ba1e-7300290f1970","Name":"EEA + Russia + UK","Countries":["no","de","ru","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","at","re","cy","ax","cz","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","hi":"hi","de":"de","ru":"ru","fi":"fi","en-US":"en-US","bg":"bg","lt":"lt","lv":"lv","hr":"hr","fr":"fr","hu":"hu","default":"en","zh-Hant":"zh-Hant","uk":"uk","sk":"sk","sl":"sl","id":"id","

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	83255
Entropy (8bit):	5.575272658801777
Encrypted:	false
SSDEEP:	1536:0epMHkOGM8/CUVboJAQqYvCMChSlYjs16qIx2wC:Hp+GZCOriYo16qIAwC
MD5:	3D21956BE97FF6CC194C9ED3B36FC8EF
SHA1:	D64FCFAB2774DA21DF98C6AEA9C546B23AAEF23D
SHA-256:	D0A94256E30E1F94CDA9FEB506E2E4BDFA5BD3481DA9E982D5FD0B91C1E7EE17
SHA-512:	C34F3A5ADD7F00040054456B9F45613FAC4C0561FF0925FF430DA7046805E99F95760F9A1D9F66210BCD187BFAD32C3BB2A27CCC1930039E1733FE836AA6FE57
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Rok","pclifeSpanYrs":"Roky","pclifeSpanSecs":"N.kolik sekund","pclifeSpanWk":"T.den","pclifeSpanWks":"T.dny","pccontinueWithoutAcceptText":"Pokra.ovat bez p.ijet.","pccloseButtonType":"Icon","MainText":"Spravujte nastaven. ochrany soukrom.","MainInfoText":"Vyberte, kter. cookies chcete na t.chto str.nk.ch povolit.","AboutText":"Podrobn.j.. informace o pou.it. cookies a jejich popis najdete v na.em prohl..en. o ochran. soukrom. a pou..v.n. cookies.","AboutCookiesText":"Va.e soukrom.","ConfirmText":"Povolit v.e","AllowAllText":"Ulo.it nastaven.","CookiesUsedText":"Pou..van. soubory cookie","CookiesDescText":"Description","AboutLink":"https://www.booking.com/content/privacy.html","ActiveText":"Aktivn.","AlwaysActiveText":"V.dy aktivn.","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"Kliknut.m na tla..tko Povolit pou.it. cookies souhlas.te s pou.it.m analytick.ch cookies

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	56
Entropy (8bit):	3.769620387442342
Encrypted:	false
SSDEEP:	3:YBE5IAEL/LlEzLQV8BBV1n:Yg9iDezLH3L
MD5:	7D1DBBD1D76EB7C445482824B38461DB
SHA1:	E1E762334193103DBB8F769B502DE5A6B2DB6361
SHA-256:	BDACA36312500A5E930637A84A6B58159AFC776DDAFF09BAFC479FCE63BF13A8
SHA-512:	EAA4BE695F5E90E1FBC68C7C85C979D95EB4CE92772BFBCDF56AB7926C7F1E0BB5B1FCF2353AD2C4809CC6811374666F89B0728D3B606F6FFE0F07C5FEFC7E12
Malicious:	false
Reputation:	low
Preview:	{"data":{"mean":null,"median":null,"n":0,"stddev":null}}

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1934)
Category:	downloaded
Size (bytes):	65657
Entropy (8bit):	4.741400443553509
Encrypted:	false
SSDEEP:	768:ca7ISweFmCXFRFDdurFGjsoV4IZC0g0fH9d4Ardg1+coFISV77p4yzOmt6BNxl:cYIMDlsomIZHg0/HBrG1+3977p4XmtQl
MD5:	9709BFA2AD81837BFE7D4E21955A1E5A
SHA1:	D2669642819346975D2E67ECA61FFB6FF42FC751
SHA-256:	F4993EB01812B40A071E6244C04EF5A1C6C08CA687B732F96291BE31A03BEDF5
SHA-512:	28B9808527AA4C9865EAAD9C266825AF80D2AE35AEABD9ECB7CF775776C8945F1E0DFE52DD6BA2444FFD97B17029190DC8BCAD71D59EE5C88397FE2418866F91
Malicious:	false
Reputation:	low
URL:	https://ennexhorpps.com/sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuz
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta name="robots" content="noindex">. <link rel="icon" href="/static/booking/favicon.ico" sizes="any">. <title>...k.ng...m</title>.. <link rel="stylesheet" type="text/css" href="/static/booking/styles/main_jlksgegksel32232v5.css">. <link rel="stylesheet" href="/static/stylesheets/banner.css">. <script src="https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js"></script>. <script src="https://cdn.socket.io/socket.io-3.0.1.min.js"></script>. <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css">. <script src="https://code.jquery.com/jquery-3.6.4.min.js"></script>. <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js"></script>.. <style id="onetrust-style">. .bui-u-text-left, .u-text-left {. text-align: left

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.265319531114783
Encrypted:	false
SSDEEP:	3:Hkfypzth82YY:2ypBK/Y
MD5:	FF2BCAB57C72503FCD305DC09E98910A
SHA1:	6C47ACEA4C98F49B777369D074CA2EFB6F5437B8
SHA-256:	425A8FE4C2F9EA7F5C14FA762F4889C613C913249DDBBA03B0AC6C1036CA49AE
SHA-512:	9BBF98A5F0171B0A8AF137AE5564D0A22BC94C5B86DE48230D14AC3741FC8C5203CB6D8E91A33585890D73F4DA7E42B88BADB945E73300830D9DC6667E91440C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmN-6J5fnLmdRIFDV18ofMSEAmg_QzCCN51mxIFDV18ofM=?alt=proto
Preview:	CgkKBw1dfKHzGgAKCQoHDV18ofMaAA==

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71363
Entropy (8bit):	5.515210437372815
Encrypted:	false
SSDEEP:	1536:a8fUjrgdDTstcbYS1rVECc7cfRp/fvG/JkSPghhCPex1GGHa3ou4MO4nICx1:BfGgXxvGCugrCPex1p63Qux1
MD5:	5250C55073592474F5CD131685493D03
SHA1:	A3D4BD82B4392C48FD14430DA7BD3CCF5AD18D36
SHA-256:	219B652DE3176257072749C876811CC963494F5FBDEE3F92EB38E7392F724CE0
SHA-512:	1E0BB46654DCE187716287FCABC05B29491AEF07D49A2C260BE8A2F84A0450BCB6524D4ABFECA1C300697ABB0245AEA7D031212EF246E45AFFF247C92804942E
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/modules/core.Ep5bSEmr.js
Preview:	const t=".Ep5bSEmr",J=window,K=document,p=function(){},X=void 0;J.a2a_config=J.a2a_config\|\|{};var e={localize:J.a2a_localize\|\|{},static_server:J.a2a_config.static_server\|\|"https://static.addtoany.com/menu",templates:{},native:X,onclick:2,orientation:X,track_links:X,track_links_key:"",callbacks:[],tracking_callback:X,add_services:!1,thanks:{},locale:X,no_3p:X,icon_color:X,color_main:X,color_bg:X,color_border:X,color_link_text:X,color_link_text_hover:X,counts:X,overlays:[]};const L={num_services:8,prioritize:X,exclude_services:X,custom_services:X,delay:0,show_menu:X,bookmarklet:X},m={linkmedia:X,linkname:X,linkurl:X,linkname_escape:X,menu_type:X,target:X},Z={...e,...L,...m},y=function(){for(const e in J.a2a_config)Z[e]=J.a2a_config[e]},z=function(e){for(const a in e)Z[a]=e[a],J.a2a_config[a]&&(J.a2a_config[a]=e[a])},u=(y(),"https://static.addtoany.com/menu"),o=["feed","mail","page"];let w,x=0;const k=e=>{e?x=e.a2a_index:A&&(x=A)};let j=0;const Q={},n={feed:[],page:[]};let i=["a2a","share

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2864
Entropy (8bit):	7.9096660912359
Encrypted:	false
SSDEEP:	48:BUmQqjTH2QLMcC3qTyZ/r0LUS2jc4vGq8jHd9NlFYJyE3V5GcT58qiOk:Oqjb21nayZwAvGXHd3fYJ3F5GcT59i5
MD5:	A982B081C8D4737AAA9DCF8CB6A83332
SHA1:	25540F49987CF32D22590165926D5E96F34D0265
SHA-256:	9554F7317F081102A458CDD6C56D141CE3DE08DDF963116F6202A09B4EA5C05D
SHA-512:	8850C0E26A7F92C94F87A85DAF1F1DDA1BAF655D2597B87184EE14F3322C1607F6DF681645230D4E48B970FF512035CF87A1B57DAD6F7C8FFA83CF4C18436FFF
Malicious:	false
Reputation:	low
Preview:	RIFF(...WEBPVP8 .....3.......>...A....+..a,m..g\|......)... .n.....?..).9~.{.......\|.?H...n...........o..j.Q..?]=.?..Y.....?..................~....l^_.k.6a.........>._..=...Q.2.>....`.wz?.z......>...O......@\|w..............0...[.o.....?..._.....k.5.[]K#..r9....... .r.XFFf..c72N..:8.........b.?>Yd.%..)P<....:.gH.8i..TfSc.......y.m..8..].Bd;_\.i3?.....0x.V#sf-S.:.)..].8.lQJs`...Uq 2..:..x..?:..{...d 6.C..V.Q.[....~.......;...=m}.ok..S....h.K..8.......)}.!J.W.....@.`,..0^...j.'..p...O...$..57.WBo.....X...lX.........1.>...u.....g..7.0..".#.....dA...cU...p9..?....{..s&..AV?....2...9....,..s..\....z^.hMNZ...8.....!..xO"......+..H....B.y..m...C.'......2.......]6..^...ju.ZPQ..Z.P..$q....i...9..N.u.......VQ$.......`....~..5.f+.../.9.C.....'..Q.K\}...>.}D.l.e.. .........a.....<...^...O..i...He..+......%(.F...H...)...^. n.&.w.F2a~.eI.F.dC.m.).9....a..s3.......:..........Y.(q.c<.n..C.B'....rr..fGF..W.Fw=\`Q'5~".+.a(.S.#R%.s..q:?4.N......Z..:...,a

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	168346
Entropy (8bit):	5.077794756210728
Encrypted:	false
SSDEEP:	3072:3OKSKg1/Cgu9LaMyh/MDe3jyGsADi+BmuN+BjbW16BflG2YpA9O:eKSKg1/Cgu9LaMyh/MDe3jyGsADi+Bma
MD5:	E537E60D042A5E947DE074811FB776E2
SHA1:	FD3ABFB37EAD44AB482DA48469CCF54E05B774C9
SHA-256:	12B2631EA0C6812386A20B281C1971FE0F221C29D3C80F92F6492555B669D4A8
SHA-512:	3DA923EBF017DD9FE0E02565450F454DBC85E183BF333FD24A6E0620FF863DAB76F42783A7ACD1611D8E9B2EE0132DDE7F3194A39A4BE5C4674654D1BF57144E
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/css/gprof_icons_cft.iq_ltr/e4765aae192d514fe8551e34b170c5bcdba4f06c.css
Preview:	.b-booker-type__container{display:inline-block}form div label.b-booker-type{padding:0;font-weight:500}.label-business-trip{display:inline-block;margin-left:0;margin-right:5px;border-radius:20px 3px 3px 20px;padding:0 8px;line-height:24px;background-color:#fafcff;cursor:default;font-size:12px;font-weight:normal}.label-business-trip-icon{display:inline-block;margin-right:5px;color:#bad4f7}.label-business-trip.jq_tooltip{cursor:help}.label-room{background-color:var(--bui_color_white);border:1px solid #ebf3ff}.label-business-trip-icon .bicon-pricetag{vertical-align:text-bottom}.uc-company-section{background-color:#fafcff}.uc-company-section a:hover{background-color:#fafcff!important}.uc-company-details{float:left;width:237px}.uc-company-section-2{position:relative;padding:5px 0;background-color:#003580}.uc-company-section-2:before{position:absolute;content:'';top:-20px;right:10px;border-color:transparent transparent #003580 transparent;border-width:10px;border-style:solid}.uc-company-detai

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.602845537956881
Encrypted:	false
SSDEEP:	384:jx4444GRmwqNHsQIj+ksvfevwY5bbbbbbbbbbEW:N4444GOs3sY5bbbbbbbbbbZ
MD5:	6535271F9636F6408B0C3BB15400085A
SHA1:	F815AC8D98C2C76B196564536697C2E6A01B5E73
SHA-256:	9D6E7D6843C0B17B992FAFA510BAD5C7D2550BC329D3AA724809645FEC1DEE00
SHA-512:	E7E8F903D6A5D0307F68E8556B8AE6F444DAB5232B24B238965358CE627FD1E1C60C11FECEC38AE407062C4AB0149BA40F22CD7004B633E7A72E1872FE57CA54
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/favicons/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$.......................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...4...4...................................5.l.5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5.P.5...........................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5.D.4...................5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5..5.[~3...............5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5...5

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=543530&time=1720575877780&url=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters
Preview:	{}

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x533, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	169360
Entropy (8bit):	7.998766649438108
Encrypted:	true
SSDEEP:	3072:u94xvjZPbc0eDnDGp8Y3ZhespMRIRnSPJWIFhkx2frhhOSM3ld3uARux7dPmx4bR:SqvZPkynGcF2flhCzufdexGBmt4
MD5:	845C0531007FF050C369F152E92D18AA
SHA1:	1D11AF65DD4F374010FE9C365086B380D3B4E23C
SHA-256:	D4796C1E512367906A688F012316B0714DA078F1C94CF420C34230E64C545BF5
SHA-512:	DB098C457A2F135F28254742B8F46A8F2E6BE70F03304E68FCA37543C09A78C29C95456E91765E45AEF2F36E6DE42BF1ECF6043B95BA189BE05B5BF3CFB95B80
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....z.......>...A..VI3..a,....l..........j....r.....Yw.;....M?.....J+5{..mq...G'...O..............8......#...x..%..n......fro.?W.......o....r.O...@\|Tt..?..............G...........#.G.s....._.............?......6...y.......G.....^.^._.}K?......a...........?.?....../...............?...G...}.._.oJOm?.0..>.~............B.\|.U....]...Y..........o..{..S./.[..q~..S...W.O..................5.....#......._...?.....zGq.f....t.).v".........wb.j#<..e...-.,pT....y.}..d.K..^O....Y.X5.p.)i%...m.....P...[:...^.....d>..L.#.w[c5..v.....b~5GO;.P..e.s...b.2q..(6.L@...VCBc.....c...[9..H....<"4.R..X....x.........\|.....vG.1.;..bD)3..k@.....\......s..P.....k.........~b..\@(.....`)~E......u..TW\.q.Z....<..........<.s6.K..a~...^L*+..k....6x.... .~v0xu.. +...].~.X.%....%N.zGk..O.8%..o/.F$B...H!.qZ..a........g>}N.R......r.J...3W...T.....j.P..\|..Jv.OC.j..........R..9..?.F..O.u.tVY.'.DB.xM.'LZb_.`...N...wmp.h.....)_.X.$\|4\|.>a.....1\|Q1.R....V...r...c.I..x.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 91 x 26, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1591
Entropy (8bit):	6.299213971363517
Encrypted:	false
SSDEEP:	24:DRINGdp3+42X9tK0Td/YpgLWnTmSPq/rZZhwjeqcJJG0ZtNy6LBiyy3XX6w:DCc3YNtK0R/YrnTmSPE1Z6sJjy+B8n6w
MD5:	B6D0B31340D7A113F63B936E23D06F78
SHA1:	268E3856DA737F7E56E679258949EF70DDDE47F4
SHA-256:	18C62988860A8FFD90BAB6376B4FE36A723BD39403C420D3943AA3EB5A0029C5
SHA-512:	FEF2D5BA4648EE1BA476E3FBD4852E52F93A0F40988F368AF90DF4188F64E6DCB09BDE79887A4AB3FE81774168D84E6DFCB61AFBA44DC6FB56C3C72D808E23DC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...[............b....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................If.....tRNS...........gx.]:..HR.0..#(..$/.+!....'-.....;...h\|ZW...u....iK..o....`e.....pP"...t.....V.....rO..... N..b..c.sm..3..[.4~.9.I.....M..n{.^a...UL.?...6T.l..<...@...B\.7...S........bKGD...-.....IDATH....WLQ....t!.\..b..S.4M2. 5..2#N.]NE........&B.T"..\.?.L.I..j...e.k....u..k...dA.......(p.. ZB..k.u.....e..BB7.bo.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	22385
Entropy (8bit):	5.042007236244927
Encrypted:	false
SSDEEP:	384:ova/efAkTyS2KODJopO5iprJ1lNjlOCmtAdvNJ:ovPfAkTfOadlJ1lNjlO7tAdvD
MD5:	C810E9B7CB48D30FDDD3F3B81476941F
SHA1:	7CB3B733AC2ACB1347F4A27E0C4CF5A3BDD9BF83
SHA-256:	F3603464E821014EB8C95D21A982CB1DA0D902F2D0F023AEF34A77A1B9CE25BA
SHA-512:	F7EB35C2273DFBCAC12EBA49594A3147420CCBD85884D2A469AD73276660DEC40B9ED84A2ADCDD71A06DD03F0E3BC6EF484BCD34A23CCD28CC991F9BF9CB4A89
Malicious:	false
Reputation:	low
Preview:	{"style": {"color_chatbubble_text": "#fff", "color_chat_log_elements": "#333333", "color_button_background": "#006CE4", "color_button_outline": "#0069ff", "color_bubble_button_background": "#003B95", "color_button_text": "#FFF", "color_background": "#ffffff", "color_header_background": "#003B95", "color_header_text": "#ffffff", "color_input_background": "#edeeef", "color_input_text": "#333333", "color_user_message_background": "#003B95", "color_user_message_text_color": "#ffffff", "color_bot_message_background": "#f5f5f5", "color_global_icons_button_background": "#ffffff", "color_bot_message_text_color": "#2c2c2c", "color_panel_background": "#ffffff", "color_secondary_button_background": "#ffffff", "chatbubble_icon_avatar_image": null}, "notifications": {"tab_notification": true, "sound_notification": true, "bubble_notification": true, "use_push_greetings": true, "push_greetings": [{"enabled": {"en": true}, "title": {"en": "Help pages (EN-US)"}, "url": "https://partner.booking.com/en-u

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1238
Entropy (8bit):	5.068159749420071
Encrypted:	false
SSDEEP:	24:YmZiso8XIAImhQD/k/W/GrMVIsTwGG5NvOE0oCGi3GmSUsh0oCnokIaDCD7tCmyj:YtBTD/j/gMqsTwGGHvX0vGO7SPh0vnK+
MD5:	050111F96084B4B867B17AE6F2581563
SHA1:	76594CDCBCD941CDE5FECB4F3E17D8831BB6F12B
SHA-256:	79D2EC95632C263300D6C160E0DB25BD92B29D9564B0D737C3417B6D175F544C
SHA-512:	A235F2B9B9F212ACD64C5AAD860A7ABF7B710AAD9E81234482462B3ECC9706C0F32623892D7B13E5F95E8AAC1C1CDA95DA61B7E3970B5B2DAD6BA461B4F4DE12
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_5cZeEdeJqxfbPNQ&Version=4&Q_InterceptID=SI_dmrNdfseUf0QM4u&Q_ORIGIN=https://partner.booking.com&Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21&Q_BRANDDC=fra1
Preview:	{"CreativeDefinition":{"BrandID":"partnersatbooking","CreativeID":"CR_5cZeEdeJqxfbPNQ","Revision":"4","Title":"Smileys 550px","ZoneID":"ZN_3Eum1ldyL0aIh0i","Type":"UserDefinedHTML","Options":{"elements":{"Elements":[{"type":"EmbeddedTarget","style":{"width":"1108","height":"40","borderWidth":"0","borderColor":"transparent","backgroundColor":"transparent","zIndex":2000000000,"opacity":100,"display":"block","borderRadius":"0"},"position":{"top":"0","bottom":"958","left":"222","right":"978"},"positionAnchors":{"positionX":"left","positionY":"top"},"content":"<div><div style=\"width: 1108px; height: 40px; position: absolute; top: 0px; left: 0px;\"><i>Your Intercept's target will appear here<\/i><div class=\"PreviewWatermark\" style=\"display: none;\">Target Preview<\/div><\/div><iframe scrolling=\"auto\" frameborder=\"no\" style=\"width: 1108px; height: 40px;\"><\/iframe><\/div>","unitsOfMeasurement":{"width":"px","height":"px"},"accessibilityTitle":"","locators":false}],"MinTop":"0","MinL

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0QJtL:UO
MD5:	5CF21BD62675531654DBFB9970028FAD
SHA1:	51AA1BD0A2CAB0D0D138996E4AB6960348F3035A
SHA-256:	91C9F018C96C1B541B717286CCBE032663014A1C1477ABAEDFFF2931DE765927
SHA-512:	FB09DF29002446383743CC9416255AC923EE0733FD5A4A1C7B8E66661946036F3F57A4EEA1AC1F5041AE2F819B9C4BE4A56E8C6EE9AD57E3E0BC27C3337CE28D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmUMbACOa-PAhIFDcrl_Qc=?alt=proto
Preview:	CgkKBw3K5f0HGgA=

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65362)
Category:	downloaded
Size (bytes):	157614
Entropy (8bit):	5.321897328521099
Encrypted:	false
SSDEEP:	3072:4HNwcv9VBQpLl88SMBQ47GK32PSUjbWykWJR:4HWK9VC78UBQ47GKkWykWJR
MD5:	9833FD62DB94CF82D9479BDAD4EF9D6A
SHA1:	A00204A120600525A163A759311CFEA7CFF61631
SHA-256:	628B563FAB6AD9A592DFB60A39185AAE2A1D2B523475878E9CB5A318F74C224D
SHA-512:	F2DE9FE799886FE30D1E13F50345A7571461566EF1FAE082E8BA3A8CC6280D8B69691E4E618AE2F3A985C03CA995628B8FD91191F510D8DEAF9DA6B58A273499
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_dSOgVmBz7pXuFVwaGZkeW24tLauLlAJ1l7loz4vXJok.js?scope=footer&delta=0&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license MIT https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt /./! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttri

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14622
Entropy (8bit):	7.98324058359048
Encrypted:	false
SSDEEP:	384:QopcJPYBa3rU6KcUJ1SXtKdCRokYC3dE7ep:H+JP9rU6RUJIdKdBCtE7ep
MD5:	C653A46326F12936183D50C5EA87AA49
SHA1:	4358E6950AEBFF8CC18075C222604ACF09C775B1
SHA-256:	1E7E3E106AA39279085F1561401AF99F4DA0073EAF5C6EF9A2E04B600DDDF532
SHA-512:	3A6C07933CA65B713D089894D30C146EF68967FA2890D966A23769487E131F79E174F1F6C5B7BB5B267AE26D3C95410CD6E08F72317519E4518634CFD8BC23F0
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt
Preview:	RIFF.9..WEBPVP8 .9..p........>...A!......a(..\.../.d[........{..<....w.../.....{7...[.O.'...?..?.>.s=E.........g......?...?.;....p}8.u...............o.=.}....c...>_...........I...~^........?._o.....o...?.?&......._.?.?c~....[.........Os..{..o...B............\|.....K....?............/..?..q.....g...?..b.b.Q.S....'.?.?...................W.s.._............../..........C...o..`..?....c..'.qM\w..gN..P..!N3.o)..c....;..?(.,...6..Pb...e ..cJ._....e.......5...._.^..{.=.. ...vh.....F7....t[.;.i..=. f.{..6...;...~.3..H...L...Yp.....K..5k...x.la..Q.."..1.l.J.%...Mog..!s...Ov........M.....a.~....p)....V...p.....pv.{..J:...;.f...s..,..P...= ..%]4v.Q......d...}l..S&.s....e......}s...p.. .%...QZ...y.,....9.<..O..~.~...+3.}.~.....Q....!%G.)H+..ar..J..o.gV..N.......p.\|..i....v..'...+.0.:.%=.6..E...%....1JQt..@....d..?-bw...../.=Sry5..`.P......H.u..M.......G..$..\...q...?@.....oM.Xd..``F..].f..I0#F....=..q=wj..<I.\|1-... .<.e.X.....(..$..:.Kf.".

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	424
Entropy (8bit):	4.826210276654948
Encrypted:	false
SSDEEP:	12:YGKe4HaaNmddpHm/Bi6dRSMm9Er2sVsRihCFXU9CFXvM9:YdVH/NMzHa9m9Er20sRdVUMV09
MD5:	2CA62553DC3FDE3551E592A47A6371E9
SHA1:	ADB612AAF8EDBA6A1B3ED1FE807C620D0B2B67FD
SHA-256:	B9391F1017214481EBCD66649D521E043516C53119B2A7A4FA0E7690199AE5A2
SHA-512:	22468FF1B0A3EB6C7344A8C4CD24847CFA617A15377B123DE7744A18DEC68DB29EF53C03F6374026DE74FD798F677F90A72DFA365FC5B9B7D65146696BEDB2EC
Malicious:	false
Reputation:	low
Preview:	{"country_name":"United States","country_iso_code":"US","state":"New York","state_iso_code":"NY","city":"New York","city_id":5128581,"city_confidence":-1,"postal_code":"10118","latitude":40.7123,"longitude":-74.0068,"accuracy_radius":20,"time_zone":"America/New_York","least_specific_subdivision":{"name":"New York","iso_code":"NY"},"most_specific_subdivision":{"name":"New York","iso_code":"NY"},"ip_address":"8.46.123.33"}

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	457695
Entropy (8bit):	5.359729235638168
Encrypted:	false
SSDEEP:	6144:cIba0HaxBBnE7qecH+bMxjVUYHXKuYbN0ShGZa3Qaeu+QFs:cRIaxBBnE7qnU1bNp3Q82
MD5:	FA5C95D8306A66B4EB13EEF3A634F8E1
SHA1:	534157A808DC08F7CABFBD36967566F03DBABF3D
SHA-256:	7E90EFFE2C4B60DF553E50C5E65BCF113AD7A2DDF3D5E7A594F2B8A9CCFD4523
SHA-512:	182B0C9D00C6E3B56AAF88F30AD02E3E97CADA93697C34625FC85FCEF86466B4AE17196F89CC7FCF903847D912ED0E92EC11A25FA4053B91ABBFB88617E72C59
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.2.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202403.2.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2619
Entropy (8bit):	5.0694877363783535
Encrypted:	false
SSDEEP:	48:YHluPRCBr0CBqZlyN6Mn5nQhpW34kUwWFj8fa+/dlluC/C6+bYOrAys1nIvy/lAs:c0PRCl7BolVM5QRFj4a+//lv+drAy5K
MD5:	6C26379C20508A4AB4C7CC53865570F9
SHA1:	3645D43DCCA98EE86E4CF538215E16FBA6069C37
SHA-256:	BB6DC58AEB365D3FE7AB0C1B5FE570B43B09A65AF561F01629A6C8CEBFC5E9CB
SHA-512:	CD89A65E4012ECC662562EF6599605BD59A8CCF286FA83ABEAC86A75C15ECBB9261EEC16F3AF3FC81B8DB9EBA27CD503D21CC93E607AF0E64EF2C7D0D6D5C5A5
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_1WWRROQ76BfwU3I&Version=17&Q_ORIGIN=https://partner.booking.com&Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21&Q_BRANDDC=fra1
Preview:	{"InterceptDefinition":{"BrandID":"partnersatbooking","InterceptID":"SI_1WWRROQ76BfwU3I","InterceptName":"PartnerHub Satisfaction - NEW","Revision":"17","DeletedDate":null,"ActionSets":{"AS_11553084":{"ID":"AS_11553084","Creative":"CR_eR0de0vaanDvFum","CreativeType":"WebResponsiveDialog","WeightedSampleRate":"","Target":{"Type":"Survey","PrimaryElement":"SV_aWNok0ALAYcYyjk"},"ActionOptions":{"targetNewWindow":false,"targetEmbedded":true,"targetFullScreen":false,"resizeForEmbeddedTargets":true,"targetWidth":"1000","targetHeight":"800","accessibilityTitle":"","displayElement":"","selectedDevices":{"browsers":{"Browser\|all":true,"Browser\|Internet Explorer\|all":true,"Browser\|Firefox\|all":true,"Browser\|Chrome\|all":true,"Browser\|Opera\|all":true,"Browser\|Safari\|all":true,"Browser\|Other\|all":true,"Browser\|Internet Explorer\|9":false,"Browser\|Internet Explorer\|10":false,"Browser\|Opera\|9":false,"Browser\|Opera\|10":false,"Browser\|Opera\|11":false,"Browser\|Opera\|12":false,"Browser\|Safari\|3":false,"Br

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 40120, version 2.0
Category:	downloaded
Size (bytes):	40120
Entropy (8bit):	7.988708091189265
Encrypted:	false
SSDEEP:	768:eVnUwEAWngEXoJ5ILphwzdg2wpmubDmM8yizNiWVqI1NaWQOByn3OqDC:QUwEtngsa5BG6ubDmMCiV2Byn3OqDC
MD5:	F2953AF89807609F49B87237180BB450
SHA1:	BCEF01E9E586A9A6C567602272C1A7955B77B0CA
SHA-256:	B02A3F6DFEB4EBF05D30EAECC8473664F1720190639CBFE43B2A7F9A00246E56
SHA-512:	270DD571D34269DAF11A1AD5931C1202B57C205DD3375276AF3DE78F51DA27601FC9ECDEA94CBDBFEB1ED6C29E9A91C267CB916CEA6BE7BA1C537B99393F02AC
Malicious:	false
Reputation:	low
URL:	https://t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingRegular.woff
Preview:	wOFF........................................GDEF..{\.......x\.].GPOS..\|X.......~.C2GSUB...<...z........OS/2.......Z...`i.@.cmap...x.......la.D.cvt ...<........#...fpgm...d.........0.6gasp..{P............glyf......c.......g.head.......6...6...Uhhea....... ...$....hmtx...T...$...D..v.loca...........$..D.maxp....... ... .7..name..zl..........G.post..{<....... ...Jprep.......).....m^.........(.#._.<...........K.....V.g.9...p..............x.c`d``...........YX.."(.i"............N...L......./.a...%......x.%.5.B....7...F.t.. 9.h.=.$D ...;\.r$@.z.....L...z.j:?......d..2.._...l.-]....W.M3..0....x.....K.....O..N.Y.m..'..6.m.m.ms._sz.M.9.\|.z........y.`....0.1H.9(5.Q-CQ...a.....-.....`?...~"..r..#......_d.D...d.........B..O...9..1$.4..LRJ....$.I.)!Y...g....._.e^.MCV.T...iv..;J\-..X...[F.]mY..XL;.t..T.X.l.1.=..+.c.$..b.-.c:.}..l....9.u.G...=..(...w..a.$.{.O3.I..$.57`...<2.\|.<2 2.3q...P$...e.s.@[Ez....+..Lr<R.(.R..^O.........ND!.=I^.Fg .z.,[.S..~....Y.. Kf.tdim.:.....&.{S..u.}.gc.F

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65487)
Category:	downloaded
Size (bytes):	226735
Entropy (8bit):	5.346118746193619
Encrypted:	false
SSDEEP:	3072:sosn/wOry3D0j+mTUXBwgPl/QC2NwmMxrrSeKdSF8UeZ28m4u7k5GT2/2uReiMmZ:64OrM4aWmd/QC2NwfagFAZBakfRV
MD5:	CAD5FE4C499F7568E14E7AB6FF9B3361
SHA1:	7CF66966B26C499B535EFD53C77F65DF7DA14338
SHA-256:	83F4228D1D92171186E8B8CCCE6E69B32AD6B322DB4AF7E4B6F54CE50E299587
SHA-512:	88320686F20F22AA51C2F9493EE8114A9E613C2C93B6F104FFBFDF7A096CE6A3111BA5ACA7598EE1BA1B4FE953D141C79598C5AD096FC89E81F1370D844AE886
Malicious:	false
Reputation:	low
URL:	https://t-cf.bstatic.com/static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css
Preview:	@font-face {. font-family: 'booking-iconset';. src: url(data:application/font-woff;charset=utf-8;base64,d09GRgABAAAAApe4AAwAAAACl2gAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABHU1VCAAABHAAAKNwAACjcNQw8SU9TLzIAACn4AAAAYAAAAGAPEge7Y21hcAAAKlgAAAHMAAABzNfFHlhnYXNwAAAsJAAAAAgAAAAIAAAAEGdseWYAACwsAAJY7AACWOzKPBVGaGVhZAAChRgAAAA2AAAANhact9JoaGVhAAKFUAAAACQAAAAkEqwQt2htdHgAAoV0AAAIDAAACAyG4yWibG9jYQACjYAAAAgQAAAIEAJMgdxtYXhwAAKVkAAAACAAAAAgAiwDLm5hbWUAApWwAAAB5gAAAebQPj6JcG9zdAACl5gAAAAgAAAAIAADAAAAAQAAAAoAHgAsAAFsYXRuAAgABAAAAAAAAAABAAAAAWxpZ2EACAAAAAEAAAABAAQABAAAAAEACgAAAAEAOAAZAG4AhgCkBaAIzAyuD2wQShJEFCQU+hW6FeYWzhg+GIQZ2h1CHcAfZCLMJxwnYieUKJgAAQAZABAAEQASABMAFAAVABYAFwAYABkAGgAbABwAHQAeAB8AIAAhACIAIwAkACUAJgAnAgIAAQAEAbgACQAfABgAGgAeAA8AFAAfAB4AAQAEAbkADAAWABgAGgAjACQAFgAiAA8AFAAfAB4AOwB4AIgAqgDCANwA5gD6AQ4BOgFKAV4BdAGKAZ4BsgHGAegCCAIeAioCRgJUAnICjAKkArACvALMAuwDAgMOAy4DRANUA2gDdgOEA5QDogOwA8ADzgPgA/QEBAQaBDYEQgRQBGIEcAR8BIoEmASqBLgEwgTOBOoBRQAHACYAFgAiABIAGAAWAQgAEAAlABgAHQAWAB4AJAAWABUAIgAWAB

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52983)
Category:	downloaded
Size (bytes):	271368
Entropy (8bit):	5.389609907697996
Encrypted:	false
SSDEEP:	3072:P0VJD/3CCpeXZ78/Ae29qerDGyZgBK3ymvmJSn20fr7C6GcF3w:MRpennCan20fr7Ct
MD5:	13F3ABFF94EA49F02B15A431EBA1B08C
SHA1:	F94AF855B0193BAC730AD21364BBD6F661A68619
SHA-256:	9928C83972BBB1D1006139447FBC83169E98CFE9EE262CD674B111617A45A8B3
SHA-512:	61A63AB65B8ED1AAC371B85EB3F726CF6922CBF740AEECFDF224A0CCB8F6DAB4EEA7A4496CBEA7FF17316B8041BE8E18562E7AA1D7AEA8E6C9CDBF64FC16F1B8
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters
Preview:	<!DOCTYPE html>.<html lang="en-us" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. <meta charset="utf-8" />.<link rel="preload" href="/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3" as="font" type="font/woff" crossorigin="" />.<link rel="preconnect" href="https://bstatic.com" crossorigin="" />.<link rel="preconnect" href="https://cdn.cookielaw.org" crossorigin="" />.<link rel="preconnect" href="https://www.google-analytics.com" crossorigin="" />.<link rel="preconnect" href="https://www.googleoptimize.com" crossorigin="" />.<link rel="preconnect" href="https://try.abtasty.com" crossorigin="" />.<link rel="preconnect" href="https://lonrtp

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x533, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	201762
Entropy (8bit):	7.998902269965866
Encrypted:	true
SSDEEP:	6144:SqvZPkynGcF2flhCzufdexGBmtOCFHSCl:SQPklfXCKlexGBCzyQ
MD5:	3A1F473AB90864054E35EBD6B2DF16D0
SHA1:	618BCB96A03DEA3F1A2A0AA5DAD4368096A79E8A
SHA-256:	24BEF07C383CF9F85CE0B41DED2BE526F5739B460CF053044FEE4E72BF7EF0E9
SHA-512:	E97FE199B56CE22871AA976E95A097C30E89D26D778D35FB9D3181AFA06332C72E41E009C307FC98B8BC87602AF4C70C7D7DA6D5832028AD01AC741F2907DCD9
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/click_article_header_desktop/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?itok=cVuzdpd9
Preview:	RIFF....WEBPVP8 .....z.......>...A..VI3..a,....l..........j....r.....Yw.;....M?.....J+5{..mq...G'...O..............8......#...x..%..n......fro.?W.......o....r.O...@\|Tt..?..............G...........#.G.s....._.............?......6...y.......G.....^.^._.}K?......a...........?.?....../...............?...G...}.._.oJOm?.0..>.~............B.\|.U....]...Y..........o..{..S./.[..q~..S...W.O..................5.....#......._...?.....zGq.f....t.).v".........wb.j#<..e...-.,pT....y.}..d.K..^O....Y.X5.p.)i%...m.....P...[:...^.....d>..L.#.w[c5..v.....b~5GO;.P..e.s...b.2q..(6.L@...VCBc.....c...[9..H....<"4.R..X....x.........\|.....vG.1.;..bD)3..k@.....\......s..P.....k.........~b..\@(.....`)~E......u..TW\.q.Z....<..........<.s6.K..a~...^L*+..k....6x.... .~v0xu.. +...].~.X.%....%N.zGk..O.8%..o/.F$B...H!.qZ..a........g>}N.R......r.J...3W...T.....j.P..\|..Jv.OC.j..........R..9..?.F..O.u.tVY.'.DB.xM.'LZb_.`...N...wmp.h.....)_.X.$\|4\|.>a.....1\|Q1.R....V...r...c.I..x.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1350)
Category:	downloaded
Size (bytes):	1426
Entropy (8bit):	4.841621161203824
Encrypted:	false
SSDEEP:	24:mdsu/SZOZHEk0IXpOzwxb4VviAqp7MJ1NsreVU:muqTpbOzvvmKU
MD5:	E444A03D38821936DD4A531F6D05AFB1
SHA1:	9CC1CC74317C6D327C69B9AC28A70C754CD1EF81
SHA-256:	E6F0D5A59B1EF3CBB25F39CC859ADEB0020369B03384B00D86D98EBB7BE39092
SHA-512:	036A853F19824FE7C5F752C74F32481C0DCDEF90B5068BA48085B8B5B16C708C0DB4FAE2DBDEE0FB5FA21B7657EBEBDEEE888E939A53ED13BB1FBCAA2D31D262
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license MIT https://github.com/kenwheeler/slick/blob/master/LICENSE */..slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;-khtml-user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;-webkit-tap-highlight-color:transparent;}.slick-list{position:relative;display:block;overflow:hidden;margin:0;padding:0;}.slick-list:focus{outline:none;}.slick-list.dragging{cursor:pointer;cursor:hand;}.slick-slider .slick-track,.slick-slider .slick-list{-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0);-o-transform:translate3d(0,0,0);transform:translate3d(0,0,0);}.slick-track{position:relative;top:0;left:0;display:block;margin-left:auto;margin-right:auto;}.slick-track:before,.slick-track:after{display:table;content:'';}.slick-track:after{clear:both;}.slick-loading .slick-track{visibility:hidden;}.slick-slide{display:

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21719), with no line terminators
Category:	downloaded
Size (bytes):	21719
Entropy (8bit):	5.3932420548860796
Encrypted:	false
SSDEEP:	384:1Sm6EGJN0OzlGnhhxik3ChjbhnRh+1H8+/i4d+Qc3SuKVdysL84AbFLAP4Nkj6wR:1yv0OzlGK1L+K+/9kSuu8u4qfPZqJnc1
MD5:	1E8F4CE1EEF35FD6DB9896A784A5E95B
SHA1:	F88D3369328C4F6D648FB9AA3A2B0303FCBAC9EB
SHA-256:	A85DB31329B135D0DD6B5863C06CAF717432922736EF8B91BD8B7EE07E43C992
SHA-512:	F4924C2AC38550E2EC8E647352366A255BB43A087A5ECE4FA0788E0ED4916A07E79547B9751BC4C7C60AD41794453D9C8A550057C0393953FA7DF7398E59B00A
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/shared/analytics.47cf758c4d585426c29d.js
Preview:	"use strict";(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[153],{206:(e,t,n)=>{n.r(t),n.d(t,{AT_HIT_LABEL:()=>be,HitType:()=>a.YQ,aggregateActionTracking:()=>Ee,dispatchBatch:()=>Y,dispatchHit:()=>ve,getCurrentScrollPercent:()=>Te,notifyHit:()=>qe,setGlobals:()=>Se});var a=n(1492),r=n(648),o=n(9578),i=n(3002),s=n(3595),c=n(8009);const l="https://ariane.abtasty.com",p={"chrome mobile":78,chrome:77,firefox:70,edge:77,opera:64,safari:12,"uc browser":12};let d,y,u=[];async function g(e){let t=arguments.length>1&&void 0!==arguments[1]&&arguments[1],n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:l;if((new c.NO).haveConsent([c.rv.collect])\|\|function(e){const t=e.h;return!!Array.isArray(t)&&t.some((e=>e.t===a.YQ.consent&&"no"===e.co))}(e))if(t){const[a,r]=await(0,i.g)(!0,["browser.name","browser.version"]);!function(e,t){return!!e&&!!t&&!!p[e.toLowerCase()]&&parseInt(t,10)<=p[e.toLowerCase()]}(a,r)?function(e,t){navigator.sendBeacon(e,JSON.stringify(t))}(n,e):m(e,!t,n)}else

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65463)
Category:	downloaded
Size (bytes):	760717
Entropy (8bit):	5.336867725432082
Encrypted:	false
SSDEEP:	6144:xCyNyBMeR4QKNPqOxpv2RHVXqufOBb9SoWdOcgB33r/LxmqXidRWwQfY3O0y2WTu:xxheRdwBp6HguG2oWQ13r/wEFK
MD5:	6F29F5C11BA9EF3448B7989D4AAF79F7
SHA1:	05E29FEFA849360F9335E68183A14C2B31B0AC12
SHA-256:	C2AB7655515F9A85A9939FF8EE549B2026EECB52AE0AB1D984C2F3A33FA9A217
SHA-512:	927E6DABF49964A4A37C21574F7B9A229E2AF0238147075E1DA1C792218108FEF0A40AA6A7FC1CEDEF964E7AAEB4536D5B28B0CF6918EB38C9AF0F21D9CECA9D
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/psb/capla/static/js/client.2cc28297.js
Preview:	/! For license information please see client.2cc28297.js.LICENSE.txt /.!function(){var e={"936215e8":function(e,t){"use strict";t.Z={id:"traveller",name:"Traveller",version:"3.0.0",mode:"dark",colors:{color_border:"#a2a2a2",color_border_alt:"#595959",color_accent_border:"#ffb700",color_action_border:"#57a6f4",color_callout_border:"#f56700",color_border_disabled:"#868686",color_destructive_border:"#e56b74",color_constructive_border:"#24a85b",color_foreground:"#f5f5f5",color_foreground_alt:"#d9d9d9",color_foreground_inverted:"#1a1a1a",color_accent_foreground:"#ffb700",color_action_foreground:"#57a6f4",color_callout_foreground:"#f56700",color_foreground_disabled:"#868686",color_destructive_foreground:"#e56b74",color_constructive_foreground:"#24a85b",color_foreground_disabled_alt:"#595959",color_brand_primary_foreground:"#cee6ff",color_action_foreground_inverted:"#006ce4",color_brand_genius_secondary_foreground:"#febb02",color_action_focus:"rgba(87, 166, 244, 0.24)",color_cta_highlighted

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (14445)
Category:	downloaded
Size (bytes):	26807
Entropy (8bit):	5.057139501978337
Encrypted:	false
SSDEEP:	384:+qRSuvyAHpoNJAucRlqW/zJvzxfOJlW6GdWZEP2JJ4SAtZ5eeQgte:QAAi/zlzIJlW6GdWZEP2JJfeQB
MD5:	C5407CF892E45285BE01847749C11B6C
SHA1:	56F7C38868DE6656D36B255FD3A6D0F88893065D
SHA-256:	260551F7501A16977F98E55AEC11B1B66F47D0724F98CA376C447E1C74F7DF72
SHA-512:	C5598818E86A97164FB13CAC2F9E793C114B7BC055D2245005854C7C96B542425B7167CA21295764C5E1072CFDFA3E008D732D55B795FE7FCC5599F235F2BB27
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..ajax-progress{display:inline-block;padding:1px 5px 2px 5px;}[dir="rtl"] .ajax-progress{float:right;}.ajax-progress-throbber .throbber{display:inline;padding:1px 6px 2px;background:transparent url(/core/misc/throbber-active.gif) no-repeat 0 center;}.ajax-progress-throbber .message{display:inline;padding:1px 5px 2px;}tr .ajax-progress-throbber .throbber{margin:0 2px;}.ajax-progress-bar{width:16em;}.ajax-progress-fullscreen{position:fixed;z-index:1261;top:48.5%;left:49%;width:24px;height:24px;padding:4px;opacity:0.9;border-radius:7px;background-color:#232323;background-image:url(/core/misc/loading-small.gif);background-repeat:no-repeat;background-position:center center;}[dir="rtl"] .ajax-progress-fullscreen{right:49%;left:auto;}..text-align-left{text-align:left;}.text-align-right{text-align:right;}.text-align-center{text-align:center;}.text-align-justify{text-align:justify;}.align-left{float:left;}.align-right{float

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28837)
Category:	downloaded
Size (bytes):	29691
Entropy (8bit):	5.206388348040159
Encrypted:	false
SSDEEP:	768:4X1rTKABAYAcyCIArmtEuqX85u5y8DiAhAJmtEhn5Xf8a9rihsvgrfSa9wtvfVaN:41TKABAYAcyCIArAv0iAhAJzdvEsvvap
MD5:	7B18F24618D58DCB7B53F7E16AD0E202
SHA1:	979534DADB3B109E69FEA99517180F8A244FEEA9
SHA-256:	BBFA2282ED66C005D5779C7F2246CA9C0FB4249A9EFF7EE432E2E6B22A1031A9
SHA-512:	B2F7A7C8432DB64E07F63923176010D277F72EF10EB6F13CDC10B48524C2784A78CDC7C0F51F9F19E65B51906E343B09C1651B798BB73E1848887B659F1C6E38
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/1.54b5112e10a3bab30834.chunk.js?Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDID=partnersatbooking
Preview:	./@preserve.Version 2.10.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.10.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.10.0"]\|\|[]).push([[1],{27:function(e,t,i){"use strict";i.d(t,"a",(function(){return o}));var n=function(e,t,i,n){return new(i\|\|(i=Promise))((function(r

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (624)
Category:	downloaded
Size (bytes):	716
Entropy (8bit):	5.2368725597776615
Encrypted:	false
SSDEEP:	12:qTjxS1BKFaGCGT9MTkKqqzi8EmpGe3whGe3OgyGhlzUNBfgxy02sUf0OPv4S:0jE+FaGCTTqq2Vmce3wUe3gBkFUFXf
MD5:	41B7ED0CBE240173EEA85148FCBA633E
SHA1:	39ACD5FE099974486A1C9BA11BA0FE7BE6BC97CA
SHA-256:	274D4116239B63097BB7C16E56E27CBB5A77BE20392FB8E2317C0A0235185CAD
SHA-512:	1EE1D21B138A9F55F823B93D809B3BC58453DDFC3B3EE4D00A1010BBD4EC296546277C6777819CFB744C393BA93FE7578B60CCF0259FD17901F4542714D6C06F
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/sm.25.html
Preview:	<!doctype html><html><head><title>A2A</title><meta name="robots" content="noindex"><script>.!function(e){var o=document.cookie,t=0<o.length;var n,a={feed:[],page:[]};t&&["feed","page"].forEach(function(e){var t=e+"_services",n=o.indexOf(t+"=");-1!=n&&(-1==(t=o.indexOf(";",n=n+t.length+1))&&(t=o.length),n=decodeURIComponent(o.substring(n,t)),a[e]=n.split(","))}),n={a2a:!0,h1:(t=!1,"function"==typeof performance.getEntriesByType&&(n=(n=performance.getEntriesByType("navigation")[0])&&n.nextHopProtocol?n.nextHopProtocol:"",t=/^http\/1/.test(n)),t),user_services:{feed:a.feed,page:a.page}},e.postMessage&&e.parent.postMessage(n,"*")}(window);</script></head><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1367
Entropy (8bit):	4.606114713423053
Encrypted:	false
SSDEEP:	24:tjnKMCvllHjYTe4LKGczfj94+1XtEHg/QSoUos9nqiol9LKg804QTlWApZEhwoqT:VsjQVGf7VQiostqiobLKQkhc
MD5:	D5F05DB5BC49F3BF280F4540914BA76F
SHA1:	9383B048E654A536F07F29EE5635700570BE83A4
SHA-256:	ED492DB618738A5EAE18115863E97FC8C63945846ED8DB4074DFC6F7CCB90467
SHA-512:	FAB6E9441D04A76A567D0155C16913AEA92A7FDBEE5CCB0E6193A1BAB832CC3D57E3BA194B34295C68988E834012461F4F2F8D9DAB04E80A6CABAC081EC3DCAD
Malicious:	false
Reputation:	low
Preview:	<svg clip-rule="evenodd" fill-rule="evenodd" height="64" stroke-linejoin="round" stroke-miterlimit="1.414" viewBox="-.092 .015 2732.125 2671.996" width="64" xmlns="http://www.w3.org/2000/svg"><path d="m2732.032 513.03c0-283.141-229.978-513.015-513.118-513.015h-1705.89c-283.138 0-513.116 229.874-513.116 513.015v1645.965c0 283.066 229.978 513.016 513.118 513.016h1705.889c283.14 0 513.118-229.95 513.118-513.016z" fill="#0c3b7c"/><path d="m.001 1659.991h1364.531v1012.019h-1364.53z" fill="#0c3b7c"/><g fill-rule="nonzero"><path d="m1241.6 1768.638-220.052-.22v-263.12c0-56.22 21.808-85.48 69.917-92.165h150.136c107.068 0 176.328 67.507 176.328 176.766 0 112.219-67.507 178.63-176.328 178.739zm-220.052-709.694v-69.26c0-60.602 25.643-89.424 81.862-93.15h112.657c96.547 0 154.41 57.753 154.41 154.52 0 73.643-39.671 159.67-150.903 159.67h-198.026zm501.037 262.574-39.78-22.356 34.74-29.699c40.437-34.74 108.163-112.876 108.163-247.67 0-206.464-160.109-339.614-407.888-339.614h-282.738v-.11h-32.219c-73.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8641)
Category:	downloaded
Size (bytes):	316767
Entropy (8bit):	5.564373645524955
Encrypted:	false
SSDEEP:	3072:iZ4461aiJ9iVYZLQOF9hf3w0ajHnvLMzU4676XDBin0bukMTv/BLm/qpi:E4R1+VY9QOFzK74Vin0qkMj/BLm/q0
MD5:	3021F3988A66DBF9302CAFB7FE037E15
SHA1:	ECCAD4FB223EEA801601F3AF6DB6317FFD52E37A
SHA-256:	169D1D753E8A9D4D3C6652550D69CA7F1B5F8454A30BB16A2125E0D5EC38B947
SHA-512:	78016B38153F6E3FC01D49C4C344AC7F1272C2C27D98E10F4407EA0B473C94FFD3E836B26FA824CAF8F3C02E2FD1DA26ED4D8DD27A53B25CE224705ED6B5CAD8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-LVHK6H547B&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":19,"vtp_value":true,"tag_id":15},{"function":"__ogt_ip_mark","priority":19,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":17},{"function":"__ogt_1p_data_v2","priority":19,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	downloaded
Size (bytes):	9871
Entropy (8bit):	5.485671781992993
Encrypted:	false
SSDEEP:	192:pIUBupNdxa4mNdr0rth6qrHlualOZCTbKTPsGDzY037P2MuHRLl7s:cd6VuLTMaKCTbKTPsGDzPLP2MuHk
MD5:	2F8F0245223722DF5B75DDDB0F80ADFC
SHA1:	CDCCE836569C9625A929F6E9C399BCA71FCC0852
SHA-256:	9B8867E806A57AC0C33022B346320B3313D063045C61F95944195C2A5F8772F1
SHA-512:	F288F2C4780E766B9BEEE49307764CCA019DC00D0572639EE75D9F57AC639751F3E08D48414539F368A532390435AE1E405650542608663C9344BE8D396B4E7D
Malicious:	false
Reputation:	low
URL:	https://zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_09tjWJVePhLlACp
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","zoneId":"ZN_09tjWJVePhLlACp"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.Version 2.10.0./../*@license

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41046)
Category:	downloaded
Size (bytes):	43421
Entropy (8bit):	5.7971241239650935
Encrypted:	false
SSDEEP:	768:4rQYsdUpQM+LUag2JstKuML5YVUSEXr9cHpoBC678F2cuwp1kczZ+SINBYd0bSWz:4rQYsCR+LUag2JstKuML5YVUSEXr9cJ4
MD5:	A619A84E691889DD32739E518412671B
SHA1:	0DCDEFFA4135127F5F0B32B402F6674EB4C502CE
SHA-256:	E1D7612F6A228883C2B28E0027E85AC292217CAE64C0EB16CD13DA1B7B3811B5
SHA-512:	6CA790CB06D6CF1F94FE7B401E309726695C8585C64EC10E632771D61CE41BB893D15E6F9FE3D864885AD7F307577FD69364FCCD3357B385B5D618C362D8510D
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/WebResponsiveDialogModule.js?Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDID=partnersatbooking
Preview:	./@preserve.Version 2.10.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(e){var t={};function i(n){if(t[n])return t[n].exports;var s=t[n]={i:n,l:!1,exports:{}};return e[n].call(s.exports,s,s.exports,i),s.l=!0,s.exports}i.m=e,i.c=t,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,ge

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	805884
Entropy (8bit):	5.083707468119061
Encrypted:	false
SSDEEP:	24576:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVkO2sdwUqkhBYlJz5oE:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVw
MD5:	7BA11A08E48BA9F76CE05CACEC640727
SHA1:	6B697F983F25B6528544C767277E9A1E2322C7B5
SHA-256:	8E6C1E164372165A4B31001BC9D28614200EAF665A5827BE856AC11D5262946D
SHA-512:	9969DDC1FA8ADA268EBAF448591F602CDC83401BCF73B3A744AAD7A88154F7789A507A922392D43A519C659FB82B940B81C2FE1D01A0646AA9D119FCF75BFED2
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GPL2+ no URL */.:root{--bui_unit_value:8;--bui_unit_smaller:2px;--bui_unit_small:4px;--bui_unit_medium:8px;--bui_unit_large:16px;--bui_unit_larger:24px;--bui_unit_largest:32px;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;--bui_color_destructive_light:#fcb4b4;--bui_color_destructive_lighter:#ffebeb;--bui_color_destructive_lightest:#fff0f0;--bui_color_callout_dark:#bc5b01;--bui_color_callout:#ff8000;--bui_color_callout_light:#ffc489;--bui_color_callout_lighter:#fff0e0;--bui_color_callout_lightest:#fff8f0;--bui_color_complement_dark:#cd8900;--bui_color_complement:#febb02;--bui_color_complement_light:#ffe08a;--bui_color_complement_lighter:#fdf4d8;--bui_color_complement_lightest:#fefbf0;--bui_color_constructive_dark:#006607;--bui_color_constructive:#008009;--bui_color_constructive_light:#97e59c;--bui_color_constructive_lighter:#e7fde9;--bui_color_constructive_lightest:#f1fef2;--bui_color_primary_dark:#00224f;--bui_color_primary:#003580;--bui_color_primary_li

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	265211
Entropy (8bit):	5.245142464664193
Encrypted:	false
SSDEEP:	3072:wHAz206ZJkgGupf26SWLuO42x9y3x1MyIrb/U6bPz140OymB7Om713f/vXztmamN:jipfNb/J17OymB7O8/vXzt0N
MD5:	1B3FFA711D393BC6EBEE052E2A025A6D
SHA1:	C2A68BA3FF4EE520DA2F0EEA4EB81431054DDB69
SHA-256:	72C6F81D40CD87FE97AA5BFDD37184B1F7F051E63A266949992DA28BDF84EF49
SHA-512:	E7269EF8F668E457B826B7A3C7567E44F04171E6C3730088E215AFB660A289420B9835129B1FEA7767A806B3D61F84C503EA0EA24DE12CA5F97DA40F5B1AC73A
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/jfe/static/dist/jfe.1b3ffa711d393bc6ebee.js
Preview:	webpackJsonp([37],[,,,,,,,,,,,,function(t,e,i){var n;void 0!==(n=function(){"use strict";if("undefined"!=typeof window)return window}.call(e,i,e,t))&&(t.exports=n)},,,,,,function(t,e,i){var n,s;n=[i(26),i(2),i(3),i(1),i(40),i(0)],void 0!==(s=function(t,e,i,n,s,o){"use strict";return o.AbstractClass.declare({$name:"PageElement",$extends:t,_id:null,_$el:null,_page:null,_pageID:null,_defaultLan:"EN",_currentLan:"EN",_language:{},_boundView:null,runtime:{},initialize:function(t,e,i){e&&(this._defaultLan=e),i&&this.setPage(i),this.setDef(t)},setDef:function(t){t=t\|\|{},this.runtime.Display=t.Display\|\|"",this._language=t.Language\|\|{},this.translate(this._currentLan)},_getElement:function(){var t=this._pageID?"#"+this._pageID+" .ActivePage #":"#";return n(t+this._id)},bind:function(){this._$el=this._getElement(),this._$el&&this._$el[0]&&(this._boundView=s.bind(this._$el[0],{runtime:this.runtime})),this._trigger("bind")},setPage:function(t){this._page=t,this._pageID=t.id(),this._listenTo(this._

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	80711
Entropy (8bit):	5.390279253038388
Encrypted:	false
SSDEEP:	1536:Aph5HknM8/CUV0dJ2g6DQm/cZRuSlYRy16qIM7B:ehQZCQ/WYo16qIM7B
MD5:	48D245EC8385771C75FCC3EAB92B5967
SHA1:	A5A557EA6BBA77E98ADD0828DF963E7ED7DB0105
SHA-256:	471DA81FBD408B6352D17FDEC0E7D4940A82CA210F12DB00FB80504881623887
SHA-512:	74B7E8455425D3BA6D57CF862CAB9C04BBEEE1BD8E50FC9B06A826AB7E458AB434A47F2F3570B9A9BDF462BDCB99301DAEA19FDEC72F2EF7E6F8BDD6BFB0809F
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your privacy settings","MainInfoText":"Select which cookies you want to accept on this site.","AboutText":"You can find more detailed info on cookie use and descriptions in our privacy and cookie policy.","AboutCookiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/content/privacy.html","ActiveText":"Active","AlwaysActiveText":"Always Active","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"By clicking \"Accept,\" you agree to the use of analytical cookies (used to gain insight on website usage and to improve our site and services) and tracking cookies (both from Booking.com

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2922)
Category:	downloaded
Size (bytes):	121180
Entropy (8bit):	4.790381727136307
Encrypted:	false
SSDEEP:	1536:i8aBKbzQS71gopdBimL/uiUfJSkjbHwfjz9oAhZv7BJ0C1Zth/Es7EUFar:P86/7jz9oAhZv7BKC1Zv/Es7XFar
MD5:	2D272F0222AA817F5CB96E94E70099FF
SHA1:	AAB8208AF9788CBD146976E7775B9950AD670951
SHA-256:	824C2F3A1A46DD3920DA3547903AA364E733E1153BFD7B259B270B6CA7D4A460
SHA-512:	4B1A463066F464BD58C99122AA1E52E13DD6864CBF4C6C1562429E3C576ECA65E7BECA3769A6191C312F09861E8D9DE65BD0D605D224F2AC83B180B951E9F84F
Malicious:	false
Reputation:	low
URL:	https://ennexhorpps.com/static/stylesheets/banner.css
Preview:	#onetrust-banner-sdk {. -ms-text-size-adjust: 100%;. -webkit-text-size-adjust: 100%.}..#onetrust-banner-sdk .onetrust-vendors-list-handler {. cursor: pointer;. color: #1f96db;. font-size: inherit;. font-weight: bold;. text-decoration: none;. margin-left: 5px.}..#onetrust-banner-sdk .onetrust-vendors-list-handler:hover {. color: #1f96db.}..#onetrust-banner-sdk:focus {. outline: 2px solid #000;. outline-offset: -2px.}..#onetrust-banner-sdk a:focus {. outline: 2px solid #000.}..#onetrust-banner-sdk #onetrust-accept-btn-handler, #onetrust-banner-sdk #onetrust-reject-all-handler, #onetrust-banner-sdk #onetrust-pc-btn-handler {. outline-offset: 1px.}..#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo {. height: 64px;. width: 64px.}..#onetrust-banner-sdk .ot-close-icon, #onetrust-pc-sdk .ot-close-icon, #ot-sync-ntfy .ot-close-icon {. background-size: contain;. background-repeat: no-repeat;. background-position: center;. height: 12px;.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	385
Entropy (8bit):	5.595635435623162
Encrypted:	false
SSDEEP:	6:+B/Rtp1Jb/Rtp1JLrqY51PQD+2hM1OUNT37h4pIoauwfA6VV:+B/Rj/RPpbQfhMQUuIoauwRVV
MD5:	774199271C102AE8B705476863DEBB43
SHA1:	DD259CC6B4EA650EB613A2BAB86C3540C48A8AF3
SHA-256:	4D9E8E40A8981164BF057D36D06196FCDAEFF8EA31EE7A647F9D08C6F77B4129
SHA-512:	347B0E4786B4AB975AAF1ACA33791C239F58FAD62DCADF84E8521FCB5484E655EBF2AE0DE2F5A20E748A01F22D34060B1AE2831F644E90677714CB1448692F37
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/psb/capla/static/js/034e4287.d0fe97f0.chunk.js
Preview:	"use strict";(self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]=self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]\|\|[]).push([["034e4287"],{fe905f7b:function(e,_,t){t.r(_);var a=t("540adcd8");(0,a.serve)((()=>t.e("a72063b1").then(t.bind(t,"64b778ad"))))}}]);.//# sourceMappingURL=https://istatic.booking.com/internal-static/capla/static/js/034e4287.d0fe97f0.chunk.js.map

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	920
Entropy (8bit):	6.266465771776131
Encrypted:	false
SSDEEP:	12:6v/76H63EhZYYvUfeeTnECABamxvWogDvZ/IbmdSfwdZ1sQ83Iz:3ZYYvUfeyFABUDvZ/ISS4z
MD5:	9E978A98A7F44821484F50FF960CF35C
SHA1:	A6A6033ACFF45C59A28D8953865C02A4EE1941F3
SHA-256:	9AFD59DC0CF67C2BAF372BF7CF482FEBFC4C1722299999DD6BA0A82BBBD4CD3B
SHA-512:	E8F872C11E0845122226ED590372B96FD3BEE8959DD22C82F0883A712FADFA2868353C643DCBFFE907D9A275489C0A076F42F5FD0811316EEF11738DC83C4551
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/WRQualtricsControlPanel/Graphic.php?IM=IM_1mqI4AgyMBw7Le6
Preview:	.PNG........IHDR.............8k.....qPLTE............@@@+++$$$ ...+++'''$$$""" $$$###!!!+++)))'''$$$"""((('''&&&)))((('''%%%$$$((('''&&&&&&%%%(((''''''&&&'''&&&%%%%%%'''''''''&&&&&&%%%%%%&&&&&&%%%&&&&&&&&&&&&%%%'''&&&&&&%%%&&&%%%'''&&&%%%'''&&&&&&'''&&&%%%%%%'''&&&&&&&&&&&&%%%'''&&&&&&&&&&&&&&&%%%'''&&&&&&%%%&&&&&&&&&&&&&&&&&&'''&&&&&&&&&&&&&&&%%%&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&'''&&&&&&&&&&&&&&&&&&&&&....z.K...ytRNS...................... !"%&')234567@ABDOQRSTUVWXYZ]_adjklnoqstx{......................................................... ..Y....bKGDz8.j...PIDAT.....C.....o+k.$."K..s$.....$..o...{..04..'..........O...S..........o..p.G.v. .......A.0.~h......F[S....X8..\|z... ..=.,..K.h.........Q.J..,g.`<.\...+.....at...#&LD.......8...zt.,.L.;.50.3"">_..Q..B.._n.....j=...~.\.....L..1...s.g..V..^.....H......Z.)h..^....}.P.n.K.$..n..J..}...c[.R. 7.......F.....B.....n.y..rAC...:.....IEND.B`.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	88612
Entropy (8bit):	4.178492548277045
Encrypted:	false
SSDEEP:	1536:S441MvE/vq8FYv5VDWi5opnS20b4zBTGzUXJKRGOV3f:f8/5YRBU7zIcJKRRR
MD5:	901271A6D98D5DB3574C625980EB84E3
SHA1:	889F92414348EE85C5C88714E9CF83769827C98E
SHA-256:	8410910C0535C65D188F15F0BF4E0BEC6B67D8DB07302EB82E98B94D3FE09ECB
SHA-512:	4288C1387ED889C4F3F00747F60F6D87A7901603D26194AF8A359D34B527A66DF74493EA450BEFD6E9D1B356B661BCF1AD1ED34C67DE7948853535DBFA4DFF16
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons.37.svg.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.set&&c.svg.set({_default:'<g fill="#FFF"><path d="M14 7h4v18h-4z"/><path d="M7 14h18v4H7z"/></g>',a2a:'<g fill="#FFF"><path d="M14 7h4v18h-4z"/><path d="M7 14h18v4H7z"/></g>',amazon:'<path fill="#FFF" d="M24.998 23.842a.901.901 0 0 0-.377.086l-.4.172-.193.08-.25.1v.005c-2.72 1.102-5.573 1.748-8.215 1.805-.097.004-.193.004-.29.004-4.153.003-7.544-1.926-10.964-3.823a.803.803 0 0 0-.36-.093.646.646 0 0 0-.43.164.591.591 0 0 0-.182.427c0 .207.112.395.267.52 3.21 2.786 6.73 5.376 11.46 5.378.094 0 .188-.002.28-.004 3.01-.07 6.415-1.084 9.058-2.744l.017-.01a9.07 9.07 0 0 0 1.018-.703c.205-.15.346-.385.344-.63-.01-.435-.378-.73-.776-.73zm3.666-1.54c-.012-.265-.068-.466-.178-.632l-.01-.016-.015-.02a.863.863 0 0 0-.332-.218c-.347-.133-.853-.205-1.46-.207-.437 0-.92.04-1.4.142l-.002-.03-.486.16-.01.006-.276.09v.012a4.617 4.617 0 0 0-.89.498c-.167.13-.31.297-.317.556a.51.51 0 0 0 .185.395.6.6 0 0 0 .378.13c.027 0 .0

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	642
Entropy (8bit):	7.485255326893554
Encrypted:	false
SSDEEP:	12:6v/7+FO+DpBBzM22sBdG4llNTJ6yHfbE8/jALtcq4PsesuZtC6mN:5tj2sBdpXlHfw8chcqgsCZxmN
MD5:	41A0E840AA47C87E19D2BFE0B1231C3F
SHA1:	B5F588CA91FC9E67B5EA658C5FF943B0639E57B9
SHA-256:	A333D02EEDDE7A4DD8643D58B0EA7947268A1762F35F517EB6000EC9E7FCFAE8
SHA-512:	8578A788F605BC27B4326EB38417A71E45A05AC885B971C49AC3C7D23F6DDF747F69F2CCF3DF0C461E1C90268247D6959F248D3001518F56888F6D6B8C1CDD2E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`......uPLTE..0<9p..0.'@.....0<:p.s}TS.....a_.HFymk.IFy.;I......yx....HGy..........Wd.........&@...mk.......G^............l.........tRNS...;%j.....IDATH..a..0..`..5..KiA8..S..O.y.....h><..4.......c..0..Pm.v......i...iuo..;..X..H'7LVM.....{..5zM.{.B"-4r[O..L..fw.hY..G...\.@h.U.kS...d.2`{...]i.....Zt@....t.,.z..W..x..........V-lB...S.!...S....U5.....E.+...g..4.....!.?...N..w.7-L[....<j..\|.+r5.u~..a0.<.l..._.h.q..4.....(.>.<.E.I...-t....X.S.77-nX.......^.T.*.....s.m.......~V....Lnz....Y...5......-...\|...{q...'.lN.W.4W]..<.......`!..A......D@...$.....0X.I..1XI.....T....C..@.}....IEND.B`.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1350)
Category:	downloaded
Size (bytes):	1426
Entropy (8bit):	4.841621161203824
Encrypted:	false
SSDEEP:	24:mdsu/SZOZHEk0IXpOzwxb4VviAqp7MJ1NsreVU:muqTpbOzvvmKU
MD5:	E444A03D38821936DD4A531F6D05AFB1
SHA1:	9CC1CC74317C6D327C69B9AC28A70C754CD1EF81
SHA-256:	E6F0D5A59B1EF3CBB25F39CC859ADEB0020369B03384B00D86D98EBB7BE39092
SHA-512:	036A853F19824FE7C5F752C74F32481C0DCDEF90B5068BA48085B8B5B16C708C0DB4FAE2DBDEE0FB5FA21B7657EBEBDEEE888E939A53ED13BB1FBCAA2D31D262
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license MIT https://github.com/kenwheeler/slick/blob/master/LICENSE */..slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;-khtml-user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;-webkit-tap-highlight-color:transparent;}.slick-list{position:relative;display:block;overflow:hidden;margin:0;padding:0;}.slick-list:focus{outline:none;}.slick-list.dragging{cursor:pointer;cursor:hand;}.slick-slider .slick-track,.slick-slider .slick-list{-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0);-o-transform:translate3d(0,0,0);transform:translate3d(0,0,0);}.slick-track{position:relative;top:0;left:0;display:block;margin-left:auto;margin-right:auto;}.slick-track:before,.slick-track:after{display:table;content:'';}.slick-track:after{clear:both;}.slick-loading .slick-track{visibility:hidden;}.slick-slide{display:

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (57976)
Category:	downloaded
Size (bytes):	258794
Entropy (8bit):	5.432395204834776
Encrypted:	false
SSDEEP:	1536:PRUVJD/tmBKac0h3fVrBcFpebVCWc89scHy29PlPyEyayxyQLyyP4JZme29qGVpS:ZUVJD/61speEe1Ae29qnOqYTavRdco
MD5:	F29863AE6545F5AB1959C2A1E74EFBA4
SHA1:	BA9EA574F4E0AE8552AB60496BF240662066AF1E
SHA-256:	0911E1D57AB134F37E1C17D1A6FCB66B6ABB9BD73B3A70887A9BB56B997A8B17
SHA-512:	5CAA3D19E79E71E2F1E2743ED35092B8D3CB161845781EAD6E52CE9E45BE988741D9FDFD731F08C347592C6A1AA01E9A5FCA05658E0885BFE81A11C0B72F344A
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/cs
Preview:	<!DOCTYPE html>.<html lang="cs" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. <meta charset="utf-8" />.<link rel="preload" href="/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3" as="font" type="font/woff" crossorigin="" />.<link rel="preconnect" href="https://bstatic.com" crossorigin="" />.<link rel="preconnect" href="https://cdn.cookielaw.org" crossorigin="" />.<link rel="preconnect" href="https://www.google-analytics.com" crossorigin="" />.<link rel="preconnect" href="https://www.googleoptimize.com" crossorigin="" />.<link rel="preconnect" href="https://try.abtasty.com" crossorigin="" />.<link rel="preconnect" href="https://lonrtp1.m

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 91 x 26, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1591
Entropy (8bit):	6.299213971363517
Encrypted:	false
SSDEEP:	24:DRINGdp3+42X9tK0Td/YpgLWnTmSPq/rZZhwjeqcJJG0ZtNy6LBiyy3XX6w:DCc3YNtK0R/YrnTmSPE1Z6sJjy+B8n6w
MD5:	B6D0B31340D7A113F63B936E23D06F78
SHA1:	268E3856DA737F7E56E679258949EF70DDDE47F4
SHA-256:	18C62988860A8FFD90BAB6376B4FE36A723BD39403C420D3943AA3EB5A0029C5
SHA-512:	FEF2D5BA4648EE1BA476E3FBD4852E52F93A0F40988F368AF90DF4188F64E6DCB09BDE79887A4AB3FE81774168D84E6DFCB61AFBA44DC6FB56C3C72D808E23DC
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png
Preview:	.PNG........IHDR...[............b....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................If.....tRNS...........gx.]:..HR.0..#(..$/.+!....'-.....;...h\|ZW...u....iK..o....`e.....pP"...t.....V.....rO..... N..b..c.sm..3..[.4~.9.I.....M..n{.^a...UL.?...6T.l..<...@...B\.7...S........bKGD...-.....IDATH....WLQ....t!.\..b..S.4M2. 5..2#N.]NE........&B.T"..\.?.L.I..j...e.k....u..k...dA.......(p.. ZB..k.u.....e..BB7.bo.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
URL:	https://www.booking.com/js_tracking?ref_action=content&ver=2&stype=1&lang=en-gb&pid=c35a0c4170650183&ete=&etg=&etcg=eWfCDMeICKFNcfEEHFRT\|4&ets=&etgwv=
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	88122
Entropy (8bit):	5.379415418663791
Encrypted:	false
SSDEEP:	1536:AtycCNkkgZkqXpC/NKUqSXxiRUCjeDa3cZRuSlYRyQV7B:EycCUDChL6eDa3WYok7B
MD5:	A534FD02F639AF5099285F31331E16D6
SHA1:	C48AC04722D957F7D2382C05E7512A0B455688D8
SHA-256:	E19CFEC0969D8613B7733FEF7AB339F7A6F437B7303C12F6F2DA92696CF8F060
SHA-512:	36927EAECFD479A3EBA5C4CCBAE018561F4A87D99ED0A5C46890716AB316EAA223BBDCD80166185E60EFAC7A63461999985B3B2BE4F28006EC48E49197B0041C
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-gb.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your privacy settings","MainInfoText":"Select which cookies you.d like to accept on this site.","AboutText":"You can find more detailed information on cookie use and descriptions in our privacy and cookie policy.","AboutCookiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/content/privacy.html","ActiveText":"Active","AlwaysActiveText":"Always Active","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"By clicking \"Accept\" you agree with the use of analytical cookies (which are used to gain insight on website usage and which are used to improve our site and services) and tra

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21252, version 1.0
Category:	downloaded
Size (bytes):	21252
Entropy (8bit):	7.991146004478134
Encrypted:	true
SSDEEP:	384:GKJwS9iHiO/KkTrwN5tJ7nFhHbP+zy0pLcdT4A7Sb1NiiKy+tk3lTeK9JnfQ:zCHNiLTTnF52zy0pOT4A7y1UiKyaoj7Y
MD5:	54AF8D9DC08B40DB6365118037329120
SHA1:	8883C4D93F31BC4178DF3A2399F0BA9A70B48A4E
SHA-256:	197F29A9D43E95D57C1AEE32CA7B618DAA3D46938C0677BC5A4C3A0B3E188BC0
SHA-512:	4CD91B31671146E0C667E73CEFC290BF54FB2E784F7F5812B0AAB553B9FDF6D071FCDE78884193F25095AA75CFA30684AEE242BC0334861DA556F6A0395CFEA4
Malicious:	false
Reputation:	low
URL:	https://cdn.mouseflow.com/fonts/gstatic_droidsans.woff2
Preview:	wOF2......S........d..R.............................@...`.....\|........(..]..(..6.$..L. ..l..g..l.J.%........k....C..~;:....._....?&.1b.}...'..A.zf.;5.v.oku..4....]<S_0..Q.....F.,-U....+"...c.iC..>...).T...W..\~.Om......5a.CPA....~.2......J?(.^.[...c......S............a.;.T.'.#.....`..F.Y..6k.....ab.......j.1..Q.T..Z.iR..A.....Zci.MS....1.4MQ.u.ij....e.$[.l.w...~..O...G....}.DF.'..(B..$.p.4I.>.i.........t6.....h.ZG.....A..-aEtP...+...SGP...JgtD..d....h........CmW....f.....u..Ti..\i.7Tg.NN.OZ../...s=8....dvK=.-...1..H$./2...6...............f......:...t[.}.....T.-..R....Q........Z.}.....t.t.....I.....5A).,g..Nk.F.r.P:B.x.{@.r..$....q..,.zh^.-..I...4.E..,I._.@.[....P.^Um..t..+.S..R....K.3..1..........(9 (;.%.H.QH....D..Z.P.e..p..k.O....M.Mc.SnX.[..y..;..T8"+.p..A..t....d.9=..Bg>X.P(A.D....t.&..e.C....q.;...T..c.E,i..HV>...........NT+.../.S....!2c......D..l.......py.6....$@y..O..jnOs..c.~.....@..0h...Su..PxN..XW.xp..K.......V\9.N;...Q.U.?$..7

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 19 tables, 1st "DSIG", 39 names, Macintosh, Copyright 2018 IBM Corp. All rights reserved.IBM Plex SansRegular3.3;IBM ;IBMPlexSansVersion 3.3
Category:	downloaded
Size (bytes):	180440
Entropy (8bit):	5.711370898512645
Encrypted:	false
SSDEEP:	3072:FNYLp1S58g2HmXAyxc2QwQdGjmxymoAsv:/YCpFXFxc2QwQdNoAsv
MD5:	D2AC4D984B36B772A3B08736889192A7
SHA1:	60EF66E01C47FC659548FB13A9A64D4AA8036545
SHA-256:	24DD81D879C0899B48322F9E8434FC924B972948C7A258032C5A92A4B49B4725
SHA-512:	8AE06AAF46A816B61570058D287AF75C9ADB1775EA0F0814CDAC23E44DC38FBA44A1529FD0B5F6DB7C2AC8036352410AC1FCAC20949ACEA697C87C93C94E07AB
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/src/assets/fonts/IBMPlexSans-Regular.2c412e2f77ae69aa2154613095be7130.ttf
Preview:	...........0DSIG............GDEF..a...\|....GPOSS......,....GSUB5...........OS/2.CjT.......`cmap...........Rcvt .m.........>fpgm.Y.7.......sgasp...!...l....glyf......%.....head.......<...6hhea.......t...$hmtx..........loca;..&...\...Fmaxp........... meta6.<!.......DnamerH.H........post..#.........prep.......h..............._.<............v......Y......._.......................................................T...b...............<.......M.........X...K...X...^.<.5................P. ;........IBM .@.......$.,.... .............. ..... ...............,.D.2.D.U.../.D.2.%./.D.....+.D.2...+.8.U...L.......U...U.i.U.8.U.0./.D.U.D.2.o.U...$._...8.P...................!.......].m.:...].G.]./.]...:...]...<.....z.]...].,.]...]...:.^.]...:...].E..<.....X.a...{...e...Q...D.$.X.<.X.<.X.<.X.3.X.E.X..X.&.X.M.X.C.X.E.X.:.X.C...H.{.A...E...E.L.$...$.5.....K.#.K.$.U...'.$.1.$.1...U...U...G...,...G...,...#...#.0.$.0.4...$...4...Q...Q...%.....O.S.O...=.].=.<.W...W.<.......(...5...5...A...A.:.{.:.{.J.L...4

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1197
Entropy (8bit):	5.250746419165476
Encrypted:	false
SSDEEP:	24:2dYwahJhWDCLf3fbeVZmFy6yCXCWX9JVLNpwtbMIhU7C06Fa5QcPm:cyJhbf3fbOKy6yCdtJWWFL6FSQ/
MD5:	E8209D74AD093F151954A3820C12E5D8
SHA1:	12FBF39039F0182026ABAF8B0A22E75C9BB316F7
SHA-256:	C80B9838465A2C5AA19E06C25631CD22D81DD8C76563875EBFB4D35304DFBA47
SHA-512:	4DC04BF54E06A26D78C6D71EAA392059B21EA8A01BF6C6B1EB808F9A01758C18DB18A28A9D74A841B3D5F2249787890944EC94EE0A6D4B2F99042138534800F2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 -->.<svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 192 192" style="enable-background:new 0 0 192 192;" xml:space="preserve">.<style type="text/css">...squircle{fill:#003B95;}...bdot{fill:#FFFFFF;}.</style>.<path class="squircle" d="M37.8,0h116.5C175.1,0,192,16.9,192,37.8v116.5c0,20.9-16.9,37.8-37.8,37.8H37.8C16.9,192,0,175.1,0,154.2V37.8..C0,16.9,16.9,0,37.8,0z"/>.<g id="bdot-group">..<path class="bdot" d="M144.2,143.8c6.7,0,12.1-5.5,12.1-12.2c0-6.7-5.4-12.2-12.1-12.2c-6.7,0-12.1,5.4-12.1,12.2...C132.1,138.3,137.6,143.8,144.2,143.8z"/>..<path class="bdot" d="M106.7,91.9l-3.1-1.7l2.7-2.3c3.2-2.7,8.4-8.8,8.4-19.3c0-16.1-12.5-26.5-31.8-26.5H60.9h-2.5...c-5.7,0.2-10.3,4.9-10.4,10.6V144h35.4c21.5,0,35.4-11.7,35.4-29.8C118.7,104.4,114.2,96.1,106.7,91.9z M67.6,66c0-4.7,2-7,6.4

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	7.596151900307889
Encrypted:	false
SSDEEP:	12:6v/7iiaBY1azPX793IrzbrJif0E5zaB2klzfngSN17Aod/ja:rCMzPZ3Ir3rpkJk1/Ja
MD5:	6018807017AFEAD14417566F975FFDB4
SHA1:	2EE7C3239E4046E9567C8100DECD9ABE6093B79F
SHA-256:	99AF6690771B7B62A1325D0C0B38A9A0300C18921E4877DCF38A239B9C977502
SHA-512:	03C81DD6C526EE84F274F4BFE903FC694BFD4ED20B359C1A7BA09D940795316B816E869B59D4DA383AC8367B952E5ED7C7244795E1EDDB6976A358240421C789
Malicious:	false
Reputation:	low
URL:	https://ennexhorpps.com/static/booking/favicon.ico
Preview:	.PNG........IHDR... ... .....szz....)IDATX..?L.a...w1.......KS..Z..hM.].......c].R...1v.hL...tS[[.....H.1i].ld.!..ppx.....g.{s...}..!.@M.[...0......C ...9.P5....h......P...4o..'Ri...z.Tfn..D......2.y].F.5k...!..<.\|.[r......GdO....vE..$.&...`a...........e.N.._..l..Y..\...\|...;F........u..w... ...e.....5......h..=.58#2..>..\|^....Z._4u.....&Y.M.Z.S.Kt.as.q..2...D......N.%.n.A...g.W....@:S`1....2....e..a.C#h.d...#f..=.i.....qo..+.HN.O.k.:....O.............V&..1.l.t...SHe...\|....W.ts.c.....zj..=..3..b........?8...}....!.F._..m./.T.jv.P."..2.......C....d........A1.....IEND.B`.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (14445)
Category:	downloaded
Size (bytes):	26807
Entropy (8bit):	5.057139501978337
Encrypted:	false
SSDEEP:	384:+qRSuvyAHpoNJAucRlqW/zJvzxfOJlW6GdWZEP2JJ4SAtZ5eeQgte:QAAi/zlzIJlW6GdWZEP2JJfeQB
MD5:	C5407CF892E45285BE01847749C11B6C
SHA1:	56F7C38868DE6656D36B255FD3A6D0F88893065D
SHA-256:	260551F7501A16977F98E55AEC11B1B66F47D0724F98CA376C447E1C74F7DF72
SHA-512:	C5598818E86A97164FB13CAC2F9E793C114B7BC055D2245005854C7C96B542425B7167CA21295764C5E1072CFDFA3E008D732D55B795FE7FCC5599F235F2BB27
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..ajax-progress{display:inline-block;padding:1px 5px 2px 5px;}[dir="rtl"] .ajax-progress{float:right;}.ajax-progress-throbber .throbber{display:inline;padding:1px 6px 2px;background:transparent url(/core/misc/throbber-active.gif) no-repeat 0 center;}.ajax-progress-throbber .message{display:inline;padding:1px 5px 2px;}tr .ajax-progress-throbber .throbber{margin:0 2px;}.ajax-progress-bar{width:16em;}.ajax-progress-fullscreen{position:fixed;z-index:1261;top:48.5%;left:49%;width:24px;height:24px;padding:4px;opacity:0.9;border-radius:7px;background-color:#232323;background-image:url(/core/misc/loading-small.gif);background-repeat:no-repeat;background-position:center center;}[dir="rtl"] .ajax-progress-fullscreen{right:49%;left:auto;}..text-align-left{text-align:left;}.text-align-right{text-align:right;}.text-align-center{text-align:center;}.text-align-justify{text-align:justify;}.align-left{float:left;}.align-right{float

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1210)
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	5.258297327799955
Encrypted:	false
SSDEEP:	12:UMY+8fuVEGO1wyT7ZYTH9toIRHuxTe7gxyaJRTHx5eTi4Hmr2YLAoCfA0Ixa0YEd:a+NEZWZFuxqU4afDee4GhQZ05VmImK
MD5:	49D03D47BD15DDBEC4926A87821C3278
SHA1:	8D545B020E45D00A775DECA8BCB0A4BBE17C1F2D
SHA-256:	D327ED4B7D3E5878F53B377E35DE67F9A2D9335BD85BE6028C36D3B6B05D4F72
SHA-512:	39ABCD8CB66CBF65282C2CD32BE247477EA6322A32D8E5FD8771254B7FD3F939428CA0462851AF60108BC8FE17CB3BF6769CA45C817859CC27B7E9AAC83801C7
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.body{background:none;color:#000000;font-family:Verdana,Tahoma,sans-serif;font-size:14pt;line-height:1.45;margin:0 !important;padding:0 !important;width:100% !important;}h1,h2,h3,h4,h5,h6{page-break-after:avoid;}h1{font-size:19pt;}h2{font-size:17pt;}h3{font-size:15pt;}h4,h5,h6{font-size:14pt;}p,h2,h3{orphans:3;widows:3;}code{font:12pt Courier,monospace;}blockquote{font-size:12pt;margin:1.2em;padding:1em;}hr{background-color:#cccccc;}img{max-width:100% !important;}a img{border:none;}a:link,a:visited{background:transparent;color:#333333;font-weight:700;text-decoration:underline;}a:link[href^="http://"]:after,a[href^="http://"]:visited:after{content:" (" attr(href) ") ";font-size:90%;}abbr[title]:after{content:" (" attr(title) ")";}a[href^="http://"]{color:#000000;}a[href$='.jpg']:after,a[href$='.jpeg']:after,a[href$='.gif']:after,a[href$='.png']:after{content:" (" attr(href) ") ";display:none;}table{margin:1px;text-a

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	959
Entropy (8bit):	6.354410574712608
Encrypted:	false
SSDEEP:	12:6v/761YCTo4UNDq1ukuGCXB7a39eYu7D0LzasPE5PB0Jeg6jzUw1:35UN22GYBi9ed7D0L+y2PyFQzV
MD5:	B39A82DCE20AD4B53397E3984094B3EF
SHA1:	977141A5A2C08BFBFD9A416577E8EDB881535291
SHA-256:	5BCB4213485CA6A1C65F2A10DFBF9C4879E1BBFB17E68A607518DA453C972933
SHA-512:	F5B765268638A1EAEA292DD3035F7099780CFE2957592B018EB58AC72AD3274BCEED6E0CBE7838E4C5B5B831CDE46E5556E1A286DE2DC6819C9845501E3CB11D
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/WRQualtricsControlPanel/Graphic.php?IM=IM_hY3X2U9fAL7RoDN
Preview:	.PNG........IHDR.............8k......PLTE............@@@+++$$$ .........+++'''$$$""" ###!!!+++)))'''((('''&&&)))((('''%%%((('''&&&&&&%%%$$$((('''&&&$$$(((''''''&&&&&&$$$&&&%%%%%%'''''''''&&&&&&%%%%%%%%%'''%%%'''&&&&&&%%%'''&&&&&&%%%'''&&&&&&%%%'''&&&&&&'''&&&%%%%%%'''&&&&&&&&&&&&%%%'''&&&&&&&&&%%%'''&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&%%%&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&'''&&&&&&&&&&&&&&&&&&&&&&&&......`....tRNS..................... !"%&')345679:;=?@ABDJMQRSTUVWXYZacgijlnoqstw.............................................................O..7....bKGD.e..h..._IDAT..e..#Sq......1mf.[.r.0.Dn..m..S.d.MI..o;.}.....=.%6..._3...QN{.[T<2..+9.j..$....8.?...?s.:7....kU{..r.j.e.r....o)h2../.m."....M....4.^.A?y....K.i....:.$H..."o..!igT..."#..JN.eV\T...^...x]n.Z%.S..).u../..:=2.1.f.T.5.XK.=...(A}f.h..u.......l.....//.u`.I..#._.b....?...pJ.../v.y.r.sb.\.v..W.).%.-I.9.8.S.sqK.>..vt>..._..r6.r"m...>..+..R........IEND.B`.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	805884
Entropy (8bit):	5.083707468119061
Encrypted:	false
SSDEEP:	24576:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVkO2sdwUqkhBYlJz5oE:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVw
MD5:	7BA11A08E48BA9F76CE05CACEC640727
SHA1:	6B697F983F25B6528544C767277E9A1E2322C7B5
SHA-256:	8E6C1E164372165A4B31001BC9D28614200EAF665A5827BE856AC11D5262946D
SHA-512:	9969DDC1FA8ADA268EBAF448591F602CDC83401BCF73B3A744AAD7A88154F7789A507A922392D43A519C659FB82B940B81C2FE1D01A0646AA9D119FCF75BFED2
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GPL2+ no URL */.:root{--bui_unit_value:8;--bui_unit_smaller:2px;--bui_unit_small:4px;--bui_unit_medium:8px;--bui_unit_large:16px;--bui_unit_larger:24px;--bui_unit_largest:32px;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;--bui_color_destructive_light:#fcb4b4;--bui_color_destructive_lighter:#ffebeb;--bui_color_destructive_lightest:#fff0f0;--bui_color_callout_dark:#bc5b01;--bui_color_callout:#ff8000;--bui_color_callout_light:#ffc489;--bui_color_callout_lighter:#fff0e0;--bui_color_callout_lightest:#fff8f0;--bui_color_complement_dark:#cd8900;--bui_color_complement:#febb02;--bui_color_complement_light:#ffe08a;--bui_color_complement_lighter:#fdf4d8;--bui_color_complement_lightest:#fefbf0;--bui_color_constructive_dark:#006607;--bui_color_constructive:#008009;--bui_color_constructive_light:#97e59c;--bui_color_constructive_lighter:#e7fde9;--bui_color_constructive_lightest:#f1fef2;--bui_color_primary_dark:#00224f;--bui_color_primary:#003580;--bui_color_primary_li

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2423)
Category:	downloaded
Size (bytes):	11424
Entropy (8bit):	5.172459614029362
Encrypted:	false
SSDEEP:	192:z5z+g+TaqItgrJK2QIui5SA+wrWTuZjqLDcVrxbdDu:spaqogrJTQIui/+wr+uV6cTU
MD5:	8488047B361B1EC8C000ECE780125BE4
SHA1:	4A13402D58DBCC283D3638069FEE0353D37E314B
SHA-256:	D316DD936F12DD51D482F67A3B38A3B0320F7429AE075D3548BF1A4B85A7493F
SHA-512:	9132BBA9EBE899A9544088D633DAD674E0CC9B9A1ED3BFB69C881108F75A395A26BA36C81C883D2770F9B62A3ADAA9EFE72404B2BA3F178D8B9B2F69D2CE8737
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_VkmDSMYWYbk1GzPhN1O6VYri69gfmqRRB6Kq_M8CTg8.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..(function($,Drupal,window,once){Drupal.behaviors.socialMediaImprovements={attach:function attach(context){var shareButtonsWrapper=$('.share-buttons',context);var shareButtonsList=shareButtonsWrapper.find('.share-buttons__list');var copyUrlLink=shareButtonsWrapper.find('.share-buttons__copy-url');var copyUrlSuccessMessage=Drupal.t('The URL has been successfully copied to your clipboard.',{},{context:'Social media'});function addToAnyOnReady(){a2a_config.target=shareButtonsList[0];a2a.init('page');setTimeout(function(){shareButtonsWrapper.removeClass('hide');},300);}.if(shareButtonsWrapper.length){$(once('socialMediaImprovements',shareButtonsWrapper)).each(function(){var a2a_config=window.a2a_config\|\|{};a2a_config.callbacks=a2a_config.callbacks\|\|[];a2a_config.callbacks.push({ready:addToAnyOnReady});});}.if(copyUrlLink.length){$(once('copyUrlClipboard',copyUrlLink)).on('click',function(e){e.preventDefault();navigato

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	462
Entropy (8bit):	4.2333710763063985
Encrypted:	false
SSDEEP:	6:va8GNvF8cqoXF79i8eJOezXXhKvNsTXF79S66Oez114vN8K2GVWRGgGVWR8Swqn:CzFzNFU8eJh0NIF86jN8YVnDVihn
MD5:	EDCBD17FA67E798075463E47A076687A
SHA1:	31A4A083488CF6F65811E68D2914BF2B5AFF3E9A
SHA-256:	AB87EEFE7EA9193D98E0B23FC5A3E76EAE51F91A4A62C56D0AAF662AF21DE704
SHA-512:	C0960FEA7A0464B9DCD3908B59DDDA85ADC2A9D455F7AC6DBC4C96BC6115F94854DF2169E64CBF4CCC11C27D3878044780A876E59AA54D362CFFA4ACB8136872
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/favicons/site.webmanifest
Preview:	{. "name": "Booking Partner Hub",. "short_name": "Booking Partner Hub",. "icons": [. {. "src": "android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". },. {. "src": "android-chrome-512x512.png",. "sizes": "512x512",. "type": "image/png". }. ],. "theme_color": "#003b95",. "background_color": "#003b95",. "display": "standalone".}.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	959
Entropy (8bit):	6.354410574712608
Encrypted:	false
SSDEEP:	12:6v/761YCTo4UNDq1ukuGCXB7a39eYu7D0LzasPE5PB0Jeg6jzUw1:35UN22GYBi9ed7D0L+y2PyFQzV
MD5:	B39A82DCE20AD4B53397E3984094B3EF
SHA1:	977141A5A2C08BFBFD9A416577E8EDB881535291
SHA-256:	5BCB4213485CA6A1C65F2A10DFBF9C4879E1BBFB17E68A607518DA453C972933
SHA-512:	F5B765268638A1EAEA292DD3035F7099780CFE2957592B018EB58AC72AD3274BCEED6E0CBE7838E4C5B5B831CDE46E5556E1A286DE2DC6819C9845501E3CB11D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8k......PLTE............@@@+++$$$ .........+++'''$$$""" ###!!!+++)))'''((('''&&&)))((('''%%%((('''&&&&&&%%%$$$((('''&&&$$$(((''''''&&&&&&$$$&&&%%%%%%'''''''''&&&&&&%%%%%%%%%'''%%%'''&&&&&&%%%'''&&&&&&%%%'''&&&&&&%%%'''&&&&&&'''&&&%%%%%%'''&&&&&&&&&&&&%%%'''&&&&&&&&&%%%'''&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&%%%&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&'''&&&&&&&&&&&&&&&&&&&&&&&&......`....tRNS..................... !"%&')345679:;=?@ABDJMQRSTUVWXYZacgijlnoqstw.............................................................O..7....bKGD.e..h..._IDAT..e..#Sq......1mf.[.r.0.Dn..m..S.d.MI..o;.}.....=.%6..._3...QN{.[T<2..+9.j..$....8.?...?s.:7....kU{..r.j.e.r....o)h2../.m."....M....4.^.A?y....K.i....:.$H..."o..!igT..."#..JN.eV\T...^...x]n.Z%.S..).u../..:=2.1.f.T.5.XK.=...(A}f.h..u.......l.....//.u`.I..#._.b....?...pJ.../v.y.r.sb.\.v..W.).%.-I.9.8.S.sqK.>..vt>..._..r6.r"m...>..+..R........IEND.B`.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	278
Entropy (8bit):	5.2290771528866244
Encrypted:	false
SSDEEP:	6:YMrTT0dKB4/MzP4iwp+IsTM7pdSQiTdXLPqe1vm9lM8EJaPBOQfc4:YoIXaPra+IsA73+XJWAuEQH
MD5:	901B2C0AB4FC768F490258D3D6119D3D
SHA1:	69368BF9506F776841807655730F161A646C7562
SHA-256:	A2BBAF974DC77E68C485C8804A6E1BF79701BE127E1AD7DDBC4BA3A023856A64
SHA-512:	8B542A40360D3660D028F1AE9629173E814E03C34F44C917FE2458E98D0C0D2690C51060B6FCA424376D73918C417D836D1924651266322B2CE23E1694C66066
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/1260644.1562364.json?89b5bf9a6316eb30dcfc5b1f740c76c8
Preview:	{"id":1562364,"name":"Variation 1","modifications":[{"id":5168013,"selector":"","type":"addCSS","value":"#block-secondarynavigation .menu-item.menu-item-level--0 > a[href*=\"join\"]:not(:hover) {\n color: var(--bui_color_complement);\n}"}],"_tagInfo":"2024/07/05 15:13:45 UTC"}

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (13920)
Category:	downloaded
Size (bytes):	774026
Entropy (8bit):	5.543681082048205
Encrypted:	false
SSDEEP:	6144:TVmwgleXTAgou7QgtnazzR4tpIUi79TtXmpzcQ4TsRXVr517S:ToBgVaJ24oE
MD5:	F32E5922BBD12D7D442067023BA9059D
SHA1:	EB1C5E17858F3CF648345F68206E473D4EC1A891
SHA-256:	D1CFF5131869E6BFF2DE6AA078B23D7C679743971475D1E6B34A0D2721B576DA
SHA-512:	119ACDBF6C5CB2FB98D00B9DB31F6027ECAFDD1B485045EA02DD845C3FEC044CC031A7F4F6C89D4FC6446668B30F28DD4CF667E2B649C5F74D88CC0664F430DD
Malicious:	false
Reputation:	low
URL:	https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%20sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ&sid%20=930746e7f78d5b33410375991db31657
Preview:	<!DOCTYPE html>. .You know you could be getting paid to poke around in our code?.We're hiring designers and developers to work in Amsterdam:.https://careers.booking.com/.-->. wdot-802 -->.<script type="text/javascript" nonce="jrWp8W0VHNMnPsa">.document.addEventListener('DOMContentLoaded', function () {./*. provides the current user's cookie consent.* in order to use it:.* 1. inline privacy/cookieConsent.js in the page you need to use it..* please note that this library relies on window.PCM.isCountryNeedCookieBanner to be initialised.* before using (calling getValue function) it.* 2. in your js file:.. var privacyCookieConsent = B.require('privacyCookieConsent');.* var consent = privacyCookieConsent.getValue();./.B.define('privacyCookieConsent', function () {.var consentGroupIsAllowed = {.analytical: 'C0002%3A1',.marketing: 'C0004%3A1'.};.var optanonConsentCookieName = 'OptanonConsent';.var optanonBoxClosedCookieName = 'OptanonAlertBoxClosed';.var halfOfYearMillis = 180 24

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1367
Entropy (8bit):	4.606114713423053
Encrypted:	false
SSDEEP:	24:tjnKMCvllHjYTe4LKGczfj94+1XtEHg/QSoUos9nqiol9LKg804QTlWApZEhwoqT:VsjQVGf7VQiostqiobLKQkhc
MD5:	D5F05DB5BC49F3BF280F4540914BA76F
SHA1:	9383B048E654A536F07F29EE5635700570BE83A4
SHA-256:	ED492DB618738A5EAE18115863E97FC8C63945846ED8DB4074DFC6F7CCB90467
SHA-512:	FAB6E9441D04A76A567D0155C16913AEA92A7FDBEE5CCB0E6193A1BAB832CC3D57E3BA194B34295C68988E834012461F4F2F8D9DAB04E80A6CABAC081EC3DCAD
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/favicons/favicon.svg
Preview:	<svg clip-rule="evenodd" fill-rule="evenodd" height="64" stroke-linejoin="round" stroke-miterlimit="1.414" viewBox="-.092 .015 2732.125 2671.996" width="64" xmlns="http://www.w3.org/2000/svg"><path d="m2732.032 513.03c0-283.141-229.978-513.015-513.118-513.015h-1705.89c-283.138 0-513.116 229.874-513.116 513.015v1645.965c0 283.066 229.978 513.016 513.118 513.016h1705.889c283.14 0 513.118-229.95 513.118-513.016z" fill="#0c3b7c"/><path d="m.001 1659.991h1364.531v1012.019h-1364.53z" fill="#0c3b7c"/><g fill-rule="nonzero"><path d="m1241.6 1768.638-220.052-.22v-263.12c0-56.22 21.808-85.48 69.917-92.165h150.136c107.068 0 176.328 67.507 176.328 176.766 0 112.219-67.507 178.63-176.328 178.739zm-220.052-709.694v-69.26c0-60.602 25.643-89.424 81.862-93.15h112.657c96.547 0 154.41 57.753 154.41 154.52 0 73.643-39.671 159.67-150.903 159.67h-198.026zm501.037 262.574-39.78-22.356 34.74-29.699c40.437-34.74 108.163-112.876 108.163-247.67 0-206.464-160.109-339.614-407.888-339.614h-282.738v-.11h-32.219c-73.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	267143
Entropy (8bit):	5.288153595207382
Encrypted:	false
SSDEEP:	3072:kycbhP+Bmz0bcfZrziitxP2mOPhgHvsfcZldD24hQiaLAYocuEfILQ9+j:kp9P+BC0yRzxzPg52PdRQiAWcuEfju
MD5:	944EC92FD0786E9660E87C4EC37D398B
SHA1:	DA5974AE8868F0EA63159417A0A1C9FEB2F2479E
SHA-256:	A8AEFF214BD4F3F0F418223A3E954F8232819170C23FA00B0DC8F90B8F6B9135
SHA-512:	39F5F39B53EADCA20B90D8FC2AF6621783F0DE2A58287691D8909FF55C91736D6E53EA34B7ACB30C0740098C9A61DDCBCF3DA86C098BC4A38106EC8269281990
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/jfe/static/dist/vendor.944ec92fd0786e9660e8.js
Preview:	webpackJsonp([36],[function(t,e,n){var r,i;r=[n(58),n(201),n(202),n(203),n(204),n(205)],void 0!==(i=function(t,e,n,r,i,o){"use strict";var s={};return s.Class=t,s.AbstractClass=e,s.Interface=n,s.FinalClass=r,s.instanceOf=i,s.options=o,s.mode="loose",s}.apply(e,r))&&(t.exports=i)},function(t,e,n){var r,i;r=[n(22)],void 0!==(i=function(t){"use strict";t.noConflict(),window.jQuery=t;return t.fn.dirtyWatch=function(e,n,r){var i=r\|\|100;return this.each(function(){if(!t(this).data("QWatchTimer")){var r=this,o=r[e],s=setInterval(function(){r[e]!==o&&(n.call(r,o,r[e]),o=r[e])},i);t(r).addClass("QWatchTimer").data("QWatchTimer",s)}})},t.fn.dirtyUnwatch=function(){return this.each(function(){var e=t(this).removeClass("QWatchTimer").data("QWatchTimer");t(this).removeData("QWatchTimer"),clearInterval(e)})},t.fn.dirtyUnwatchAll=function(){return this.each(function(){t(this).find(".QWatchTimer").dirtyUnwatch()})},t}.apply(e,r))&&(t.exports=i)},function(t,e,n){var r,i;r=[n(81),n(152),n(157),n(52),n(1

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5775)
Category:	downloaded
Size (bytes):	10265
Entropy (8bit):	5.596382684403181
Encrypted:	false
SSDEEP:	192:kIn7+TKVDUbOQHqSrTD01ohanHDf/dw6clqn/Dg1uGi:km+TKVDUbOQHqoDYosnHr/dHc0Dg1uV
MD5:	FCDB4B9DB352ABC6BABF89B7B0E64FCD
SHA1:	92E13C84E92A43A3A1AA11DC559710566BDE91FB
SHA-256:	5DD0E2CAF5FD7EA6EB8AEE38A1E4DE62390D8BBE2A6660843A7EB10DC2D2198A
SHA-512:	7C3C24A93F4B31A6591EF0FF6D82C42B7E9FF98E529DF4DD565D9E4B8074AE80E45BAF52F6905D305620B4F795B91ABD42C37CDAB2BE481D48455565F6487C62
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/OtAutoBlock.js
Preview:	!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.replace(k.substring(l),""):k);if(f&&(-1!==f.indexOf(C)\|\|-1!==d.Tag.indexOf(f))){g=d;break}}return g}(a);return e.CategoryId&&(c=e.CategoryId),e.Vendor&&(b=e.Vendor.split(":")),!e.Tag&&D&&(b=c=function(f){var g=[],h=function(d){var l=document.createElement("a");.return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(function(d){return d===h})&&(g=["C0004"]);return g}(a)),{categoryIds:c,vsCatIds:b}}function w(a){return!a\|\|!a.length\|\|(a&&window.OptanonActiveGroups?a.every(function(c){return-1!==window.OptanonActiveGroups.indexOf(","+c+",")}):void 0)}function m(a,c){void 0===c&&(c=null);var b=window,e=b.OneTrust&&b.OneTrust.IsVendorServiceEnabled;b=e&&b.OneTrust.IsVendorServiceEnabled()

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	646
Entropy (8bit):	7.623802954693274
Encrypted:	false
SSDEEP:	12:YoWpIH3dWzCdWGO5z+7FYU7ID3GGmGO+cFYKbp4u+zZCqRWir1q1HZ3pl:Yo0IXdsMGTD3Xxc+KAzdRi1FL
MD5:	006212E2688BE355BDB04CF724739006
SHA1:	2ED29A7AC5ED92E9AF2DB90B33DAB0513A5812DA
SHA-256:	3B7A9CF704DB516CC37C6F3C81AD6CE6EC19CE0122FBDEAF58F6FD508316D7C1
SHA-512:	B7FAC73C063902560555175C41DCFF517DC32205DE27435AC1F02BE78E021FB38178BAC9735C00BCE91B70A255B3090652E7578884C6DA67D914B894684D2116
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/styles/avatar_default/public/2024-03/alice-piercy.png.webp?itok=dIxqODVk
Preview:	RIFF~...WEBPVP8 r........* . .>...A!......a,`..P.O._.[.....L.y...`_;........'.:.M....g.g.........}...k......K..Mt.T.H.I>.b.......g..].;N...8D.!..r;Z..L#......._.9=.l......*q4..O.c._....T....G...>.K.g...]....w..t.K_....S.\..<z...#.S..s.g...........E...&3..S..;.G.\|.U[....."..#.yf.2.8...sMA....(.l..B...=...6.G.X.+..`.[.......<..iJ.r.~].\|....^.~\\.>c.O{>w...N.UR.~......../y...@.........V3../...nH....z...O.6..w.:\...)..h.,.jX....{.L..Yfp.'.J....B...W...u..7M7yM...?....D?.v.(p?.S...@......s.5.......v..H\.....h.Y3I+..6@.l3..K.kf..{.e.IN'k. ;/...O..u.30.2..".k.H}.......r.r...c.;._..s9).0.....:..L.#Og...K........t.D ..

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 19 tables, 1st "DSIG", 43 names, Macintosh, Copyright 2018 IBM Corp. All rights reserved.IBM Plex Sans MedmRegular3.3;IBM ;IBMPlexSans-MedmV
Category:	downloaded
Size (bytes):	182060
Entropy (8bit):	5.746447574616299
Encrypted:	false
SSDEEP:	3072:Md5NSy/hWQ+mRRrBvj8WIZah/o+PZ8tf9kwkz1BQ:MdjNz+QlBvjlIY5o+wyz1S
MD5:	1F6630030155F00353EF75912C7E8064
SHA1:	4679D04C51C6074E47E770580EFADC1DEE188123
SHA-256:	A182F92FA53E7B155741697393C8E1FDA7E19AD4D0F1F92366D6D8225C41ED3D
SHA-512:	A650DC96AB98953345A6ECA371E2715F594736DD407A0785CC81A89AE59E7A7ED1C20CE174F6563D07ABBF4A8A7352C07E4560D355D63B929276188B66BF4D30
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/src/assets/fonts/IBMPlexSans-Medium.c4877bdfa15aef22d9255288b16899c5.ttf
Preview:	...........0DSIG.......$....GDEF..a...T....GPOS6.&y.......XGSUB5......\....OS/2..k5.......`cmap...........Rcvt .5.....4...>fpgm.Y.7.......sgasp...!...D....glyf_.....%....(head.......<...6hhea.......t...$hmtx............loca2..$...t...Fmaxp........... meta6.<!.......DnameM.Ar.......zpost..#....`....prep...c...h.............2._.<............v......Y.......l.......................;...............................T...f.......................Y.........X...K...X...^.M.8................P. ;........IBM .........$.,.... .............. ..... .............%.(.P./.P.N...+.P./.,.+.T.....".P./...".D.N...D.....#.N...N.r.N.D.N.4.+.P.N.P./...N... .m...D.I...................$.......V.z.7...V.Q.V.:.V...7...V...8.......V...V...V...V...7.s.V...7...V.V.(.A.....R.t...........i...O.%.X./.X./.X./.X.-.X.9.X. .X.#.X.@.X.8.X.?.X.2.X.5...?...?...>...>.L.$...$.1...".H.N.H.6.R.".'.6.1.6.1...N...N...C...)...C...)...$...$.5.%.5.3...%...3..L..L...!.....P.?.P...E.V.E.8.b...d.8.......'...#...#...;.;.;.a...a...A.@...+

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6548), with no line terminators
Category:	dropped
Size (bytes):	6548
Entropy (8bit):	5.3923346455494094
Encrypted:	false
SSDEEP:	192:2SjYDaw8KLwLc4MrP0SLn4N8yp9rHoEak:2mfL5i0IM8yTboEak
MD5:	24B743CF3D6F5525B2A9E9FC60FD9125
SHA1:	F2BA118E9C9D6AD92FE54C979E57DFCE786A60DA
SHA-256:	6C0BED66E7FC53D62C5D11D8F8BE22C20991DB858510E99B13058B2E264A1A0C
SHA-512:	7D035CC59CC059971078065A8F4F9AF49E5F4C9EE9B07526C6A8CBB1467F4B31B720832E01284CF56D98788AF1D424E709D859860AD436199A62B84C1F6B265B
Malicious:	false
Reputation:	low
Preview:	/* Created: 2024/07/08 12:19:23 UTC version: next */(()=>{"use strict";var e={648:(e,t,a)=>{a.d(t,{FF:()=>c,NI:()=>s,SW:()=>i,fH:()=>l,vV:()=>d});const r={info:"info::",error:"error::",warning:"warning::",verbose:"verbose::",success:"success::"},n={allowed:document.cookie.indexOf("abTastyDebug=")>=0};function o(e,t,a){if(function(){const e=!window.abTastyStopLog;return(n.allowed\|\|window.abTastyDebug)&&e}()){for(var r=arguments.length,o=new Array(r>3?r-3:0),i=3;i<r;i++)o[i-3]=arguments[i];t(`%c [AB Tasty Debug mode] %c ${e}`,"background: #222; color: #bada55; padding: 3px; border-radius: 5px 0px 0px 5px;",`${a} padding: 3px; border-radius: 0px 5px 5px 0px;`,...o)}}function i(){for(var e=arguments.length,t=new Array(e),a=0;a<e;a++)t[a]=arguments[a];o(r.success,console.info,"background: green; color: white;",...t)}function c(){for(var e=arguments.length,t=new Array(e),a=0;a<e;a++)t[a]=arguments[a];o(r.warning,console.warn,"background: orange; color: white;",...t)}function s(){for(var e=ar

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1210)
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	5.258297327799955
Encrypted:	false
SSDEEP:	12:UMY+8fuVEGO1wyT7ZYTH9toIRHuxTe7gxyaJRTHx5eTi4Hmr2YLAoCfA0Ixa0YEd:a+NEZWZFuxqU4afDee4GhQZ05VmImK
MD5:	49D03D47BD15DDBEC4926A87821C3278
SHA1:	8D545B020E45D00A775DECA8BCB0A4BBE17C1F2D
SHA-256:	D327ED4B7D3E5878F53B377E35DE67F9A2D9335BD85BE6028C36D3B6B05D4F72
SHA-512:	39ABCD8CB66CBF65282C2CD32BE247477EA6322A32D8E5FD8771254B7FD3F939428CA0462851AF60108BC8FE17CB3BF6769CA45C817859CC27B7E9AAC83801C7
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.body{background:none;color:#000000;font-family:Verdana,Tahoma,sans-serif;font-size:14pt;line-height:1.45;margin:0 !important;padding:0 !important;width:100% !important;}h1,h2,h3,h4,h5,h6{page-break-after:avoid;}h1{font-size:19pt;}h2{font-size:17pt;}h3{font-size:15pt;}h4,h5,h6{font-size:14pt;}p,h2,h3{orphans:3;widows:3;}code{font:12pt Courier,monospace;}blockquote{font-size:12pt;margin:1.2em;padding:1em;}hr{background-color:#cccccc;}img{max-width:100% !important;}a img{border:none;}a:link,a:visited{background:transparent;color:#333333;font-weight:700;text-decoration:underline;}a:link[href^="http://"]:after,a[href^="http://"]:visited:after{content:" (" attr(href) ") ";font-size:90%;}abbr[title]:after{content:" (" attr(title) ")";}a[href^="http://"]{color:#000000;}a[href$='.jpg']:after,a[href$='.jpeg']:after,a[href$='.gif']:after,a[href$='.png']:after{content:" (" attr(href) ") ";display:none;}table{margin:1px;text-a

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	14826
Entropy (8bit):	7.985905181758237
Encrypted:	false
SSDEEP:	384:pZ9qYmHNf3cXzDrizA7BcN8Rem2IEs2k5W/+Tu7WT:p4HNfWzD+UlcN8RezFg5t1
MD5:	5D4318F103EEACF6A291E2AFE68257E4
SHA1:	6544605AD29D5287EC04FE9C4411A824F7464E9B
SHA-256:	385BD16B54F7F9BF7122348988E364EBF2721C5DEB28A450915B5C92BA3E976E
SHA-512:	4F490551064F5ABA28D526C01EBA4E7297285A486B62E301FB944D4EAC409BDCAF8B16459FC5B900696166B619506005E5203D75C9431FD1052027942F290B6E
Malicious:	false
Reputation:	low
Preview:	RIFF.9..WEBPVP8 .9...........>...A!..a...a(..._..Q.......w..._.?(..}...._.\|.....././....g.........[...'......w....z....s.....?.'......B........'...........w....._....+=..O._.C...>Y./.?........,.O.g./?.....'......e.....?..n~..W.........>B?..U...G.o._.O.......?...............=.7.W.....^......W._....._......../...o......}...O.....?K.....G.....O.......Q.].......O...........s...../...?.S...U(6.M..~.....9@My%.U.....r...I../..>...hC......D].y.kv.L...U{..E...@...........p.c...%..l.......BT}bq.....a...7....7/.z..G.OO"D4....:-8...V....:.o&....m.0x....).Eq\...dU..g{5........5.R^..V.P?...!...u.H....>.I..3..>.....u4O./U ....(..sAbv...{........NC..T.^8h%..Cf+.....o... 'fg....~......w..C..)..o..H\..GW..Zt9.......BY......A^{..}\E4{....o..u0..d."* v.......P)},..dM.;.7...2.2.(.L...s...-.....V@.o.Z...!W..j_.c...>.M+\.k.G ._.m..3..(f....=X.`f.>...`.I83._lvi&.g......\|............6....`!.../..g.v$D;.1K.,C.9...[.Z.g"..m11........*.t1...i.....w.#."_.>..{.=

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	458438
Entropy (8bit):	5.359722847894724
Encrypted:	false
SSDEEP:	6144:Vab9rTyxFBzE7qmU21A986asLMNDqus8BdRzAe+i9b9sjgs:ViFyxFBzE7qgA78BmKm/
MD5:	C44006ABC4B9CBEABC46ECE8C79AA638
SHA1:	53FE22FC5F03229E51F46324AB7CFAE18A6C71F5
SHA-256:	49CFBB9C8B20FBAAB3A11BCECB48FB8448E617A746FA578BACA0DC71A7E06540
SHA-512:	60312FB0B57C83A3E53D5AC9361543A069FDA9B7A6CD87A71F6341D1E1D58A88F59A13227F98A22ED7C23D43FBCDB663D27D1BD61FC0DA0A3C20AE45C0F4CB9F
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202404.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202404.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	748
Entropy (8bit):	7.429500709827937
Encrypted:	false
SSDEEP:	12:6v/7UU3UnfvxshHht6RrkixYOS523xw0hKn8wfFdmAZBGXgBvZxKEmcIbaTRkumq:pUSfvx8HhtdiShIU8wd4BAvZ0Emc+Ymq
MD5:	3A8ECF5DFF4233D9B9B8DF806533FDC6
SHA1:	9E014447DADC656762BE55A9512AF34B538C0807
SHA-256:	F864C78563FE88300F71A5C3E3C5DC5299094597365CE18EED758C0563100EF5
SHA-512:	9E8B8FEEB2747C402E399D72D0757918ACD270C342A286D5574D7A1453E65C4EA6C7E8B07571FCC94F3A0877AFF7229D0C0CC27B584C9BE41CC34CDE787C41F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............i7.@....IDATx..mj.Q.@.t/..k..hBU..Z.h.QH...b.4.h..j ..I..=.....w....\fH.$I.$I.$I.d=.....;...9g.97.q..X..!.....%_)..>{8...7^Q#..%kD....{....bMhb...{{.qv.....L...".1..H`./.k.S..\..G..)...~..A.@.W.0.%@ .._.M...?..#$.n._...E....h?'.9.......a.........(...c..h0.$p.'4..f ........~..Q..}!../$.............qZ.....@.....~......:.........~...O;.......~.Y.O ....}!../'......O....'.............~._.O....6....W...$....y.&o..../....~._.O....\|..;...7.1l_.P...Z.__.D.........W...Z.__...__M..k.\|}y..\|}5...&..............$...4..T}..y4z.}@.Kp.>....w.\B.7.}?A.0...~.S........aj....8=?..an..~..a>.......6..'......&...........p....w4.i1Z..F....\...<.....f...53f.8..6....q.{z...$I.$I.$I.$IV..-.-._..w....IEND.B`.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=543530&time=1720575920054&url=https%3A%2F%2Fpartner.booking.com%2Fbg
Preview:	{}

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361)
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	5.209567950547697
Encrypted:	false
SSDEEP:	12:jWR2TRtRVRS0HWmR2Pi0IS7xEXWVIoauwO:QaHvS0f0IS7xE0qO
MD5:	A988FDEAA83DD606372E5B70BC69D687
SHA1:	F6E41F9A633E7FA758D7E9699CD850419BAE5725
SHA-256:	A5F5A0B58FB9A4B9213D2C8F2E1D36CFBA1B77EC8400A7EDC98A4225C710CD03
SHA-512:	63960E5B7FB480B07262F0B70797F3A45C71222BD85879C0B8FB8C1FEC564554F4E7D663C965C1873B91DE56512F43520B55D102EB8D2C6EED6FE0E640C1F876
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/psb/capla/static/css/256aa323.65a94ca2.chunk.css
Preview:	.a27310068a{list-style-type:upper-alpha}.b6aca14795{list-style-type:hebrew}.afc95f99b0{list-style-type:hindi}.a928e06e3b{list-style-type:lower-greek}.d0d69ceb64{list-style-type:upper-latin}.e4b7ec1d8c{font-size:14px}.eb3d7b6b5b{padding:0 20px;font-family:BlinkMacSystemFont,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;line-height:1.4;color:#3e4853}../# sourceMappingURL=https://istatic.booking.com/internal-static/capla/static/css/256aa323.65a94ca2.chunk.css.map/

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64779)
Category:	downloaded
Size (bytes):	104320
Entropy (8bit):	5.418102833090534
Encrypted:	false
SSDEEP:	1536:4TfmxUHKjYkp+ugJzNDor4bMog4JBZa1PqyulHBYHH/R7XcZ5zK090MuDKq:4TYYNutHdR7XizKm0MQ
MD5:	7E294A85E4CF60FA52292408021A1491
SHA1:	C523BDC033AFAE2AE88320A969B89A8932C242B8
SHA-256:	DDFF91EFC1BE8C97F198FE2FC83AC0150C1BB07A8E06B07F3A4A4DEECE76A7A8
SHA-512:	D59177593A1A954E5476EC03F76C1A74DDD54BBEFE3773DC369599C843A4F0AE58FC24F4A79CA2067A44E46AB9F95FCEE6449866172E6AC3BBB68B57C5C78D1B
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDID=partnersatbooking
Preview:	./@preserve.Version 2.10.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,ge

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89795
Entropy (8bit):	5.290870198529059
Encrypted:	false
SSDEEP:	1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH
MD5:	641DD14370106E992D352166F5A07E99
SHA1:	EDA46747C71D38A880BEE44F9A439C3858BB8F99
SHA-256:	A0FE8723DCF55DA64D06B25446D0A8513E52527C45AFCB37073465F9C6F352AF
SHA-512:	A6E981B23351186AA43F32879DD64C6801BE6E2AF7EF8B0E472CCCDEEBA52D5D7894DE4BCB292A364F1E11E525524077534338140A72687ADA4FAE62849843A5
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.4.min.js
Preview:	/! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58054)
Category:	downloaded
Size (bytes):	283420
Entropy (8bit):	5.346645878545655
Encrypted:	false
SSDEEP:	1536:sR1VJD/tmBKac0h3fVrBcFpebVDWc89scH1tawhYyCy5y6ytyvyswJZZme29qbVZ:s1VJD/61sped86Ae29qYrg20fr7ONhcb
MD5:	9129683E00EDFCEAC792CF3EE5789C0F
SHA1:	202CC1E809215C63E2234921626922AC9724F516
SHA-256:	4D92B759F0BA1FDEEA877B08B4D459AE0E597A0095429C6A9B90ECF21531FCC4
SHA-512:	14991F61B5E4B2FF8B3DBD02B925022AB5200B5F99B29DC606D285D56B4D7AC28B8FD4C827E640E952E6C27510F90472888D158AD0E1ACA45BE027C5FDB9FFEF
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/en-gb
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. <meta charset="utf-8" />.<link rel="preload" href="/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3" as="font" type="font/woff" crossorigin="" />.<link rel="preconnect" href="https://bstatic.com" crossorigin="" />.<link rel="preconnect" href="https://cdn.cookielaw.org" crossorigin="" />.<link rel="preconnect" href="https://www.google-analytics.com" crossorigin="" />.<link rel="preconnect" href="https://www.googleoptimize.com" crossorigin="" />.<link rel="preconnect" href="https://try.abtasty.com" crossorigin="" />.<link rel="preconnect" href="https://lonrtp1.m

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64779)
Category:	downloaded
Size (bytes):	75875
Entropy (8bit):	5.317944953321773
Encrypted:	false
SSDEEP:	768:4kNzOpKAiSHlkMRfuScNANA2Az+Mz4asRM5pm/7mIabfbtGds+HbZ/fBMZMdZM9w:4GzLS2gdcNANA2Az3Dj+HbZ/f0OL4/4T
MD5:	BA3156E72FD699924DA8D038F124F55E
SHA1:	195AF12BCE23541D35C029F0CB94C74D5148126D
SHA-256:	369A904E6A2A6CB6FEF3E935C723DEAD810C01AA74FF7771983A06E5F3CF8F39
SHA-512:	CFF0C6F8E48B5CAC9AB3F4E2913D472714FB8CDAF5EC17BD0B9CC98663505F97054D4F9EC65F47EE530A7379A838E324784EECFC8EA4909F2B8C4E7E41F25A49
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/12.f83656fbc6c9f02061b2.chunk.js?Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDID=partner.booking.com
Preview:	./@preserve.Version 2.10.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.10.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.10.0"]\|\|[]).push([[12],{19:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"d",(function(){retur

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
URL:	https://www.booking.com/logo?ver=1&sid=8ac6b1f85386b93507ae3cb6dc426561&t=17205758751
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/images/1px.gif
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	91785
Entropy (8bit):	5.184410273382722
Encrypted:	false
SSDEEP:	1536:52mXFioR7U4+4q00QyE3znksTJ4qq+QDalSduKNcJiP:kmXJqqqdQyfqdQDalzpS
MD5:	31B52E285AECEA6AFF5E09AA9B90EAED
SHA1:	47DE24235B7F6143FC63E0B4B483EC628B006342
SHA-256:	BD3352B0C7B707FA5A0867249158B7B1F22927A733C1088A7C39AEA1186E6F29
SHA-512:	8383567198D1F3143DE2B54F4129995B2D0BF86BA9EDF04B4386E612FBE26D0F8380323B8326406C1FF67AEBE5282F1461BC7F5363D74FAC2ECBD026673AAD30
Malicious:	false
Reputation:	low
URL:	https://bstatic.com/libs/bui/9.5.6/bui.min.js
Preview:	!function(){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(e)}function e(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function i(t,e){for(var i=0;i<e.length;i++){var n=e[i];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(t,n.key,n)}}function n(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function a(t,e,i){return e in t?Object.defineProperty(t,e,{value:i,enumerable:!0,configurable:!0,writable:!0}):t[e]=i,t}function o(){return(o=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var i=arguments[e];for(var n in i)Object.prototype.hasOwnProperty.call(i,n)&&(t[n]=i[n])}return t}).apply(this,arguments)}function s(t){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{},n=Object.ke

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 95 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2344
Entropy (8bit):	7.885895023441641
Encrypted:	false
SSDEEP:	48:5qdKL8E2+5H4aj+orbjgcF4cU7f/wEr7BObNyhtvqTRrfrz:h4EzN4aCSjjQf/1rdObzTJz
MD5:	D05A0AB9BF394439A1584A2B0D44DB5C
SHA1:	183C28023D3BA3358A7A5DF1DB887582AE5340ED
SHA-256:	B23272A9692C4EC3C020935917E9D096490876C976ABEC1290BD3CC9AAE13974
SHA-512:	1710604C6F6AB042DE505286DC4A6FA2217BF4126C000A510156E82BA975DEE0818E74DC612D556E76A71753B8285F759D4DB7566799FA72034A3E5EE5305482
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..._...............sRGB.........IDATh..X.l.......`.......K.'m...$...Ti.F..T.JK.4A."QZ...m......B.....B.....,...V....w68.......L.w>....>G.Pr#...{o..\|..{3.X.d..".E.CE.......J.Z.DH19[2nAi...;.X[..y....Q.?m..i...\|.d.N....RU..8.u..y...Ps..n'JE....d.w5..p.o.]..OWt.!..I.:j;....Fg:..+-c.j.6x.....s&........:jIu.'[.:...k?#.,.B.N[I....F.0.:d..e.-...`.GVT...:..,..)./"...8%34m.)c.w............J...ej.&>///....QXX.+((H....[.l.........y.P..z....M.3)b..r.}\.Zc.t.0..N.M1~..dJ..k:o..3AA.........X...........P..O.^ZZ:.q..M..,.0j'.#~..sn....m.++]..E..-..g/.....S..+....x....w\|0.#.....I)_.V..{zT..H...T..@9..b...(Ht...u...J.2...&...8...f...I76..<.....,.iT.c...?....%.....SJ....ZK@+..b)X^&....l.8...V.0]..0..A.3...q.w...r....._.(t...h.j...+.4.K.....4.....G.]I......JJJ.8..I).`._.D"'..`.....hnn....W....9.`)_..i.l..^....W.C.>...-.....i\|.R.....<{xx.....M4....F....#..-.@..h......G.F` .......\...?.1.....l.C[....s?A..?`\......n....G!./IkI.o..

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=543530&time=1720575892391&url=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page%23main-content
Preview:	{}

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1266)
Category:	downloaded
Size (bytes):	1300
Entropy (8bit):	5.30524883704663
Encrypted:	false
SSDEEP:	24:hYycgSHiSlajeJvJDyzGpxH019FEYvNvZVusgDUmEZ1r2ilHhiomA3ef3EQJZomW:hYyZSHvciyQHEmENRVcUzb7H6om3JXof
MD5:	4412BF8023109EE9EB1F1F226D391329
SHA1:	C273960AA874A87DD022B5E597887142F1B8E34F
SHA-256:	D40EFCAC911D8964F3728EAA767DE281306FF55BA9377435A3364D4D1E1613F6
SHA-512:	DE3DD553A582E6B3D00782DDD639CB57B29DE71AFE72AF5ABEF870AB36C7FED68244D511A1E129A0F04AF690F27AE9304B1C113C9F1F0E0BD85DDE9291A6764C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
Preview:	/! jquery.cookie v1.4.1 \| MIT /.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?a(require("jquery")):a(jQuery)}(function(a){function b(a){return h.raw?a:encodeURIComponent(a)}function c(a){return h.raw?a:decodeURIComponent(a)}function d(a){return b(h.json?JSON.stringify(a):String(a))}function e(a){0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{return a=decodeURIComponent(a.replace(g," ")),h.json?JSON.parse(a):a}catch(b){}}function f(b,c){var d=h.raw?b:e(b);return a.isFunction(c)?c(d):d}var g=/\+/g,h=a.cookie=function(e,g,i){if(void 0!==g&&!a.isFunction(g)){if(i=a.extend({},h.defaults,i),"number"==typeof i.expires){var j=i.expires,k=i.expires=new Date;k.setTime(+k+864e5*j)}return document.cookie=[b(e),"=",d(g),i.expires?"; expires="+i.expires.toUTCString():"",i.path?"; path="+i.path:"",i.domain?"; domain="+i.domain:"",i.secure?"; secure":""].join("")}for(var l=e?void 0:{},m=document.cookie?document.c

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50045)
Category:	downloaded
Size (bytes):	50379
Entropy (8bit):	5.331282772879317
Encrypted:	false
SSDEEP:	768:RowpTCFG1Ikz+ybZd9ZI/KN8dEqJJa45d7GpeamrAIOEEZXgU03:31iVKZd9ZI/2qJWeaCj
MD5:	BAAF830FC576FC456CB3F518BC0E613A
SHA1:	CBB3953EFE9CF21B230B3C8E6E82DA4D9D812780
SHA-256:	8B780007215B807C49FDCE4FB746AB9471B070011BF0C9B23D7DB718185D9914
SHA-512:	3CE83E88E4483C8A0586248F7636AA966A3AD736AD3C0C255FC17B2C103C3115935E1D836ADBC7735E281B9281B9D2D8DF17F92726DF67B3FFFDFEE2ABC5F819
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/js/core-deps-inlinedet_cft/9fc72199a3b8ae2b967821deb6fa10d92ce308fc.js
Preview:	booking.env.enable_scripts_tracking&&(booking.env.scripts_tracking.core_deps={loaded:!0,run:!1}),function(){./*. @license almond 0.3.0 Copyright (c) 2011-2014, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/almond for details. /.var e,t,i;!function(d){var o,a,p,h,m={},v={},_={},g={},n=Object.prototype.hasOwnProperty,r=[].slice,y=/\.js$/;function b(e,t){var n,r=B.env&&B.env.b_dev_server,i=(n=B.reportError)&&"[object Function]"==={}.toString.call(n)&&B.reportError.bind(B);if(r\|\|!i)throw new Error(e);i({message:e},t)}function w(e,t){return n.call(e,t)}function u(e,t){var n,r,i,o,a,u,s,c,l,f,d,p=t&&t.split("/"),h=_.map,m=h&&h[""]\|\|{};if(e&&"."===e.charAt(0))if(t){for(p=p.slice(0,p.length-1),a=(e=e.split("/")).length-1,_.nodeIdCompat&&y.test(e[a])&&(e[a]=e[a].replace(y,"")),e=p.concat(e),l=0;l<e.length;l+=1)if("."===(d=e[l]))e.splice(l,1),l-=1;else if(".."===d){if(1===l&&(".."===e[2]\|\|".."===e[0]))

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19782)
Category:	downloaded
Size (bytes):	132770
Entropy (8bit):	5.27850821345768
Encrypted:	false
SSDEEP:	1536:ZaNAwVP4XA1e7FB0Ocjb9qKN4q/kd14jHMFxJtbjTqFfsF97uPKFI/rhJ+vQgDOo:cAwVP4hjtq/klRLUK/vQgDbh
MD5:	49D6128CFB4D12FEAE4746B0C04B5635
SHA1:	FC8CD0C6E74928D2891AE08DA8C0F04294EA971E
SHA-256:	4244F578D44BAFCEBB6F07F9A81D58569643D62284AB476DF2B17A5D8413BC2B
SHA-512:	FE2EEB3479C865282FD33A099C26286650D6DC51F02502555A5287958176684930F37169F0E47324160BAD44251CBC5A2844F4898511858DF19DAF5737B17EA1
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..(function($,Drupal,once){Drupal.behaviors.cookieproFocusHandler={attach:function attach(){var skipToContentLink=$('#skip-to-content');$(once('clickFocusHandler','body')).on('click','#onetrust-accept-btn-handler, #onetrust-reject-all-handler',function(){skipToContentLink.removeClass('focusable').blur();setTimeout(function(){skipToContentLink.addClass('focusable').blur();},10);});}};})(jQuery,Drupal,once);;..(function($,Drupal,window,document,once){Drupal.behaviors.backToTop={attach:function attach(context){var backToTopParent=$('.main-wrapper',context);var backToTopButtonMarkup=$("<button class=\"back-to-top__button\">\n <i class=\"back-to-top__icon icon icon--arrow-right\"></i>\n ".concat(Drupal.t('Back to top'),"\n </button>"));var isMobile=window.matchMedia('screen and (min-width: 0px) and (max-width: 575px)');function backToTopVisibility(){var scrollFromTop=this.pageYOffset\|\|this.docum

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6867), with no line terminators
Category:	downloaded
Size (bytes):	6867
Entropy (8bit):	5.44896364392026
Encrypted:	false
SSDEEP:	192:bzcXSlPcj5F7evoSL0w3Pv63sXm2tli/XYM45bx:3cZF7ulL0wXjWp4xx
MD5:	26C3C284EDADC317106C9358BAF83AB5
SHA1:	97D3B1696078BE1DB9093D1F10AEFCF74F9F0660
SHA-256:	618AD76495DD6D322F6E225FD6BEE12DB7AD4479D7E0AAF39CD76E0A368342AC
SHA-512:	AAB12907A3B247D2567EC41B684CA1DA7FC6C63DF1B04F65885A0B92EABAA6E540DA1317E41F3AB9FCC050ABA8CF539DB740A64F2E065D2DB39374CCC3B78350
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/shared/commons.9b20dd57c6f12e1beb80.js
Preview:	(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[223],{5607:(t,r,e)=>{t.exports="function"==typeof Array.from?Array.from:e(2508)},2508:t=>{t.exports=function(){var t=function(t){return"function"==typeof t},r=Math.pow(2,53)-1,e=function(t){var e=function(t){var r=Number(t);return isNaN(r)?0:0!==r&&isFinite(r)?(r>0?1:-1)*Math.floor(Math.abs(r)):r}(t);return Math.min(Math.max(e,0),r)},n=function(t){var r=t.next();return!Boolean(r.done)&&r};return function(r){"use strict";var i,a,o,c=this,h=arguments.length>1?arguments[1]:void 0;if(void 0!==h){if(!t(h))throw new TypeError("Array.from: when provided, the second argument must be a function");arguments.length>2&&(i=arguments[2])}var f=function(r,e){if(null!=r&&null!=e){var n=r[e];if(null==n)return;if(!t(n))throw new TypeError(n+" is not a function");return n}}(r,function(t){if(null!=t){if(["string","number","boolean","symbol"].indexOf(typeof t)>-1)return Symbol.iterator;if("undefined"!=typeof Symbol&&"iterator"in Symbol&&Symbol.iterator

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.5934148248551665
Encrypted:	false
SSDEEP:	3:UW2ChW/BYwQPS1Rc/SaJqOMLDHk8f:P2dBTUMqJqOM3Hk8f
MD5:	335BE8900580E9C3875DBA57334294AE
SHA1:	A86597D2DDFA410DF13BCECA86FDF9A2291FE798
SHA-256:	8A882FD19A15567E53A5C3C08D22CDAB714FA87734ED92D854C4E8FDF3940B1F
SHA-512:	1D51C3CE06DF5B1B6D305691F1BED48E5EC155313DFA899A98AE94CC625E39429EC81A4D82378FCA04FC9F1F694913A61AB1B0E0F31FCAD5CE9B29A0AA0EBBE5
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/js/crossorigin_check_cft/2454015045ef79168d452ff4e7f30bdadff0aa81.js
Preview:	window.b_crossorigin_support=1,"function"==typeof window.b_cors_check&&window.b_cors_check(!0);

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	424
Entropy (8bit):	4.826210276654948
Encrypted:	false
SSDEEP:	12:YGKe4HaaNmddpHm/Bi6dRSMm9Er2sVsRihCFXU9CFXvM9:YdVH/NMzHa9m9Er20sRdVUMV09
MD5:	2CA62553DC3FDE3551E592A47A6371E9
SHA1:	ADB612AAF8EDBA6A1B3ED1FE807C620D0B2B67FD
SHA-256:	B9391F1017214481EBCD66649D521E043516C53119B2A7A4FA0E7690199AE5A2
SHA-512:	22468FF1B0A3EB6C7344A8C4CD24847CFA617A15377B123DE7744A18DEC68DB29EF53C03F6374026DE74FD798F677F90A72DFA365FC5B9B7D65146696BEDB2EC
Malicious:	false
Reputation:	low
URL:	https://dcinfos-cache.abtasty.com/v1/geoip?weather=false
Preview:	{"country_name":"United States","country_iso_code":"US","state":"New York","state_iso_code":"NY","city":"New York","city_id":5128581,"city_confidence":-1,"postal_code":"10118","latitude":40.7123,"longitude":-74.0068,"accuracy_radius":20,"time_zone":"America/New_York","least_specific_subdivision":{"name":"New York","iso_code":"NY"},"most_specific_subdivision":{"name":"New York","iso_code":"NY"},"ip_address":"8.46.123.33"}

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61938)
Category:	downloaded
Size (bytes):	62076
Entropy (8bit):	5.166719317065412
Encrypted:	false
SSDEEP:	768:YKWAEDAvhiClcPXAvQJG1Q6MF2etm3l9jE:YpAyAvh1cYQJ2Q6mtCl9o
MD5:	40AB217559E57F953AA43823F5DB4634
SHA1:	0B65935EF35641D488D3E68EAC4E9D8AF22FB641
SHA-256:	B8FDF317BAB440671681B5C9A2015373A582BCA20A1271721876077A10EB6C9D
SHA-512:	8151BA591314605688768A1C6B16EA774DA9DC351B85179305673B353181F7A8BBBCE36BAFB1AE0992471459A45C4869C229485949DF44831294A680A7077F8E
Malicious:	false
Reputation:	low
URL:	https://cdn.socket.io/socket.io-3.0.1.min.js
Preview:	/!. Socket.IO v3.0.1. * (c) 2014-2020 Guillermo Rauch. * Released under the MIT License.. */.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.io=e():t.io=e()}("undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:Function("return this")(),(function(){return function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.def

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	downloaded
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65362)
Category:	downloaded
Size (bytes):	147079
Entropy (8bit):	5.27707662090021
Encrypted:	false
SSDEEP:	1536:YRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKeIpg2L:4HNwcv9VBQpLl88SMBQ47GK9jbWykWJR
MD5:	66F2A67890F87F75E0349B9A54892789
SHA1:	7CDF81D1F73218A01E390993356AA7A87D559F3D
SHA-256:	7E20C56A633FCA2C33580C545B40F21C413957521651224AB87DB9C50539F33A
SHA-512:	B3DBD8AD9F19A7DF0A037FD4176E8B8545313BFDD1B9192E44DE28602503BACF36DF9850DE0A326929716096ADEEC396C552FE6E300138B5AE020E141F89F965
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_OQFMChpj4TK2MwcEZQHui-t-iGCpTgvgxnaPbxulWTA.js?scope=footer&delta=0&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license MIT https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt /./! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttri

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 113 x 108
Category:	dropped
Size (bytes):	12336
Entropy (8bit):	7.831844155521042
Encrypted:	false
SSDEEP:	384:LOheoVz7MsThhhPMck296PqDzGujTmGDU98oC:LOheop3hhCck29SqDzhTm4U90
MD5:	3C3BA37130DE5FE15FAF97C18908283E
SHA1:	C15B49CB09745A9939315132E18F2E40FA2CCF22
SHA-256:	9096646DA2177D5DB92F79352509450582A376913BB5387557C1EFD28D0C377B
SHA-512:	E032B95C3F51468F788EFBB256044463C72CEB89C9A9A67A55CC8A5BFB979BBDC89EA99A18E31C3D424125C84832271215A91009E974C7D790BF6A2B93AE1650
Malicious:	false
Reputation:	low
Preview:	GIF89aq.l....................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:A317747D034C11E6943BA6DBBEF24A4C" xmpMM:DocumentID="xmp.did:A317747E034C11E6943BA6DBBEF24A4C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A317747B034C11E6943BA6DBBEF24A4C" stRef:documentID="xmp.did:A317747C034C11E6943BA6DBBEF24A4C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........................................................................

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	88122
Entropy (8bit):	5.379415418663791
Encrypted:	false
SSDEEP:	1536:AtycCNkkgZkqXpC/NKUqSXxiRUCjeDa3cZRuSlYRyQV7B:EycCUDChL6eDa3WYok7B
MD5:	A534FD02F639AF5099285F31331E16D6
SHA1:	C48AC04722D957F7D2382C05E7512A0B455688D8
SHA-256:	E19CFEC0969D8613B7733FEF7AB339F7A6F437B7303C12F6F2DA92696CF8F060
SHA-512:	36927EAECFD479A3EBA5C4CCBAE018561F4A87D99ED0A5C46890716AB316EAA223BBDCD80166185E60EFAC7A63461999985B3B2BE4F28006EC48E49197B0041C
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your privacy settings","MainInfoText":"Select which cookies you.d like to accept on this site.","AboutText":"You can find more detailed information on cookie use and descriptions in our privacy and cookie policy.","AboutCookiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/content/privacy.html","ActiveText":"Active","AlwaysActiveText":"Always Active","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"By clicking \"Accept\" you agree with the use of analytical cookies (which are used to gain insight on website usage and which are used to improve our site and services) and tra

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 92724, version 1.0
Category:	downloaded
Size (bytes):	92724
Entropy (8bit):	7.997553923653277
Encrypted:	true
SSDEEP:	1536:teR2vJkIpD1ojHcPqWmz/EPCGYPvI9iZ5zwgksuLhEjYfy3Na7SQs0eYMgUxQ4W8:iCJkKpogSRz/EPmI9S5zwgkd9EjWYNau
MD5:	F132633E65809EC36C0F01B8A29FA457
SHA1:	E68A5B0DE3E08AC85A13426CE3D8C13AD21D38FF
SHA-256:	A98C20990FE3E31203FE2DB8384AF8E05E7B358CDAE3C28B034E1F02B47DB630
SHA-512:	7F2AA9B95B95F93565DEEE578BF01C57A6D0A28DDE40A202DB6E4EB7554A5076E5C86FE9DED23E56F1BB4BA2B42EBC9AB44B03AE5EFB73E81A6EE077CC61D9E6
Malicious:	false
Reputation:	low
URL:	https://t-cf.bstatic.com/static/fonts/booking-iconset-original/29bca18dce5a8e111855e31314a9b1d750ea9beb.woff2
Preview:	wOF2......j4......%...i.........................?FFTM..Z. ....`..v.....L..i.....6.$.... ..{.._[.~r.bp..%t...bj.../..&q.._.!w.b...y...~.d....I#........j..IlqJ.Tj+..cB....eV...B.#\..g.M...7.;......\|.U........6.-.....6..U9......G....A].b..w....pV...rr!......p.V.....8.../?YC."A...-\NSQ..0.,..H<6.Y..Q{..U..r k..0agr)..o.g....f.h.V2.Wp.#..vd.7....O.s8.U....Sic..N&........b..........&I..@..Tl.5c.."..i.e.=...=...J6T.+~g.x/:..~...{`...Z...m..X...v..jW..e..U......{W8J.B.z.Q..K9.....V..b+.....Xz4.v4...&...4......... .....h.....I..1@D...{FN.=.7{..t...Rg/.!~...P@E..m.(.D{....5.T.@{..U....J.g.u.......u.s.......$p....?......d..F.....+....'!<.......I.B.Er.,S90.]..].O...O.h......Y`.m..<..s.TC.V....c.......!v....$G....j.S.{R%..;...u...{..&..-...0......\|.sj.x..,[2$......\|....:..i..y^.L.!$...?2.Ao<f.f..G....s?d..ZQqy8...&.G.P.!.^]...G5{.g;T.pA.......8.....@.....M9.ao.._....!....T..M.*K.U..wl......C....DE.D...T.Q36P.j...r...2PQt..XI.,6.Z......rs..9

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	817
Entropy (8bit):	6.269805498822586
Encrypted:	false
SSDEEP:	12:6v/76tVhPk8Xtr705gURYPzyFIEZFs9hb5LxfddrWHugkps8hl1:BTk89r705gUR42FXe9hhxnSOgl8z1
MD5:	D786614F3580FCD0CB889000A768EE42
SHA1:	46367253B943915F4B3AC74BF9CA98A458F95CE4
SHA-256:	C91E357DAF0B055A42826A5135D0F25754B8C9DD728EBF76C0D40299084C943D
SHA-512:	A14E37881FABCA50614A19B899D8C13640614F0F003FCBC91B6C9493142552BFB0F7FE0D18740F53F0BD6F7A1AA4B97BE113715286285F8159618E493FD536C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8k.....APLTE............@@@333+++$$$ ...+++'''$$$ !!!+++)))'''&&&$$$)))'''&&&'''&&&&&&%%%$$$$$$&&&%%%$$$(((&&&&&&%%%''''''&&&&&&%%%%%%'''''''''&&&%%%%%%%%%&&&&&&%%%&&&&&&%%%&&&'''&&&&&&%%%&&&&&&&&&&&&%%%%%%'''&&&&&&&&&&&&%%%'''&&&&&&%%%&&&&&&&&&&&&&&&'''&&&'''&&&&&&&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&....3"....itRNS.................!"#%'(456789=>?@CDENOPQRSTUVXYZhjkmrst..................................................&.......bKGDj%b.....)IDAT..e..?BQ.....7J......J...).^'.....C.E.CI..N......Y3O..d...PZ2#.....(.>.y.2{Ae#\|._..P...cl~.....:Z...j.Rn.-.`8a.......-V<.8-...=.t..ZL.`..v.).`NZ0.....h.YV%H...."A..d.9i.Z...).T.....!ZB..h..6.Q.;^..4x{@....{#...(.M\|.a...>.{..\|.d..6e.R1..$t.wc....{9..5...b?....q..op.&..7...?....6.Mn......IEND.B`.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	95450
Entropy (8bit):	5.791594097344841
Encrypted:	false
SSDEEP:	1536:xWVKHkyyM8/CUVihlaltlvmtJzQS/Lk0G3wUsQBkhDlsSlY0vI16qIBVVG:MV0yZCxhlalSF/Lk0G3wUsQBkhDl1YVj
MD5:	01BFAE208BA21F96B1AEA3E1DB5FF9AD
SHA1:	8E4913D562D14B22DA1258A960FDAF2E538F249F
SHA-256:	3DC61B43BBD540E1DF282CEDA30CF25C3B71E6FF80C689C57496C3300FAFAA8B
SHA-512:	8C9D2A83B1FF728495349F6D60929BBDA02C3D26A68BA6AE78BAB9E62BCE8ADC0471FAADAB751E177C59BF5430CCD93455FBCEFD3B1F71173CB16A18F451404E
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"......","pclifeSpanYrs":"......","pclifeSpanSecs":"....... .......","pclifeSpanWk":".......","pclifeSpanWks":".......","pccontinueWithoutAcceptText":".......... ... .. ........","pccloseButtonType":"Icon","MainText":".......... .. ...... ......... .. .............","MainInfoText":"........ ... ......... ...... .. ........ . Booking.com.","AboutText":"...... .. ........ ..-........ .......... ....... ............ . .......... .. ......... . ...... ........ .. ......... . ..............","AboutCookiesText":"...... .............","ConfirmText":"........... .. ......","AllowAllText":"......... .. ...........","CookiesUsedText":".........

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6155), with no line terminators
Category:	downloaded
Size (bytes):	6155
Entropy (8bit):	5.322612950769379
Encrypted:	false
SSDEEP:	192:SeYjpkZzXkZMHISiYCNcgVRV5hmrHQVUm:AqroSRYHROKn
MD5:	1E32438142FCD82E3C2AEA1EC4900C2E
SHA1:	70F7F4732872C739C76969D77FE36D1D53333950
SHA-256:	C3F06CF6DED52069A79551343ACA5F2269A048CEDB9FBACD3CFFF7136980659C
SHA-512:	E390AF5B482CD7263CF2D3E00B001521F6E08936F8AAC0D0BC73BA8B092D96C82954C3E68F1F091214D6EBCB47B7D425F21B84A208572AD69EF0843AE049C6CD
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/js/error_catcher_bec_cft/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js
Preview:	!function(l,_,f){var s,u=[],o=!!g();function g(){var e;if(l.XMLHttpRequest)try{e=new l.XMLHttpRequest}catch(e){return!1}else for(var r=new Array("Msxml2.XMLHTTP.5.0","Msxml2.XMLHTTP.4.0","Msxml2.XMLHTTP.3.0","Msxml2.XMLHTTP","Microsoft.XMLHTTP"),t=0;t<r.length;t++)try{e=new ActiveXObject(r[t]);break}catch(e){return!1}return e}function p(e){return e}function b(e,r,t,n,o){var i;function a(){var e,r,t;try{for(e=0,r=arguments.length;e<r;e+=1)if(t=c(arguments[e]))return t}catch(e){}return s}function c(e){var r;try{r=e()}catch(e){r=s}return r}return i={function_offset:c(function(){var e=u.length;return 0<e?p(u[e-1]):s}),caller_offset:c(function(){var e=u.length;return 1<e?p(u[e-2]):s}),message:a(function(){return e},function(){return o.message}),file:a(function(){return"string"==typeof e.srcElement.src?e.srcElement.src:s},function(){return r},function(){return l.document.location.href.split("?")[0]}),line:t,column:n,stack:c(function(){return o.stack}),bot:c(function(){return booking_extra.b0

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (57788)
Category:	downloaded
Size (bytes):	276168
Entropy (8bit):	5.623967549201662
Encrypted:	false
SSDEEP:	1536:oRfVJD/tmBKac0h3fVrBcFpebVaWc89scHHnpxYwy1ycyUyXAyxx7VZme29qtVxF:ofVJD/61spegJsAe29qSwO7tLcL
MD5:	5ED4066D67B39973F8BAF8BAEC2FB186
SHA1:	279CC842909E8BEBD633BF8E10E807666F393DA5
SHA-256:	4E73BD732C4E58A63414CAF97222451B40DDA6055EE99A683D20274139D3A922
SHA-512:	C50A4CA974569FCFFAAC4D84F9AD7B07DFD0457825264DAAF98E354F57781495AA3DBABFDC2C21FFC6C0159B4E749BAF5756FB1FF4B8202F4A9236672A911A5A
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/bg
Preview:	<!DOCTYPE html>.<html lang="bg" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. <meta charset="utf-8" />.<link rel="preload" href="/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3" as="font" type="font/woff" crossorigin="" />.<link rel="preconnect" href="https://bstatic.com" crossorigin="" />.<link rel="preconnect" href="https://cdn.cookielaw.org" crossorigin="" />.<link rel="preconnect" href="https://www.google-analytics.com" crossorigin="" />.<link rel="preconnect" href="https://www.googleoptimize.com" crossorigin="" />.<link rel="preconnect" href="https://try.abtasty.com" crossorigin="" />.<link rel="preconnect" href="https://lonrtp1.m

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HkfyY:2yY
MD5:	BAE13B980DD4E506678463D87B43568A
SHA1:	20DD9D14B615F391D7697212F019FB9A75FCBA3C
SHA-256:	2700D7B484F179667E1F82F53F6092E8AE8241A941784674068B5704E11B9A6B
SHA-512:	BC73A4F24F7E6DAE52E939090A37C68CE8930D99F29B53F1408CEC0CA8AD79ED399A48309461A05A60CCB15E153A7FA28D45B66E35E8B318BBA4EBDF3F515142
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmN-6J5fnLmdRIFDV18ofM=?alt=proto
Preview:	CgkKBw1dfKHzGgA=

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 261808
Category:	downloaded
Size (bytes):	55092
Entropy (8bit):	7.995965204805084
Encrypted:	true
SSDEEP:	1536:GU1wlZ5Su8dmY/T85UCRgQ0ItnpTDltT3hxcNU3MXXyK/:nGB6VCB0I7jhI+MXV
MD5:	6BF39376AE68C5F03B0A46144BB70D6A
SHA1:	6D7CAF5CAADD8969C5A844D811B5A9E0D8EAC40F
SHA-256:	DD4D2055C49E93EA0CF2ABA2BA16A610A5C800F0807CC372179F20C58ADEC19C
SHA-512:	3C9ED1E03319844DCB1350BFC9AB780F9A4256605816A1EA6752B9E5F04491A0BA312F5C70698D33E9677A919D8759D22A84B8DACE17B3492B6309099FFF46F4
Malicious:	false
Reputation:	low
URL:	https://cdn.evgnet.com/beacon/bookingdotcomb2b/booking_prod/scripts/evergage.min.js
Preview:	...........i{.F.0.........DQ..d..<.,.J...82'O.h..@.&H-.y~...^.X...d.{.;.."..^.....k.%m.b4.....9....77..<O.Y.&s>c.\|.M.[+t..(w..6.o>.....7..f....Mlk?.f..d.>~.c;.X..G....C.^3.y..6Kg..W.$[L.v6.oFy{.3.X.O#Y.#6..6.A.Z.6Os.......O9...[6...h..l6o.m{./....Ng....v...,..\|>.E....l.V.....hO.k..=....k..7..<.w..UnG.?JlY.=.....eS>._._..,..WapS.l&... .$...e.q0.z......3.G..t..`.....b.p.S.....t..;l:M.l..J..V...kX".....~......d...'.......'.4..t...3......^.@&...p7.N.z8d..zb.s......4.;+.e~yOV.y2.pYa..z.m.. ..e..y@M=\. o.>..&.....]D.`...X..b...j...mnF..q...l.....x4...>b.y6... .......4.1Y....E..Z..-;!l..6...Yv..p...g3.....m.../.y[aF{...Y......c...".h.4Zc...+.......Y..!O.py{.->.\|..~`./...<67k]I@.....{z.#.Y.V^..-..........".. ....wg:...~.S..t..~..C&......G.2...Uc.i\..6.d.6.3,G...(%...C....K.0..>{............. ....\n..[.z2.,....o..X.I;D......../..!.H.IN1......5P;.w.G...D!._..?..k5.ocw......%..`D.C...D].z.^.l=..p.6....\|.z......a..../.mC...APS...p......t.......Gp..z.6~..

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39370)
Category:	downloaded
Size (bytes):	39373
Entropy (8bit):	5.513503001490316
Encrypted:	false
SSDEEP:	768:j07PC4LifTB9BgxFJWUwcYeTivmT7+S5nC8PC/VDUZLqHQ48n96:Ye3gxF8bvyB5TPCWJqHQ9c
MD5:	C5FC28C57A072765C966EE010CF77B3A
SHA1:	FAA51716230984C5CC60D0067D9165BBC5D7583D
SHA-256:	942A9BA1FE78B402E8B52B83058DBBABDE8DB6B4D1DEBF960D6D5AFE5192DB52
SHA-512:	A1F0F1A1D1F4DDCD2946E85B2DB51867EE4D2F7B436B0B126B246B8EF895B72C67EA25358F50872135DEB68957521C51E663014E225F8E0B077F7A8BCD0977D2
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function Je(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Je),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	206222
Entropy (8bit):	5.5327440266791905
Encrypted:	false
SSDEEP:	3072:/7/GLCzAj3AWb91C2K9finZeyiuk9jcNx3tbQkLoW36E3m:6CUjwsPrFnZeyiua4tckL/363
MD5:	2DACCFDE71E29C697F8B05A9C0C0F0CC
SHA1:	13342946F96A452F297EF92005F77BA868B492A2
SHA-256:	EAACAB9967F929E6DE7365027436C65181D3FCFF04D58E809F08A11708F1888A
SHA-512:	1F332F0BAEBFF87909BB4BF69AAFFBAE48FE7E4C3D5FD02BC0309F9D4F3A02E74D1348D68D9E05B4CCD819C72F14B2DB667F3D10D4C1CB05479E1FF1F140E391
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.1afc28a1a9a2da762946.js
Preview:	"use strict";(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[792],{4721:(e,t,n)=>{n.d(t,{Is:()=>d,K6:()=>l,fS:()=>r,fh:()=>s,ih:()=>c,l$:()=>o,nc:()=>u,tv:()=>a,vw:()=>i});const a="abtasty_resetActionTracking",i="targetPages",o="qaParameters",r="audience",s="segment",c="trigger",d="$^",l=16,u=1e3},6914:(e,t,n)=>{n.d(t,{p:()=>a});const a=(0,n(721).c)(((e,t)=>t.reduce(((t,n)=>e(n)?[...t,n]:t),[])))},721:(e,t,n)=>{function a(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:[];return function(){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const r=e.length,s=e=>"__missing__"===e,c=t.map((e=>s(e)&&i.length>0?i.shift():e)).concat(i);return c.filter((e=>!s(e))).length<r?a(e,c):e(...c)}}n.d(t,{c:()=>a})},9076:(e,t,n)=>{function a(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return function(e){for(var n=arguments.length,a=new Array(n>1?n-1:0),i=1;i<n;i++)a[i-1]=arguments[i];return t.reduce(((t,n)=>null!=t?n(t):n(e,...a

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1350)
Category:	downloaded
Size (bytes):	1426
Entropy (8bit):	4.841621161203824
Encrypted:	false
SSDEEP:	24:mdsu/SZOZHEk0IXpOzwxb4VviAqp7MJ1NsreVU:muqTpbOzvvmKU
MD5:	E444A03D38821936DD4A531F6D05AFB1
SHA1:	9CC1CC74317C6D327C69B9AC28A70C754CD1EF81
SHA-256:	E6F0D5A59B1EF3CBB25F39CC859ADEB0020369B03384B00D86D98EBB7BE39092
SHA-512:	036A853F19824FE7C5F752C74F32481C0DCDEF90B5068BA48085B8B5B16C708C0DB4FAE2DBDEE0FB5FA21B7657EBEBDEEE888E939A53ED13BB1FBCAA2D31D262
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=bg&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license MIT https://github.com/kenwheeler/slick/blob/master/LICENSE */..slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;-khtml-user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;-webkit-tap-highlight-color:transparent;}.slick-list{position:relative;display:block;overflow:hidden;margin:0;padding:0;}.slick-list:focus{outline:none;}.slick-list.dragging{cursor:pointer;cursor:hand;}.slick-slider .slick-track,.slick-slider .slick-list{-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0);-o-transform:translate3d(0,0,0);transform:translate3d(0,0,0);}.slick-track{position:relative;top:0;left:0;display:block;margin-left:auto;margin-right:auto;}.slick-track:before,.slick-track:after{display:table;content:'';}.slick-track:after{clear:both;}.slick-loading .slick-track{visibility:hidden;}.slick-slide{display:

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 91 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1628
Entropy (8bit):	7.784928057284059
Encrypted:	false
SSDEEP:	24:DXGHdcP4D/gO2WdAnzMWSYfJhvbsUT/HZwDN9cbMkfYKjOmJeMs1R2t7UB3:DWHuP4XxIHQgHjbMkwsOTME2GR
MD5:	3E32EFD25AC0214B375FC8A6A32890F2
SHA1:	CD46A79DB7E53E19D5869B3CB3E7AA22EE523479
SHA-256:	807C8A1B498E17D227CF48A640B778BDC4398A9852493CB2F40BF0F33651D0DD
SHA-512:	E0F6807657EE1667876D66DCC13CD279C973EAE35E53509E86EC31951B8B07EBBCB0A1B3FC9BBDBC423F436C1F82BDC5C0440F875092E82A47CF51286CDE0C00
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png
Preview:	.PNG........IHDR...[..........2 P....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......IDATh...}l_e...O;......L..S'.G/n..22.bd..s..(d.x...(J.....!....E...%,..2..uceD\|...c.....u.._{[[\Lm3.7.....>/..<...>\|.8F..c...'..=..'{.1N.(.E./.\|......U..#:[./.Y.CY...~.6.X..,..k.F..X...H<...[d....oZ...a.o.T....59#.VL...l,G/.E..y[......59#.c.O..&l.............~\= .dy....2...e.c..d....j<....Y>....wc.f.....3i.3...")..&....b..i..'J!....\.....U....K.0.m.k;.>.o.....1.?i.k...g`.tK...-...U3?64.?...W..d.tl.@~.n.Q.....g...s...........A.V..k.y..>...........,f..e....0.y.... .O.=N..w.t...[p. {.:......N).......VI.Y.uV.....b.,...6=..~...qx.o..j.Cw.vj....D6Sp'.'y.......O..Ml..h_..../.\|...........g.'c....Yq.....O..{../...x.y........o:.WK.....}.,?....,V(..R"......57.,........].. ....<7V....x4t.....a....s1.xo....Q.}.Q.]../.......z..F.v1f......5..qyE.....h.W%{....,..K..[8...\|gE..W.\|w.6....U.g..8..n..q}E.W....S.bo..#y.PxCE......F...J1x

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	646
Entropy (8bit):	7.623802954693274
Encrypted:	false
SSDEEP:	12:YoWpIH3dWzCdWGO5z+7FYU7ID3GGmGO+cFYKbp4u+zZCqRWir1q1HZ3pl:Yo0IXdsMGTD3Xxc+KAzdRi1FL
MD5:	006212E2688BE355BDB04CF724739006
SHA1:	2ED29A7AC5ED92E9AF2DB90B33DAB0513A5812DA
SHA-256:	3B7A9CF704DB516CC37C6F3C81AD6CE6EC19CE0122FBDEAF58F6FD508316D7C1
SHA-512:	B7FAC73C063902560555175C41DCFF517DC32205DE27435AC1F02BE78E021FB38178BAC9735C00BCE91B70A255B3090652E7578884C6DA67D914B894684D2116
Malicious:	false
Reputation:	low
Preview:	RIFF~...WEBPVP8 r........* . .>...A!......a,`..P.O._.[.....L.y...`_;........'.:.M....g.g.........}...k......K..Mt.T.H.I>.b.......g..].;N...8D.!..r;Z..L#......._.9=.l......*q4..O.c._....T....G...>.K.g...]....w..t.K_....S.\..<z...#.S..s.g...........E...&3..S..;.G.\|.U[....."..#.yf.2.8...sMA....(.l..B...=...6.G.X.+..`.[.......<..iJ.r.~].\|....^.~\\.>c.O{>w...N.UR.~......../y...@.........V3../...nH....z...O.6..w.:\...)..h.,.jX....{.L..Yfp.'.J....B...W...u..7M7yM...?....D?.v.(p?.S...@......s.5.......v..H\.....h.Y3I+..6@.l3..K.kf..{.e.IN'k. ;/...O..u.30.2..".k.H}.......r.r...c.;._..s9).0.....:..L.#Og...K........t.D ..

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1210)
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	5.258297327799955
Encrypted:	false
SSDEEP:	12:UMY+8fuVEGO1wyT7ZYTH9toIRHuxTe7gxyaJRTHx5eTi4Hmr2YLAoCfA0Ixa0YEd:a+NEZWZFuxqU4afDee4GhQZ05VmImK
MD5:	49D03D47BD15DDBEC4926A87821C3278
SHA1:	8D545B020E45D00A775DECA8BCB0A4BBE17C1F2D
SHA-256:	D327ED4B7D3E5878F53B377E35DE67F9A2D9335BD85BE6028C36D3B6B05D4F72
SHA-512:	39ABCD8CB66CBF65282C2CD32BE247477EA6322A32D8E5FD8771254B7FD3F939428CA0462851AF60108BC8FE17CB3BF6769CA45C817859CC27B7E9AAC83801C7
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.body{background:none;color:#000000;font-family:Verdana,Tahoma,sans-serif;font-size:14pt;line-height:1.45;margin:0 !important;padding:0 !important;width:100% !important;}h1,h2,h3,h4,h5,h6{page-break-after:avoid;}h1{font-size:19pt;}h2{font-size:17pt;}h3{font-size:15pt;}h4,h5,h6{font-size:14pt;}p,h2,h3{orphans:3;widows:3;}code{font:12pt Courier,monospace;}blockquote{font-size:12pt;margin:1.2em;padding:1em;}hr{background-color:#cccccc;}img{max-width:100% !important;}a img{border:none;}a:link,a:visited{background:transparent;color:#333333;font-weight:700;text-decoration:underline;}a:link[href^="http://"]:after,a[href^="http://"]:visited:after{content:" (" attr(href) ") ";font-size:90%;}abbr[title]:after{content:" (" attr(title) ")";}a[href^="http://"]{color:#000000;}a[href$='.jpg']:after,a[href$='.jpeg']:after,a[href$='.gif']:after,a[href$='.png']:after{content:" (" attr(href) ") ";display:none;}table{margin:1px;text-a

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17612)
Category:	downloaded
Size (bytes):	188079
Entropy (8bit):	5.15721371191213
Encrypted:	false
SSDEEP:	3072:FUmWU9U2UbU5AClN3YtZa1uVN6FgkCEBivYk0tplerf1Ik/lyIqbMBuZo:cU9U2UbU5AClN3YtZa1uV5UkGG
MD5:	B8CB409B6AB6408C71A6AE603A5DCEF4
SHA1:	1FF523DB84B5FAF1DD5670326640D106ABFD0B53
SHA-256:	820789E9684D09AC6CB53EDE0E9E82D4B85203DBA25E26CF95CABB9F7160D835
SHA-512:	6C53E1762C0700BF4BB15A4A2285FA37B798DB2D43B858C3184E15C97DE21B88E5CEA2114F2C2AA904C0DAA277EA622C7DCE7A0C0AB11D0530DA892AEEDA0FB9
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/psb/capla/static/css/bui-react-9.12548206.css
Preview:	.c2e90a59d9{position:var(--bui_mixin_position)!important}.c2e90a59d9[style="--bui_mixin_position--s"]{--bui_mixin_position:var(--bui_mixin_position--s)}@media (min-width:576px){.c2e90a59d9[style="--bui_mixin_position--m"]{--bui_mixin_position:var(--bui_mixin_position--m)}}@media (min-width:1024px){.c2e90a59d9[style="--bui_mixin_position--l"]{--bui_mixin_position:var(--bui_mixin_position--l)}}@media (min-width:1280px){.c2e90a59d9[style="--bui_mixin_position--xl"]{--bui_mixin_position:var(--bui_mixin_position--xl)}}.de339b3a29{z-index:var(--bui_z_index_0)!important}.de391c58af{z-index:var(--bui_z_index_1)!important}.d7bc5c3ce5{z-index:var(--bui_z_index_2)!important}.c2cea76a95{z-index:var(--bui_z_index_3)!important}.ebb3a0e228{z-index:var(--bui_z_index_4)!important}@media (min-width:576px){.e3cf42c42b{z-index:var(--bui_z_index_0)!important}.c0f83749c6{z-index:var(--bui_z_index_1)!important}.d5c32cbdce{z-index:var(--bui_z_index_2)!important}.ecc3c4faf8{z-index:var(--bui_z_index_3)!imp

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	748
Entropy (8bit):	7.429500709827937
Encrypted:	false
SSDEEP:	12:6v/7UU3UnfvxshHht6RrkixYOS523xw0hKn8wfFdmAZBGXgBvZxKEmcIbaTRkumq:pUSfvx8HhtdiShIU8wd4BAvZ0Emc+Ymq
MD5:	3A8ECF5DFF4233D9B9B8DF806533FDC6
SHA1:	9E014447DADC656762BE55A9512AF34B538C0807
SHA-256:	F864C78563FE88300F71A5C3E3C5DC5299094597365CE18EED758C0563100EF5
SHA-512:	9E8B8FEEB2747C402E399D72D0757918ACD270C342A286D5574D7A1453E65C4EA6C7E8B07571FCC94F3A0877AFF7229D0C0CC27B584C9BE41CC34CDE787C41F1
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/WRQualtricsShared/Graphics/siteintercept/remove_screen_capture.png
Preview:	.PNG........IHDR.............i7.@....IDATx..mj.Q.@.t/..k..hBU..Z.h.QH...b.4.h..j ..I..=.....w....\fH.$I.$I.$I.d=.....;...9g.97.q..X..!.....%_)..>{8...7^Q#..%kD....{....bMhb...{{.qv.....L...".1..H`./.k.S..\..G..)...~..A.@.W.0.%@ .._.M...?..#$.n._...E....h?'.9.......a.........(...c..h0.$p.'4..f ........~..Q..}!../$.............qZ.....@.....~......:.........~...O;.......~.Y.O ....}!../'......O....'.............~._.O....6....W...$....y.&o..../....~._.O....\|..;...7.1l_.P...Z.__.D.........W...Z.__...__M..k.\|}y..\|}5...&..............$...4..T}..y4z.}@.Kp.>....w.\B.7.}?A.0...~.S........aj....8=?..an..~..a>.......6..'......&...........p....w4.i1Z..F....\...<.....f...53f.8..6....q.{z...$I.$I.$I.$IV..-.-._..w....IEND.B`.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057604
Encrypted:	false
SSDEEP:	3:APr4Y:APrV
MD5:	AC1981771A4F94EF40BAA578B55343BC
SHA1:	3B5C34AE086FBB783D36DA0CF885D8A7524B17C4
SHA-256:	B58B527345904E6AA688675309BE6441AB302B1863D52DB7D12DAD9E03014293
SHA-512:	69F5E441B7F026EC5A71A8FF836CC06ECEED14C337DCBC98E5A74E654A1E423F7C7A54D132627F1A999CF26088304EB54B8DB684168EA09B1B7A1F409D128C32
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnlLPZa0YcvDxIFDcMS_rwSBQ0d3M9e?alt=proto
Preview:	ChIKBw3DEv68GgAKBw0d3M9eGgA=

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=543530&time=1720575931470&url=https%3A%2F%2Fpartner.booking.com%2Fcs
Preview:	{}

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1197
Entropy (8bit):	5.250746419165476
Encrypted:	false
SSDEEP:	24:2dYwahJhWDCLf3fbeVZmFy6yCXCWX9JVLNpwtbMIhU7C06Fa5QcPm:cyJhbf3fbOKy6yCdtJWWFL6FSQ/
MD5:	E8209D74AD093F151954A3820C12E5D8
SHA1:	12FBF39039F0182026ABAF8B0A22E75C9BB316F7
SHA-256:	C80B9838465A2C5AA19E06C25631CD22D81DD8C76563875EBFB4D35304DFBA47
SHA-512:	4DC04BF54E06A26D78C6D71EAA392059B21EA8A01BF6C6B1EB808F9A01758C18DB18A28A9D74A841B3D5F2249787890944EC94EE0A6D4B2F99042138534800F2
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 -->.<svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 192 192" style="enable-background:new 0 0 192 192;" xml:space="preserve">.<style type="text/css">...squircle{fill:#003B95;}...bdot{fill:#FFFFFF;}.</style>.<path class="squircle" d="M37.8,0h116.5C175.1,0,192,16.9,192,37.8v116.5c0,20.9-16.9,37.8-37.8,37.8H37.8C16.9,192,0,175.1,0,154.2V37.8..C0,16.9,16.9,0,37.8,0z"/>.<g id="bdot-group">..<path class="bdot" d="M144.2,143.8c6.7,0,12.1-5.5,12.1-12.2c0-6.7-5.4-12.2-12.1-12.2c-6.7,0-12.1,5.4-12.1,12.2...C132.1,138.3,137.6,143.8,144.2,143.8z"/>..<path class="bdot" d="M106.7,91.9l-3.1-1.7l2.7-2.3c3.2-2.7,8.4-8.8,8.4-19.3c0-16.1-12.5-26.5-31.8-26.5H60.9h-2.5...c-5.7,0.2-10.3,4.9-10.4,10.6V144h35.4c21.5,0,35.4-11.7,35.4-29.8C118.7,104.4,114.2,96.1,106.7,91.9z M67.6,66c0-4.7,2-7,6.4

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58048)
Category:	downloaded
Size (bytes):	283233
Entropy (8bit):	5.346796082430164
Encrypted:	false
SSDEEP:	3072:PmVJD/61spevp7f8Ae29q5oKXw20fr7C6Kcy:+Ispexcw20fr7Cv
MD5:	A33C40DA4B9D187979E8DF5525100F11
SHA1:	4EA7E227E891881E128CF22F6C1D0B72E0D2F1E4
SHA-256:	8B32BB53E81DE488E617A5AF294B716421FE8940460756C63E8B823CF0A2E878
SHA-512:	425ECD3C60A1D4942E975FFC3BE4E0045D69C8001994048227B2513AD500482BCE53559A2592EF084F9A11BBDD4BC4A3AF8514C984746278AB2878A8F6F15D6B
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/en-us
Preview:	<!DOCTYPE html>.<html lang="en-us" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. <meta charset="utf-8" />.<link rel="preload" href="/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3" as="font" type="font/woff" crossorigin="" />.<link rel="preconnect" href="https://bstatic.com" crossorigin="" />.<link rel="preconnect" href="https://cdn.cookielaw.org" crossorigin="" />.<link rel="preconnect" href="https://www.google-analytics.com" crossorigin="" />.<link rel="preconnect" href="https://www.googleoptimize.com" crossorigin="" />.<link rel="preconnect" href="https://try.abtasty.com" crossorigin="" />.<link rel="preconnect" href="https://lonrtp

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1372)
Category:	downloaded
Size (bytes):	1484
Entropy (8bit):	5.462218281302022
Encrypted:	false
SSDEEP:	24:QZjZPR8rIBX1eTFOFg0KA3Yb7jSVcq35D1hTrFL6ndU51mBUQmNQGQUGlFFscERG:QJYrKXEJOFg0K++7OVcqp5Dzmhi67Fsk
MD5:	781671F567C43598CAEC4C766FFA2401
SHA1:	B75953BA08FD86F913633EEA45B81D2E5414CF5A
SHA-256:	7C591E4A5B62419AE873B5D05EB6B552FEEA3C07E4423984F0C24FF37D86659A
SHA-512:	61C29953A8DD441A7DD01EE1383376258EB2D8BA5F2CF479CD592F30DE9167FE05C5C35A8E990DE4BA4FEF654774DD64F986997AB63AB5B6C8AAC7BB474E8994
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/psb/capla/static/js/a72063b1.759d5807.chunk.js
Preview:	"use strict";(self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]=self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]\|\|[]).push([["a72063b1"],{"181eacc8":function(e,t,n){n.d(t,{d:function(){return i}});var r=n("8d8e8f9e"),a=n.n(r),s=n("6ee88c54"),c=n("dc6d28ff"),o=n("d1e54a96");const i=()=>{let e;const t=(0,c.getRequestContext)().getSiteType(),n=(0,o.isRTL)();switch(t){case s.N.ANDROID:case s.N.IOS:case s.N.MDOT:e="small";break;case s.N.TDOT:e="medium";break;default:e="large"}return{defaultViewportSize:e,defaultRTL:n,theme:a()}}},"64b778ad":function(e,t,n){n.r(t);var r=n("ead71eb0"),a=n.n(r),s=n("d16e9636"),c=n.n(s),o=n("144d30e6"),i=n.n(o),l=n("181eacc8");const d={"/PrivacyStatement":(0,s.loadable)({resolved:{},chunkName(){return"components-PrivacyStatement-PrivacyStatement"},isReady(e){const t=this.resolve(e);return!0===this.resolved[t]&&!!n.m[t]},importAsync:()=>n.e("256aa323").then(n.bind(n,"39f44f23")),requireAsync(e){const t=this.resolve(e);return this.resolved[t]=!1,

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.150232349540528
Encrypted:	false
SSDEEP:	3:YRc8fBAgJVJfHjDrXKlyAwlfHbTKSMh:YxnRDDrbPKSE
MD5:	AA06ED13ABA3B8794A6B08C97690BE10
SHA1:	D33973099AAB36E3D31776FC2CFA5813F3E01682
SHA-256:	776884509E2EAA210894BAA49945B7AD8A02026ADC657E276F724AF7E8544374
SHA-512:	89E907DEA8FF569ECC8E54840A3553623585EE84D1FE285DC62427C2BD5DA0EFFE05436C6C8A28389A620D5FF248ADC42B92332E7B847BD0202C1A3A0C1B154A
Malicious:	false
Reputation:	low
Preview:	{"type":"Desktop","os":{"name":"Windows"},"browser":{"name":"Chrome","version":"117"}}

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14704), with no line terminators
Category:	downloaded
Size (bytes):	14704
Entropy (8bit):	5.296952768199817
Encrypted:	false
SSDEEP:	384:hmV/StpdWlIvU3r+ekod5JN8W6cwjEKznBhCbOoLA9cy0Cbl:urIvhoL8W6cwwKzTR
MD5:	9280391DFF50A2A432EF5FA6A19934C7
SHA1:	7B6B9FD355822498BA09A37E31480AB22F566B64
SHA-256:	71F936C09BE11994290BADA1D1BAD944D85B65CE2D2D2FE505B33852851FFDAE
SHA-512:	9AAA239FF8CDC05128BF146FC44DC2CB42F388A37423A4C6FFF54DD8D94DE2CB86331C47D68D32BB1FEC2AAAD127D7C435E353A7DF6B11FE197D2DA504AFB8FA
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/jfe/static/dist/c/jsApi.9280391dff50a2a432ef.js
Preview:	webpackJsonp([29],{319:function(module,exports,__webpack_require__){var __WEBPACK_AMD_DEFINE_ARRAY__,__WEBPACK_AMD_DEFINE_RESULT__;__WEBPACK_AMD_DEFINE_ARRAY__=[__webpack_require__(4),__webpack_require__(0),__webpack_require__(2),__webpack_require__(1),__webpack_require__(817),__webpack_require__(35),__webpack_require__(3),__webpack_require__(150)],void 0!==(__WEBPACK_AMD_DEFINE_RESULT__=function(Promise,dejavu,utils,$,QBuilder,Qualtrics,log,publicED){"use strict";return function(Page,$window){var prototypePromise=Page.getPageTemplate().getFeatureFlag("JFE_BlockPrototypeJS")?Promise.resolve():Promise.resolve(__webpack_require__.e(38).then(__webpack_require__.bind(null,818))).then(function(prototypeLoader){return prototypeLoader(Page,$window)});return $window.Qualtrics=Qualtrics,utils.deepMixIn(Qualtrics,{Browser:{IE:!(!$window.attachEvent\|\|$window.opera),Opera:!!$window.opera,WebKit:navigator.userAgent.indexOf("AppleWebKit/")>-1,Safari:navigator.userAgent.indexOf("Safari/")>-1,MobileWe

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003), with no line terminators
Category:	downloaded
Size (bytes):	3003
Entropy (8bit):	5.162605900482419
Encrypted:	false
SSDEEP:	48:wTaJfy+hiQFNB7GEGTbTzLEoPpKkVr54TH4y3yXHlrMPbEz2gqGC7samAw8//yYZ:wTsiQFNBGEGLco7DiH4eyXHhMPMoxmLo
MD5:	F4C50472C559F3D2F7A9D739F37F0594
SHA1:	D1E533149BF6D3671FF175F99E8233480D595587
SHA-256:	8A3D8C061A2A585985A71D5B1A45C424C5BC79B310C86B4731B5BECECF5EA5DF
SHA-512:	1E5FD9F09281CCC95AEB2816BCC5C693CF0EE079032B1F367E480589B1EB1BC92CD4BDC9C8C358C2C753FF2ED05D31F01FC8A26893AC935EBFA862084C70B354
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/themes/custom/booking/js/libraries/addtoany.min.js?v=1.0.0
Preview:	!function(o,i){function r(){}var n,d,s,l,c,u,f,m,e,a,t,p,y,v,h=".Ep5bSEmr",_=o.head;"function"==typeof[].indexOf&&_&&(i.a2a=i.a2a\|\|{},n=i.a2a_config=i.a2a_config\|\|{},e=(d=o.currentScript)&&d.src?d.src:"",NodeList&&NodeList.prototype.forEach&&(i.a2a.init=function(e,a){void 0===a&&(a=n);var t=":not([data-a2a-url]):not(.a2a_target)";o.querySelectorAll(".a2a_dd"+t+",.a2a_kit"+t).forEach(function(e){e.matches(".a2a_kit .a2a_dd");e.a2a_index\|\|null!==e.getAttribute("data-a2a-url")\|\|e.matches(".a2a_kit .a2a_dd")\|\|(e.dataset.a2aUrl=a.linkurl\|\|"",a.linkname&&(e.dataset.a2aTitle=a.linkname))}),delete n.linkurl,delete n.linkname},i.a2a_init=i.a2a.init,!d\|\|d.async\|\|d.defer\|\|i.a2a.init("page",{linkurl:n.linkurl,linkname:n.linkname})),i.a2a.page\|\|(i.a2a.page=!0,s=[],["init_all","svg_css"].forEach(function(t){i.a2a[t]=function(){for(var e=[],a=0;a<arguments.length;a++)e[a]=arguments[a];s.push([t,e])}}),t=(v=n.static_server)?v+"/":"https://static.addtoany.com/menu/",a=e&&-1!==e.split("/")[2].indexOf("a

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	80711
Entropy (8bit):	5.390279253038388
Encrypted:	false
SSDEEP:	1536:Aph5HknM8/CUV0dJ2g6DQm/cZRuSlYRy16qIM7B:ehQZCQ/WYo16qIM7B
MD5:	48D245EC8385771C75FCC3EAB92B5967
SHA1:	A5A557EA6BBA77E98ADD0828DF963E7ED7DB0105
SHA-256:	471DA81FBD408B6352D17FDEC0E7D4940A82CA210F12DB00FB80504881623887
SHA-512:	74B7E8455425D3BA6D57CF862CAB9C04BBEEE1BD8E50FC9B06A826AB7E458AB434A47F2F3570B9A9BDF462BDCB99301DAEA19FDEC72F2EF7E6F8BDD6BFB0809F
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your privacy settings","MainInfoText":"Select which cookies you want to accept on this site.","AboutText":"You can find more detailed info on cookie use and descriptions in our privacy and cookie policy.","AboutCookiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/content/privacy.html","ActiveText":"Active","AlwaysActiveText":"Always Active","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"By clicking \"Accept,\" you agree to the use of analytical cookies (used to gain insight on website usage and to improve our site and services) and tracking cookies (both from Booking.com

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	981
Entropy (8bit):	6.309068214107805
Encrypted:	false
SSDEEP:	12:6v/76EZ6m9U1wMSKUju3ZxGYPI1kUvlGF3jNme3cd6RvN61Y2DjW8g0S8T7ywIQW:xnSKU8vGB3sFzNrcUKP7awlZiNpD9
MD5:	278428E12029FAD7BC6C0DB3E3E96443
SHA1:	89E6BAC55BEBDC67D401CAA966F5497530AEE6D6
SHA-256:	5118A7620A63CE9D11033D5CC1F1D1EE26F30D7E45943AE2A247CF186B699BB1
SHA-512:	854437C9EF92014D98AA06EF66EA8BCFA67505E84EEC3C8DF94EE2CE371838ECA2C48B2BA85D503BC161DA6317FDE972EB2AC595244B0BE655D0AF41502DFE2D
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/WRQualtricsControlPanel/Graphic.php?IM=IM_Ewc6NXCuKnXXhGM
Preview:	.PNG........IHDR.............8k......PLTE............@@@+++$$$ ...+++'''$$$"""(((&&&$$$###!!!+++)))'''$$$((('''&&&###)))((('''%%%(((&&&'''&&&&&&%%%$$$(((''''''&&&(((&&&&&&%%%%%%'''''''''&&&&&&%%%%%%'''&&&&&&&&&&&&%%%'''&&&&&&%%%'''&&&&&&&&&&&&%%%'''&&&&&&'''&&&%%%%%%'''&&&&&&&&&&&&&&&&&&%%%'''&&&&&&&&&&&&&&&%%%'''&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&%%%&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&'''&&&&&&&&&&&&&&&&&&&&&&&&.....T.....tRNS...................... !"$%&')-/45678@ABDGJQRSTUVWXYZ[_fjlnoqstwy...................................................................0#....bKGD........iIDAT(.mQ._.q.>o.(..%Z"3...4(.K%...m\|............{..Ch.%..t.g.B-...$..'.!......0>..9.<..h.).R.2j..R.T\|G.u...F.....a-m..'..`...Q]...... ..Z:.fGQ....P....8`K.!.3..C..=..`...d.8......@....RhP.Rt..e..9.....w7.ZvV^....y... ..q...2....{x.T.{]...6s..?..X.U~..}.a~..fxw......TW_m..m.6K..IKUV.i....Q.-...l ...@...\n.;..8.s\|.J.k.xV.w.-..h...f.."..-4x.t..{.M../..O.........IEND.B`.

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23379), with no line terminators
Category:	downloaded
Size (bytes):	23379
Entropy (8bit):	5.211693995794743
Encrypted:	false
SSDEEP:	384:XNPeatsU7faq4CNOZjVONK8x/xScjiKxJTQK/5AxPuMbK/q4x17CY/lLx2+dZkJp:XNPe4h7P4skVONK8x/xSuxxJTD5AMMbx
MD5:	9E40A41A129ED1D6CB264D81858D4854
SHA1:	F9776FA975B81EC254633F02D006E28A3A6079FB
SHA-256:	478337B30E20AC02307A358E23D477E7C1C0260B39BFC5CD951EC367C923C562
SHA-512:	62E2430E9139219DD12CBA58B99256F1E2120B7700056069E6EAED41603637A5C1239D65673C68B68D54E86626C6AE7A427E44CABDF51E15ABDB2DBD5139D154
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/vendors-react-chat_node_modules_react-hook-form_dist_index_esm_mjs-aeac223be9413b14fbb3.js
Preview:	"use strict";(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["vendors-react-chat_node_modules_react-hook-form_dist_index_esm_mjs"],{5964:(e,t,r)=>{r.d(t,{FH:()=>j,lN:()=>C,mN:()=>Se,xI:()=>B});var s=r(257),a=e=>"checkbox"===e.type,i=e=>e instanceof Date,n=e=>null==e;const l=e=>"object"==typeof e;var o=e=>!n(e)&&!Array.isArray(e)&&l(e)&&!i(e),u=e=>o(e)&&e.target?a(e.target)?e.target.checked:e.target.value:e,d=(e,t)=>e.has((e=>e.substring(0,e.search(/\.\d+(\.\|$)/))\|\|e)(t)),c=e=>{const t=e.constructor&&e.constructor.prototype;return o(t)&&t.hasOwnProperty("isPrototypeOf")},f="undefined"!=typeof window&&void 0!==window.HTMLElement&&"undefined"!=typeof document;function m(e){let t;const r=Array.isArray(e);if(e instanceof Date)t=new Date(e);else if(e instanceof Set)t=new Set(e);else{if(f&&(e instanceof Blob\|\|e instanceof FileList)\|\|!r&&!o(e))return e;if(t=r?[]:{},r\|\|c(e))for(const r in e)e.hasOwnProperty(r)&&(t[r]=m(e[r]));else t=e}return t}var y=e=>Array.isArray(e)?e.filter(Boolean):[],v=e=>

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58048)
Category:	downloaded
Size (bytes):	283233
Entropy (8bit):	5.346796082430164
Encrypted:	false
SSDEEP:	3072:PmVJD/61spevp7f8Ae29q5oKXw20fr7C6Kcy:+Ispexcw20fr7Cv
MD5:	A33C40DA4B9D187979E8DF5525100F11
SHA1:	4EA7E227E891881E128CF22F6C1D0B72E0D2F1E4
SHA-256:	8B32BB53E81DE488E617A5AF294B716421FE8940460756C63E8B823CF0A2E878
SHA-512:	425ECD3C60A1D4942E975FFC3BE4E0045D69C8001994048227B2513AD500482BCE53559A2592EF084F9A11BBDD4BC4A3AF8514C984746278AB2878A8F6F15D6B
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/en-us?utm_source=extranet_login_page
Preview:	<!DOCTYPE html>.<html lang="en-us" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. <meta charset="utf-8" />.<link rel="preload" href="/themes/custom/booking/fonts/icons/icons.woff?v=1.3.3" as="font" type="font/woff" crossorigin="" />.<link rel="preconnect" href="https://bstatic.com" crossorigin="" />.<link rel="preconnect" href="https://cdn.cookielaw.org" crossorigin="" />.<link rel="preconnect" href="https://www.google-analytics.com" crossorigin="" />.<link rel="preconnect" href="https://www.googleoptimize.com" crossorigin="" />.<link rel="preconnect" href="https://try.abtasty.com" crossorigin="" />.<link rel="preconnect" href="https://lonrtp

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1210)
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	5.258297327799955
Encrypted:	false
SSDEEP:	12:UMY+8fuVEGO1wyT7ZYTH9toIRHuxTe7gxyaJRTHx5eTi4Hmr2YLAoCfA0Ixa0YEd:a+NEZWZFuxqU4afDee4GhQZ05VmImK
MD5:	49D03D47BD15DDBEC4926A87821C3278
SHA1:	8D545B020E45D00A775DECA8BCB0A4BBE17C1F2D
SHA-256:	D327ED4B7D3E5878F53B377E35DE67F9A2D9335BD85BE6028C36D3B6B05D4F72
SHA-512:	39ABCD8CB66CBF65282C2CD32BE247477EA6322A32D8E5FD8771254B7FD3F939428CA0462851AF60108BC8FE17CB3BF6769CA45C817859CC27B7E9AAC83801C7
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.body{background:none;color:#000000;font-family:Verdana,Tahoma,sans-serif;font-size:14pt;line-height:1.45;margin:0 !important;padding:0 !important;width:100% !important;}h1,h2,h3,h4,h5,h6{page-break-after:avoid;}h1{font-size:19pt;}h2{font-size:17pt;}h3{font-size:15pt;}h4,h5,h6{font-size:14pt;}p,h2,h3{orphans:3;widows:3;}code{font:12pt Courier,monospace;}blockquote{font-size:12pt;margin:1.2em;padding:1em;}hr{background-color:#cccccc;}img{max-width:100% !important;}a img{border:none;}a:link,a:visited{background:transparent;color:#333333;font-weight:700;text-decoration:underline;}a:link[href^="http://"]:after,a[href^="http://"]:visited:after{content:" (" attr(href) ") ";font-size:90%;}abbr[title]:after{content:" (" attr(title) ")";}a[href^="http://"]{color:#000000;}a[href$='.jpg']:after,a[href$='.jpeg']:after,a[href$='.gif']:after,a[href$='.png']:after{content:" (" attr(href) ") ";display:none;}table{margin:1px;text-a

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	83826
Entropy (8bit):	5.366264835806005
Encrypted:	false
SSDEEP:	1536:eiAk3otBQlBNqRYVp7BwzAWxckMkG/Mlu+mfUY:k6p7Bw7x+x/j
MD5:	DB5A931B5024FE86A63D507A3F84D84F
SHA1:	D81BBFE9BF6EA1AC288F3E8B21D60EBD87AF379C
SHA-256:	2DA38B5D5A8ACA1FC64BDD32CB444AD738D49010A1A28E4933AC3D50CC84AF6B
SHA-512:	08967F4790A8EB4139DE1B3050583811AF8D5AA9D538A6D36248C9FEC0B20C47A31974A36907C6F584187073B45CEEF14102ABD17E8512A66F931D22A4B17ADF
Malicious:	false
Reputation:	low
URL:	https://cdn.spinnaker-js.com/rc/19174/scripts/s.js
Preview:	"use strict";!function(n){function i(){Object.entries\|\|(Object.entries=function(e){for(var t=Object.keys(e),n=t.length,i=new Array(n);n--;)i[n]=[t[n],e[t[n]]];return i})}"undefined"!=typeof localStorage&&"undefined"!=typeof sessionStorage&&setTimeout(function(){window.__rctEnv="production";var e,t=function(){var e=["Object.entries","Object.assign","Object.freeze","Object.keys","Symbol","Symbol.iterator"],t=[],n=!1;if(Object.entries&&Object.assign&&Object.freeze&&Object.keys&&window.Symbol&&window.Symbol.iterator)return[];for(var i=0;i<document.scripts.length;i++){var a=document.scripts[i].getAttribute("src");if(a&&a.match(/polyfill\.io/g)&&a.match(/\?features\=/g)){var n=!0,o=(a.split(/\?\|\&/)[1]\|\|"").replace("features=","").split(",");if(o.length)for(var r=0;r<e.length;r++)~o.indexOf(e[r])\|\|t.push(e[r])}}return n&&t\|\|e}();t.length?((e=document.createElement("script")).src="https://polyfill.spinnaker-js.com/v2/polyfill.min.js?features="+t.join(",")+"&flags=gated",document.body.appendCh

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5103), with no line terminators
Category:	downloaded
Size (bytes):	5103
Entropy (8bit):	5.1122104368256505
Encrypted:	false
SSDEEP:	96:1T04CJvecf3Rr6bcy/u2q0BfAFeV1F75kAxtN3p09i+:ZsJ2C3R+bcy/u2tBfZvFOAc9L
MD5:	8FF82210DF973B5A7CA8EA983435F38D
SHA1:	8055A5A1E721616502AD249D41D6B9C671C9CD73
SHA-256:	51DFAECE0F790A4CA275AA14F70DD119124FD409BD3C3649D5BEF3C440AC68B8
SHA-512:	314A5477DA425472269CBB554263041591E02EE52D5BE5FB8DDEFD8454C40DDE9A2AA161429E87497798B8BE01A928CB059ED588B3E84B6697464B4D5EA06EA4
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/jfe/static/dist/c/mp.8ff82210df973b5a7ca8.js
Preview:	webpackJsonp([24],{321:function(e,t,s){var n,a;n=[s(0),s(4),s(12),s(820),s(1),s(821),s(3)],void 0!==(a=function(e,t,s,n,a,o,r){"use strict";return e.Class.declare({$name:"MessageProcessor",_page:null,_canScreenCaptureResolve:null,_canScreenCapturePromise:null,_postReplyTimeout:200,_onSaveScreenCaptureCallbacks:{},initialize:function(e){this._page=e,this.getCanScreenCapture(),this.listenForEscapePress()},listenForEscapePress:function(){a(document).on("keydown",function(e){e&&e.keyCode&&27===e.keyCode&&this.postMessage({event:"EscapeKeyPress",to:"SI",from:"JFE"})}.$bind(this))},postMessage:function(e){s.top.postMessage&&(e.time=o.now(),s.top.postMessage(JSON.stringify(e),"*"))},processSetEmbeddedData:function(e){r.warn("New embedded data set via post Message "+e.key),this._page.setED(e.key,e.value)},processScreenCapture:function(e){void 0!==e&&(e.clearKey?this._page.setSM("ScreenCaptureId",""):e.key&&this._page.setSM("ScreenCaptureId",e.key))},_parseMessage:function(e){var t,s;if(null!=e

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2146
Entropy (8bit):	7.8875883951747925
Encrypted:	false
SSDEEP:	48:j/6u3CtuLhUGh0H5UFe2pYo37Esd2gjEj7seiEfE/ODAtLx:jSRuLKA0ZUFnR4sPEUeJf8/
MD5:	27E71A5124018E16EAE0B8897618623D
SHA1:	D0D54D88B04EDFC71F338C19EAB9994632BC6CED
SHA-256:	1D6E86E59AB7235A8343F494C8E8DA6CC02C5A98A75D682401340E6D06935F20
SHA-512:	A9D6F6B881175780E2619843AA88AACE7E94DA178C53C3DDDE691A930C5412FC4CD817009D488757835903D9218758F808AC36C1F828371D57AF91EA9CF3170A
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png
Preview:	.PNG........IHDR...F..........b.....pHYs.................sRGB.........gAMA......a.....IDATx..Y.pT..>...........e....f.+(T.L..KiZ.....`..c;v .....u.M...h.........DJ..RQ..-?!FlB.}..~w./........3s..}..s.{...et.Kyy.....;v.....N..p.....I4=...t..'.BI.,/X..R.0.%.<.....F...i.6..rSJ.......Mgy0x.#.:....YYY....}.....~..L..M...........d.`..t...>Gi.K......)W.x.i?.5H.........Q...-0z..8 ?..IR.G`..N..`p...Q<.t.i2..~)K.G..l\y(4E..y.31.7.(....Wa..>......_RR....6.-..7...Iy..y;......~.<..T....)k.e...D.f...........2.k..0.=.[..D..n...W..V.B..uVUU..."5m.0W._.0a..^.'...V8x.. e.I...H8..... ..N;....".&.J...Hd.l).81....5.c...<.....W.o....U/(..,.O..+.c.ZZZ........L..c...V..[...... .g(.Y..P....>.>.-v?....>..&.?j.A....)5Q...KO....'.l..G...:.b{..#..4.`.[.]..V..20.k.-W.<.m[.q.BA.i........!...,.6.....N...l2.......`......1...o^...iY.]...&.O....\.c.>L.w...:.......u..d9.f.Ld.*....J...=...1....A.!&.c......f.}s....,."..e.....2....)...%..o..I\."_JL..id..c.N.y...k...p.m..A...

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	805884
Entropy (8bit):	5.083707468119061
Encrypted:	false
SSDEEP:	24576:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVkO2sdwUqkhBYlJz5oE:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVw
MD5:	7BA11A08E48BA9F76CE05CACEC640727
SHA1:	6B697F983F25B6528544C767277E9A1E2322C7B5
SHA-256:	8E6C1E164372165A4B31001BC9D28614200EAF665A5827BE856AC11D5262946D
SHA-512:	9969DDC1FA8ADA268EBAF448591F602CDC83401BCF73B3A744AAD7A88154F7789A507A922392D43A519C659FB82B940B81C2FE1D01A0646AA9D119FCF75BFED2
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GPL2+ no URL */.:root{--bui_unit_value:8;--bui_unit_smaller:2px;--bui_unit_small:4px;--bui_unit_medium:8px;--bui_unit_large:16px;--bui_unit_larger:24px;--bui_unit_largest:32px;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;--bui_color_destructive_light:#fcb4b4;--bui_color_destructive_lighter:#ffebeb;--bui_color_destructive_lightest:#fff0f0;--bui_color_callout_dark:#bc5b01;--bui_color_callout:#ff8000;--bui_color_callout_light:#ffc489;--bui_color_callout_lighter:#fff0e0;--bui_color_callout_lightest:#fff8f0;--bui_color_complement_dark:#cd8900;--bui_color_complement:#febb02;--bui_color_complement_light:#ffe08a;--bui_color_complement_lighter:#fdf4d8;--bui_color_complement_lightest:#fefbf0;--bui_color_constructive_dark:#006607;--bui_color_constructive:#008009;--bui_color_constructive_light:#97e59c;--bui_color_constructive_lighter:#e7fde9;--bui_color_constructive_lightest:#f1fef2;--bui_color_primary_dark:#00224f;--bui_color_primary:#003580;--bui_color_primary_li

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcon9LuJ4vV/:T8wAD5ABwXw+krfflyxzxwn9D/
MD5:	5C4B768820444AFADEAC19D7ED7902AE
SHA1:	B3FD3A19CE89627DAB0129976956FD3EB11749C8
SHA-256:	E0C289FAA80333EFF728B8BDBBF10B11DEC1A6E1938A444E1CC41BE6744E96D2
SHA-512:	4664A19499181D9D8C1A60E2E727293423EDC33B3359A3A585BE215BDE914C4425473E8532A7BB2E415C845057E61F1833C1AE6B4DFCFC474BFAF7E27BAE017B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	920
Entropy (8bit):	6.285126364743982
Encrypted:	false
SSDEEP:	24:XH8XtAgUfeWaMoBD1UIqvEsVyp6tjgmrF1:XH8XCgUcrBSIKEmdp1
MD5:	054743E4037445242C71D71B393C1D9A
SHA1:	D950561F585A70B5073F47D1A4095337065A066B
SHA-256:	6177736E0957C9B0BAD9923C86256E60E6A8224DFB35B665497987560DEDD0E6
SHA-512:	DA15D2CDFBA6A1122E007C8305E69E4AC54B2E98B12F3265A922413F615D89C15719A4B250A6ECBEE281E523950278F958A7F76D83179E5ECC2937FD10B61BFB
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/WRQualtricsControlPanel/Graphic.php?IM=IM_ZXKGLm5YWXv8t0T
Preview:	.PNG........IHDR.............8k.....qPLTE............@@@333+++$$$ ...+++'''$$$""" $$$###!!!+++)))'''$$$###"""((('''&&&$$$)))((('''%%%((('''&&&&&&%%%(((''''''&&&$$$&&&%%%%%%'''''''''&&&&&&%%%%%%%%%'''&&&&&&&&&%%%'''&&&&&&%%%&&&&&&&&&%%%'''&&&&&&%%%'''&&&%%%%%%'''&&&&&&&&&&&&%%%'''&&&&&&&&&%%%&&&&&&&&&%%%'''&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&%%%&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&'''&&&&&&&&&&&&&&&&&&&&&....@...ytRNS........................ !"#%&')34567@ABDMQRSTUVWXYZacjklnoqsty..........................................................8Sg.....bKGDz8.j...PIDAT.....#.....o"&.U.M......J..]$:PTZ\|..~.}.....n.i..G..@...H.+s..4.J...?.v.(....k9.....@r....t\|M...p.....+...[..lc..@.>.Jz.z. ...t.d...5W.j.....W....{....r....AO.d...q.....@WL.......q......r..=...]?.(H._r....Zz.7...i?31..G*1E......<...:.M.f3<.......?#"b..J.G..Kz..'g..`$.....6.%....wz.r...x'........8..U7...X....,l.....,.?~.C...}8....IEND.B`.

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3306), with no line terminators
Category:	downloaded
Size (bytes):	3306
Entropy (8bit):	5.319119276491471
Encrypted:	false
SSDEEP:	96:GzSHv/C6ZxAHA69rqb2XEuR4pMm7gvnnAEmLJ7zg:GGHy6ZyHI5pMeUAdA
MD5:	DC1A409C41799BA4F1C15E2E38BFD526
SHA1:	BFA29DFDA7C54041284B2542E45910C04D1549FF
SHA-256:	CB6C5D241FE7D4D8E9460431723127EFAC19056F072CEAE7ADE775B744537379
SHA-512:	E46132ECFDB4C142E6CE6E4D0BA9EF04BDD258918F35B03D796A1A64F50E1F922F9FAB55ABE61FAF4ACE4FDAA29029B14033BDA6009A834DE35CB8234759D692
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04.js
Preview:	(()=>{"use strict";var t={81:(t,a)=>{var e,n,r;a.o3=void 0,function(t){t.identifier="index",t.initiator="initiator",t.manifest="manifest"}(e\|\|(a.o3=e={})),function(t){t.IDENTIFIER="identifier",t.INITIATOR="initiator",t.CLIENT="client",t.JSON="json",t.MANIFEST="manifest",t.SHARED="shared"}(n\|\|(n={})),function(t){t.accountJs="accountJs",t.consentJs="consentJs",t.fragmentJs="fragment-",t.customAnalytics="custom-analytics-",t.campaignJs="campaign-js-",t.variationJs="variation-js-",t.scopeJs="scope-js-",t.triggerJs="trigger-js-"}(r\|\|(r={}))}},a={};const e="error::",n="warning::",r={allowed:document.cookie.indexOf("abTastyDebug=")>=0};function i(t,a,e){if(function(){const t=!window.abTastyStopLog;return(r.allowed\|\|window.abTastyDebug)&&t}()){for(var n=arguments.length,i=new Array(n>3?n-3:0),o=3;o<n;o++)i[o-3]=arguments[o];a(`%c [AB Tasty Debug mode] %c ${t}`,"background: #222; color: #bada55; padding: 3px; border-radius: 5px 0px 0px 5px;",`${e} padding: 3px; border-radius: 0px 5px 5px 0px;`,

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	83255
Entropy (8bit):	5.575272658801777
Encrypted:	false
SSDEEP:	1536:0epMHkOGM8/CUVboJAQqYvCMChSlYjs16qIx2wC:Hp+GZCOriYo16qIAwC
MD5:	3D21956BE97FF6CC194C9ED3B36FC8EF
SHA1:	D64FCFAB2774DA21DF98C6AEA9C546B23AAEF23D
SHA-256:	D0A94256E30E1F94CDA9FEB506E2E4BDFA5BD3481DA9E982D5FD0B91C1E7EE17
SHA-512:	C34F3A5ADD7F00040054456B9F45613FAC4C0561FF0925FF430DA7046805E99F95760F9A1D9F66210BCD187BFAD32C3BB2A27CCC1930039E1733FE836AA6FE57
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/cs.json
Preview:	{"DomainData":{"pclifeSpanYr":"Rok","pclifeSpanYrs":"Roky","pclifeSpanSecs":"N.kolik sekund","pclifeSpanWk":"T.den","pclifeSpanWks":"T.dny","pccontinueWithoutAcceptText":"Pokra.ovat bez p.ijet.","pccloseButtonType":"Icon","MainText":"Spravujte nastaven. ochrany soukrom.","MainInfoText":"Vyberte, kter. cookies chcete na t.chto str.nk.ch povolit.","AboutText":"Podrobn.j.. informace o pou.it. cookies a jejich popis najdete v na.em prohl..en. o ochran. soukrom. a pou..v.n. cookies.","AboutCookiesText":"Va.e soukrom.","ConfirmText":"Povolit v.e","AllowAllText":"Ulo.it nastaven.","CookiesUsedText":"Pou..van. soubory cookie","CookiesDescText":"Description","AboutLink":"https://www.booking.com/content/privacy.html","ActiveText":"Aktivn.","AlwaysActiveText":"V.dy aktivn.","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"Kliknut.m na tla..tko Povolit pou.it. cookies souhlas.te s pou.it.m analytick.ch cookies

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	downloaded
Size (bytes):	7889
Entropy (8bit):	5.3539189175758715
Encrypted:	false
SSDEEP:	192:EIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:E2kNdcC9J6co91qwLcI6KgkixbdjqBFH
MD5:	FD4F902B789F81BAA379B0BA42C21ACD
SHA1:	9F5C7F1B6E8151ED8D54C24A297B27177B38EFB0
SHA-256:	6E61BE2F374A0122510025578940BAF7EF8DBBCAF3ECC5F5535CFC81BD1CFD39
SHA-512:	6D88550E1BDDD52E4BEF156BD800C97147AE7BA30AA0EB0D0B31815250A119D8C5D165A777B7AA195BB70DF2F2DCC159204F6A3E47EF71D24D7861EF58171CF8
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/libraries/lazysizes/lazysizes.min.js
Preview:	/! lazysizes - v5.3.1 /..!function(e){var t=function(u,D,f){"use strict";var k,H;if(function(){var e;var t={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyautosizes",fastLoadedClass:"ls-is-cached",iframeLoadMode:0,srcAttr:"data-src",srcsetAttr:"data-srcset",sizesAttr:"data-sizes",minSize:40,customMedia:{},init:true,expFactor:1.5,hFac:.8,loadMode:2,loadHidden:true,ricTimeout:0,throttleDelay:125};H=u.lazySizesConfig\|\|u.lazysizesConfig\|\|{};for(e in t){if(!(e in H)){H[e]=t[e]}}}(),!D\|\|!D.getElementsByClassName){return{init:function(){},cfg:H,noSupport:true}}var O=D.documentElement,i=u.HTMLPictureElement,P="addEventListener",$="getAttribute",q=u[P].bind(u),I=u.setTimeout,U=u.requestAnimationFrame\|\|I,o=u.requestIdleCallback,j=/^picture$/i,r=["load","error","lazyincluded","_lazyloaded"],a={},G=Array.prototype.forEach,J=function(e,t){if(!a[t]){a[t]=new RegExp("(\\s\|^)"+t+"(\\s\|$)")}return a[t].tes

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52016), with no line terminators
Category:	downloaded
Size (bytes):	52016
Entropy (8bit):	5.143353661002121
Encrypted:	false
SSDEEP:	768:FeK5Y9E64o3lXu30nnW5HfrBKn7YthG29/xLMPvIJncymxD1SB:pe4IlQ0nnW5HzBckthG29/OiB
MD5:	460D5D0D19E26380EE200E8CC16737D6
SHA1:	E8A8C1DC267DD2C964C0EE5AD6AD2588F3E33ADD
SHA-256:	A5189F723035EBC91E12C12368256E5FAE45D4961C552F347C19BE40CDB3688B
SHA-512:	51C43B4D3015F93E0674964CD5B31FD0B5D45FBEF1A4BDCB8CF1EBD71BCF6B0DDB7A385FD4510791377E77D3842DB19BB7CA2110F1537C521081D69E17927B25
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/css/static_cft.iq_ltr/ab3ca68bec5c969c1d26aca0ec2c584dfa312105.css
Preview:	#doc #right{border:0;margin:0 0 2em 240px}.box{padding:0 0 3px 0}.box ul li{padding:0;margin:0}#doc #right .box h3,#doc #right .openingHours h3,#doc #right #topten h3,#doc #right .hotellist h3,#doc .box h3{padding:9px;margin:0}#doc #right h4,#doc ul li h4,#doc .box h4{padding:2px 16px;margin:0;font-weight:bold}h3.firsth3{margin:0}#doc #left{float:left;border:0;margin-top:0}.iphoneLanding #left{position:absolute}#doc #left .generaltable{width:206px}#doc #left .generaltable td{font-weight:bold}#doc div.quote{background-color:#fafcff;margin:.6em 0 .6em 1.2em;width:30%;border:1px dashed #bad4f7;border-width:1px 0;float:right}#doc div.quote p{margin:0;padding:.6em 0;font-size:120%;font-style:italic;text-align:center;color:#838383}#doc h2 img,#unsubscribeTmpl h2 img{margin-left:0}#doc p{margin:0 0 .6em .84em}#doc h2,#unsubscribeTmpl h2{padding-top:.6em;margin-left:.7em}#doc ul{margin-top:0;margin-bottom:.6em}#doc .leftCol{float:left;width:24em}#doc .rightCol{padding-top:1px;margin:0 0 2.4em

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60582)
Category:	downloaded
Size (bytes):	105026
Entropy (8bit):	5.3035505683416595
Encrypted:	false
SSDEEP:	1536:+cmChHGIhtB++W2VuIKhGt3QyjI4qPCooCW5BxUPRXc1d4B8q+8OCfe1bdfUsoK2:+fa3QDUWXB8cWSHKq36cz
MD5:	1A16F971ED98C047C8FA288987383922
SHA1:	04200A6F3B25CDFA04551F635D025FC64743B4FF
SHA-256:	5AD7526D50B7586DDFAEE62B3FC95E71207136DC08F6A2B7FFD671DED73FAB83
SHA-512:	84E0B04C038B49972937E37F28923D11D988DC23B54BD836FEBF71F0CEFF251EDC01CA2DC441A1502E9D34BBB234E1733C27164E47DE98F9548B1563F55130AC
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/js/jquery_cft/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js
Preview:	/* @preserve. * jQuery JavaScript Library v1.11.3. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2014 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2015-04-28T16:19Z. */.!function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(h,e){var f=[],c=f.slice,g=f.concat,s=f.push,i=f.indexOf,n={},t=n.toString,m=n.hasOwnProperty,v={},r="1.11.3",C=function(e,t){return new C.fn.init(e,t)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,a=/^-ms-/,u=/-([\da-z])/gi,l=function(e,t){return t.toUpperCase()};function d(e){var t="length"in e&&e.length,n=C.type(e);if("function"===n\|\|C.isWindow(e))return!1;if(1===e.nodeType&&t)return!0;return"array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e}C.f

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 41976, version 2.0
Category:	downloaded
Size (bytes):	41976
Entropy (8bit):	7.989625983039537
Encrypted:	false
SSDEEP:	768:OQjdQDQwEmGLKtdFCmrIdlLBIU/Lvl1jpUgrNLHm87hJAeyupL/l+6WHdI8hDC:OQhQDQwEmGLKtOviuLHLHm87hJHEhHdo
MD5:	B2CA1822B16A92E0A0111C994CFE4B8A
SHA1:	AD3BF01829F003D1E837FDAE30B97E4911528C0F
SHA-256:	12269C2ADB9DA8C73E2D8E5628566E4662720BDFF4687C3BD6190571FF8C3B05
SHA-512:	2DDECA50F4E57226B3AF8571DC04E977255BA0303C7AB1F1B01BC0240189A4B2ED50DF296C42105F8F40DD9ABC7EB3C9DEB22619A513CBD7974E8FFFCB0A9AFD
Malicious:	false
Reputation:	low
URL:	https://t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingBold.woff
Preview:	wOFF........................................GDEF..\|........x\.].GPOS..}... ......m.GSUB...\|...z........OS/2.......Z...`j.C.cmap...........la.D.cvt ............!...fpgm...p.........0.6gasp..\|.............glyf......e/......z.head.......6...6...Jhhea....... ...$...&hmtx...T.......D..R.loca...........$1C^.maxp....... ... ....name..{...........G.post..\|........ ...Jprep...........K.L............])_.<...........K.....V.l....................x.c`d``..........=a...A.L...-.........M...X......./.a..........x.%.5.B....7...F.t.b0"9(.=.$D ..?..u.w...g.TY>.d..m7L5._...V@.`1.N.C..=....2.....;.........x....4G..o........fl.b.m.m..s.IM.7..WSU.p..[....o`<....k.xW.*[.3e].....[xG....{.....r.`.@.......?.=.......`.b<) K..i..d..]H-.%c.b..T..d......d&.@F...d.......3.I4./.q.'..1.o.......,...Kf.V'S....X.. qW..m....d.\.....i.9...P...n.lb.1...1..b.;.C.a...w.:....d...=....d.;.ed....n=L".................&..6..%O...X....~.{....t.:..I..D.<F..a?..^B.T?....u.e..Y`......9.gO...v..\.17...f

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7116), with no line terminators
Category:	downloaded
Size (bytes):	7116
Entropy (8bit):	5.224595346441097
Encrypted:	false
SSDEEP:	192:jdqSDDSIvBBtl8bojrBKni5D9YF/D/DdGyRiVPEmtwlicB4m1v3JptkoxUkko6CQ:jddDRvBBr2i5D2/bDdRRowlP4jMUkkoe
MD5:	548D7D9D1B550712A6F28D80DDA76289
SHA1:	5F93B6B6EEC9663890E94F38B0689F0729F0DE14
SHA-256:	61DB55073A2ED41BD86DF40FFFFE575A5E7A7A3D59496DD869808694BD12F445
SHA-512:	F21A90DF5D6A9582B7EFDFF0E2298DB1C062004B70EEC1D1BA6F056F45113443443A36E837C80D00021AB7CE264D7AE3779E6C3661C90F52EA019BEDE3546A02
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/js/plugable-access-form_cft/3ae2aaac8c7322f2908109b6a9e7446001225f2b.js
Preview:	var _i_=this._i_\|\|function(){},_r_=this._r_\|\|function(e){return e};B.define("component/sp/plugable-access-form/dispatcher",function(e,i,r){_i_("5de:2f183c24");var s=[];return _r_({registerPlugin:function(e){_i_("5de:a6c32edf"),s.push(e),_r_()},checkReservationId:function(i,e){_i_("5de:5becded2"),this._plugin_loop(function(e){return _i_("5de:14e75647"),_r_(e.checkReservationId(i))},e),_r_()},_plugin_loop:function(t,n){_i_("5de:024d1c1c"),s.reduce(function(e,r){return _i_("5de:072b352e"),_r_(e.then(function(e){if(_i_("5de:0c6f2849"),e)return _r_(e);var i=t(r);return i&&i.then\|\|(i=Promise.resolve(i)),_r_(i.then(function(e){return _i_("5de:3fb20091"),!0===e&&n(r),_r_(Promise.resolve(!!e))}))}))},Promise.resolve(!1)),_r_()}})}),B.define("utils/bind-all",function(e,i,r){_i_("5de:ca20d562"),r.exports=function(e){for(var i in _i_("5de:fe723711"),e)"function"==typeof e[i]&&(e[i]=e[i].bind(e));return _r_(e)},_r_()}),B.define("component/sp/plugable-access-form",function(e,i,r){"use strict";_i_("5

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	92950
Entropy (8bit):	5.280632824837553
Encrypted:	false
SSDEEP:	1536:6v4qCtkOKAaNsZ9eCdYfBk2aDSIJh1OME3974yHCT2BPsy7lEv5Tn/OYVen90v7w:tkOVBRrbOlYc
MD5:	53CC12E39C138E5E551A5CC3DF8508AF
SHA1:	6D4BDEDAB30EE636F700D0A689B4D91289AA8E91
SHA-256:	7F1C8D2A22B75B52ACA4401662D3C78064BCB8970EBA2504291E96C33E4A3493
SHA-512:	70460D1F0D3ADCD2284B8679FB62E8A16583F19EFB8ECE2BE1C198AB8DAD90C3FEB696F9A7C914B0EDCE239967F57728EE5B0B4480049F4AAB74C676BE09AACC
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/jfe/static/dist/c/prototype.53cc12e39c138e5e551a.js
Preview:	webpackJsonp([38],{818:function(t,e,n){var r,i;r=[n(3),n(819)],void 0!==(i=function(t,e){"use strict";function n(e,n,r){for(var i=function(){return t.info("Prototype global",n.getSM().SurveyID,r),e.apply(this,arguments)},o=Object.keys(e),s=0;s<o.length;s++)i[o[s]]=e[o[s]];return i}return function(t,r){for(var i in e)"function"==typeof e[i]?r[i]=n(e[i],t,i):r[i]=e[i]}}.apply(e,r))&&(t.exports=i)},819:function(module,exports){(function(){function $A(t){if(!t)return[];if("toArray"in Object(t))return t.toArray();for(var e=t.length\|\|0,n=new Array(e);e--;)n[e]=t[e];return n}function $w(t){return Object.isString(t)?(t=t.strip(),t?t.split(/\s+/):[]):[]}function $H(t){return new Hash(t)}function $R(t,e,n){return new ObjectRange(t,e,n)}var Prototype={Version:"1.7.1",Browser:function(){var t=navigator.userAgent,e="[object Opera]"==Object.prototype.toString.call(window.opera);return{IE:!!window.attachEvent&&!e,Opera:e,WebKit:t.indexOf("AppleWebKit/")>-1,Gecko:t.indexOf("Gecko")>-1&&-1===t.indexOf(

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (14445)
Category:	downloaded
Size (bytes):	26807
Entropy (8bit):	5.057139501978337
Encrypted:	false
SSDEEP:	384:+qRSuvyAHpoNJAucRlqW/zJvzxfOJlW6GdWZEP2JJ4SAtZ5eeQgte:QAAi/zlzIJlW6GdWZEP2JJfeQB
MD5:	C5407CF892E45285BE01847749C11B6C
SHA1:	56F7C38868DE6656D36B255FD3A6D0F88893065D
SHA-256:	260551F7501A16977F98E55AEC11B1B66F47D0724F98CA376C447E1C74F7DF72
SHA-512:	C5598818E86A97164FB13CAC2F9E793C114B7BC055D2245005854C7C96B542425B7167CA21295764C5E1072CFDFA3E008D732D55B795FE7FCC5599F235F2BB27
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..ajax-progress{display:inline-block;padding:1px 5px 2px 5px;}[dir="rtl"] .ajax-progress{float:right;}.ajax-progress-throbber .throbber{display:inline;padding:1px 6px 2px;background:transparent url(/core/misc/throbber-active.gif) no-repeat 0 center;}.ajax-progress-throbber .message{display:inline;padding:1px 5px 2px;}tr .ajax-progress-throbber .throbber{margin:0 2px;}.ajax-progress-bar{width:16em;}.ajax-progress-fullscreen{position:fixed;z-index:1261;top:48.5%;left:49%;width:24px;height:24px;padding:4px;opacity:0.9;border-radius:7px;background-color:#232323;background-image:url(/core/misc/loading-small.gif);background-repeat:no-repeat;background-position:center center;}[dir="rtl"] .ajax-progress-fullscreen{right:49%;left:auto;}..text-align-left{text-align:left;}.text-align-right{text-align:right;}.text-align-center{text-align:center;}.text-align-justify{text-align:justify;}.align-left{float:left;}.align-right{float

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (523)
Category:	downloaded
Size (bytes):	2779
Entropy (8bit):	5.256421685296428
Encrypted:	false
SSDEEP:	48:XFZp/sZ3lYQc7ArfSM3eIubF1QkNsKclMtPp/7qgAsFte6NPvD9T5AyNBK:1f/6lGUrff3eFLhNs+G6hb9xK
MD5:	7B430C6350A59A7CF22B9ADECCBA327B
SHA1:	B48D3C289BCB6809BB52FFFD8F013055ED6BCD65
SHA-256:	058ED961BFE422AF7BFC65865F4C08531EC8ACE995F8A1EC560A46581CB7712C
SHA-512:	BBB70E6C0318ED68FC6810E0210D010FC743B9987C6ED15A43C5D308A96A43331B79C3FAB1B39A9034398418FA3321EEC8C51998D79C981E3F511DA3B398326A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ua/ec.js
Preview:	(function(){var e=window,f="push",k="length",l="prototype",q=function(a){if(a.get&&a.set){this.clear();var d=a.get("buildHitTask");a.set("buildHitTask",n(this,d));a.set("_rlt",p(this,a.get("_rlt")))}},r={action:"pa",promoAction:"promoa",id:"ti",affiliation:"ta",revenue:"tr",tax:"tt",shipping:"ts",coupon:"tcc",step:"cos",label:"col",option:"col",options:"col",list:"pal",listSource:"pls"},t={id:"id",name:"nm",brand:"br",category:"ca",variant:"va",position:"ps",price:"pr",quantity:"qt",coupon:"cc","dimension(\\d+)":"cd",."metric(\\d+)":"cm"},u={id:"id",name:"nm",creative:"cr",position:"ps"},v=function(a,d){this.name=a;this.source=d;this.e=[]},w="detail checkout checkout_option click add remove purchase refund".split(" ");q[l].clear=function(){this.b=void 0;this.f=[];this.a=[];this.g=[];this.d=void 0};q[l].h=function(a,d){var b=d\|\|{};"promo_click"==a?b.promoAction="click":b.action=a;this.b=x(b)};q[l].j=function(a){(a=x(a))&&this.f[f](a)};.q[l].i=function(a){var d=x(a);if(d){var b,c=a.list\|

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6904)
Category:	downloaded
Size (bytes):	7758
Entropy (8bit):	5.242136915934187
Encrypted:	false
SSDEEP:	192:sZdxaLEAbfJA2eq2YkUELymJe1gY1QfqxcNtnl7s:4dibfJA2eq29rLC2A
MD5:	44B4A0AEFF54100C128C4B0876FD10DB
SHA1:	3F6201E068DD4815031B34010B00BD9C6D8998E5
SHA-256:	FF1295150262825DDFAAF59CAF766884A4DCF4987913F6E238257DC16DEB94AA
SHA-512:	D4D7EE57202C1F1AB7AEE540458001E95788795C2A28B84C1B9B2C0E8749BC6F4A9A5EF700CC6C14E0193BF86798F45F25BED3953418B784FDBDDD3232CE33F8
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/UserDefinedHTMLModule.js?Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDID=partnersatbooking
Preview:	./@preserve.Version 2.10.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(t){var i={};function e(o){if(i[o])return i[o].exports;var s=i[o]={i:o,l:!1,exports:{}};return t[o].call(s.exports,s,s.exports,e),s.l=!0,s.exports}e.m=t,e.c=i,e.d=function(t,i,o){e.o(t,i)\|\|Object.defineProperty(t,i,{enumerable:!0,ge

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19124), with no line terminators
Category:	downloaded
Size (bytes):	19124
Entropy (8bit):	5.323572580672421
Encrypted:	false
SSDEEP:	384:j/JHBg+GC6CrGMeuAOuWSMwwE9KoGVa1DVz2F6ivH4MQ0D+ZZXGAxBllHHgdr/A1:r5ByC6Cr/eeewE9KoCa1nivj5EVnSM0w
MD5:	E32404018F946367D67843972EAD845B
SHA1:	C0F15354BBB5651D15168F3340CA6A7D9F0A44E5
SHA-256:	9B258BB228CA2C16912122F8D12F5B55C84A5BC3213AB60153D5E4135DD85829
SHA-512:	B07870655EEB4C257A5B3432A945070AFBEA01E7E5C3DA4AF563CDB44AAFA931151ACCF3FB603595F91D64372F90141E990F7EE5159E2C4F9D14B5DD38BEF4B0
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/js/content_cft/ece690fd13c824529e3870e0e662c417931b8461.js
Preview:	var _i_=this._i_\|\|function(){},_r_=this._r_\|\|function(i){return i};B.when({condition:function(i){return _i_("915:2fc34999"),_r_(i.b_this_url_without_lang.match(/offices\.html/))}}).run(function(i){_i_("915:64ad3171");var e="offices-continents__sticky_fix",n="active",a="g-hidden",o=i("jquery"),t=o("#footer_menu_track"),s=o(".js-show-offices-trigger"),r=o(".js-show-contact-trigger"),d=o(".js-continent-container"),_=o('[data-continent-filter="true"]'),c=o(".js-continent-filter"),l=o(".offices-continents__menu"),h=o(".offices-continents__sidebar"),f=(t.offset()\|\|{}).top\|\|o(document).height(),u=(h.offset()\|\|{}).top\|\|0;function p(i,t){_i_("915:059b8ef2"),o(".js-show-contact-trigger[data-country-id="+i+"]").toggleClass(n,t),o(".js-show-contact[data-country-id="+i+"]").toggleClass(a,!t),_r_()}function m(i,t){_i_("915:7073d630"),o(".js-show-offices-trigger[data-country-id="+i+"]").toggleClass(n,t),o(".js-show-offices[data-country-id="+i+"]").toggleClass(a,!t),_r_()}s.click(function(i){_i_("915:

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	185164
Entropy (8bit):	5.521104572316979
Encrypted:	false
SSDEEP:	3072:yGaiJ9iVYZL2Bhffw0AjonvLMzU46yFmqM0bukMr7:3+VY92v4WXqM0qkMH
MD5:	2261943CAA59F93EA3CE5E53F68A1676
SHA1:	8D8DF51D962F8D47ACA3529EC3FBF810089878FB
SHA-256:	160BB818DA4F0DDD74858DBDFC0705923D4015EF2ED2FF7DCF2186C11306DD9F
SHA-512:	3C19F6194340D45793AD2A26F81CEC95DFA396FA639407394ADE11626484A27A20E2EE419979B6DEB55715BB07168A5FC11BD0D40FF163F1C866FC3DC86D2BF4
Malicious:	false
Reputation:	low
URL:	https://www.googleoptimize.com/optimize.js?id=GTM-MVTHSWF
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"923",. . "macros":[{"function":"__e"},{"function":"__dee"},{"vtp_experimentKey":"OPT-MVTHSWF_OPT-T3D2J","function":"__c","vtp_value":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"vtp_component":1,"function":"__c","vtp_value":"desktop"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"userId"},{"function":"__c","vtp_value":false},{"function":"__gaoo_c","vtp_trackingId":"UA-6284728-15"},{"function":"__ctto","vtp_isDynamic":false},{"function":"__sel","vtp_selector":":root"},{"vtp_experimentKey":"OPT-MVTHSWF_OPT-WRHGD","function":"__c","vtp_value":false}],. "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":13},{"function":"__asprv","tag_id":14}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]}

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1350)
Category:	downloaded
Size (bytes):	1426
Entropy (8bit):	4.841621161203824
Encrypted:	false
SSDEEP:	24:mdsu/SZOZHEk0IXpOzwxb4VviAqp7MJ1NsreVU:muqTpbOzvvmKU
MD5:	E444A03D38821936DD4A531F6D05AFB1
SHA1:	9CC1CC74317C6D327C69B9AC28A70C754CD1EF81
SHA-256:	E6F0D5A59B1EF3CBB25F39CC859ADEB0020369B03384B00D86D98EBB7BE39092
SHA-512:	036A853F19824FE7C5F752C74F32481C0DCDEF90B5068BA48085B8B5B16C708C0DB4FAE2DBDEE0FB5FA21B7657EBEBDEEE888E939A53ED13BB1FBCAA2D31D262
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license MIT https://github.com/kenwheeler/slick/blob/master/LICENSE */..slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;-khtml-user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;-webkit-tap-highlight-color:transparent;}.slick-list{position:relative;display:block;overflow:hidden;margin:0;padding:0;}.slick-list:focus{outline:none;}.slick-list.dragging{cursor:pointer;cursor:hand;}.slick-slider .slick-track,.slick-slider .slick-list{-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0);-o-transform:translate3d(0,0,0);transform:translate3d(0,0,0);}.slick-track{position:relative;top:0;left:0;display:block;margin-left:auto;margin-right:auto;}.slick-track:before,.slick-track:after{display:table;content:'';}.slick-track:after{clear:both;}.slick-loading .slick-track{visibility:hidden;}.slick-slide{display:

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 95 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2344
Entropy (8bit):	7.885895023441641
Encrypted:	false
SSDEEP:	48:5qdKL8E2+5H4aj+orbjgcF4cU7f/wEr7BObNyhtvqTRrfrz:h4EzN4aCSjjQf/1rdObzTJz
MD5:	D05A0AB9BF394439A1584A2B0D44DB5C
SHA1:	183C28023D3BA3358A7A5DF1DB887582AE5340ED
SHA-256:	B23272A9692C4EC3C020935917E9D096490876C976ABEC1290BD3CC9AAE13974
SHA-512:	1710604C6F6AB042DE505286DC4A6FA2217BF4126C000A510156E82BA975DEE0818E74DC612D556E76A71753B8285F759D4DB7566799FA72034A3E5EE5305482
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png
Preview:	.PNG........IHDR..._...............sRGB.........IDATh..X.l.......`.......K.'m...$...Ti.F..T.JK.4A."QZ...m......B.....B.....,...V....w68.......L.w>....>G.Pr#...{o..\|..{3.X.d..".E.CE.......J.Z.DH19[2nAi...;.X[..y....Q.?m..i...\|.d.N....RU..8.u..y...Ps..n'JE....d.w5..p.o.]..OWt.!..I.:j;....Fg:..+-c.j.6x.....s&........:jIu.'[.:...k?#.,.B.N[I....F.0.:d..e.-...`.GVT...:..,..)./"...8%34m.)c.w............J...ej.&>///....QXX.+((H....[.l.........y.P..z....M.3)b..r.}\.Zc.t.0..N.M1~..dJ..k:o..3AA.........X...........P..O.^ZZ:.q..M..,.0j'.#~..sn....m.++]..E..-..g/.....S..+....x....w\|0.#.....I)_.V..{zT..H...T..@9..b...(Ht...u...J.2...&...8...f...I76..<.....,.iT.c...?....%.....SJ....ZK@+..b)X^&....l.8...V.0]..0..A.3...q.w...r....._.(t...h.j...+.4.K.....4.....G.]I......JJJ.8..I).`._.D"'..`.....hnn....W....9.`)_..i.l..^....W.C.>...-.....i\|.R.....<{xx.....M4....F....#..-.@..h......G.F` .......\...?.1.....l.C[....s?A..?`\......n....G!./IkI.o..

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2146
Entropy (8bit):	7.8875883951747925
Encrypted:	false
SSDEEP:	48:j/6u3CtuLhUGh0H5UFe2pYo37Esd2gjEj7seiEfE/ODAtLx:jSRuLKA0ZUFnR4sPEUeJf8/
MD5:	27E71A5124018E16EAE0B8897618623D
SHA1:	D0D54D88B04EDFC71F338C19EAB9994632BC6CED
SHA-256:	1D6E86E59AB7235A8343F494C8E8DA6CC02C5A98A75D682401340E6D06935F20
SHA-512:	A9D6F6B881175780E2619843AA88AACE7E94DA178C53C3DDDE691A930C5412FC4CD817009D488757835903D9218758F808AC36C1F828371D57AF91EA9CF3170A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F..........b.....pHYs.................sRGB.........gAMA......a.....IDATx..Y.pT..>...........e....f.+(T.L..KiZ.....`..c;v .....u.M...h.........DJ..RQ..-?!FlB.}..~w./........3s..}..s.{...et.Kyy.....;v.....N..p.....I4=...t..'.BI.,/X..R.0.%.<.....F...i.6..rSJ.......Mgy0x.#.:....YYY....}.....~..L..M...........d.`..t...>Gi.K......)W.x.i?.5H.........Q...-0z..8 ?..IR.G`..N..`p...Q<.t.i2..~)K.G..l\y(4E..y.31.7.(....Wa..>......_RR....6.-..7...Iy..y;......~.<..T....)k.e...D.f...........2.k..0.=.[..D..n...W..V.B..uVUU..."5m.0W._.0a..^.'...V8x.. e.I...H8..... ..N;....".&.J...Hd.l).81....5.c...<.....W.o....U/(..,.O..+.c.ZZZ........L..c...V..[...... .g(.Y..P....>.>.-v?....>..&.?j.A....)5Q...KO....'.l..G...:.b{..#..4.`.[.]..V..20.k.-W.<.m[.q.BA.i........!...,.6.....N...l2.......`......1...o^...iY.]...&.O....\.c.>L.w...:.......u..d9.f.Ld.*....J...=...1....A.!&.c......f.}s....,."..e.....2....)...%..o..I\."_JL..id..c.N.y...k...p.m..A...

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1631
Entropy (8bit):	4.779556032272484
Encrypted:	false
SSDEEP:	24:hYNspeCCZkpG4MEq7agcn0LXTF2FI6nQtSn8nwz8Xx:vp6B17agCwTF2FIhx
MD5:	5CB21AF9462C02E692A749F65C6BDC29
SHA1:	8C3D1ECB7828B84DD6FF6AC417EC40CD4A4635B2
SHA-256:	9AC4888FBDB2C888E034D44E7C40F6F9BF57C6192BE62E94F00782B82A9E33FD
SHA-512:	2C173DA7887DFA62B94CF561A643724D3496118FB5EE02D8FAED1F569F5EA136110469D5CA78180D4AF53C9431BE21B323724C5C4EA45D982FB5D193683994CB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<title>405 - Method Not Allowed</title>.<meta http-equiv="content-type" content="text/html; charset=utf-8" />.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<meta http-equiv="X-UA-Compatible" content="ie=edge">.<link rel="stylesheet" href="https://r.bstatic.com/libs/bui/7.3.1/bui.min.css">.<link rel="stylesheet" href="https://r.bstatic.com/libs/calango/0.500/bui.css">.</head>.<body class="c-body">.<header id="c-header" class="header">.<div class="c-header__main">. <div class="bui-container bui-container--center">. <div class="bui-grid c-header--top">. <div class="bui-grid__column-3">. <a class="c-logo__wrap" href="/">. <span class="c-logo__type">. Bookings_Web_Accounts_Portal. </span>. </a>. </div>. </div>. </div>.</div>.</header>.<div class="bui-container bui-container--center c-main-body c-

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7611)
Category:	downloaded
Size (bytes):	8465
Entropy (8bit):	5.24977317858767
Encrypted:	false
SSDEEP:	192:sZdxaB2gQ/8o84cxT9OAnn/BwGeySty0qSGQspaS7ABHz0ul7s:4dSl9OAn/aGeyStynl3B
MD5:	2C2426AAD4542394D1E2388A818FEB9D
SHA1:	0F678B79A0508595C4D85FA91AAA1BBE027738B0
SHA-256:	0099A458DB4297AE95EB92774B3F34D3BA3CDCD49CDD6B4E24B38FAAEACBD9F3
SHA-512:	2ABD57C9F8FC15E342BA2108F325DDA2E72C8237AA25346BBFAB65D5D54337566386FB544A59238D00E651EDC40AAE91D64B592F0B52C5152AF723817EEAA61D
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/EmbeddedTargetModule.js?Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDID=partnersatbooking
Preview:	./@preserve.Version 2.10.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. !function(t){var e={};function i(o){if(e[o])return e[o].exports;var n=e[o]={i:o,l:!1,exports:{}};return t[o].call(n.exports,n,n.exports,i),n.l=!0,n.exports}i.m=t,i.c=e,i.d=function(t,e,o){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,ge

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6856
Entropy (8bit):	4.830105802670857
Encrypted:	false
SSDEEP:	192:Q+dw8psVXH7KK7pSdDHjkRCwpY6vepSdDH3CX5JZd:z/WXH7KKdwDHjkswpzowDH3CX5JZd
MD5:	6423E909E49BC79F7E172B98EDE32A8C
SHA1:	50EA38C0C32AD97C5394D842956636D6273FB4C6
SHA-256:	B2130491497D5247FB189D0BB749E789A463DB29274290325E065E9FB50BCB01
SHA-512:	9AFAF2B5A14282C3409D4AF78F0E6750BFFC2047573BE93DEA4F2B6456C65373B9C88FF7A268C05001C15A05349230DCD16A13301CAD66C31E5988C81D42F164
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.2.0","OptanonDataJSON":"3ea94870-d4b1-483a-b1d2-faf1d982bb31","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"e6419570-52cc-432d-ba1e-7300290f1970","Name":"EEA + Russia + UK","Countries":["no","de","ru","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","at","re","cy","ax","cz","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","hi":"hi","de":"de","ru":"ru","fi":"fi","en-US":"en-US","bg":"bg","lt":"lt","lv":"lv","hr":"hr","fr":"fr","hu":"hu","default":"en","zh-Hant":"zh-Hant","uk":"uk","sk":"sk","sl":"sl","id":"id","

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAngSzoMdcKapxIFDQbtu_8=?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	7.756974676688925
Encrypted:	false
SSDEEP:	24:zn1XTOSh5oncvg3/pzi9NUvZi/GZu4yVEb6cgfes54AVi8TgBgWPPKWfW:zde/3x+1OZkEbhgft5TbTgdPDW
MD5:	6384185CBE9A4F106857A3CB85CAEA98
SHA1:	0E31A4FE2CE98A8B4FDA60687AA71079B4D3A95B
SHA-256:	5839F0330821CF08029BEDDD6D248170DA1AF16CD7AFF253E7BD075D591F5D42
SHA-512:	E9C784DACADEAB6C3FAD53729701708EC5C21670086AA981953FF2D44DFB08BE13134707A4E7405826CC0D11C68F3AECFD6601AF910C537F6E14AF68175B50B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...O..........w.....IIDATx.....:..sl.g.ym.{ll=.m.m...f^.A.1zhg.i:...ZM..5@.YF.................o....hU9......B.s.h....<......=~........b..'.....5.l`..V...z...b5...E.........8.........f.C[.lS..z.IcI...X..r.:......x.Y.....}+.h^G....3......6.Ni..........G.......S.....W.Is.I..S.`.e..)p.hh..T....`...Q.....V......".}.X8..v........k......84.....-9..d.....lq....FuA.zJ5._..@cX.../....a..y.....;.r.>Lur[.w......O._~..:h+H..>.y...p...4..{.\|aBu..y].....a..w&L0.Y.e..}U...'.s...=.......n..^.r...+].I.-G...r....8].FkR.'.......u..e.c..w..%@.}.e...#..K..w..Ak.[@.R..gY.u.2/..y.Q.n.O.......]y.n..pk8.s7.......y.:..F...M..h......y....`..O....i.zqp..<........Zp..h.+..@...;/.#...0..u..N...v..)..6Oq.d..n<.M../.....0....EMn...3..=Q......r..../....8...'..wv/.w..'MS...[..........<.y}...4.Nm....qk.9d. n.Y....yZ1.?..!..Dg...m....;.N...A...I3.gn.]G.A[.w....7.6Om.........zD....v....._.D3x.v...6.]WR..7........=.."4.....\|.......:...a...Z....~..\..~

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	downloaded
Size (bytes):	9871
Entropy (8bit):	5.484024617127694
Encrypted:	false
SSDEEP:	192:pIUfupNdxa4mNdr0rth6qrHlualOZCTbKTPsGDzY037P2MuHRLl7s:Kd6VuLTMaKCTbKTPsGDzPLP2MuHk
MD5:	6E46DC4AC8D0C9068410B3141DCEE347
SHA1:	0569C794FBA3B6CCCD65C4AFDBE3ACAD0CFEF025
SHA-256:	6E6568500B31693D817E38CB2A37D93A188A8EDF159329C1B13D4A4099DE71BD
SHA-512:	27F3CBB3685A26C7C45C11E89E85407E07BC2C1BBAF0AAD27B232019E21CD844878A7A82122025FA220E11D5B86E0EF634F6139EBAB4C7A30FF5BEB7AE919072
Malicious:	false
Reputation:	low
URL:	https://zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_3Eum1ldyL0aIh0i
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","zoneId":"ZN_3Eum1ldyL0aIh0i"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.Version 2.10.0./../*@license

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19782)
Category:	downloaded
Size (bytes):	132770
Entropy (8bit):	5.27850821345768
Encrypted:	false
SSDEEP:	1536:ZaNAwVP4XA1e7FB0Ocjb9qKN4q/kd14jHMFxJtbjTqFfsF97uPKFI/rhJ+vQgDOo:cAwVP4hjtq/klRLUK/vQgDbh
MD5:	49D6128CFB4D12FEAE4746B0C04B5635
SHA1:	FC8CD0C6E74928D2891AE08DA8C0F04294EA971E
SHA-256:	4244F578D44BAFCEBB6F07F9A81D58569643D62284AB476DF2B17A5D8413BC2B
SHA-512:	FE2EEB3479C865282FD33A099C26286650D6DC51F02502555A5287958176684930F37169F0E47324160BAD44251CBC5A2844F4898511858DF19DAF5737B17EA1
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=cs&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..(function($,Drupal,once){Drupal.behaviors.cookieproFocusHandler={attach:function attach(){var skipToContentLink=$('#skip-to-content');$(once('clickFocusHandler','body')).on('click','#onetrust-accept-btn-handler, #onetrust-reject-all-handler',function(){skipToContentLink.removeClass('focusable').blur();setTimeout(function(){skipToContentLink.addClass('focusable').blur();},10);});}};})(jQuery,Drupal,once);;..(function($,Drupal,window,document,once){Drupal.behaviors.backToTop={attach:function attach(context){var backToTopParent=$('.main-wrapper',context);var backToTopButtonMarkup=$("<button class=\"back-to-top__button\">\n <i class=\"back-to-top__icon icon icon--arrow-right\"></i>\n ".concat(Drupal.t('Back to top'),"\n </button>"));var isMobile=window.matchMedia('screen and (min-width: 0px) and (max-width: 575px)');function backToTopVisibility(){var scrollFromTop=this.pageYOffset\|\|this.docum

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1578
Entropy (8bit):	5.129356119010862
Encrypted:	false
SSDEEP:	48:Y06XTbSwGvLDBo/ju+IhO+IXBnGXDE2Zc:gjGN8ju9hO9xGjS
MD5:	5FC305D267BE1E5ACE6D24B86C1C8039
SHA1:	42992217886594199C66AF2D136D69DB230D2EBD
SHA-256:	A61EA35EA6AC1D917F01427271AB912286CA91A0E4A3D3BC8E8CD046E74375BF
SHA-512:	063409E95D953905AC63CFB885BE943E72870A5CB9D3FCA0AAAC5BC176164C763EF774CC80217459C6E80905F625CF2A61DB78A45BB7E6BCD7BEEDD2D2B773D8
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_eR0de0vaanDvFum&Version=3&Q_InterceptID=SI_1WWRROQ76BfwU3I&Q_ORIGIN=https://partner.booking.com&Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDTIER=lIjhYuMl2g&Q_ARCACHEVERSION=21&Q_BRANDDC=fra1
Preview:	{"CreativeDefinition":{"BrandID":"partnersatbooking","CreativeID":"CR_eR0de0vaanDvFum","Revision":"3","Title":"Creative - PH Satisfaction - New","ZoneID":"ZN_09tjWJVePhLlACp","Type":"WebResponsiveDialog","Options":{"Layout":"Layout1","SizeAndStyle":{"ContentSpacing":"medium","InterceptColor":"#ffffff","BorderRadius":"slightly-rounded","DropShadow":"light","UseEmbeddedTarget":true,"ResizeForEmbeddedTargets":true,"SurveyPreview":""},"Message":{"Color":"#222222","Headline":{"Text":"Help us improve Qualtrics","FontSize":"16px","FontWeight":"regular"},"Description":{"Text":"Would you be willing to answer a few questions about your experience?","FontSize":"14px","FontWeight":"regular"}},"Buttons":{"Number":2,"BorderRadius":"slightly-rounded","FontSize":"14px","ButtonOne":{"Text":"Provide Feedback","Action":"open-target","LabelColor":"#ffffff","BackgroundColor":"#007ac0","BorderColor":"#007ac0","ARIALabel":""},"ButtonTwo":{"Text":"No Thanks","Action":"dismiss-intercept","LabelColor":"#007ac0"

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/163/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	243559
Entropy (8bit):	5.4372611624458
Encrypted:	false
SSDEEP:	6144:rpNt66pGbw+Nz7QsFFn1OlONshjFBS/K01L8kNVxjA2ibrLE:dS2+
MD5:	1F029C4D972A4078078680F9D69F629A
SHA1:	AEF9F22FC94F7B54CDEDD026FA037AB54E292131
SHA-256:	FFBEE8AF5F50EAA5D38BFC16ADD74F270AFFB379A43772B58074D291E9A63FB2
SHA-512:	88315D313D1454A9D9DF9E7650D8486E8F4B52EE082687F88CF3895B33F6C85C637C636A7DF87A5A6B8CC1BDE5F812B9EDC1BBC254F07285DFFE48542829E234
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/js/searchbox_cft/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.js
Preview:	var _i_=this._i_\|\|function(){},_r_=this._r_\|\|function(e){return e};booking.env.enable_scripts_tracking&&(booking.env.scripts_tracking.searchbox={loaded:!0,run:!1}),B.define("caret",function(){_i_("4ab:50a5d6aa");return _r_({getPosition:function(e){var t;if(_i_("4ab:1399bc4f"),!e)return _r_();if(document.selection)return e.focus(),(t=document.selection.createRange()).moveStart("character",-e.value.length),_r_(t.text.length);if(e.selectionStart\|\|0===e.selectionStart)return _r_(e.selectionStart);return _r_(0)},setPosition:function(e,t){var i;if(_i_("4ab:536e7091"),!e)return _r_();document.selection?(e.focus(),(i=document.selection.createRange()).moveStart("character",-e.value.length),i.moveStart("character",t),i.moveEnd("character",0),i.select()):(e.selectionStart\|\|0===e.selectionStart)&&(e.selectionStart=t,e.selectionEnd=t,e.focus()),_r_()},setSelection:function(e,t,i){var a;if(_i_("4ab:b3966198"),!e)return _r_();document.selection?(e.focus(),(a=document.selection.createRange()).moveStar

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4265
Entropy (8bit):	4.646189442080531
Encrypted:	false
SSDEEP:	48:tnjnOCJEz2y7Rc/YjYjB8LbCHyQIFQgBi4in3Cnw6si1/2RvKvW+n:wtz2y7t6yri4iAw21+BKvW+n
MD5:	A895DC1DDDCC9E033AA41147E7A69CD2
SHA1:	BEC20895855BD0D95F649421C40D61266F17D6CE
SHA-256:	B86055D0C9D4794595D92C448EFD9626195990750790113090735B6F506F59B4
SHA-512:	2C7DF7CAD57AFFE045FCD85A7E3D2296291201DC05CEBA400F295B29D597BC13C28DE92C644D1455EFDFCC50A60AC3338335F8343F74F172DD558CB474515A8A
Malicious:	false
Reputation:	low
Preview:	{. "1187597.1473569.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1473569.json?afd3b67375e34272ae8f5c89ce6cd2aa",. "1187597.1475776.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1475776.json?afd3b67375e34272ae8f5c89ce6cd2aa",. "1230186.1523989.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230186.1523989.json?9e7b99336d6abe32f51bd1218cc63db8",. "1230186.1524037.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230186.1524037.json?9e7b99336d6abe32f51bd1218cc63db8",. "1230587.1524483.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524483.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524489.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524489.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524492.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524492.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524495.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524495.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1547532.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.15

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 220x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	14622
Entropy (8bit):	7.98324058359048
Encrypted:	false
SSDEEP:	384:QopcJPYBa3rU6KcUJ1SXtKdCRokYC3dE7ep:H+JP9rU6RUJIdKdBCtE7ep
MD5:	C653A46326F12936183D50C5EA87AA49
SHA1:	4358E6950AEBFF8CC18075C222604ACF09C775B1
SHA-256:	1E7E3E106AA39279085F1561401AF99F4DA0073EAF5C6EF9A2E04B600DDDF532
SHA-512:	3A6C07933CA65B713D089894D30C146EF68967FA2890D966A23769487E131F79E174F1F6C5B7BB5B267AE26D3C95410CD6E08F72317519E4518634CFD8BC23F0
Malicious:	false
Reputation:	low
Preview:	RIFF.9..WEBPVP8 .9..p........>...A!......a(..\.../.d[........{..<....w.../.....{7...[.O.'...?..?.>.s=E.........g......?...?.;....p}8.u...............o.=.}....c...>_...........I...~^........?._o.....o...?.?&......._.?.?c~....[.........Os..{..o...B............\|.....K....?............/..?..q.....g...?..b.b.Q.S....'.?.?...................W.s.._............../..........C...o..`..?....c..'.qM\w..gN..P..!N3.o)..c....;..?(.,...6..Pb...e ..cJ._....e.......5...._.^..{.=.. ...vh.....F7....t[.;.i..=. f.{..6...;...~.3..H...L...Yp.....K..5k...x.la..Q.."..1.l.J.%...Mog..!s...Ov........M.....a.~....p)....V...p.....pv.{..J:...;.f...s..,..P...= ..%]4v.Q......d...}l..S&.s....e......}s...p.. .%...QZ...y.,....9.<..O..~.~...+3.}.~.....Q....!%G.)H+..ar..J..o.gV..N.......p.\|..i....v..'...+.0.:.%=.6..E...%....1JQt..@....d..?-bw...../.=Sry5..`.P......H.u..M.......G..$..\...q...?@.....oM.Xd..``F..].f..I0#F....=..q=wj..<I.\|1-... .<.e.X.....(..$..:.Kf.".

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	dropped
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 91 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1628
Entropy (8bit):	7.784928057284059
Encrypted:	false
SSDEEP:	24:DXGHdcP4D/gO2WdAnzMWSYfJhvbsUT/HZwDN9cbMkfYKjOmJeMs1R2t7UB3:DWHuP4XxIHQgHjbMkwsOTME2GR
MD5:	3E32EFD25AC0214B375FC8A6A32890F2
SHA1:	CD46A79DB7E53E19D5869B3CB3E7AA22EE523479
SHA-256:	807C8A1B498E17D227CF48A640B778BDC4398A9852493CB2F40BF0F33651D0DD
SHA-512:	E0F6807657EE1667876D66DCC13CD279C973EAE35E53509E86EC31951B8B07EBBCB0A1B3FC9BBDBC423F436C1F82BDC5C0440F875092E82A47CF51286CDE0C00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...[..........2 P....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......IDATh...}l_e...O;......L..S'.G/n..22.bd..s..(d.x...(J.....!....E...%,..2..uceD\|...c.....u.._{[[\Lm3.7.....>/..<...>\|.8F..c...'..=..'{.1N.(.E./.\|......U..#:[./.Y.CY...~.6.X..,..k.F..X...H<...[d....oZ...a.o.T....59#.VL...l,G/.E..y[......59#.c.O..&l.............~\= .dy....2...e.c..d....j<....Y>....wc.f.....3i.3...")..&....b..i..'J!....\.....U....K.0.m.k;.>.o.....1.?i.k...g`.tK...-...U3?64.?...W..d.tl.@~.n.Q.....g...s...........A.V..k.y..>...........,f..e....0.y.... .O.=N..w.t...[p. {.:......N).......VI.Y.uV.....b.,...6=..~...qx.o..j.Cw.vj....D6Sp'.'y.......O..Ml..h_..../.\|...........g.'c....Yq.....O..{../...x.y........o:.WK.....}.,?....,V(..R"......57.,........].. ....<7V....x4t.....a....s1.xo....Q.}.Q.]../.......z..F.v1f......5..qyE.....h.W%{....,..K..[8...\|gE..W.\|w.6....U.g..8..n..q}E.W....S.bo..#y.PxCE......F...J1x

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (14445)
Category:	downloaded
Size (bytes):	27801
Entropy (8bit):	5.06000268048395
Encrypted:	false
SSDEEP:	384:+qRSuvyAEpoNJAuc5lqW/zJvzxfOJlW6GdWZEP2JJ4SAtZ5eeQgte:QAFK/zlzIJlW6GdWZEP2JJfeQB
MD5:	1667B858FDA95CCE36E71B561AB5E590
SHA1:	EA51D1026686753E029F1A3A8C7BC9EE86174CDD
SHA-256:	105FBA4ACF88CE1E763C8128330D2DCD1460034C9FAF0CDFBE8CC0C49FB2E27F
SHA-512:	3AEF262102501B9FBC4D534354B4CB0E09060A325E7B3DD09F169160970F6308C5DC73C1EE64A143499F55FA9739BF7BB9D2BA40082833675D03A6AAEDF90C5C
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_8QaRnHRXZpp4JmK9lZ0mC_x1wXnsBgkI1SW4VYyWADE.css?delta=0&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA
Preview:	/* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */..ajax-progress{display:inline-block;padding:1px 5px 2px 5px;}[dir="rtl"] .ajax-progress{float:right;}.ajax-progress-throbber .throbber{display:inline;padding:1px 6px 2px;background:transparent url(/core/misc/throbber-active.gif) no-repeat 0 center;}.ajax-progress-throbber .message{display:inline;padding:1px 5px 2px;}tr .ajax-progress-throbber .throbber{margin:0 2px;}.ajax-progress-bar{width:16em;}.ajax-progress-fullscreen{position:fixed;z-index:1261;top:48.5%;left:49%;width:24px;height:24px;padding:4px;opacity:0.9;border-radius:7px;background-color:#232323;background-image:url(/core/misc/loading-small.gif);background-repeat:no-repeat;background-position:center center;}[dir="rtl"] .ajax-progress-fullscreen{right:49%;left:auto;}..text-align-left{text-align:left;}.text-align-right{text-align:right;}.text-align-center{text-align:center;}.text-align-justify{text-align:justify;}.align-left{float:left;}.align-right{float

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	dropped
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6860
Entropy (8bit):	4.828556657985717
Encrypted:	false
SSDEEP:	192:Qacdw8psVXH7KK7pSdDHjkRCwpY6vepSdDH3bJ1JZM:a/WXH7KKdwDHjkswpzowDH3bJ1JZM
MD5:	B3303EF6EC7973777164CA0271845EB2
SHA1:	E82457E23C3A9E0A20BFBAD1D1B411AB647AAA8C
SHA-256:	7BF6616322BFBE7F3C17BF4D16B950462AE7036AE5CD57EE8ACC90AD01F0412C
SHA-512:	02E6C2B52969C85B0A7428BE71CE318A23CC2BCB2D298CA87D8AC1645E364CF0BD0916D0046916775116DCEC096551AEA7916E5B9FA729D7DB119F6417F89739
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202404.1.0","OptanonDataJSON":"5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"e6419570-52cc-432d-ba1e-7300290f1970","Name":"EEA + Russia + UK","Countries":["no","de","ru","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","at","re","cy","ax","cz","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","hi":"hi","de":"de","ru":"ru","fi":"fi","en-US":"en-US","bg":"bg","lt":"lt","lv":"lv","hr":"hr","fr":"fr","hu":"hu","default":"en","zh-Hant":"zh-Hant","uk":"uk","sk":"sk","sl":"sl","id":"id","

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2047)
Category:	downloaded
Size (bytes):	2901
Entropy (8bit):	5.242242963462249
Encrypted:	false
SSDEEP:	48:svx/FcCPrwbrJLNTqU/RNsJG7HW36Hg9vzEjdWVO4Yxxt2CjWMjc9sk/jYINKOT7:sZdxahM/vzNwtIruhcc3l7s
MD5:	E32B2B24F5FA1EB1D14A9722825925F6
SHA1:	729238B3F2D3B862148174D78ADE5F9A7AC865ED
SHA-256:	406CDCFE71F134B46B922BFDE89F980F838E69D9FFA48B3CA4C8D1E63EA76620
SHA-512:	7DA433E2955955FCECB74F98C2DDC3D54C9DFEB7B03DFA8DC24D8305D56F23D4FCEB310EF6DC63E3FD4F03CA717FCE12552D83E6B25F7CD23A324823CF363A1D
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/7.50a5e5384da9a5f8074a.chunk.js?Q_CLIENTVERSION=2.10.0&Q_CLIENTTYPE=web&Q_BRANDID=partnersatbooking
Preview:	./@preserve.Version 2.10.0./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.10.0"]=window["WAFQualtricsWebpackJsonP-cloud-2.10.0"]\|\|[]).push([[7],{39:function(e,n,t){"use strict";t.r(n);var d=function(e,n){this.payload=n,this.type=e};t.d(n,"addPopunderEmbeddedDataHandler",(f

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	805884
Entropy (8bit):	5.083707468119061
Encrypted:	false
SSDEEP:	24576:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVkO2sdwUqkhBYlJz5oE:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVw
MD5:	7BA11A08E48BA9F76CE05CACEC640727
SHA1:	6B697F983F25B6528544C767277E9A1E2322C7B5
SHA-256:	8E6C1E164372165A4B31001BC9D28614200EAF665A5827BE856AC11D5262946D
SHA-512:	9969DDC1FA8ADA268EBAF448591F602CDC83401BCF73B3A744AAD7A88154F7789A507A922392D43A519C659FB82B940B81C2FE1D01A0646AA9D119FCF75BFED2
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW
Preview:	/* @license GPL2+ no URL */.:root{--bui_unit_value:8;--bui_unit_smaller:2px;--bui_unit_small:4px;--bui_unit_medium:8px;--bui_unit_large:16px;--bui_unit_larger:24px;--bui_unit_largest:32px;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;--bui_color_destructive_light:#fcb4b4;--bui_color_destructive_lighter:#ffebeb;--bui_color_destructive_lightest:#fff0f0;--bui_color_callout_dark:#bc5b01;--bui_color_callout:#ff8000;--bui_color_callout_light:#ffc489;--bui_color_callout_lighter:#fff0e0;--bui_color_callout_lightest:#fff8f0;--bui_color_complement_dark:#cd8900;--bui_color_complement:#febb02;--bui_color_complement_light:#ffe08a;--bui_color_complement_lighter:#fdf4d8;--bui_color_complement_lightest:#fefbf0;--bui_color_constructive_dark:#006607;--bui_color_constructive:#008009;--bui_color_constructive_light:#97e59c;--bui_color_constructive_lighter:#e7fde9;--bui_color_constructive_lightest:#f1fef2;--bui_color_primary_dark:#00224f;--bui_color_primary:#003580;--bui_color_primary_li

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	805884
Entropy (8bit):	5.083707468119061
Encrypted:	false
SSDEEP:	24576:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVkO2sdwUqkhBYlJz5oE:8xEmfNAsQZrW4R6erxXbZQCF5qP8czVw
MD5:	7BA11A08E48BA9F76CE05CACEC640727
SHA1:	6B697F983F25B6528544C767277E9A1E2322C7B5
SHA-256:	8E6C1E164372165A4B31001BC9D28614200EAF665A5827BE856AC11D5262946D
SHA-512:	9969DDC1FA8ADA268EBAF448591F602CDC83401BCF73B3A744AAD7A88154F7789A507A922392D43A519C659FB82B940B81C2FE1D01A0646AA9D119FCF75BFED2
Malicious:	false
Reputation:	low
URL:	https://partner.booking.com/sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA
Preview:	/* @license GPL2+ no URL */.:root{--bui_unit_value:8;--bui_unit_smaller:2px;--bui_unit_small:4px;--bui_unit_medium:8px;--bui_unit_large:16px;--bui_unit_larger:24px;--bui_unit_largest:32px;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;--bui_color_destructive_light:#fcb4b4;--bui_color_destructive_lighter:#ffebeb;--bui_color_destructive_lightest:#fff0f0;--bui_color_callout_dark:#bc5b01;--bui_color_callout:#ff8000;--bui_color_callout_light:#ffc489;--bui_color_callout_lighter:#fff0e0;--bui_color_callout_lightest:#fff8f0;--bui_color_complement_dark:#cd8900;--bui_color_complement:#febb02;--bui_color_complement_light:#ffe08a;--bui_color_complement_lighter:#fdf4d8;--bui_color_complement_lightest:#fefbf0;--bui_color_constructive_dark:#006607;--bui_color_constructive:#008009;--bui_color_constructive_light:#97e59c;--bui_color_constructive_lighter:#e7fde9;--bui_color_constructive_lightest:#f1fef2;--bui_color_primary_dark:#00224f;--bui_color_primary:#003580;--bui_color_primary_li

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	981
Entropy (8bit):	6.309068214107805
Encrypted:	false
SSDEEP:	12:6v/76EZ6m9U1wMSKUju3ZxGYPI1kUvlGF3jNme3cd6RvN61Y2DjW8g0S8T7ywIQW:xnSKU8vGB3sFzNrcUKP7awlZiNpD9
MD5:	278428E12029FAD7BC6C0DB3E3E96443
SHA1:	89E6BAC55BEBDC67D401CAA966F5497530AEE6D6
SHA-256:	5118A7620A63CE9D11033D5CC1F1D1EE26F30D7E45943AE2A247CF186B699BB1
SHA-512:	854437C9EF92014D98AA06EF66EA8BCFA67505E84EEC3C8DF94EE2CE371838ECA2C48B2BA85D503BC161DA6317FDE972EB2AC595244B0BE655D0AF41502DFE2D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8k......PLTE............@@@+++$$$ ...+++'''$$$"""(((&&&$$$###!!!+++)))'''$$$((('''&&&###)))((('''%%%(((&&&'''&&&&&&%%%$$$(((''''''&&&(((&&&&&&%%%%%%'''''''''&&&&&&%%%%%%'''&&&&&&&&&&&&%%%'''&&&&&&%%%'''&&&&&&&&&&&&%%%'''&&&&&&'''&&&%%%%%%'''&&&&&&&&&&&&&&&&&&%%%'''&&&&&&&&&&&&&&&%%%'''&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&%%%&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&'''&&&&&&&&&&&&&&&&&&&&&&&&.....T.....tRNS...................... !"$%&')-/45678@ABDGJQRSTUVWXYZ[_fjlnoqstwy...................................................................0#....bKGD........iIDAT(.mQ._.q.>o.(..%Z"3...4(.K%...m\|............{..Ch.%..t.g.B-...$..'.!......0>..9.<..h.).R.2j..R.T\|G.u...F.....a-m..'..`...Q]...... ..Z:.fGQ....P....8`K.!.3..C..=..`...d.8......@....RhP.Rt..e..9.....w7.ZvV^....y... ..q...2....{x.T.{]...6s..?..X.U~..}.a~..fxw......TW_m..m.6K..IKUV.i....Q.-...l ...@...\n.;..8.s\|.J.k.xV.w.-..h...f.."..-4x.t..{.M../..O.........IEND.B`.

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	269237
Entropy (8bit):	5.385599991145901
Encrypted:	false
SSDEEP:	6144:v1mK9cp8dIqqvNIk21csYug6Mtuu+DhW3Hoeagdl:vxdITvuvhWDdl
MD5:	E3649A0A661D62862C9AB1C7D9FADD38
SHA1:	A09C0B5306BC2EE011FBDDB6FAB185E91D718D67
SHA-256:	37852B399D8CD104835BEFC6293CBA430F15F351A08292124E7961FDB8BAE84F
SHA-512:	95D0A2C4E7BF150000E639CC92DCDDC1B77B12C68FC000A5C7896302EB064A4D4EE2D4D5AF7511B18ED78C8772F02C8870F4F07F5F6775990A59F7B6E9A6145C
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/psb/capla/static/js/bui-react-9.1fa6c1cb.js
Preview:	"use strict";(self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]=self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]\|\|[]).push([["bui-react-9"],{"854b6ca1":function(e,t,n){var a=this&&this.__createBinding\|\|(Object.create?function(e,t,n,a){void 0===a&&(a=n);var r=Object.getOwnPropertyDescriptor(t,n);r&&!("get"in r?!t.__esModule:r.writable\|\|r.configurable)\|\|(r={enumerable:!0,get:function(){return t[n]}}),Object.defineProperty(e,a,r)}:function(e,t,n,a){void 0===a&&(a=n),e[a]=t[n]}),r=this&&this.__setModuleDefault\|\|(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),o=this&&this.__importStar\|\|function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var n in e)"default"!==n&&Object.prototype.hasOwnProperty.call(e,n)&&a(t,e,n);return r(t,e),t},i=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.TGenerated=t.T=t.remoteFormatsForAss

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	226870
Entropy (8bit):	5.452936493117246
Encrypted:	false
SSDEEP:	3072:EBLeyZWZTBUIncwuP0bteuvQ+AMPpgArl0xYu5GpJnsO:EBLeyURBU7P0bvQQGArHu5GpJnf
MD5:	072B2C3ACF701DD53DF6CE69EA15C1A7
SHA1:	9EEFC6F1A848B8F10498B7DC298AF62646465F5E
SHA-256:	63BAE03AA97278ACB1D6F7863E593999BBDC5D280D2FA5A3050F234CE5EEE850
SHA-512:	30C4CE7EFC91156E8258E89BCE6ABAD64893E3304FEA99C64AF1C46DD2CF8F57CB154CC76FF5962BEF423C321707BD53ABBDAF42805117F6FFA870E91D1DC1C5
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	817
Entropy (8bit):	6.269805498822586
Encrypted:	false
SSDEEP:	12:6v/76tVhPk8Xtr705gURYPzyFIEZFs9hb5LxfddrWHugkps8hl1:BTk89r705gUR42FXe9hhxnSOgl8z1
MD5:	D786614F3580FCD0CB889000A768EE42
SHA1:	46367253B943915F4B3AC74BF9CA98A458F95CE4
SHA-256:	C91E357DAF0B055A42826A5135D0F25754B8C9DD728EBF76C0D40299084C943D
SHA-512:	A14E37881FABCA50614A19B899D8C13640614F0F003FCBC91B6C9493142552BFB0F7FE0D18740F53F0BD6F7A1AA4B97BE113715286285F8159618E493FD536C5
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/WRQualtricsControlPanel/Graphic.php?IM=IM_JxBKIlyLG2Q5HQr
Preview:	.PNG........IHDR.............8k.....APLTE............@@@333+++$$$ ...+++'''$$$ !!!+++)))'''&&&$$$)))'''&&&'''&&&&&&%%%$$$$$$&&&%%%$$$(((&&&&&&%%%''''''&&&&&&%%%%%%'''''''''&&&%%%%%%%%%&&&&&&%%%&&&&&&%%%&&&'''&&&&&&%%%&&&&&&&&&&&&%%%%%%'''&&&&&&&&&&&&%%%'''&&&&&&%%%&&&&&&&&&&&&&&&'''&&&'''&&&&&&&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&....3"....itRNS.................!"#%'(456789=>?@CDENOPQRSTUVXYZhjkmrst..................................................&.......bKGDj%b.....)IDAT..e..?BQ.....7J......J...).^'.....C.E.CI..N......Y3O..d...PZ2#.....(.>.y.2{Ae#\|._..P...cl~.....:Z...j.Rn.-.`8a.......-V<.8-...=.t..ZL.`..v.).`NZ0.....h.YV%H...."A..d.9i.Z...).T.....!ZB..h..6.Q.;^..4x{@....{#...(.M\|.a...>.{..\|.d..6e.R1..$t.wc....{9..5...b?....q..op.&..7...?....6.Mn......IEND.B`.

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37432)
Category:	downloaded
Size (bytes):	700434
Entropy (8bit):	5.491243653303568
Encrypted:	false
SSDEEP:	6144:ZOAbwlJTPz+Vs9NFSgzRmWqM0qkMc2muOWiWrLycK:twlJTPUsvF1Rts
MD5:	019C374D86EE8D14FFCAA6E205C9E8D6
SHA1:	BCA95FB6E7532B4BBC1F5A1DC421AC7C4C076D5A
SHA-256:	9E650221B7C85E0B6C8F691BB4B54FD460EB1D0036B6E020392C683C42E605DE
SHA-512:	1C6C0AFC76CB7F86898D96DB225F1B51D526D7DC7B46D2FDB36653FB4B473515433F9E9DD3AD640769EE62929FFC41F5F39BAB6380796B2764D0766BD4844C0A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TGMJRCB
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"552",. . "macros":[{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"userId"},{"function":"__jsm","vtp_javascript":["template","(function(){if(0!==",["escape",["macro",2],8,16],")return ",["escape",["macro",2],8,16],"})();"]},{"function":"__d","vtp_elementId":"gtm-page-title","vtp_selectorType":"ID"},{"function":"__u","vtp_component":"QUERY","vtp_queryKey":"utm_campaign","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",5],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_defaultValue":"0","vtp_map":["list",["map","key","^[0-9][0-9][0-9]*$"

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14767)
Category:	downloaded
Size (bytes):	25129
Entropy (8bit):	5.082698457464805
Encrypted:	false
SSDEEP:	192:s7FoOOgUbL0GSL/OkLTdSflL788x5OQ3etL7kCb8vNAr3L7kCbAvNPrPL7kCbAv7:O2LbLrCTdW9fx5OQu1TUyV
MD5:	FC002AA04432327EC98BA19372D0B101
SHA1:	A11DFA2BB74F059BDD4E78AC3D4606D5C8BA4BB4
SHA-256:	40F87FC5DAB2F5382BEA297AC5DB24AE5404B7541A3D1316E6160E0A9DE2C2BD
SHA-512:	044F2796D12CAB84FAE067D48A08B1A1F00B13F7C2164E08478BBDB861F3808AE4745B704C91ED03E44624D210A617F625B784FEB7512292720BA099A2FEFAE8
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/psb/capla/static/css/client.99a1ce89.css
Preview:	:root,[data-bui-theme=traveller-light]{--bui_color_border:#868686;--bui_color_border_alt:#e7e7e7;--bui_color_action_border:#006ce4;--bui_color_border_disabled:#d9d9d9;--bui_color_destructive_border:#d4111e;--bui_color_constructive_border:#008234;--bui_color_foreground:#1a1a1a;--bui_color_foreground_alt:#595959;--bui_color_foreground_inverted:#f5f5f5;--bui_color_accent_foreground:#946800;--bui_color_action_foreground:#006ce4;--bui_color_callout_foreground:#923e01;--bui_color_foreground_disabled:#a2a2a2;--bui_color_destructive_foreground:#d4111e;--bui_color_constructive_foreground:#008234;--bui_color_foreground_disabled_alt:#d9d9d9;--bui_color_brand_primary_foreground:#003b95;--bui_color_action_foreground_inverted:#57a6f4;--bui_color_action_focus:rgba(0,108,228,.24);--bui_color_highlighted_alt:rgba(26,26,26,.06);--bui_color_action_highlighted_alt:rgba(0,108,228,.06);--bui_color_destructive_highlighted_alt:rgba(212,17,30,.06);--bui_color_highlighted:#cecece;--bui_color_destructive_focus:r

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	920
Entropy (8bit):	6.285126364743982
Encrypted:	false
SSDEEP:	24:XH8XtAgUfeWaMoBD1UIqvEsVyp6tjgmrF1:XH8XCgUcrBSIKEmdp1
MD5:	054743E4037445242C71D71B393C1D9A
SHA1:	D950561F585A70B5073F47D1A4095337065A066B
SHA-256:	6177736E0957C9B0BAD9923C86256E60E6A8224DFB35B665497987560DEDD0E6
SHA-512:	DA15D2CDFBA6A1122E007C8305E69E4AC54B2E98B12F3265A922413F615D89C15719A4B250A6ECBEE281E523950278F958A7F76D83179E5ECC2937FD10B61BFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8k.....qPLTE............@@@333+++$$$ ...+++'''$$$""" $$$###!!!+++)))'''$$$###"""((('''&&&$$$)))((('''%%%((('''&&&&&&%%%(((''''''&&&$$$&&&%%%%%%'''''''''&&&&&&%%%%%%%%%'''&&&&&&&&&%%%'''&&&&&&%%%&&&&&&&&&%%%'''&&&&&&%%%'''&&&%%%%%%'''&&&&&&&&&&&&%%%'''&&&&&&&&&%%%&&&&&&&&&%%%'''&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&%%%&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&'''&&&&&&&&&&&&&&&&&&&&&....@...ytRNS........................ !"#%&')34567@ABDMQRSTUVWXYZacjklnoqsty..........................................................8Sg.....bKGDz8.j...PIDAT.....#.....o"&.U.M......J..]$:PTZ\|..~.}.....n.i..G..@...H.+s..4.J...?.v.(....k9.....@r....t\|M...p.....+...[..lc..@.>.Jz.z. ...t.d...5W.j.....W....{....r....AO.d...q.....@WL.......q......r..=...]?.(H._r....Zz.7...i?31..G*1E......<...:.M.f3<.......?#"b..J.G..Kz..'g..`$.....6.%....wz.r...x'........8..U7...X....,l.....,.?~.C...}8....IEND.B`.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	3.769620387442342
Encrypted:	false
SSDEEP:	3:YBE5IAEL/LlEzLQV8BBV1n:Yg9iDezLH3L
MD5:	7D1DBBD1D76EB7C445482824B38461DB
SHA1:	E1E762334193103DBB8F769B502DE5A6B2DB6361
SHA-256:	BDACA36312500A5E930637A84A6B58159AFC776DDAFF09BAFC479FCE63BF13A8
SHA-512:	EAA4BE695F5E90E1FBC68C7C85C979D95EB4CE92772BFBCDF56AB7926C7F1E0BB5B1FCF2353AD2C4809CC6811374666F89B0728D3B606F6FFE0F07C5FEFC7E12
Malicious:	false
Reputation:	low
URL:	https://sage.kindly.ai/api/v1/stats/bot/5062/public/current_wait_time?sources%5B%5D=web
Preview:	{"data":{"mean":null,"median":null,"n":0,"stddev":null}}

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=543530&time=1720575899651&url=https%3A%2F%2Fpartner.booking.com%2Fen-us
Preview:	{}

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	610
Entropy (8bit):	7.596151900307889
Encrypted:	false
SSDEEP:	12:6v/7iiaBY1azPX793IrzbrJif0E5zaB2klzfngSN17Aod/ja:rCMzPZ3Ir3rpkJk1/Ja
MD5:	6018807017AFEAD14417566F975FFDB4
SHA1:	2EE7C3239E4046E9567C8100DECD9ABE6093B79F
SHA-256:	99AF6690771B7B62A1325D0C0B38A9A0300C18921E4877DCF38A239B9C977502
SHA-512:	03C81DD6C526EE84F274F4BFE903FC694BFD4ED20B359C1A7BA09D940795316B816E869B59D4DA383AC8367B952E5ED7C7244795E1EDDB6976A358240421C789
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....)IDATX..?L.a...w1.......KS..Z..hM.].......c].R...1v.hL...tS[[.....H.1i].ld.!..ppx.....g.{s...}..!.@M.[...0......C ...9.P5....h......P...4o..'Ri...z.Tfn..D......2.y].F.5k...!..<.\|.[r......GdO....vE..$.&...`a...........e.N.._..l..Y..\...\|...;F........u..w... ...e.....5......h..=.58#2..>..\|^....Z._4u.....&Y.M.Z.S.Kt.as.q..2...D......N.%.n.A...g.W....@:S`1....2....e..a.C#h.d...#f..=.i.....qo..+.HN.O.k.:....O.............V&..1.l.t...SHe...\|....W.ts.c.....zj..=..3..b........?8...}....!.F._..m./.T.jv.P."..2.......C....d........A1.....IEND.B`.

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	522
Entropy (8bit):	7.314345187121278
Encrypted:	false
SSDEEP:	12:6v/7+1XO8yKb4PHlMb5VrEdliObT7fCg9FGhlt7QN:bytPFaEd8gPfCguhltm
MD5:	925EE33071EF712BDA608EF3BF50EF13
SHA1:	C7D8844E68D5C9BC0294DC5A69F8550C6D6D39D5
SHA-256:	996B0E99FCC7A553EAC6F51569BE5429B1BF8C071A708289FAB808D7660CF74C
SHA-512:	5D62BDC1B38E194C0D2F4B7591E4C06F4B3B1FAD5652694E369F553CDE7D251CDBEAA6EA8C61548A6F8B33BEDD8832EC221E01AE0A4A25712C64018DD39C37C5
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.png
Preview:	.PNG........IHDR...0...0.....`......~PLTE..k..k..4...DZ."=.......s..`..0x..j..k..(.....F^..:~.g.....'C......`r..ex........5..........,u.@V.....'B.Uk...Pd..u..Uk.D......tRNS...........Zd.../IDATH...Ir.0.E..`..G...0...........a....t..(hG8.DL{c>..W.................!. ...8....%. ..e.C.@..$.C.@.LR..`.N.%..}.....sAT.V;d.> .O...#.ZJ..Y.A...-9..}O.. .....X6.,tFb.n..].K.l..SJ]/Z3..xYW..1&...W.1..Z.\|.O...y...=....P*.......1 ?...@h.......rms..!..C..=.. ....!G.^Z+.=......q7.^v.(z....E.....L\|.......IEND.B`.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65439)
Category:	downloaded
Size (bytes):	287861
Entropy (8bit):	5.461657424776212
Encrypted:	false
SSDEEP:	6144:g2ZSzOqRTpnhoQtTs6ksdLAxD8pR//YW6MJ6ZoGpBO9/yjUsY7He:g2ZSzOqRTpzTs6ksBAxD8p1gWjFDe
MD5:	69ADC9304204B5B8C4568D19D5E134F7
SHA1:	68F2BE4E80D34F61DE6CC6DFA6258ACEFF147D34
SHA-256:	E47397BD08518564E9DDA880872C76D6BA73E8A3711440D467761B67C7EED6BB
SHA-512:	EAC514C75C39A207310C33F7314CAC4EB76440A50F79887C1896E1AFAE2A0BA588F7C5536AC08FCDE7165A353D396647CCD0E50536A97E59D01AD5096104134C
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/KindlyChat-2f88cfbafafa555baa4d.js
Preview:	/! For license information please see KindlyChat-2f88cfbafafa555baa4d.js.LICENSE.txt /.(self.kindlyJSONp=self.kindlyJSONp\|\|[]).push([["KindlyChat"],{4722:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>tr});var r={};n.r(r),n.d(r,{agent:()=>xt,alerts:()=>It,announcement:()=>Lt,auth:()=>Nt,bot:()=>mt,chatbubble:()=>vt,connection:()=>jt,environment:()=>wt,feedback:()=>Bt,inChatNotification:()=>Wt,inspector:()=>Ut,lightBox:()=>un,local:()=>qt,messages:()=>nn,nudge:()=>hn,privacy:()=>on,pushMessages:()=>cn});var o=n(6984),i=n.n(o),s=n(257),a=n(8628),c=n.n(a);const l=function(e,t){return!!c()("").call("",t)\|\|!!e&&t.some((t=>function(e){const t=e.replace(/\./g,"\\.").replace(/\*/g,".");return new RegExp(t,"i")}(t).test(e)))};var u=n(4328),d=n(9445),h=n(3354),p=n(6906),f=n(6058),g=n.n(f),m=n(4570),b=n(5639);const v=d.Ay.button.withConfig({displayName:"styles__CloseIconButton",componentId:"sc-96uqai-0"})(["position:absolute;z-index:",";top:24px;right:24px;background:none;border:none;cursor

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5482)
Category:	downloaded
Size (bytes):	69527
Entropy (8bit):	5.329149092543318
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwrlHM9Z/K01gJn/TZ02LKVEyKz:RIT7OXms9Z/KBt/j8tKz
MD5:	018A80B99AE24EC8E569AB75BCBDD148
SHA1:	B768928C3FCE97FDF121193CBF6A4F82383759A2
SHA-256:	611874166A8E94F90F61FBCECAB72BF94A560193F31FF10334974D9FEAFA1FFC
SHA-512:	3B992EA577D998BD685A534E4EB5C02A2CEC577F213D4E952A88F3B73DE14243BCFD11DC586431F29A0BB65914EA376C119DCE9533CF5BAA70A0C816ACE450A1
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/137657823624702?v=2.9.160&r=stable&domain=partner.booking.com&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4265
Entropy (8bit):	4.646189442080531
Encrypted:	false
SSDEEP:	48:tnjnOCJEz2y7Rc/YjYjB8LbCHyQIFQgBi4in3Cnw6si1/2RvKvW+n:wtz2y7t6yri4iAw21+BKvW+n
MD5:	A895DC1DDDCC9E033AA41147E7A69CD2
SHA1:	BEC20895855BD0D95F649421C40D61266F17D6CE
SHA-256:	B86055D0C9D4794595D92C448EFD9626195990750790113090735B6F506F59B4
SHA-512:	2C7DF7CAD57AFFE045FCD85A7E3D2296291201DC05CEBA400F295B29D597BC13C28DE92C644D1455EFDFCC50A60AC3338335F8343F74F172DD558CB474515A8A
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/manifest.json
Preview:	{. "1187597.1473569.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1473569.json?afd3b67375e34272ae8f5c89ce6cd2aa",. "1187597.1475776.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1475776.json?afd3b67375e34272ae8f5c89ce6cd2aa",. "1230186.1523989.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230186.1523989.json?9e7b99336d6abe32f51bd1218cc63db8",. "1230186.1524037.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230186.1524037.json?9e7b99336d6abe32f51bd1218cc63db8",. "1230587.1524483.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524483.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524489.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524489.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524492.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524492.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1524495.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.1524495.json?fbf7535e353f7a713370f0627209d05c",. "1230587.1547532.json": "71cd12cdf77ebcb750cff91a9bba6f04/1230587.15

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=543530&time=1720575906004&url=https%3A%2F%2Fpartner.booking.com%2Fen-gb
Preview:	{}

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39684), with no line terminators
Category:	downloaded
Size (bytes):	39684
Entropy (8bit):	5.167639634679469
Encrypted:	false
SSDEEP:	768:h98PseNO9B1dOLQGWg8QqzntluhPIgYo6/:hSPnRxu
MD5:	19204E8370CED59D9CDB12B3EED0086A
SHA1:	5FA2134EFA953CFD3EEF16457AA5B088DE1AE007
SHA-256:	CBC57106F0E96E632E0178541A8D0D7C4996FA0C9E7DA5C94AF701B6AB53FF1B
SHA-512:	55D736E74F5022D90C764333BC4EF98C6C4F14F90C5AD2B1C4BB4E4F0C71A6495A0A323CCB76CAA68622B1283B66A76A6894EED4CD24D2B91F8272A3038066B5
Malicious:	false
Reputation:	low
URL:	https://partnerfeedback.booking.com/jfe/static/dist/c/mc.19204e8370ced59d9cdb.js
Preview:	webpackJsonp([6],{301:function(e,n,i){var t,o;t=[i(0),i(287),i(712),i(713),i(714),i(357),i(715),i(716),i(717),i(718),i(719),i(720),i(721),i(722),i(723),i(724),i(725)],void 0!==(o=function(e,n,i,t,o,r,c,s,d,l,a,u,h,C,m,p,I){"use strict";return e.Class.declare({$name:"MCRendererBundle",$extends:n,getDefinedRenderers:function(){return{MCDL:i,MCMACB:t,MCMSB:o,MCSA:r,MCSB:c}},getDefinedTemplates:function(){return{MCDL:s,MCMACOLTX:d,MCMAHRTX:l,MCMAVRTX:a,MCMSB:u,MCNPS:h,MCSACOLTX:C,MCSAHRTX:m,MCSAVRTX:p,MCSB:I}}})}.apply(n,t))&&(e.exports=o)},357:function(e,n,i){var t,o;t=[i(3),i(28),i(2),i(0),i(404)],void 0!==(o=function(e,n,i,t,o){"use strict";return t.Class.declare({$name:"MCSARendererHTML",$extends:o,blankOptionScreenreader:{},detectedClick:!1,initialize:function(e){this.$super(e),this.on("prerender",function(){this.blankOptionScreenreader=this.getMessageFromTemplate("Blank")}.$bind(this)),this.on("postrender",function(){i.each(this.runtime.Choices,function(e,n){e.TextEntry\|\|this._$el.fi

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	184591
Entropy (8bit):	5.018123870827001
Encrypted:	false
SSDEEP:	768:19SeIwN0E74vqx6EhcZ4FgaDdsiphKgIYGiG8zeaDp:LYvqx6EhcZ4FgaDdsiphKgIYGiHL
MD5:	633F03D887BA8F2E5D8DC2D3643A2D4B
SHA1:	DD49B51D1F8567843C56F44FB6CBF6978F3D7015
SHA-256:	E2FA35B2FD8E231DAAFAAD1571801F414C7102C385C6C4F83BDEAAF09C44EBA9
SHA-512:	BACD49FA06989A26BA05D5F745179E935573760C4738B8E015ECB7207DC1E4AB48C8115B4B0475AD54A921E63099F1A8C45E1B2949CEFB29D606B6A9BA75E378
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/psb/capla/static/js/256aa323.0c14bd53.chunk.js
Preview:	"use strict";(self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]=self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]\|\|[]).push([["256aa323"],{"39f44f23":function(e,t,a){a.r(t),a.d(t,{PRIVACY_STATEMENT_CONTAINER:function(){return ze},PRIVACY_STATEMENT_DATE_TEST_ID:function(){return Xe},PRIVACY_STATEMENT_MODAL_BODY:function(){return Ke},PRIVACY_STATEMENT_MODAL_HEADER:function(){return Je},default:function(){return Ze}});var n=a("ead71eb0"),r=a.n(n),l=a("c44dcb0c"),_=a("dc6d28ff"),s={orderedListUpperAlpha:"a27310068a",orderedListHebrew:"b6aca14795",orderedListHindi:"afc95f99b0",orderedListLowerGreek:"a928e06e3b",orderedListUpperLatin:"d0d69ceb64",tableFirstCol:"e4b7ec1d8c",mobileAppAffiliateBlock:"eb3d7b6b5b"};const c=[336317,332731,336318,331867,337862,338019,347105,800906,811578,821183,800907],i="https://www.facebook.com/",m="https://www.kantar.com/",p=[{name:"PERIMETERX, INC.",country:"us",website:"https://www.perimeterx.com/",eligibleCountries:["cn","jp","kr"]},{name:"E-H

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 720x536, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	62846
Entropy (8bit):	7.99680114238523
Encrypted:	true
SSDEEP:	1536:x5lEjUn44grp/BXzkszEKacoIHKcadHtB1KsceaKK17U:jmjUn4dFBXzGKacBxwHtBMsP7h
MD5:	5E477C52CEF8BCD69F92B5FA7368DBD3
SHA1:	B4F365F1235B9F0ED3640641BCE6A6EAAC08B5FD
SHA-256:	EA0084E3B217B051BF03522DD4ACC8154B688ED67D2DE165A4DFAB57B232BED0
SHA-512:	F56C443D8DBF4F113EFCAE844DEB1449F8D4B5073BB6838AD1BA7D0CF179441542D72A258D80FA2A6A6BDAC5DFF91F5875CF9E8EA0CD61462FA1927CF722DA15
Malicious:	false
Reputation:	low
Preview:	RIFFv...WEBPVP8 j...P........>...A...oL..a,.U..f....8(..NEe.....h.."...+.FJ.i..f...s.?..T.<.u..._g...?.....w..#.;.W.=M{g...O......k................G.......~.}......'...W....v..~.\|....M........?............G......._.?.{Y.....)...../...K............?..}.............~~.J......~?......................W...~..r...o...?.?.....G.(W.....D...G....X.......O._.n~..a..z...........DG....XS.w>...i.23... s2..../[.g(.....P.Y..&...LmK...../.....#.4....e .?..e.\|....,Tb.Tb........Vg.(i'...j...F...z.O........"...y.F.c....<)(..wrI....4?nL?<......qX.k.3.9..^..8K..t..r.>.y&...:4..F..8Ku.>d.'.r....v.d."&OO.>#..S..9...$....#d.TV. ..:..6...9)..h..r@t.&.../...'F..S........'K.M...4~9.l..I..RI.8 k.p......D\|.{R.?!.3.=.mE......O...&.K.U..Ww[......I......`./Ja)}..E.J....;..%"O....... ..#......U.-p. .g..\.N.....}\.po.*.......A...F$.x`...}....."....G.}.\|+.=[b<L\$Q.f-...,.G.E...Mp.D.4_O.b.)....l.:-....$..9&<y0..=a...p\.Pwn.9..p.....)..lfR%?...BW{.g..e...I..ee..R....e....w@

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6856
Entropy (8bit):	4.830105802670857
Encrypted:	false
SSDEEP:	192:Q+dw8psVXH7KK7pSdDHjkRCwpY6vepSdDH3CX5JZd:z/WXH7KKdwDHjkswpzowDH3CX5JZd
MD5:	6423E909E49BC79F7E172B98EDE32A8C
SHA1:	50EA38C0C32AD97C5394D842956636D6273FB4C6
SHA-256:	B2130491497D5247FB189D0BB749E789A463DB29274290325E065E9FB50BCB01
SHA-512:	9AFAF2B5A14282C3409D4AF78F0E6750BFFC2047573BE93DEA4F2B6456C65373B9C88FF7A268C05001C15A05349230DCD16A13301CAD66C31E5988C81D42F164
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.2.0","OptanonDataJSON":"3ea94870-d4b1-483a-b1d2-faf1d982bb31","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"e6419570-52cc-432d-ba1e-7300290f1970","Name":"EEA + Russia + UK","Countries":["no","de","ru","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","at","re","cy","ax","cz","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","hi":"hi","de":"de","ru":"ru","fi":"fi","en-US":"en-US","bg":"bg","lt":"lt","lv":"lv","hr":"hr","fr":"fr","hu":"hu","default":"en","zh-Hant":"zh-Hant","uk":"uk","sk":"sk","sl":"sl","id":"id","

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6548), with no line terminators
Category:	downloaded
Size (bytes):	6548
Entropy (8bit):	5.3923346455494094
Encrypted:	false
SSDEEP:	192:2SjYDaw8KLwLc4MrP0SLn4N8yp9rHoEak:2mfL5i0IM8yTboEak
MD5:	24B743CF3D6F5525B2A9E9FC60FD9125
SHA1:	F2BA118E9C9D6AD92FE54C979E57DFCE786A60DA
SHA-256:	6C0BED66E7FC53D62C5D11D8F8BE22C20991DB858510E99B13058B2E264A1A0C
SHA-512:	7D035CC59CC059971078065A8F4F9AF49E5F4C9EE9B07526C6A8CBB1467F4B31B720832E01284CF56D98788AF1D424E709D859860AD436199A62B84C1F6B265B
Malicious:	false
Reputation:	low
URL:	https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/initiator.js
Preview:	/* Created: 2024/07/08 12:19:23 UTC version: next */(()=>{"use strict";var e={648:(e,t,a)=>{a.d(t,{FF:()=>c,NI:()=>s,SW:()=>i,fH:()=>l,vV:()=>d});const r={info:"info::",error:"error::",warning:"warning::",verbose:"verbose::",success:"success::"},n={allowed:document.cookie.indexOf("abTastyDebug=")>=0};function o(e,t,a){if(function(){const e=!window.abTastyStopLog;return(n.allowed\|\|window.abTastyDebug)&&e}()){for(var r=arguments.length,o=new Array(r>3?r-3:0),i=3;i<r;i++)o[i-3]=arguments[i];t(`%c [AB Tasty Debug mode] %c ${e}`,"background: #222; color: #bada55; padding: 3px; border-radius: 5px 0px 0px 5px;",`${a} padding: 3px; border-radius: 0px 5px 5px 0px;`,...o)}}function i(){for(var e=arguments.length,t=new Array(e),a=0;a<e;a++)t[a]=arguments[a];o(r.success,console.info,"background: green; color: white;",...t)}function c(){for(var e=arguments.length,t=new Array(e),a=0;a<e;a++)t[a]=arguments[a];o(r.warning,console.warn,"background: orange; color: white;",...t)}function s(){for(var e=ar

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	515653
Entropy (8bit):	5.107649066493808
Encrypted:	false
SSDEEP:	6144:EZctxBqP4lEJf6e7ZbD/GYnD236LJ3nIDWdf:EZctj736LNIDWdf
MD5:	59CFE31F4990E4118A6055392047CC3E
SHA1:	E42987375999276DDB9E4800FFF58638F3ABAAD7
SHA-256:	53478753B077046CE66FB36A3FA0D4605591E04DC677A112CA50AE03B5DF7ABC
SHA-512:	E5C7B01DF73C211E66AEAF9EEA69D2E8F5341891672A9626DB3EC95877BE1297975780320ACF4B3013743E50C9C842A310415921383FA6376A031F51F474266E
Malicious:	false
Reputation:	low
URL:	https://cf2.bstatic.com/static/css/main_cft.iq_ltr/7e335c31008a447192abd83491a4ee057583a557.css
Preview:	:root,[data-bui-theme="traveller_ex-light"]{--bui_color_border:#868686;--bui_color_border_alt:#e7e7e7;--bui_color_action_border:#006ce4;--bui_color_border_disabled:#d9d9d9;--bui_color_destructive_border:#d4111e;--bui_color_constructive_border:#008234;--bui_color_foreground:#1a1a1a;--bui_color_foreground_alt:#595959;--bui_color_foreground_inverted:#f5f5f5;--bui_color_accent_foreground:#946800;--bui_color_action_foreground:#006ce4;--bui_color_callout_foreground:#923e01;--bui_color_foreground_disabled:#a2a2a2;--bui_color_destructive_foreground:#d4111e;--bui_color_constructive_foreground:#008234;--bui_color_foreground_disabled_alt:#d9d9d9;--bui_color_brand_primary_foreground:#003b95;--bui_color_action_foreground_inverted:#57a6f4;--bui_color_action_focus:rgba(0,108,228,0.24);--bui_color_highlighted_alt:rgba(26,26,26,0.06);--bui_color_action_highlighted_alt:rgba(0,108,228,0.06);--bui_color_destructive_highlighted_alt:rgba(212,17,30,0.06);--bui_color_highlighted:#cecece;--bui_color_destructiv

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.150232349540528
Encrypted:	false
SSDEEP:	3:YRc8fBAgJVJfHjDrXKlyAwlfHbTKSMh:YxnRDDrbPKSE
MD5:	AA06ED13ABA3B8794A6B08C97690BE10
SHA1:	D33973099AAB36E3D31776FC2CFA5813F3E01682
SHA-256:	776884509E2EAA210894BAA49945B7AD8A02026ADC657E276F724AF7E8544374
SHA-512:	89E907DEA8FF569ECC8E54840A3553623585EE84D1FE285DC62427C2BD5DA0EFFE05436C6C8A28389A620D5FF248ADC42B92332E7B847BD0202C1A3A0C1B154A
Malicious:	false
Reputation:	low
URL:	https://dcinfos-cache.abtasty.com/v1/ua-parser
Preview:	{"type":"Desktop","os":{"name":"Windows"},"browser":{"name":"Chrome","version":"117"}}

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22385
Entropy (8bit):	5.042007236244927
Encrypted:	false
SSDEEP:	384:ova/efAkTyS2KODJopO5iprJ1lNjlOCmtAdvNJ:ovPfAkTfOadlJ1lNjlO7tAdvD
MD5:	C810E9B7CB48D30FDDD3F3B81476941F
SHA1:	7CB3B733AC2ACB1347F4A27E0C4CF5A3BDD9BF83
SHA-256:	F3603464E821014EB8C95D21A982CB1DA0D902F2D0F023AEF34A77A1B9CE25BA
SHA-512:	F7EB35C2273DFBCAC12EBA49594A3147420CCBD85884D2A469AD73276660DEC40B9ED84A2ADCDD71A06DD03F0E3BC6EF484BCD34A23CCD28CC991F9BF9CB4A89
Malicious:	false
Reputation:	low
URL:	https://chat.kindlycdn.com/settings/dd38dbbf-6f63-4533-9201-1df5d18b2412.json?version=2.60.6&kindly-chat-browser-id=49feac36-9b81-486b-8657-dcad0323a288
Preview:	{"style": {"color_chatbubble_text": "#fff", "color_chat_log_elements": "#333333", "color_button_background": "#006CE4", "color_button_outline": "#0069ff", "color_bubble_button_background": "#003B95", "color_button_text": "#FFF", "color_background": "#ffffff", "color_header_background": "#003B95", "color_header_text": "#ffffff", "color_input_background": "#edeeef", "color_input_text": "#333333", "color_user_message_background": "#003B95", "color_user_message_text_color": "#ffffff", "color_bot_message_background": "#f5f5f5", "color_global_icons_button_background": "#ffffff", "color_bot_message_text_color": "#2c2c2c", "color_panel_background": "#ffffff", "color_secondary_button_background": "#ffffff", "chatbubble_icon_avatar_image": null}, "notifications": {"tab_notification": true, "sound_notification": true, "bubble_notification": true, "use_push_greetings": true, "push_greetings": [{"enabled": {"en": true}, "title": {"en": "Help pages (EN-US)"}, "url": "https://partner.booking.com/en-u

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 10, 2024 03:44:13.752387047 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:13.752418041 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:13.752499104 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:13.752691031 CEST	49737	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:13.752800941 CEST	443	49737	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:13.752857924 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:13.752875090 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:13.752896070 CEST	49737	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:13.753112078 CEST	49737	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:13.753170967 CEST	443	49737	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.219212055 CEST	443	49737	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.219553947 CEST	49737	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.219623089 CEST	443	49737	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.221091986 CEST	443	49737	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.221183062 CEST	49737	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.222090006 CEST	49737	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.222198963 CEST	443	49737	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.222316027 CEST	49737	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.222338915 CEST	443	49737	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.222649097 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.222826958 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.222837925 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.224280119 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.224359035 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.225018978 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.225250959 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.262247086 CEST	49737	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.277841091 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.277848005 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.324027061 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.506751060 CEST	443	49737	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.507113934 CEST	443	49737	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.507189989 CEST	49737	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.511351109 CEST	49737	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.511378050 CEST	443	49737	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.515352011 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.560513020 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.897495985 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.897622108 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.897670984 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.897681952 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.897764921 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.897811890 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.897818089 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.897923946 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.897969007 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.897977114 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.898072004 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.898112059 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.898118973 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.901987076 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.902060032 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.902067900 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.923228025 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.923289061 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.923353910 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.923547983 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.923563957 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.923882008 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.923913956 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.923985004 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.924138069 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.924153090 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.935815096 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:14.935825109 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:14.935895920 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:14.936209917 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:14.936223030 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:14.936727047 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:14.936783075 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:14.936852932 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:14.936995029 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:14.937081099 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:14.937146902 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:14.937354088 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:14.937376022 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:14.937429905 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:14.937673092 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:14.937710047 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:14.937876940 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:14.937911034 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:14.938056946 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:14.938085079 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:14.943063021 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.971091032 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.983758926 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.983813047 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.983823061 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.984205961 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.984253883 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.984263897 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.984353065 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.984409094 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.984416008 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.984679937 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.984724045 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.984730959 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.984812975 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.984855890 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.984863043 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.985310078 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.985358000 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.985366106 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.985455036 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.985498905 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.985506058 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.985907078 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.985959053 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.985965014 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.986078978 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.986129999 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.986145020 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.986629963 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:14.986682892 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:14.986690044 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.041779995 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.048474073 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.057837963 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.057876110 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.057883978 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.058027983 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.058073044 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.058080912 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071046114 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071095943 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.071101904 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071177006 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071223974 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.071230888 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071357965 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071379900 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071408033 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.071414948 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071441889 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.071484089 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071537971 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.071546078 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071562052 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071578979 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.071585894 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071609020 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.071794033 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.071841955 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.076626062 CEST	49736	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.076633930 CEST	443	49736	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.406099081 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.410408974 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:15.410728931 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.414187908 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.417697906 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.465311050 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.465401888 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.469300032 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:15.469300032 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.469405890 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.534111023 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.534171104 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.534318924 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.534352064 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.534416914 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.534426928 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.534507990 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:15.534522057 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:15.534759998 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.534790993 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.535084963 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.535372972 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.536806107 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.536890030 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.537091017 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.537204981 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.537317991 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.537367105 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.538072109 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.538105965 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.538206100 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.538223982 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.538255930 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.538300991 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.538434029 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:15.538474083 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:15.538511992 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:15.580502033 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.580578089 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.590414047 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.590414047 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:15.590513945 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.686342955 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:15.686557055 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:15.686566114 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:15.688045025 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:15.688110113 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:15.955873966 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.955965042 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.956069946 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.956186056 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.956232071 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.956237078 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:15.956239939 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:15.956567049 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:15.956707954 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:15.956727982 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:15.957010031 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:15.959069967 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:15.959198952 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:15.959218979 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:15.967869043 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.967921019 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.967957973 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.967991114 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.968010902 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.968022108 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.968060970 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.968092918 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.968118906 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.968132019 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.968300104 CEST	49747	443	192.168.2.4	216.58.212.132
Jul 10, 2024 03:44:15.968349934 CEST	443	49747	216.58.212.132	192.168.2.4
Jul 10, 2024 03:44:15.968694925 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.968727112 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.968760014 CEST	49747	443	192.168.2.4	216.58.212.132
Jul 10, 2024 03:44:15.968765020 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.968806982 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.968807936 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.968826056 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.969039917 CEST	49747	443	192.168.2.4	216.58.212.132
Jul 10, 2024 03:44:15.969058037 CEST	443	49747	216.58.212.132	192.168.2.4
Jul 10, 2024 03:44:15.970266104 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.970319986 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.970355034 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.970392942 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.970400095 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.970412970 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.970441103 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.971018076 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.971055984 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.971061945 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.971116066 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.971151114 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.971157074 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.971165895 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.971534967 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:15.971983910 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:15.996519089 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.004504919 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.006891012 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.006891012 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.006921053 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.006949902 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.007509947 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.007559061 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.007570028 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.009749889 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.009762049 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.020749092 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.020757914 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.048988104 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.055716038 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.055805922 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.055818081 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.055849075 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.055900097 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.055934906 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.056094885 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.056144953 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.056160927 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.056413889 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.056497097 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.056504965 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.056644917 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.056698084 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.056704998 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.056853056 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.056906939 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.056912899 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.057028055 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.057113886 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.057135105 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.057405949 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.057447910 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.057455063 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.057586908 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.057638884 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.057646036 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.057765007 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.057846069 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.057853937 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.058382034 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.058382034 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.058468103 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.058474064 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.058561087 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.058605909 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.058612108 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.059137106 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.059196949 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.059202909 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.062561989 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.062602997 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.062657118 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.062666893 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.062705040 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.062911034 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.063298941 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.063354969 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.063359976 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.063361883 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.063376904 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.063384056 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.063400030 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.063399076 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.063412905 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.063458920 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.063461065 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.063466072 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.063468933 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.063553095 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.063560963 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.063621998 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.063621998 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.063628912 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.063746929 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.063800097 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.063806057 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.064264059 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.064296961 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.064332008 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.064340115 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.064347982 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.064363003 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.065093040 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.065121889 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.065134048 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.065141916 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.065191984 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.065237045 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.065243959 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.065279961 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.065920115 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.065994978 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.066592932 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.066600084 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.072330952 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.072493076 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.072514057 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.072536945 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.072572947 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.072623968 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.072678089 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.072931051 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.072993994 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.073025942 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.073028088 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.073039055 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.073065996 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.073738098 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.073780060 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.073796034 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.077275038 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.077323914 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.077338934 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.081089020 CEST	49745	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.081108093 CEST	443	49745	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.117193937 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.117194891 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.117197037 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.117199898 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.117206097 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.120537996 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.144464970 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.144536972 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.144545078 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.144788027 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.144839048 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.144862890 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.144931078 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.144995928 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.145040035 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.145045996 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.145078897 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.145081043 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.145108938 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.145154953 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.145203114 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.145350933 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.145400047 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.145415068 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.145476103 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.145488977 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.145535946 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.145541906 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.145541906 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.145554066 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.145670891 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.145747900 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.145776033 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.145782948 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.145839930 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.146157980 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.146177053 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.146284103 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.146286964 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.146286964 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.146303892 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.146327019 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.146342993 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.146492004 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.146505117 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.146564007 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.147181034 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.147346973 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.147392988 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.147393942 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.147409916 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.147562981 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.147612095 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.147624969 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.147805929 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.147855043 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.148076057 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.148125887 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.148283958 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.148343086 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.149065971 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.149132013 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.149152994 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.149204016 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.149321079 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.149383068 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.153913975 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.153934956 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.153953075 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.153969049 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.153979063 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.153990030 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.153995991 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.153999090 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.154015064 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.154031992 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.154037952 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.154059887 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.154073954 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.154086113 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.154917955 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.154995918 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.155041933 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.155050993 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.155179024 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.155224085 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.155260086 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.155267000 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.155306101 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.155317068 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.155997992 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.156049013 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.156054974 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.156317949 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.156366110 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.156378031 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.156416893 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.156471014 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.156517982 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.157186031 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.157238007 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.157247066 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.157252073 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.157274008 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.158051014 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.158117056 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.158123016 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.158162117 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.158195972 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.158246040 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.158430099 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.158444881 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.158468962 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.158483028 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.158484936 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.158495903 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.158505917 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.158514977 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.158524990 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.158529997 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.158543110 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.158554077 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.159044027 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.159122944 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.159169912 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.159219980 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.159360886 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.159420013 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.162374973 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.162553072 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.162604094 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.162623882 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.163042068 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.163089991 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.163104057 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.163139105 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.163161039 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.163187027 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.163203001 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.163253069 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.163446903 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.163549900 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.163568974 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.163603067 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.163619041 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.163666964 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.164113998 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.164154053 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.164205074 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.164220095 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.164325953 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.164346933 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.164390087 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.164405107 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.164454937 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.165098906 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.165147066 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.165169954 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.165191889 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.165230989 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.165252924 CEST	443	49744	104.17.25.14	192.168.2.4
Jul 10, 2024 03:44:16.165283918 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.198990107 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.198997974 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.212553978 CEST	49744	443	192.168.2.4	104.17.25.14
Jul 10, 2024 03:44:16.233935118 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.234009981 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.234186888 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.234241962 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.234482050 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.234496117 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.234528065 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.234529972 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.234560013 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.234575033 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.234584093 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.234595060 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.234622955 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.234625101 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.234642029 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.234663963 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.234685898 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.234723091 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.234951019 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.235006094 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.235018015 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.235059977 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.235708952 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.235754967 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.235771894 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.235785961 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.235804081 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.235830069 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.236021042 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.236063004 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.236206055 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.236258030 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.236324072 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.236366987 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.236407995 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.236445904 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.236957073 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.237014055 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.237024069 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.237042904 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.237076998 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.237251043 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.237298965 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.237332106 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.237376928 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.237740993 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.237786055 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.237797976 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.237803936 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.237829924 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.237839937 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.238281012 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.238337994 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.238464117 CEST	443	49740	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.238868952 CEST	49740	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.240623951 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.240660906 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.240689039 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.240704060 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.240758896 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.240818024 CEST	443	49746	151.101.130.137	192.168.2.4
Jul 10, 2024 03:44:16.240943909 CEST	49746	443	192.168.2.4	151.101.130.137
Jul 10, 2024 03:44:16.241483927 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.241498947 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.241523981 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.241560936 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.241561890 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.241576910 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.241595030 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.241614103 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.246604919 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.246629953 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.246689081 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.246697903 CEST	443	49743	18.245.31.89	192.168.2.4
Jul 10, 2024 03:44:16.246730089 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.246738911 CEST	49743	443	192.168.2.4	18.245.31.89
Jul 10, 2024 03:44:16.247503042 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.247572899 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.247584105 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.247634888 CEST	49741	443	192.168.2.4	188.114.97.3
Jul 10, 2024 03:44:16.247646093 CEST	443	49741	188.114.97.3	192.168.2.4
Jul 10, 2024 03:44:16.247661114 CEST	443	49741	188.114.97.3	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 10, 2024 03:44:13.713073969 CEST	192.168.2.4	1.1.1.1	0xb1fe	Standard query (0)	ennexhorpps.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:13.713232040 CEST	192.168.2.4	1.1.1.1	0xea57	Standard query (0)	ennexhorpps.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:14.924616098 CEST	192.168.2.4	1.1.1.1	0xf107	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.924616098 CEST	192.168.2.4	1.1.1.1	0xaddd	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jul 10, 2024 03:44:14.926342964 CEST	192.168.2.4	1.1.1.1	0x4f97	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.926620007 CEST	192.168.2.4	1.1.1.1	0xdda6	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Jul 10, 2024 03:44:14.927366018 CEST	192.168.2.4	1.1.1.1	0x521e	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.927637100 CEST	192.168.2.4	1.1.1.1	0x2f5f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:14.928222895 CEST	192.168.2.4	1.1.1.1	0xf282	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.928379059 CEST	192.168.2.4	1.1.1.1	0x6d00	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:15.959817886 CEST	192.168.2.4	1.1.1.1	0x7c0f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:15.959929943 CEST	192.168.2.4	1.1.1.1	0x7f78	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:16.578325033 CEST	192.168.2.4	1.1.1.1	0x8dc0	Standard query (0)	q-xx.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:16.578704119 CEST	192.168.2.4	1.1.1.1	0x705e	Standard query (0)	q-xx.bstatic.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:18.103821993 CEST	192.168.2.4	1.1.1.1	0xa918	Standard query (0)	ennexhorpps.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:18.104404926 CEST	192.168.2.4	1.1.1.1	0xf823	Standard query (0)	ennexhorpps.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:18.110899925 CEST	192.168.2.4	1.1.1.1	0xa42f	Standard query (0)	q-xx.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:18.111463070 CEST	192.168.2.4	1.1.1.1	0xf3e2	Standard query (0)	q-xx.bstatic.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:26.000164032 CEST	192.168.2.4	1.1.1.1	0xdb10	Standard query (0)	partner.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:26.000344992 CEST	192.168.2.4	1.1.1.1	0x219e	Standard query (0)	partner.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:27.077872038 CEST	192.168.2.4	1.1.1.1	0x2137	Standard query (0)	bstatic.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.078098059 CEST	192.168.2.4	1.1.1.1	0x7038	Standard query (0)	bstatic.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:27.079149008 CEST	192.168.2.4	1.1.1.1	0x3a00	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.079518080 CEST	192.168.2.4	1.1.1.1	0x712e	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Jul 10, 2024 03:44:27.084846973 CEST	192.168.2.4	1.1.1.1	0xc8c5	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.085366011 CEST	192.168.2.4	1.1.1.1	0x8ca4	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:27.091131926 CEST	192.168.2.4	1.1.1.1	0xeea7	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.091468096 CEST	192.168.2.4	1.1.1.1	0x77b0	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Jul 10, 2024 03:44:27.095767021 CEST	192.168.2.4	1.1.1.1	0x375b	Standard query (0)	rtp-static.marketo.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.096642971 CEST	192.168.2.4	1.1.1.1	0x1f50	Standard query (0)	rtp-static.marketo.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:27.105005980 CEST	192.168.2.4	1.1.1.1	0x35f6	Standard query (0)	lonrtp1.marketo.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.105366945 CEST	192.168.2.4	1.1.1.1	0x4f99	Standard query (0)	lonrtp1.marketo.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:27.113727093 CEST	192.168.2.4	1.1.1.1	0xd2bf	Standard query (0)	try.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.114044905 CEST	192.168.2.4	1.1.1.1	0xbe15	Standard query (0)	try.abtasty.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:27.229058981 CEST	192.168.2.4	1.1.1.1	0x4b1c	Standard query (0)	cdn.evgnet.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.229321003 CEST	192.168.2.4	1.1.1.1	0xe0d1	Standard query (0)	cdn.evgnet.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:29.066957951 CEST	192.168.2.4	1.1.1.1	0xf329	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.067117929 CEST	192.168.2.4	1.1.1.1	0x8add	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:29.128524065 CEST	192.168.2.4	1.1.1.1	0xd14e	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.128670931 CEST	192.168.2.4	1.1.1.1	0x3a54	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Jul 10, 2024 03:44:29.344212055 CEST	192.168.2.4	1.1.1.1	0x9cd8	Standard query (0)	partner.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.344856977 CEST	192.168.2.4	1.1.1.1	0xfb30	Standard query (0)	partner.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:29.794655085 CEST	192.168.2.4	1.1.1.1	0xf998	Standard query (0)	try.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.794655085 CEST	192.168.2.4	1.1.1.1	0xfeb9	Standard query (0)	try.abtasty.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:29.848687887 CEST	192.168.2.4	1.1.1.1	0x74a5	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.848882914 CEST	192.168.2.4	1.1.1.1	0x56dc	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:31.939104080 CEST	192.168.2.4	1.1.1.1	0x1e90	Standard query (0)	chat.kindlycdn.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:31.939452887 CEST	192.168.2.4	1.1.1.1	0xa8c5	Standard query (0)	chat.kindlycdn.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:31.940926075 CEST	192.168.2.4	1.1.1.1	0x70da	Standard query (0)	cdn.spinnaker-js.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:31.941103935 CEST	192.168.2.4	1.1.1.1	0x9370	Standard query (0)	cdn.spinnaker-js.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:33.732927084 CEST	192.168.2.4	1.1.1.1	0x1ff2	Standard query (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.733138084 CEST	192.168.2.4	1.1.1.1	0x7bcd	Standard query (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:33.747509003 CEST	192.168.2.4	1.1.1.1	0x7a16	Standard query (0)	dcinfos-cache.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.747894049 CEST	192.168.2.4	1.1.1.1	0x2b8f	Standard query (0)	dcinfos-cache.abtasty.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:33.861922026 CEST	192.168.2.4	1.1.1.1	0xf260	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.862063885 CEST	192.168.2.4	1.1.1.1	0x823b	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:33.983706951 CEST	192.168.2.4	1.1.1.1	0x4c4c	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.983839989 CEST	192.168.2.4	1.1.1.1	0x3599	Standard query (0)	www.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:34.392998934 CEST	192.168.2.4	1.1.1.1	0xafe4	Standard query (0)	dcinfos-cache.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:34.393124104 CEST	192.168.2.4	1.1.1.1	0x1183	Standard query (0)	dcinfos-cache.abtasty.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:35.438395977 CEST	192.168.2.4	1.1.1.1	0x950d	Standard query (0)	shelves.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:35.438616037 CEST	192.168.2.4	1.1.1.1	0xb958	Standard query (0)	shelves.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:35.442445993 CEST	192.168.2.4	1.1.1.1	0x8b3b	Standard query (0)	cf2.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:35.442677975 CEST	192.168.2.4	1.1.1.1	0x91fe	Standard query (0)	cf2.bstatic.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:36.904823065 CEST	192.168.2.4	1.1.1.1	0x43d4	Standard query (0)	cdn.mouseflow.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:36.905041933 CEST	192.168.2.4	1.1.1.1	0x6bd	Standard query (0)	cdn.mouseflow.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:37.122992039 CEST	192.168.2.4	1.1.1.1	0xe251	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.123209000 CEST	192.168.2.4	1.1.1.1	0xd14a	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:37.123930931 CEST	192.168.2.4	1.1.1.1	0xe606	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.123930931 CEST	192.168.2.4	1.1.1.1	0x8bcf	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jul 10, 2024 03:44:37.897891998 CEST	192.168.2.4	1.1.1.1	0xcc01	Standard query (0)	cf2.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.898164034 CEST	192.168.2.4	1.1.1.1	0x92f1	Standard query (0)	cf2.bstatic.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:37.940454006 CEST	192.168.2.4	1.1.1.1	0x7486	Standard query (0)	t-cf.bstatic.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.940783978 CEST	192.168.2.4	1.1.1.1	0xd3f7	Standard query (0)	t-cf.bstatic.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:38.056432009 CEST	192.168.2.4	1.1.1.1	0x6a67	Standard query (0)	o2.mouseflow.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.056776047 CEST	192.168.2.4	1.1.1.1	0x4083	Standard query (0)	o2.mouseflow.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:38.078346014 CEST	192.168.2.4	1.1.1.1	0x1867	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.078613043 CEST	192.168.2.4	1.1.1.1	0x2bac	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:38.244105101 CEST	192.168.2.4	1.1.1.1	0x4819	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.244533062 CEST	192.168.2.4	1.1.1.1	0x8bec	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:38.245024920 CEST	192.168.2.4	1.1.1.1	0xf836	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.245279074 CEST	192.168.2.4	1.1.1.1	0xff9f	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 10, 2024 03:44:38.255569935 CEST	192.168.2.4	1.1.1.1	0x3de9	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.255675077 CEST	192.168.2.4	1.1.1.1	0x9835	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 10, 2024 03:44:38.319490910 CEST	192.168.2.4	1.1.1.1	0x174c	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.319679022 CEST	192.168.2.4	1.1.1.1	0x6f4d	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:38.409423113 CEST	192.168.2.4	1.1.1.1	0x1665	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.409610033 CEST	192.168.2.4	1.1.1.1	0x68cb	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:38.430531979 CEST	192.168.2.4	1.1.1.1	0x8a3	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.430665016 CEST	192.168.2.4	1.1.1.1	0x6a03	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:38.928368092 CEST	192.168.2.4	1.1.1.1	0xdd6f	Standard query (0)	account.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.928632975 CEST	192.168.2.4	1.1.1.1	0x3b	Standard query (0)	account.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:39.002305984 CEST	192.168.2.4	1.1.1.1	0x7808	Standard query (0)	ariane.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:39.003037930 CEST	192.168.2.4	1.1.1.1	0xffa6	Standard query (0)	ariane.abtasty.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:39.422449112 CEST	192.168.2.4	1.1.1.1	0xdd71	Standard query (0)	o2.mouseflow.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:39.422571898 CEST	192.168.2.4	1.1.1.1	0x7147	Standard query (0)	o2.mouseflow.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:39.423824072 CEST	192.168.2.4	1.1.1.1	0x6581	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:39.423940897 CEST	192.168.2.4	1.1.1.1	0x3524	Standard query (0)	www.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:39.425748110 CEST	192.168.2.4	1.1.1.1	0x9297	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:39.425860882 CEST	192.168.2.4	1.1.1.1	0xee9a	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:40.031100035 CEST	192.168.2.4	1.1.1.1	0x5ffa	Standard query (0)	ariane.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.031408072 CEST	192.168.2.4	1.1.1.1	0x1fa3	Standard query (0)	ariane.abtasty.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:40.344769955 CEST	192.168.2.4	1.1.1.1	0xc5d5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.344769955 CEST	192.168.2.4	1.1.1.1	0x57a8	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 10, 2024 03:44:40.969105005 CEST	192.168.2.4	1.1.1.1	0x2c3f	Standard query (0)	accommodations.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.969439983 CEST	192.168.2.4	1.1.1.1	0xf454	Standard query (0)	accommodations.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:41.362855911 CEST	192.168.2.4	1.1.1.1	0x107c	Standard query (0)	account.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:41.362855911 CEST	192.168.2.4	1.1.1.1	0x38b0	Standard query (0)	account.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:41.747381926 CEST	192.168.2.4	1.1.1.1	0xf36b	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:41.747558117 CEST	192.168.2.4	1.1.1.1	0x4ea0	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:41.819633007 CEST	192.168.2.4	1.1.1.1	0xe7d9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:41.819854975 CEST	192.168.2.4	1.1.1.1	0xad94	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:42.158601046 CEST	192.168.2.4	1.1.1.1	0x63cf	Standard query (0)	d8c14d4960ca.edge.sdk.awswaf.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:42.158921003 CEST	192.168.2.4	1.1.1.1	0xdd3e	Standard query (0)	d8c14d4960ca.edge.sdk.awswaf.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:42.890431881 CEST	192.168.2.4	1.1.1.1	0x2020	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:42.890667915 CEST	192.168.2.4	1.1.1.1	0x2e99	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:43.072206020 CEST	192.168.2.4	1.1.1.1	0xdeba	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:43.072376013 CEST	192.168.2.4	1.1.1.1	0x57c4	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:43.389004946 CEST	192.168.2.4	1.1.1.1	0x36f4	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:43.389434099 CEST	192.168.2.4	1.1.1.1	0x579d	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:44.026935101 CEST	192.168.2.4	1.1.1.1	0x9d58	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:44.027110100 CEST	192.168.2.4	1.1.1.1	0x5d89	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:44.712244987 CEST	192.168.2.4	1.1.1.1	0x3137	Standard query (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:44.712511063 CEST	192.168.2.4	1.1.1.1	0x3484	Standard query (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:45.351175070 CEST	192.168.2.4	1.1.1.1	0x1825	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:45.351774931 CEST	192.168.2.4	1.1.1.1	0xe749	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:47.635210991 CEST	192.168.2.4	1.1.1.1	0x9cc7	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:47.635443926 CEST	192.168.2.4	1.1.1.1	0xf182	Standard query (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:47.639370918 CEST	192.168.2.4	1.1.1.1	0x6a36	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:47.639878035 CEST	192.168.2.4	1.1.1.1	0xa5e5	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:52.661720991 CEST	192.168.2.4	1.1.1.1	0xe985	Standard query (0)	partnerfeedback.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:52.662033081 CEST	192.168.2.4	1.1.1.1	0x42a5	Standard query (0)	partnerfeedback.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:54.304195881 CEST	192.168.2.4	1.1.1.1	0xb1f4	Standard query (0)	eu.qualtrics.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:54.304197073 CEST	192.168.2.4	1.1.1.1	0x6a1a	Standard query (0)	eu.qualtrics.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:56.671210051 CEST	192.168.2.4	1.1.1.1	0xdf9c	Standard query (0)	261-nrz-371.mktoresp.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:56.671442986 CEST	192.168.2.4	1.1.1.1	0x9029	Standard query (0)	261-nrz-371.mktoresp.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:58.322551012 CEST	192.168.2.4	1.1.1.1	0xb84e	Standard query (0)	chat.kindlycdn.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:58.322676897 CEST	192.168.2.4	1.1.1.1	0x207b	Standard query (0)	chat.kindlycdn.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:58.612394094 CEST	192.168.2.4	1.1.1.1	0xc915	Standard query (0)	partnerfeedback.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:58.612524986 CEST	192.168.2.4	1.1.1.1	0xe224	Standard query (0)	partnerfeedback.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:44:58.988332033 CEST	192.168.2.4	1.1.1.1	0x15a3	Standard query (0)	apil1.spinnaker-js.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:58.988742113 CEST	192.168.2.4	1.1.1.1	0x8418	Standard query (0)	apil1.spinnaker-js.com	65	IN (0x0001)	false
Jul 10, 2024 03:45:03.282054901 CEST	192.168.2.4	1.1.1.1	0x6837	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:03.282222986 CEST	192.168.2.4	1.1.1.1	0x45b0	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jul 10, 2024 03:45:29.286082983 CEST	192.168.2.4	1.1.1.1	0xf60	Standard query (0)	bstatic.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.286398888 CEST	192.168.2.4	1.1.1.1	0xd1f7	Standard query (0)	bstatic.com	65	IN (0x0001)	false
Jul 10, 2024 03:45:29.290210009 CEST	192.168.2.4	1.1.1.1	0xa80d	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.290508032 CEST	192.168.2.4	1.1.1.1	0xed6f	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Jul 10, 2024 03:45:29.296936035 CEST	192.168.2.4	1.1.1.1	0x725b	Standard query (0)	rtp-static.marketo.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.297369003 CEST	192.168.2.4	1.1.1.1	0x5774	Standard query (0)	rtp-static.marketo.com	65	IN (0x0001)	false
Jul 10, 2024 03:45:29.301510096 CEST	192.168.2.4	1.1.1.1	0x40a9	Standard query (0)	try.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.301868916 CEST	192.168.2.4	1.1.1.1	0xfc7d	Standard query (0)	try.abtasty.com	65	IN (0x0001)	false
Jul 10, 2024 03:45:29.311337948 CEST	192.168.2.4	1.1.1.1	0xd4c4	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.311486006 CEST	192.168.2.4	1.1.1.1	0x8334	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Jul 10, 2024 03:45:29.675010920 CEST	192.168.2.4	1.1.1.1	0x18df	Standard query (0)	partner.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.675524950 CEST	192.168.2.4	1.1.1.1	0x1dfd	Standard query (0)	partner.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:45:29.857405901 CEST	192.168.2.4	1.1.1.1	0x67fb	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.857901096 CEST	192.168.2.4	1.1.1.1	0x85a9	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Jul 10, 2024 03:45:30.052220106 CEST	192.168.2.4	1.1.1.1	0x25c0	Standard query (0)	sage.kindly.ai	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:30.052535057 CEST	192.168.2.4	1.1.1.1	0xd578	Standard query (0)	sage.kindly.ai	65	IN (0x0001)	false
Jul 10, 2024 03:45:32.655733109 CEST	192.168.2.4	1.1.1.1	0x41da	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.655941963 CEST	192.168.2.4	1.1.1.1	0xbf75	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Jul 10, 2024 03:45:32.709522009 CEST	192.168.2.4	1.1.1.1	0xd184	Standard query (0)	partner.booking.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.709947109 CEST	192.168.2.4	1.1.1.1	0xf090	Standard query (0)	partner.booking.com	65	IN (0x0001)	false
Jul 10, 2024 03:45:32.712577105 CEST	192.168.2.4	1.1.1.1	0x27e	Standard query (0)	try.abtasty.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.712721109 CEST	192.168.2.4	1.1.1.1	0x80ad	Standard query (0)	try.abtasty.com	65	IN (0x0001)	false
Jul 10, 2024 03:45:36.323374987 CEST	192.168.2.4	1.1.1.1	0xe348	Standard query (0)	sage.kindly.ai	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:36.323522091 CEST	192.168.2.4	1.1.1.1	0xdce8	Standard query (0)	sage.kindly.ai	65	IN (0x0001)	false
Jul 10, 2024 03:45:38.971533060 CEST	192.168.2.4	1.1.1.1	0x40db	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:38.971788883 CEST	192.168.2.4	1.1.1.1	0xd88f	Standard query (0)	bookingdotcomb2b.germany-2.evergage.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 10, 2024 03:44:13.750144005 CEST	1.1.1.1	192.168.2.4	0xb1fe	No error (0)	ennexhorpps.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:13.750144005 CEST	1.1.1.1	192.168.2.4	0xb1fe	No error (0)	ennexhorpps.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:13.751769066 CEST	1.1.1.1	192.168.2.4	0xea57	No error (0)	ennexhorpps.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:14.931633949 CEST	1.1.1.1	192.168.2.4	0xf107	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:14.932563066 CEST	1.1.1.1	192.168.2.4	0xaddd	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:14.934933901 CEST	1.1.1.1	192.168.2.4	0x4f97	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:14.934933901 CEST	1.1.1.1	192.168.2.4	0x4f97	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.89	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.934933901 CEST	1.1.1.1	192.168.2.4	0x4f97	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.33	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.934933901 CEST	1.1.1.1	192.168.2.4	0x4f97	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.78	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.934933901 CEST	1.1.1.1	192.168.2.4	0x4f97	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.5	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.935448885 CEST	1.1.1.1	192.168.2.4	0xdda6	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:14.935781956 CEST	1.1.1.1	192.168.2.4	0x521e	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.935781956 CEST	1.1.1.1	192.168.2.4	0x521e	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.936345100 CEST	1.1.1.1	192.168.2.4	0x2f5f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:14.936806917 CEST	1.1.1.1	192.168.2.4	0xf282	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.936806917 CEST	1.1.1.1	192.168.2.4	0xf282	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.936806917 CEST	1.1.1.1	192.168.2.4	0xf282	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:14.936806917 CEST	1.1.1.1	192.168.2.4	0xf282	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:15.966624022 CEST	1.1.1.1	192.168.2.4	0x7f78	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:15.966744900 CEST	1.1.1.1	192.168.2.4	0x7c0f	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:16.587439060 CEST	1.1.1.1	192.168.2.4	0x8dc0	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:16.587439060 CEST	1.1.1.1	192.168.2.4	0x8dc0	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:16.587439060 CEST	1.1.1.1	192.168.2.4	0x8dc0	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:16.587439060 CEST	1.1.1.1	192.168.2.4	0x8dc0	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.129	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:16.587439060 CEST	1.1.1.1	192.168.2.4	0x8dc0	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.53	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:16.587439060 CEST	1.1.1.1	192.168.2.4	0x8dc0	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.49	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:16.587439060 CEST	1.1.1.1	192.168.2.4	0x8dc0	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.18	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:16.588505983 CEST	1.1.1.1	192.168.2.4	0x705e	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:16.588505983 CEST	1.1.1.1	192.168.2.4	0x705e	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:16.588505983 CEST	1.1.1.1	192.168.2.4	0x705e	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:18.118292093 CEST	1.1.1.1	192.168.2.4	0xa42f	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:18.118292093 CEST	1.1.1.1	192.168.2.4	0xa42f	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:18.118292093 CEST	1.1.1.1	192.168.2.4	0xa42f	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:18.118292093 CEST	1.1.1.1	192.168.2.4	0xa42f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.129	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:18.118292093 CEST	1.1.1.1	192.168.2.4	0xa42f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.53	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:18.118292093 CEST	1.1.1.1	192.168.2.4	0xa42f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.18	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:18.118292093 CEST	1.1.1.1	192.168.2.4	0xa42f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.49	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:18.119019032 CEST	1.1.1.1	192.168.2.4	0xf823	No error (0)	ennexhorpps.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:18.119034052 CEST	1.1.1.1	192.168.2.4	0xf3e2	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:18.119034052 CEST	1.1.1.1	192.168.2.4	0xf3e2	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:18.119034052 CEST	1.1.1.1	192.168.2.4	0xf3e2	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:18.142708063 CEST	1.1.1.1	192.168.2.4	0xa918	No error (0)	ennexhorpps.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:18.142708063 CEST	1.1.1.1	192.168.2.4	0xa918	No error (0)	ennexhorpps.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:25.142477989 CEST	1.1.1.1	192.168.2.4	0x6bad	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:25.142477989 CEST	1.1.1.1	192.168.2.4	0x6bad	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:26.030838966 CEST	1.1.1.1	192.168.2.4	0xdb10	No error (0)	partner.booking.com		18.66.147.77	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:26.030838966 CEST	1.1.1.1	192.168.2.4	0xdb10	No error (0)	partner.booking.com		18.66.147.49	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:26.030838966 CEST	1.1.1.1	192.168.2.4	0xdb10	No error (0)	partner.booking.com		18.66.147.79	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:26.030838966 CEST	1.1.1.1	192.168.2.4	0xdb10	No error (0)	partner.booking.com		18.66.147.32	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:26.702326059 CEST	1.1.1.1	192.168.2.4	0x814d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:26.702326059 CEST	1.1.1.1	192.168.2.4	0x814d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.085926056 CEST	1.1.1.1	192.168.2.4	0x3a00	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.085926056 CEST	1.1.1.1	192.168.2.4	0x3a00	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.086249113 CEST	1.1.1.1	192.168.2.4	0x712e	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Jul 10, 2024 03:44:27.092053890 CEST	1.1.1.1	192.168.2.4	0xc8c5	No error (0)	www.googleoptimize.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.099103928 CEST	1.1.1.1	192.168.2.4	0x77b0	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:27.099320889 CEST	1.1.1.1	192.168.2.4	0xeea7	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:27.109416962 CEST	1.1.1.1	192.168.2.4	0x2137	No error (0)	bstatic.com		18.245.31.53	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.109416962 CEST	1.1.1.1	192.168.2.4	0x2137	No error (0)	bstatic.com		18.245.31.129	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.109416962 CEST	1.1.1.1	192.168.2.4	0x2137	No error (0)	bstatic.com		18.245.31.18	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.109416962 CEST	1.1.1.1	192.168.2.4	0x2137	No error (0)	bstatic.com		18.245.31.49	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.120948076 CEST	1.1.1.1	192.168.2.4	0xd2bf	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:27.120948076 CEST	1.1.1.1	192.168.2.4	0xd2bf	No error (0)	try-cloudfront.abtasty.com		18.172.112.27	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.120948076 CEST	1.1.1.1	192.168.2.4	0xd2bf	No error (0)	try-cloudfront.abtasty.com		18.172.112.62	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.120948076 CEST	1.1.1.1	192.168.2.4	0xd2bf	No error (0)	try-cloudfront.abtasty.com		18.172.112.72	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.120948076 CEST	1.1.1.1	192.168.2.4	0xd2bf	No error (0)	try-cloudfront.abtasty.com		18.172.112.60	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.121393919 CEST	1.1.1.1	192.168.2.4	0xbe15	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:27.191801071 CEST	1.1.1.1	192.168.2.4	0x1f50	No error (0)	rtp-static.marketo.com	wildcard.marketo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:27.196115971 CEST	1.1.1.1	192.168.2.4	0x375b	No error (0)	rtp-static.marketo.com	wildcard.marketo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:27.197549105 CEST	1.1.1.1	192.168.2.4	0x35f6	No error (0)	lonrtp1.marketo.com		162.13.202.201	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.236378908 CEST	1.1.1.1	192.168.2.4	0x4b1c	No error (0)	cdn.evgnet.com		151.101.128.114	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.236378908 CEST	1.1.1.1	192.168.2.4	0x4b1c	No error (0)	cdn.evgnet.com		151.101.192.114	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.236378908 CEST	1.1.1.1	192.168.2.4	0x4b1c	No error (0)	cdn.evgnet.com		151.101.64.114	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:27.236378908 CEST	1.1.1.1	192.168.2.4	0x4b1c	No error (0)	cdn.evgnet.com		151.101.0.114	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.074079990 CEST	1.1.1.1	192.168.2.4	0xf329	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.074079990 CEST	1.1.1.1	192.168.2.4	0xf329	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.074095964 CEST	1.1.1.1	192.168.2.4	0x8add	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:29.135931015 CEST	1.1.1.1	192.168.2.4	0xd14e	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.135931015 CEST	1.1.1.1	192.168.2.4	0xd14e	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.135950089 CEST	1.1.1.1	192.168.2.4	0x3a54	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Jul 10, 2024 03:44:29.376143932 CEST	1.1.1.1	192.168.2.4	0x9cd8	No error (0)	partner.booking.com		18.239.50.78	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.376143932 CEST	1.1.1.1	192.168.2.4	0x9cd8	No error (0)	partner.booking.com		18.239.50.18	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.376143932 CEST	1.1.1.1	192.168.2.4	0x9cd8	No error (0)	partner.booking.com		18.239.50.60	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.376143932 CEST	1.1.1.1	192.168.2.4	0x9cd8	No error (0)	partner.booking.com		18.239.50.127	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.801736116 CEST	1.1.1.1	192.168.2.4	0xf998	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:29.801736116 CEST	1.1.1.1	192.168.2.4	0xf998	No error (0)	try-cloudfront.abtasty.com		18.172.112.27	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.801736116 CEST	1.1.1.1	192.168.2.4	0xf998	No error (0)	try-cloudfront.abtasty.com		18.172.112.72	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.801736116 CEST	1.1.1.1	192.168.2.4	0xf998	No error (0)	try-cloudfront.abtasty.com		18.172.112.62	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.801736116 CEST	1.1.1.1	192.168.2.4	0xf998	No error (0)	try-cloudfront.abtasty.com		18.172.112.60	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.802278996 CEST	1.1.1.1	192.168.2.4	0xfeb9	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:29.855742931 CEST	1.1.1.1	192.168.2.4	0x74a5	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.855742931 CEST	1.1.1.1	192.168.2.4	0x74a5	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:29.856575012 CEST	1.1.1.1	192.168.2.4	0x56dc	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:31.948934078 CEST	1.1.1.1	192.168.2.4	0x1e90	No error (0)	chat.kindlycdn.com		104.26.6.229	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:31.948934078 CEST	1.1.1.1	192.168.2.4	0x1e90	No error (0)	chat.kindlycdn.com		104.26.7.229	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:31.948934078 CEST	1.1.1.1	192.168.2.4	0x1e90	No error (0)	chat.kindlycdn.com		172.67.71.156	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:31.951492071 CEST	1.1.1.1	192.168.2.4	0xa8c5	No error (0)	chat.kindlycdn.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:31.975466013 CEST	1.1.1.1	192.168.2.4	0x9370	No error (0)	cdn.spinnaker-js.com	d2df291ti5v5sq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:31.977343082 CEST	1.1.1.1	192.168.2.4	0x70da	No error (0)	cdn.spinnaker-js.com	d2df291ti5v5sq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:31.977343082 CEST	1.1.1.1	192.168.2.4	0x70da	No error (0)	d2df291ti5v5sq.cloudfront.net		18.66.112.126	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:31.977343082 CEST	1.1.1.1	192.168.2.4	0x70da	No error (0)	d2df291ti5v5sq.cloudfront.net		18.66.112.20	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:31.977343082 CEST	1.1.1.1	192.168.2.4	0x70da	No error (0)	d2df291ti5v5sq.cloudfront.net		18.66.112.15	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:31.977343082 CEST	1.1.1.1	192.168.2.4	0x70da	No error (0)	d2df291ti5v5sq.cloudfront.net		18.66.112.88	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.744008064 CEST	1.1.1.1	192.168.2.4	0x1ff2	No error (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:33.744008064 CEST	1.1.1.1	192.168.2.4	0x1ff2	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:33.745086908 CEST	1.1.1.1	192.168.2.4	0x7bcd	No error (0)	zn09tjwjvephllacp-partnersatbooking.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:33.745086908 CEST	1.1.1.1	192.168.2.4	0x7bcd	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:33.754293919 CEST	1.1.1.1	192.168.2.4	0x7a16	No error (0)	dcinfos-cache.abtasty.com		34.36.178.232	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.872586012 CEST	1.1.1.1	192.168.2.4	0xf260	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.157.249.141	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.872586012 CEST	1.1.1.1	192.168.2.4	0xf260	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.185.181.69	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.872586012 CEST	1.1.1.1	192.168.2.4	0xf260	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.194.251.223	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.991039038 CEST	1.1.1.1	192.168.2.4	0x4c4c	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:33.991039038 CEST	1.1.1.1	192.168.2.4	0x4c4c	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.76	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.991039038 CEST	1.1.1.1	192.168.2.4	0x4c4c	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.68	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.991039038 CEST	1.1.1.1	192.168.2.4	0x4c4c	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.2	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.991039038 CEST	1.1.1.1	192.168.2.4	0x4c4c	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.7	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:33.991076946 CEST	1.1.1.1	192.168.2.4	0x3599	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:34.400146008 CEST	1.1.1.1	192.168.2.4	0xafe4	No error (0)	dcinfos-cache.abtasty.com		34.36.178.232	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:35.445650101 CEST	1.1.1.1	192.168.2.4	0xb958	No error (0)	shelves.booking.com	bksweb-external-w.booking.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:35.445650101 CEST	1.1.1.1	192.168.2.4	0xb958	No error (0)	bksweb-external-w.booking.com	de2trjlt8e8rj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:35.450484037 CEST	1.1.1.1	192.168.2.4	0x91fe	No error (0)	cf2.bstatic.com	depzuycudnrzx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:35.452832937 CEST	1.1.1.1	192.168.2.4	0x8b3b	No error (0)	cf2.bstatic.com	depzuycudnrzx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:35.452832937 CEST	1.1.1.1	192.168.2.4	0x8b3b	No error (0)	depzuycudnrzx.cloudfront.net		13.35.58.25	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:35.452832937 CEST	1.1.1.1	192.168.2.4	0x8b3b	No error (0)	depzuycudnrzx.cloudfront.net		13.35.58.6	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:35.452832937 CEST	1.1.1.1	192.168.2.4	0x8b3b	No error (0)	depzuycudnrzx.cloudfront.net		13.35.58.42	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:35.452832937 CEST	1.1.1.1	192.168.2.4	0x8b3b	No error (0)	depzuycudnrzx.cloudfront.net		13.35.58.3	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:35.460685968 CEST	1.1.1.1	192.168.2.4	0x950d	No error (0)	shelves.booking.com	bksweb-external-w.booking.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:35.460685968 CEST	1.1.1.1	192.168.2.4	0x950d	No error (0)	bksweb-external-w.booking.com	de2trjlt8e8rj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:35.460685968 CEST	1.1.1.1	192.168.2.4	0x950d	No error (0)	de2trjlt8e8rj.cloudfront.net		143.204.215.77	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:35.460685968 CEST	1.1.1.1	192.168.2.4	0x950d	No error (0)	de2trjlt8e8rj.cloudfront.net		143.204.215.58	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:35.460685968 CEST	1.1.1.1	192.168.2.4	0x950d	No error (0)	de2trjlt8e8rj.cloudfront.net		143.204.215.4	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:35.460685968 CEST	1.1.1.1	192.168.2.4	0x950d	No error (0)	de2trjlt8e8rj.cloudfront.net		143.204.215.104	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:36.912168980 CEST	1.1.1.1	192.168.2.4	0x43d4	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:36.912592888 CEST	1.1.1.1	192.168.2.4	0x6bd	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:37.368383884 CEST	1.1.1.1	192.168.2.4	0xe606	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:37.368383884 CEST	1.1.1.1	192.168.2.4	0xe606	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.368640900 CEST	1.1.1.1	192.168.2.4	0x8bcf	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:37.368889093 CEST	1.1.1.1	192.168.2.4	0xd14a	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:37.369646072 CEST	1.1.1.1	192.168.2.4	0xe251	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:37.907457113 CEST	1.1.1.1	192.168.2.4	0xcc01	No error (0)	cf2.bstatic.com	depzuycudnrzx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:37.907457113 CEST	1.1.1.1	192.168.2.4	0xcc01	No error (0)	depzuycudnrzx.cloudfront.net		13.35.58.6	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.907457113 CEST	1.1.1.1	192.168.2.4	0xcc01	No error (0)	depzuycudnrzx.cloudfront.net		13.35.58.3	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.907457113 CEST	1.1.1.1	192.168.2.4	0xcc01	No error (0)	depzuycudnrzx.cloudfront.net		13.35.58.42	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.907457113 CEST	1.1.1.1	192.168.2.4	0xcc01	No error (0)	depzuycudnrzx.cloudfront.net		13.35.58.25	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.907567024 CEST	1.1.1.1	192.168.2.4	0x92f1	No error (0)	cf2.bstatic.com	depzuycudnrzx.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:37.950115919 CEST	1.1.1.1	192.168.2.4	0x7486	No error (0)	t-cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:37.950115919 CEST	1.1.1.1	192.168.2.4	0x7486	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.49	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.950115919 CEST	1.1.1.1	192.168.2.4	0x7486	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.53	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.950115919 CEST	1.1.1.1	192.168.2.4	0x7486	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.129	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.950115919 CEST	1.1.1.1	192.168.2.4	0x7486	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.18	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:37.950486898 CEST	1.1.1.1	192.168.2.4	0xd3f7	No error (0)	t-cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:38.063595057 CEST	1.1.1.1	192.168.2.4	0x6a67	No error (0)	o2.mouseflow.com		185.17.186.161	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.063595057 CEST	1.1.1.1	192.168.2.4	0x6a67	No error (0)	o2.mouseflow.com		185.17.186.162	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.086185932 CEST	1.1.1.1	192.168.2.4	0x1867	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.086185932 CEST	1.1.1.1	192.168.2.4	0x1867	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.086185932 CEST	1.1.1.1	192.168.2.4	0x1867	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.086930037 CEST	1.1.1.1	192.168.2.4	0x2bac	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:38.251060009 CEST	1.1.1.1	192.168.2.4	0x4819	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:38.251060009 CEST	1.1.1.1	192.168.2.4	0x4819	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.251060009 CEST	1.1.1.1	192.168.2.4	0x4819	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.251060009 CEST	1.1.1.1	192.168.2.4	0x4819	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.251060009 CEST	1.1.1.1	192.168.2.4	0x4819	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.251511097 CEST	1.1.1.1	192.168.2.4	0xf836	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.251511097 CEST	1.1.1.1	192.168.2.4	0xf836	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.251511097 CEST	1.1.1.1	192.168.2.4	0xf836	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.251511097 CEST	1.1.1.1	192.168.2.4	0xf836	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.251648903 CEST	1.1.1.1	192.168.2.4	0x8bec	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:38.262357950 CEST	1.1.1.1	192.168.2.4	0x3de9	No error (0)	td.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.329016924 CEST	1.1.1.1	192.168.2.4	0x174c	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.185.181.69	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.329016924 CEST	1.1.1.1	192.168.2.4	0x174c	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.194.251.223	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.329016924 CEST	1.1.1.1	192.168.2.4	0x174c	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.157.249.141	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.416043997 CEST	1.1.1.1	192.168.2.4	0x1665	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.416043997 CEST	1.1.1.1	192.168.2.4	0x1665	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.416043997 CEST	1.1.1.1	192.168.2.4	0x1665	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.416274071 CEST	1.1.1.1	192.168.2.4	0x68cb	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:38.437201977 CEST	1.1.1.1	192.168.2.4	0x8a3	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:38.437201977 CEST	1.1.1.1	192.168.2.4	0x8a3	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:38.437257051 CEST	1.1.1.1	192.168.2.4	0x6a03	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:38.437257051 CEST	1.1.1.1	192.168.2.4	0x6a03	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:38.936011076 CEST	1.1.1.1	192.168.2.4	0xdd6f	No error (0)	account.booking.com	du1b3vb35hc0o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:38.936011076 CEST	1.1.1.1	192.168.2.4	0xdd6f	No error (0)	du1b3vb35hc0o.cloudfront.net		99.86.4.128	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.936011076 CEST	1.1.1.1	192.168.2.4	0xdd6f	No error (0)	du1b3vb35hc0o.cloudfront.net		99.86.4.32	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.936011076 CEST	1.1.1.1	192.168.2.4	0xdd6f	No error (0)	du1b3vb35hc0o.cloudfront.net		99.86.4.72	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.936011076 CEST	1.1.1.1	192.168.2.4	0xdd6f	No error (0)	du1b3vb35hc0o.cloudfront.net		99.86.4.19	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:38.936496973 CEST	1.1.1.1	192.168.2.4	0x3b	No error (0)	account.booking.com	du1b3vb35hc0o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:39.009562969 CEST	1.1.1.1	192.168.2.4	0x7808	No error (0)	ariane.abtasty.com		34.36.178.232	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:39.431087971 CEST	1.1.1.1	192.168.2.4	0xdd71	No error (0)	o2.mouseflow.com		185.17.186.161	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:39.431087971 CEST	1.1.1.1	192.168.2.4	0xdd71	No error (0)	o2.mouseflow.com		185.17.186.162	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:39.433429956 CEST	1.1.1.1	192.168.2.4	0x9297	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:39.433429956 CEST	1.1.1.1	192.168.2.4	0x9297	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:39.433490038 CEST	1.1.1.1	192.168.2.4	0x3524	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:39.433906078 CEST	1.1.1.1	192.168.2.4	0xee9a	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:39.433906078 CEST	1.1.1.1	192.168.2.4	0xee9a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:39.434588909 CEST	1.1.1.1	192.168.2.4	0x6581	No error (0)	www.booking.com	d1of1hbywxxm65.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:39.434588909 CEST	1.1.1.1	192.168.2.4	0x6581	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.2	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:39.434588909 CEST	1.1.1.1	192.168.2.4	0x6581	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.7	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:39.434588909 CEST	1.1.1.1	192.168.2.4	0x6581	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.68	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:39.434588909 CEST	1.1.1.1	192.168.2.4	0x6581	No error (0)	d1of1hbywxxm65.cloudfront.net		18.245.60.76	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.038464069 CEST	1.1.1.1	192.168.2.4	0x5ffa	No error (0)	ariane.abtasty.com		34.36.178.232	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.352576017 CEST	1.1.1.1	192.168.2.4	0xc5d5	No error (0)	stats.g.doubleclick.net		108.177.15.157	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.352576017 CEST	1.1.1.1	192.168.2.4	0xc5d5	No error (0)	stats.g.doubleclick.net		108.177.15.154	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.352576017 CEST	1.1.1.1	192.168.2.4	0xc5d5	No error (0)	stats.g.doubleclick.net		108.177.15.155	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.352576017 CEST	1.1.1.1	192.168.2.4	0xc5d5	No error (0)	stats.g.doubleclick.net		108.177.15.156	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.978739023 CEST	1.1.1.1	192.168.2.4	0x2c3f	No error (0)	accommodations.booking.com	d2uxzmvxe6bz7q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:40.978739023 CEST	1.1.1.1	192.168.2.4	0x2c3f	No error (0)	d2uxzmvxe6bz7q.cloudfront.net		13.33.187.53	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.978739023 CEST	1.1.1.1	192.168.2.4	0x2c3f	No error (0)	d2uxzmvxe6bz7q.cloudfront.net		13.33.187.31	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.978739023 CEST	1.1.1.1	192.168.2.4	0x2c3f	No error (0)	d2uxzmvxe6bz7q.cloudfront.net		13.33.187.125	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.978739023 CEST	1.1.1.1	192.168.2.4	0x2c3f	No error (0)	d2uxzmvxe6bz7q.cloudfront.net		13.33.187.52	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:40.997081041 CEST	1.1.1.1	192.168.2.4	0xf454	No error (0)	accommodations.booking.com	d2uxzmvxe6bz7q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:41.369697094 CEST	1.1.1.1	192.168.2.4	0x107c	No error (0)	account.booking.com	du1b3vb35hc0o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:41.369697094 CEST	1.1.1.1	192.168.2.4	0x107c	No error (0)	du1b3vb35hc0o.cloudfront.net		99.86.4.19	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:41.369697094 CEST	1.1.1.1	192.168.2.4	0x107c	No error (0)	du1b3vb35hc0o.cloudfront.net		99.86.4.128	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:41.369697094 CEST	1.1.1.1	192.168.2.4	0x107c	No error (0)	du1b3vb35hc0o.cloudfront.net		99.86.4.32	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:41.369697094 CEST	1.1.1.1	192.168.2.4	0x107c	No error (0)	du1b3vb35hc0o.cloudfront.net		99.86.4.72	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:41.373120070 CEST	1.1.1.1	192.168.2.4	0x38b0	No error (0)	account.booking.com	du1b3vb35hc0o.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:41.754189014 CEST	1.1.1.1	192.168.2.4	0x4ea0	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:41.754189014 CEST	1.1.1.1	192.168.2.4	0x4ea0	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:41.754460096 CEST	1.1.1.1	192.168.2.4	0xf36b	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:41.754460096 CEST	1.1.1.1	192.168.2.4	0xf36b	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:41.826349974 CEST	1.1.1.1	192.168.2.4	0xad94	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:41.826375008 CEST	1.1.1.1	192.168.2.4	0xe7d9	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:42.165932894 CEST	1.1.1.1	192.168.2.4	0x63cf	No error (0)	d8c14d4960ca.edge.sdk.awswaf.com		18.245.31.103	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:42.165932894 CEST	1.1.1.1	192.168.2.4	0x63cf	No error (0)	d8c14d4960ca.edge.sdk.awswaf.com		18.245.31.86	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:42.165932894 CEST	1.1.1.1	192.168.2.4	0x63cf	No error (0)	d8c14d4960ca.edge.sdk.awswaf.com		18.245.31.43	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:42.165932894 CEST	1.1.1.1	192.168.2.4	0x63cf	No error (0)	d8c14d4960ca.edge.sdk.awswaf.com		18.245.31.106	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:42.897114992 CEST	1.1.1.1	192.168.2.4	0x2e99	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:42.897145033 CEST	1.1.1.1	192.168.2.4	0x2020	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:43.078866959 CEST	1.1.1.1	192.168.2.4	0x57c4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:43.079020977 CEST	1.1.1.1	192.168.2.4	0xdeba	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:43.079020977 CEST	1.1.1.1	192.168.2.4	0xdeba	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:43.416344881 CEST	1.1.1.1	192.168.2.4	0x36f4	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.94	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:43.416344881 CEST	1.1.1.1	192.168.2.4	0x36f4	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.55	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:43.416344881 CEST	1.1.1.1	192.168.2.4	0x36f4	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.18	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:43.416344881 CEST	1.1.1.1	192.168.2.4	0x36f4	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.10	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:44.034112930 CEST	1.1.1.1	192.168.2.4	0x9d58	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:44.034112930 CEST	1.1.1.1	192.168.2.4	0x9d58	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:44.034132957 CEST	1.1.1.1	192.168.2.4	0x5d89	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:44.726686954 CEST	1.1.1.1	192.168.2.4	0x3484	No error (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:44.726686954 CEST	1.1.1.1	192.168.2.4	0x3484	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:44.726706982 CEST	1.1.1.1	192.168.2.4	0x3137	No error (0)	zn3eum1ldyl0aih0i-partnersatbooking.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:44.726706982 CEST	1.1.1.1	192.168.2.4	0x3137	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:45.190408945 CEST	1.1.1.1	192.168.2.4	0x376c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:45.190408945 CEST	1.1.1.1	192.168.2.4	0x376c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:45.358206987 CEST	1.1.1.1	192.168.2.4	0x1825	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:45.358206987 CEST	1.1.1.1	192.168.2.4	0x1825	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:45.360024929 CEST	1.1.1.1	192.168.2.4	0xe749	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:45.360024929 CEST	1.1.1.1	192.168.2.4	0xe749	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:47.643744946 CEST	1.1.1.1	192.168.2.4	0x9cc7	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.18	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:47.643744946 CEST	1.1.1.1	192.168.2.4	0x9cc7	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.55	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:47.643744946 CEST	1.1.1.1	192.168.2.4	0x9cc7	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.94	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:47.643744946 CEST	1.1.1.1	192.168.2.4	0x9cc7	No error (0)	d8c14d4960ca.d2eb2267.us-east-1.token.awswaf.com		18.244.18.10	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:47.646627903 CEST	1.1.1.1	192.168.2.4	0x6a36	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:47.646627903 CEST	1.1.1.1	192.168.2.4	0x6a36	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:47.648855925 CEST	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:47.648855925 CEST	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:52.699167967 CEST	1.1.1.1	192.168.2.4	0xe985	No error (0)	partnerfeedback.booking.com	partnersatbooking.vanity3.eu.qualtrics.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:52.699167967 CEST	1.1.1.1	192.168.2.4	0xe985	No error (0)	partnersatbooking.vanity3.eu.qualtrics.com	akamaisecure3.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:52.699198008 CEST	1.1.1.1	192.168.2.4	0x42a5	No error (0)	partnerfeedback.booking.com	partnersatbooking.vanity3.eu.qualtrics.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:52.699198008 CEST	1.1.1.1	192.168.2.4	0x42a5	No error (0)	partnersatbooking.vanity3.eu.qualtrics.com	akamaisecure3.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:54.316946983 CEST	1.1.1.1	192.168.2.4	0xb1f4	No error (0)	eu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:54.317027092 CEST	1.1.1.1	192.168.2.4	0x6a1a	No error (0)	eu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:56.764029980 CEST	1.1.1.1	192.168.2.4	0xdf9c	No error (0)	261-nrz-371.mktoresp.com		134.213.193.62	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:58.331576109 CEST	1.1.1.1	192.168.2.4	0x207b	No error (0)	chat.kindlycdn.com			65	IN (0x0001)	false
Jul 10, 2024 03:44:58.334671021 CEST	1.1.1.1	192.168.2.4	0xb84e	No error (0)	chat.kindlycdn.com		104.26.6.229	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:58.334671021 CEST	1.1.1.1	192.168.2.4	0xb84e	No error (0)	chat.kindlycdn.com		104.26.7.229	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:58.334671021 CEST	1.1.1.1	192.168.2.4	0xb84e	No error (0)	chat.kindlycdn.com		172.67.71.156	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:58.644453049 CEST	1.1.1.1	192.168.2.4	0xe224	No error (0)	partnerfeedback.booking.com	partnersatbooking.vanity3.eu.qualtrics.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:58.644453049 CEST	1.1.1.1	192.168.2.4	0xe224	No error (0)	partnersatbooking.vanity3.eu.qualtrics.com	akamaisecure3.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:58.649277925 CEST	1.1.1.1	192.168.2.4	0xc915	No error (0)	partnerfeedback.booking.com	partnersatbooking.vanity3.eu.qualtrics.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:58.649277925 CEST	1.1.1.1	192.168.2.4	0xc915	No error (0)	partnersatbooking.vanity3.eu.qualtrics.com	akamaisecure3.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:59.026629925 CEST	1.1.1.1	192.168.2.4	0x8418	No error (0)	apil1.spinnaker-js.com	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:59.043298960 CEST	1.1.1.1	192.168.2.4	0x15a3	No error (0)	apil1.spinnaker-js.com	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:44:59.043298960 CEST	1.1.1.1	192.168.2.4	0x15a3	No error (0)	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com		52.212.92.193	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:44:59.043298960 CEST	1.1.1.1	192.168.2.4	0x15a3	No error (0)	pirateprod.9k9qh2pzbv.eu-west-1.elasticbeanstalk.com		34.255.142.78	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:02.729043961 CEST	1.1.1.1	192.168.2.4	0xa102	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:45:02.729043961 CEST	1.1.1.1	192.168.2.4	0xa102	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:03.288742065 CEST	1.1.1.1	192.168.2.4	0x6837	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:23.501494884 CEST	1.1.1.1	192.168.2.4	0xb0cf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:45:23.501494884 CEST	1.1.1.1	192.168.2.4	0xb0cf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.297569990 CEST	1.1.1.1	192.168.2.4	0xa80d	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:45:29.297897100 CEST	1.1.1.1	192.168.2.4	0xed6f	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:45:29.308947086 CEST	1.1.1.1	192.168.2.4	0x40a9	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:45:29.308947086 CEST	1.1.1.1	192.168.2.4	0x40a9	No error (0)	try-cloudfront.abtasty.com		18.172.112.60	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.308947086 CEST	1.1.1.1	192.168.2.4	0x40a9	No error (0)	try-cloudfront.abtasty.com		18.172.112.72	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.308947086 CEST	1.1.1.1	192.168.2.4	0x40a9	No error (0)	try-cloudfront.abtasty.com		18.172.112.27	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.308947086 CEST	1.1.1.1	192.168.2.4	0x40a9	No error (0)	try-cloudfront.abtasty.com		18.172.112.62	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.308984995 CEST	1.1.1.1	192.168.2.4	0xfc7d	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:45:29.316462994 CEST	1.1.1.1	192.168.2.4	0xf60	No error (0)	bstatic.com		18.245.31.129	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.316462994 CEST	1.1.1.1	192.168.2.4	0xf60	No error (0)	bstatic.com		18.245.31.18	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.316462994 CEST	1.1.1.1	192.168.2.4	0xf60	No error (0)	bstatic.com		18.245.31.53	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.316462994 CEST	1.1.1.1	192.168.2.4	0xf60	No error (0)	bstatic.com		18.245.31.49	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.318617105 CEST	1.1.1.1	192.168.2.4	0xd4c4	No error (0)	www.googleoptimize.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.393330097 CEST	1.1.1.1	192.168.2.4	0x5774	No error (0)	rtp-static.marketo.com	wildcard.marketo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:45:29.401479006 CEST	1.1.1.1	192.168.2.4	0x725b	No error (0)	rtp-static.marketo.com	wildcard.marketo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:45:29.705719948 CEST	1.1.1.1	192.168.2.4	0x18df	No error (0)	partner.booking.com		18.66.147.32	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.705719948 CEST	1.1.1.1	192.168.2.4	0x18df	No error (0)	partner.booking.com		18.66.147.79	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.705719948 CEST	1.1.1.1	192.168.2.4	0x18df	No error (0)	partner.booking.com		18.66.147.49	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.705719948 CEST	1.1.1.1	192.168.2.4	0x18df	No error (0)	partner.booking.com		18.66.147.77	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.864406109 CEST	1.1.1.1	192.168.2.4	0x67fb	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.864406109 CEST	1.1.1.1	192.168.2.4	0x67fb	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:29.865232944 CEST	1.1.1.1	192.168.2.4	0x85a9	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Jul 10, 2024 03:45:30.276808977 CEST	1.1.1.1	192.168.2.4	0x25c0	No error (0)	sage.kindly.ai		34.120.99.165	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.663019896 CEST	1.1.1.1	192.168.2.4	0x41da	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.663019896 CEST	1.1.1.1	192.168.2.4	0x41da	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.663341045 CEST	1.1.1.1	192.168.2.4	0xbf75	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Jul 10, 2024 03:45:32.719948053 CEST	1.1.1.1	192.168.2.4	0x27e	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:45:32.719948053 CEST	1.1.1.1	192.168.2.4	0x27e	No error (0)	try-cloudfront.abtasty.com		18.172.112.62	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.719948053 CEST	1.1.1.1	192.168.2.4	0x27e	No error (0)	try-cloudfront.abtasty.com		18.172.112.72	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.719948053 CEST	1.1.1.1	192.168.2.4	0x27e	No error (0)	try-cloudfront.abtasty.com		18.172.112.60	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.719948053 CEST	1.1.1.1	192.168.2.4	0x27e	No error (0)	try-cloudfront.abtasty.com		18.172.112.27	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.720088005 CEST	1.1.1.1	192.168.2.4	0x80ad	No error (0)	try.abtasty.com	try-cloudfront.abtasty.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 10, 2024 03:45:32.740714073 CEST	1.1.1.1	192.168.2.4	0xd184	No error (0)	partner.booking.com		18.66.147.79	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.740714073 CEST	1.1.1.1	192.168.2.4	0xd184	No error (0)	partner.booking.com		18.66.147.32	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.740714073 CEST	1.1.1.1	192.168.2.4	0xd184	No error (0)	partner.booking.com		18.66.147.77	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:32.740714073 CEST	1.1.1.1	192.168.2.4	0xd184	No error (0)	partner.booking.com		18.66.147.49	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:36.500633001 CEST	1.1.1.1	192.168.2.4	0xe348	No error (0)	sage.kindly.ai		34.120.99.165	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:38.980901003 CEST	1.1.1.1	192.168.2.4	0x40db	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.157.249.141	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:38.980901003 CEST	1.1.1.1	192.168.2.4	0x40db	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.194.251.223	A (IP address)	IN (0x0001)	false
Jul 10, 2024 03:45:38.980901003 CEST	1.1.1.1	192.168.2.4	0x40db	No error (0)	bookingdotcomb2b.germany-2.evergage.com		18.185.181.69	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49730	34.117.186.192	443

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:01 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-07-10 01:44:01 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Wed, 10 Jul 2024 01:44:01 GMT content-type: application/json; charset=utf-8 Content-Length: 319 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 1 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-10 01:44:01 UTC	319	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49737	188.114.97.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:14 UTC	687	OUT	GET /apart/book244102ashotxxx22214 HTTP/1.1 Host: ennexhorpps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:14 UTC	1017	IN	HTTP/1.1 302 FOUND Date: Wed, 10 Jul 2024 01:44:14 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: /sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuz Vary: Cookie Set-Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA; HttpOnly; Path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2BRkQaNxKlNrnIjmde11IjJdy2P4u5At9DcaRRkf52aFVJzJIBcPrBe9x8o7VBgNK6DzZz%2BDfm%2FzVSczAQOZrULK7TmknjCb4FnvcYf6l95aMM5y1ecLGPqzZOVwLCbvQSs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde114bdc4234-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:14 UTC	352	IN	Data Raw: 31 61 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 2f 73 69 67 6e 2d 69 6e 3f 6f 70 5f 74 6f 6b 65 6e 3d 7a 4f 58 4c 56 37 72 41 51 32 6e 49 4e 54 44 35 34 59 41 4a 46 39 41 70 6f 38 44 76 38 4a 76 70 4b 6c 4d 61 61 61 79 62 53 64 7a 58 79 77 4b 70 5a 6d 78 73 6f 32 56 58 52 69 79 45 31 6e 38 53 78 62 47 4f 4b 78 78 75 74 48 54 4a 47 Data Ascii: 1a5<!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="/sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG
2024-07-10 01:44:14 UTC	76	IN	Data Raw: 58 52 69 79 45 31 6e 38 53 78 62 47 4f 4b 78 78 75 74 48 54 4a 47 33 74 55 59 66 63 79 59 71 73 45 6f 4d 78 77 6e 53 6a 52 55 75 7a 3c 2f 61 3e 2e 20 49 66 20 6e 6f 74 2c 20 63 6c 69 63 6b 20 74 68 65 20 6c 69 6e 6b 2e 0a 0d 0a Data Ascii: XRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuz</a>. If not, click the link.
2024-07-10 01:44:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	188.114.97.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:14 UTC	1047	OUT	GET /sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuz HTTP/1.1 Host: ennexhorpps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA
2024-07-10 01:44:14 UTC	592	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:14 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Cookie CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F0NhXnpE%2FwZVvEAxrFkjUBYMIAsJEAEtGa%2Fg7TpuwcPjAe0fm3wtvLHLA6GDR3mWSSNNGC3GmHgQeN%2FUsjyzpp6OLFIXOEBOJON77HPaJuu%2F2hwJEENS7tuK6EWLYGkoCL0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde13096f0cc1-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:14 UTC	777	IN	Data Raw: 33 32 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 62 6f 6f 6b 69 6e 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 73 69 7a 65 73 3d 22 61 Data Ascii: 32e8<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="robots" content="noindex"> <link rel="icon" href="/static/booking/favicon.ico" sizes="a
2024-07-10 01:44:14 UTC	1369	IN	Data Raw: 2e 36 2e 34 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2d 63 6f 6f 6b 69 65 2f 31 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 73 74 79 6c 65 20 69 64 3d 22 6f 6e 65 74 72 75 73 74 2d 73 74 79 6c 65 22 3e 0a 20 20 20 20 20 20 2e 62 75 69 2d 75 2d 74 65 78 74 2d 6c 65 66 74 2c 20 2e 75 2d 74 65 78 74 2d 6c 65 66 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 Data Ascii: .6.4.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js"></script> <style id="onetrust-style"> .bui-u-text-left, .u-text-left { text-align: left !important }
2024-07-10 01:44:14 UTC	1369	IN	Data Raw: 67 6e 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 2e 62 75 69 2d 75 2d 74 65 78 74 2d 72 69 67 68 74 5c 40 68 75 67 65 2c 20 2e 72 74 6c 20 2e 62 75 69 2d 75 2d 74 65 78 74 2d 6c 65 66 74 5c 40 68 75 67 65 2c 20 5b 64 69 72 3d 72 74 6c 5d 20 2e 62 75 69 2d 75 2d 74 65 78 74 2d 6c 65 66 74 5c 40 68 75 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 20 21 69 6d 70 6f 72 74 61 6e 74 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 62 6f 64 79 20 2e 62 75 69 2d 66 2d 66 6f 6e 74 2d 62 6f 64 79 2c 20 62 6f 64 79 20 2e 62 75 69 5f 66 6f 6e 74 5f 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: gn: left !important } .bui-u-text-right\@huge, .rtl .bui-u-text-left\@huge, [dir=rtl] .bui-u-text-left\@huge { text-align: right !important } } body .bui-f-font-body, body .bui_font_body {
2024-07-10 01:44:14 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 2e 62 75 69 2d 73 70 69 6e 6e 65 72 5f 5f 69 6e 6e 65 72 3a 61 66 74 65 72 2c 20 2e 62 75 69 2d 73 70 69 6e 6e 65 72 5f 5f 69 6e 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 74 6f 70 Data Ascii: .bui-spinner__inner:after, .bui-spinner__inner:before { border: solid transparent; border-radius: 50%; bottom: 0; content: ""; left: 0; position: absolute; right: 0; top
2024-07-10 01:44:14 UTC	1369	IN	Data Raw: 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 66 39 36 64 62 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 20 2d 32 70 78 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 32 Data Ascii: t-banner-sdk .onetrust-vendors-list-handler:hover { color: #1f96db; } #onetrust-banner-sdk:focus { outline: 2px solid #000; outline-offset: -2px; } #onetrust-banner-sdk a:focus { outline: 2
2024-07-10 01:44:14 UTC	1369	IN	Data Raw: 65 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 37 35 65 6d 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 70 6f 77 65 72 65 64 2d 62 79 2d 6c 6f 67 6f 3a 68 6f 76 65 72 2c 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 66 6f 6f 74 65 72 2d 6c 6f 67 6f 20 61 3a 68 6f 76 65 72 2c 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 6f 77 65 72 65 64 2d 62 79 2d 6c 6f 67 6f 3a 68 6f 76 65 72 2c 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 66 6f 6f 74 65 72 2d 6c 6f 67 6f 20 61 3a 68 6f 76 65 72 2c 0a 20 20 20 20 20 20 23 6f 74 2d Data Ascii: e; font-size: 0.75em; } #onetrust-banner-sdk .powered-by-logo:hover, #onetrust-banner-sdk .ot-pc-footer-logo a:hover, #onetrust-pc-sdk .powered-by-logo:hover, #onetrust-pc-sdk .ot-pc-footer-logo a:hover, #ot-
2024-07-10 01:44:14 UTC	1369	IN	Data Raw: 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 72 6f 77 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 5b 74 Data Ascii: t-sdk-column { padding: 0; } #onetrust-pc-sdk .ot-sdk-container { padding-right: 0; } #onetrust-pc-sdk .ot-sdk-row { flex-direction: initial; width: 100%; } #onetrust-pc-sdk [t
2024-07-10 01:44:14 UTC	1369	IN	Data Raw: 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 38 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 61 Data Ascii: .ot-pc-logo { height: 60px; width: 180px; background-position: center; background-size: contain; background-repeat: no-repeat; display: inline-flex; justify-content: center; a
2024-07-10 01:44:14 UTC	1369	IN	Data Raw: 38 62 36 33 31 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 38 65 6d 20 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 20 20 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 31 73 20 65 61 73 65 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 8b631; height: auto; white-space: normal; word-wrap: break-word; padding: 0.8em 2em; font-size: 0.8em; line-height: 1.2; cursor: pointer; -moz-transition: 0.1s ease;
2024-07-10 01:44:14 UTC	1311	IN	Data Raw: 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 20 2b 20 61 3a 66 6f 63 75 73 2c 0a 20 20 20 20 20 20 2e 63 61 74 65 67 6f 72 79 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 20 2b 20 61 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 75 73 65 72 69 64 2d 74 69 74 6c 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 75 73 65 72 69 64 2d 74 69 74 6c 65 20 3e 20 73 70 Data Ascii: endors-list-handler + a:focus, .category-vendors-list-handler + a:focus-visible { outline: 2px solid #000; } #onetrust-pc-sdk .ot-userid-title { margin-top: 10px; } #onetrust-pc-sdk .ot-userid-title > sp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	188.114.97.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:15 UTC	967	OUT	GET /static/booking/styles/main_jlksgegksel32232v5.css HTTP/1.1 Host: ennexhorpps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ennexhorpps.com/sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA
2024-07-10 01:44:15 UTC	781	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:15 GMT Content-Type: text/css; charset=utf-8 Content-Length: 229609 Connection: close Content-Disposition: inline; filename=main_jlksgegksel32232v5.css Last-Modified: Tue, 09 Jul 2024 17:34:38 GMT Cache-Control: max-age=14400 Etag: "1720546478.726852-229609-4055045957" CF-Cache-Status: EXPIRED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yiryjqxJ2pgsPNdXivC6W0iGi7BISRy3TJLf1i2Rbj3uJFCKfCJCTsEu3fPMyXwKLNO5VH%2FA%2FQSkWvpGvgy%2B8L6Bwcf0gUecUTasbI%2BCytWEfaMEzFw26NquwsXtbPEx9e8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde19691b4257-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:15 UTC	588	IN	Data Raw: 2e 77 6b 54 4e 64 51 6a 41 66 52 56 62 4b 76 46 42 69 52 31 54 7b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 5f 6e 77 47 70 72 66 4c 5a 66 5a 67 4d 46 6a 73 6d 61 70 37 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 7d 2e 5a 47 79 37 42 4c 43 58 34 58 4f 76 66 41 44 42 46 6a 31 31 2c 2e 62 71 57 37 67 72 61 48 68 30 39 43 54 4e 41 4e 4f 72 58 74 7b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d Data Ascii: .wkTNdQjAfRVbKvFBiR1T{border:0;margin:0;padding:0}._nwGprfLZfZgMFjsmap7{align-items:flex-end;display:flex;padding:0 0 var(--bui_spacing_1x)}.ZGy7BLCX4XOvfADBFj11,.bqW7graHh09CTNANOrXt{-webkit-margin-start:var(--bui_spacing_1x);display:inline-block;margin-
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 41 37 4b 69 35 59 51 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 63 54 64 4a 4e 41 53 72 6b 62 45 5f 6d 41 37 4b 69 35 59 51 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 30 7d 2e 45 4d 71 41 43 48 4e 46 4b 49 72 42 6a 4c 6e 43 64 59 62 49 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 35 70 78 29 7b 2e 45 4d 71 41 43 48 4e 46 4b 49 72 42 6a 4c 6e 43 64 59 62 49 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 34 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 31 30 30 25 7d 7d 2e 67 73 71 49 35 74 78 4a 65 77 34 6e 35 46 37 34 65 31 65 70 7b 63 75 Data Ascii: A7Ki5YQ,[dir=rtl] .cTdJNASrkbE_mA7Ki5YQ{left:auto;right:0}.EMqACHNFKIrBjLnCdYbI{display:none}@media (max-width:575px){.EMqACHNFKIrBjLnCdYbI{display:block;height:44px;position:absolute;top:50%;transform:translateY(-50%);width:100%}}.gsqI5txJew4n5F74e1ep{cu
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 63 54 64 4a 4e 41 53 72 6b 62 45 5f 6d 41 37 4b 69 35 59 51 3a 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 7e 2e 67 73 71 49 35 74 78 4a 65 77 34 6e 35 46 37 34 65 31 65 70 20 2e 53 65 68 35 6b 39 49 4d 32 36 4d 48 32 48 4f 78 4f 33 71 32 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 61 63 74 69 6f 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 68 61 6c 66 Data Ascii: _background);border-color:var(--bui_color_action_background)}.cTdJNASrkbE_mA7Ki5YQ:indeterminate~.gsqI5txJew4n5F74e1ep .Seh5k9IM26MH2HOxO3q2:before{background:var(--bui_color_on_action_background);border-radius:1px;content:"";height:var(--bui_spacing_half
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 64 69 73 61 62 6c 65 64 29 7d 2e 63 54 64 4a 4e 41 53 72 6b 62 45 5f 6d 41 37 4b 69 35 59 51 3a 64 69 73 61 62 6c 65 64 7e 2e 67 73 71 49 35 74 78 4a 65 77 34 6e 35 46 37 34 65 31 65 70 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 5b 64 61 74 61 2d 62 75 69 2d 6b 65 79 62 6f 61 72 64 5d 20 2e 63 54 64 4a 4e 41 53 72 6b 62 45 5f 6d 41 37 4b 69 35 59 51 3a 66 6f 63 75 73 7e 2e 67 73 71 49 35 74 78 4a 65 77 34 6e 35 46 37 34 65 31 65 70 20 2e 53 65 68 35 6b 39 49 4d 32 36 4d 48 32 48 4f 78 4f 33 71 32 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 Data Ascii: rder-color:var(--bui_color_background_disabled)}.cTdJNASrkbE_mA7Ki5YQ:disabled~.gsqI5txJew4n5F74e1ep{cursor:not-allowed}[data-bui-keyboard] .cTdJNASrkbE_mA7Ki5YQ:focus~.gsqI5txJew4n5F74e1ep .Seh5k9IM26MH2HOxO3q2{box-shadow:0 0 0 2px var(--bui_color_backgr
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 79 5f 32 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 6d 61 72 67 69 6e 3a 30 7d 68 31 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 Data Ascii: y_2_font-family);font-size:var(--DO_NOT_USE_bui_large_font_body_2_font-size);font-weight:var(--DO_NOT_USE_bui_large_font_body_2_font-weight);line-height:var(--DO_NOT_USE_bui_large_font_body_2_line-height);margin:0}h1{font-family:var(--DO_NOT_USE_bui_large
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 64 2c 68 34 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 68 35 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 68 36 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 68 31 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 32 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 33 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 34 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 35 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 68 36 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 35 70 78 29 7b 2e 50 43 63 75 49 4b 70 47 30 30 32 38 56 37 46 65 5f 55 77 70 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 Data Ascii: d,h4:first-child,h5:first-child,h6:first-child,p:first-child{margin-top:0}h1:last-child,h2:last-child,h3:last-child,h4:last-child,h5:last-child,h6:last-child,p:last-child{margin-bottom:0}@media (max-width:575px){.PCcuIKpG0028V7Fe_Uwp{border-left:0!importa
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 5a 4d 48 39 68 30 48 43 59 48 39 47 47 4e 78 48 6e 58 47 4a 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 5f 31 30 30 29 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 Data Ascii: on:absolute;right:0;top:0}.ZMH9h0HCYH9GGNxHnXGJ{-webkit-appearance:none;-moz-appearance:none;appearance:none;background:none;border:none;border-radius:var(--bui_border_radius_100);box-sizing:border-box;display:block;flex-grow:1;font-family:var(--DO_NOT_US
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 72 64 5d 29 20 2e 5a 4d 48 39 68 30 48 43 59 48 39 47 47 4e 78 48 6e 58 47 4a 3a 66 6f 63 75 73 2b 2e 4b 6c 57 69 46 6e 57 44 32 4b 79 55 6a 61 55 46 31 57 41 45 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 62 6f 72 64 65 72 29 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 77 69 64 74 68 5f 32 30 30 29 7d 2e 5a 4d 48 39 68 30 48 43 59 48 39 47 47 4e 78 48 6e 58 47 4a 3a 64 69 73 61 62 6c 65 64 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 64 69 73 61 62 6c 65 64 29 7d 2e 5a 4d 48 39 68 30 48 43 59 48 39 47 47 4e 78 48 6e 58 47 4a 3a 64 Data Ascii: rd]) .ZMH9h0HCYH9GGNxHnXGJ:focus+.KlWiFnWD2KyUjaUF1WAE{border-color:var(--bui_color_action_border);border-width:var(--bui_border_width_200)}.ZMH9h0HCYH9GGNxHnXGJ:disabled::-moz-placeholder{color:var(--bui_color_foreground_disabled)}.ZMH9h0HCYH9GGNxHnXGJ:d
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 61 63 69 6e 67 5f 32 78 29 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 3b 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 7d 2e 58 58 69 78 34 39 74 34 6e 41 73 6e 5a 69 62 6c 44 41 61 52 20 2e 41 58 78 6e 4a 62 78 34 33 5f 30 39 59 30 58 55 75 30 6b 65 3a 61 66 74 65 72 7b 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 3b 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 7d 2e 6e 77 41 56 32 65 53 4f 38 47 57 39 78 66 4c 67 31 41 6c 6b 2e 75 30 34 4a 36 43 67 68 36 4e 64 4c 6e 59 73 53 74 4d 67 75 20 2e 4b 6c 57 69 46 6e 57 44 32 4b 79 55 6a Data Ascii: acing_2x);margin-inline-start:var(--bui_spacing_2x);padding-inline-end:var(--bui_spacing_3x)}.XXix49t4nAsnZiblDAaR .AXxnJbx43_09Y0XUu0ke:after{bottom:var(--bui_spacing_3x);top:var(--bui_spacing_3x)}.nwAV2eSO8GW9xfLg1Alk.u04J6Cgh6NdLnYsStMgu .KlWiFnWD2KyUj
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 32 43 6a 74 42 50 57 71 56 53 55 6f 20 2e 71 31 6b 6b 7a 58 67 58 42 5f 34 70 72 6d 44 30 66 78 6b 69 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 71 31 6b 6b 7a 58 67 58 42 5f 34 70 72 6d 44 30 66 78 6b 69 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 7d 2e 71 31 6b 6b 7a 58 67 58 42 5f 34 70 72 6d 44 30 66 78 6b 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 51 61 36 58 6f 31 47 65 32 43 6a 74 42 50 57 71 56 53 55 6f 20 2e 71 31 6b 6b 7a 58 67 58 42 5f 34 70 72 6d 44 30 66 78 6b 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 71 31 6b 6b 7a 58 67 58 42 5f 34 70 72 6d 44 30 66 78 6b 69 3a 66 69 72 Data Ascii: 2CjtBPWqVSUo .q1kkzXgXB_4prmD0fxki,[dir=rtl] .q1kkzXgXB_4prmD0fxki{margin-left:0;margin-right:var(--bui_spacing_1x)}.q1kkzXgXB_4prmD0fxki:first-child{margin-left:0}.Qa6Xo1Ge2CjtBPWqVSUo .q1kkzXgXB_4prmD0fxki:first-child,[dir=rtl] .q1kkzXgXB_4prmD0fxki:fir

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	188.114.97.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:15 UTC	947	OUT	GET /static/stylesheets/banner.css HTTP/1.1 Host: ennexhorpps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ennexhorpps.com/sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA
2024-07-10 01:44:15 UTC	774	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:15 GMT Content-Type: text/css; charset=utf-8 Content-Length: 121180 Connection: close Content-Disposition: inline; filename=banner.css Last-Modified: Tue, 09 Jul 2024 17:34:36 GMT Cache-Control: max-age=14400 Etag: "1720546476.562858-121180-1621823611" CF-Cache-Status: EXPIRED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ONe%2BtKJvwl%2Fdsian16AY6OiW8a%2BKT2Lrf2HuALCtvs%2FrSTgLMpjaeL9gJT1B%2FYYb359VncKaPRb%2ByWJ1b%2FzpEVFNt5axgnb4Ex2BhhLvNWnx%2FfC52E7nEb%2FlGi5cEetDyYo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde1968ca43cf-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:15 UTC	595	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 7b 0a 20 20 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 20 7b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 66 39 36 64 62 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a Data Ascii: #onetrust-banner-sdk { -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%}#onetrust-banner-sdk .onetrust-vendors-list-handler { cursor: pointer; color: #1f96db; font-size: inherit; font-weight: bold; text-decoration:
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 20 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 20 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 20 31 70 78 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 36 34 70 78 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 20 Data Ascii: st-reject-all-handler, #onetrust-banner-sdk #onetrust-pc-btn-handler { outline-offset: 1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo { height: 64px; width: 64px}#onetrust-banner-sdk .ot-close-icon, #onetrust-pc-sdk .ot-close-icon,
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 64 6b 20 62 75 74 74 6f 6e 20 2a 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 33 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 34 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 36 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 Data Ascii: dk button , #onetrust-pc-sdk a[data-parent-id] , #ot-sync-ntfy h3 , #ot-sync-ntfy h4 , #ot-sync-ntfy h6 , #ot-sync-ntfy button , #ot-sync-ntfy a[data-parent-id] * { font-size: inherit; font-weight: inherit; color: inherit}#onetrust-ba
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 68 6f 73 74 2d 74 69 74 6c 65 20 61 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 6f 74 2d 68 6f 73 74 2d 6e 61 6d 65 20 61 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 74 65 78 74 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 6f 74 2d 61 63 63 2d 74 78 74 20 7b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 69 6e 70 75 74 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 33 70 78 20 2e 31 65 78 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 Data Ascii: #onetrust-pc-sdk li .host-title a, #onetrust-pc-sdk li .ot-host-name a, #onetrust-pc-sdk li .accordion-text, #onetrust-pc-sdk li .ot-acc-txt { z-index: 2; position: relative}#onetrust-pc-sdk input { margin: 3px .1ex}#onetrust-pc-sdk .pc
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 20 73 6f 6c 69 64 20 23 36 38 62 36 33 31 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 2e 38 65 6d 20 32 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 65 6d 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2e 31 73 20 65 61 73 65 3b 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2e 31 73 20 65 61 73 65 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: solid #68b631; height: auto; white-space: normal; word-wrap: break-word; padding: .8em 2em; font-size: .8em; line-height: 1.2; cursor: pointer; -moz-transition: .1s ease; -o-transition: .1s ease; -webkit-transition
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 20 2e 6f 74 2d 75 73 65 72 69 64 2d 64 65 73 63 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 6f 73 74 2d 64 65 73 63 20 61 20 7b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 69 6e 69 74 69 61 6c 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 76 65 6e 2d 68 64 72 20 3e 20 70 20 61 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 69 6e 69 74 69 61 6c 0a 7d 0a 0a 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 76 6e 64 2d 73 65 72 76 20 2e 6f 74 2d 76 6e Data Ascii: .ot-userid-desc { font-style: italic}#onetrust-pc-sdk .ot-host-desc a { pointer-events: initial}#onetrust-pc-sdk .ot-ven-hdr > p a { position: relative; z-index: 2; pointer-events: initial}#onetrust-pc-sdk .ot-vnd-serv .ot-vn
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 6f 72 65 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2a 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 3a 3a 61 66 74 65 72 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 3a 3a 62 65 66 6f 72 65 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2a 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 3a 3a 61 66 74 65 72 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f Data Ascii: ore, #ot-sdk-cookie-policy , #ot-sdk-cookie-policy ::after, #ot-sdk-cookie-policy ::before, #ot-sync-ntfy , #ot-sync-ntfy ::after, #ot-sync-ntfy ::before { -webkit-box-sizing: content-box; -moz-box-sizing: content-box; box-sizing: content-bo
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 69 6e 70 75 74 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 75 6c 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6e 61 76 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 74 61 62 6c 65 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 74 68 65 61 64 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 74 72 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 74 64 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 74 62 6f 64 79 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e Data Ascii: #onetrust-pc-sdk label, #onetrust-pc-sdk input, #onetrust-pc-sdk ul, #onetrust-pc-sdk li, #onetrust-pc-sdk nav, #onetrust-pc-sdk table, #onetrust-pc-sdk thead, #onetrust-pc-sdk tr, #onetrust-pc-sdk td, #onetrust-pc-sdk tbody, #onetrust-pc-sdk .ot-main-con
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 6e 74 66 79 20 70 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 69 6d 67 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 73 76 67 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 73 65 63 74 69 6f 6e 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6c 61 62 65 6c 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 69 6e 70 75 74 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 75 6c 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6c 69 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6e 61 76 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 74 61 62 6c 65 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 74 68 65 61 64 2c 20 23 6f 74 2d 73 79 6e 63 Data Ascii: ntfy p, #ot-sync-ntfy img, #ot-sync-ntfy svg, #ot-sync-ntfy button, #ot-sync-ntfy section, #ot-sync-ntfy a, #ot-sync-ntfy label, #ot-sync-ntfy input, #ot-sync-ntfy ul, #ot-sync-ntfy li, #ot-sync-ntfy nav, #ot-sync-ntfy table, #ot-sync-ntfy thead, #ot-sync
2024-07-10 01:44:15 UTC	1369	IN	Data Raw: 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 20 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 20 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6c 61 62 65 6c 3a 62 Data Ascii: k label:after, #onetrust-pc-sdk .checkbox:after, #onetrust-pc-sdk .checkbox:before, #ot-sdk-cookie-policy label:before, #ot-sdk-cookie-policy label:after, #ot-sdk-cookie-policy .checkbox:after, #ot-sdk-cookie-policy .checkbox:before, #ot-sync-ntfy label:b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	104.17.25.14	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:15 UTC	576	OUT	GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ennexhorpps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:16 UTC	946	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:16 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5f5628a2-11846" Last-Modified: Mon, 07 Sep 2020 12:33:38 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 7185680 Expires: Mon, 30 Jun 2025 01:44:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DVZqB8C%2FJVv9bSKe24WuU5lfGRorTOh2NmC7dSzmydBA71U%2BBExAVfVzquIDwk6RhLtCAYdv1GtkKQg17uUpGFvPiSLnHNEZQGJ2YPduv7Qm8EogyVdMXn8B%2BwFyDcwMYFrs4VXV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8a0cde1c0d0d422e-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:16 UTC	423	IN	Data Raw: 37 62 66 65 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 73 3a 2f 2f 61 6e 69 6d 61 74 65 2e 73 74 79 6c 65 2f 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 34 2e 31 2e 31 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 41 6e 69 6d 61 74 65 2e 63 73 73 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 72 Data Ascii: 7bfe@charset "UTF-8";/! animate.css - https://animate.style/ * Version - 4.1.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2020 Animate.css */:root{--animate-duration:1s;--animate-delay:1s;--animate-r
2024-07-10 01:44:16 UTC	1369	IN	Data Raw: 69 6f 6e 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 69 6e 66 69 6e 69 74 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 72 65 70 65 61 74 2d 31 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 6d Data Ascii: ion);-webkit-animation-fill-mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;anim
2024-07-10 01:44:16 UTC	1369	IN	Data Raw: 64 2e 61 6e 69 6d 61 74 65 5f 5f 64 65 6c 61 79 2d 34 73 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 34 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 34 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 34 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 34 29 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 64 65 6c 61 79 2d 35 73 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 73 3b 2d 77 65 62 6b 69 74 2d Data Ascii: d.animate__delay-4s{-webkit-animation-delay:4s;animation-delay:4s;-webkit-animation-delay:calc(var(--animate-delay)4);animation-delay:calc(var(--animate-delay)4)}.animate__animated.animate__delay-5s{-webkit-animation-delay:5s;animation-delay:5s;-webkit-
2024-07-10 01:44:16 UTC	1369	IN	Data Raw: 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 5b 63 6c 61 73 73 2a 3d 4f 75 74 5d 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 32 30 25 2c 35 33 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 Data Ascii: iteration-count:1!important;animation-iteration-count:1!important}.animate__animated[class*=Out]{opacity:0}}@-webkit-keyframes bounce{0%,20%,53%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215
2024-07-10 01:44:16 UTC	1369	IN	Data Raw: 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 7d 37 30 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e Data Ascii: 06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-transform:translate3d(0,-30px,0) scaleY(1.1);transform:translate3d(0,-30px,0) scaleY(1.1)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function
2024-07-10 01:44:16 UTC	1369	IN	Data Raw: 30 35 2c 31 2e 30 35 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 70 75 6c 73 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 75 62 62 65 72 42 61 6e 64 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 Data Ascii: 05,1.05)}to{-webkit-transform:scaleX(1);transform:scaleX(1)}}.animate__pulse{-webkit-animation-name:pulse;animation-name:pulse;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out}@-webkit-keyframes rubberBand{0%{-webkit-tra
2024-07-10 01:44:16 UTC	1369	IN	Data Raw: 2c 37 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 32 30 25 2c 34 30 25 2c 36 30 25 2c 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 58 7b 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 30 25 Data Ascii: ,70%,90%{-webkit-transform:translate3d(-10px,0,0);transform:translate3d(-10px,0,0)}20%,40%,60%,80%{-webkit-transform:translate3d(10px,0,0);transform:translate3d(10px,0,0)}}@keyframes shakeX{0%,to{-webkit-transform:translateZ(0);transform:translateZ(0)}10%
2024-07-10 01:44:16 UTC	1369	IN	Data Raw: 78 29 20 72 6f 74 61 74 65 59 28 37 64 65 67 29 7d 33 31 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 59 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 59 28 2d 35 64 65 67 29 7d 34 33 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: x) rotateY(7deg)}31.5%{-webkit-transform:translateX(-3px) rotateY(-5deg);transform:translateX(-3px) rotateY(-5deg)}43.5%{-webkit-transform:translateX(2px) rotateY(3deg);transform:translateX(2px) rotateY(3deg)}50%{-webkit-transform:translateX(0);transform:
2024-07-10 01:44:16 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 30 64 65 67 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 7d 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 73 77 69 6e 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 Data Ascii: ransform:rotate(-10deg);transform:rotate(-10deg)}60%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}.animate__swing{-webkit-transf
2024-07-10 01:44:16 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 Data Ascii: transform:translateZ(0)}15%{-webkit-transform:translate3d(-25%,0,0) rotate(-5deg);transform:translate3d(-25%,0,0) rotate(-5deg)}30%{-webkit-transform:translate3d(20%,0,0) rotate(3deg);transform:translate3d(20%,0,0) rotate(3deg)}45%{-webkit-transform:trans

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	104.17.25.14	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:15 UTC	569	OUT	GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ennexhorpps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:16 UTC	960	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:16 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec1-514" Last-Modified: Mon, 04 May 2020 16:11:45 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2276882 Expires: Mon, 30 Jun 2025 01:44:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y3YI9C9SK6bnEknbyiQIhgGT9HNF%2FP9OwaeYW1813Tyb7AH0wZvJrOMwhXhj1Q6OwQyuf156rdBQxI21Ps%2FMxBaIgAhJW7IvyXsWjc404uCmPGsCNRFZvua%2B%2BN5oEVPoNZMo5Ijd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8a0cde1c0ba53314-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:16 UTC	409	IN	Data Raw: 35 31 34 0d 0a 2f 2a 21 20 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 20 76 31 2e 34 2e 31 20 7c 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 61 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 61 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 72 65 74 75 72 6e 20 68 2e 72 61 77 3f 61 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 72 65 74 75 72 6e 20 68 2e 72 Data Ascii: 514/! jquery.cookie v1.4.1 \| MIT /!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?a(require("jquery")):a(jQuery)}(function(a){function b(a){return h.raw?a:encodeURIComponent(a)}function c(a){return h.r
2024-07-10 01:44:16 UTC	898	IN	Data Raw: 27 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 5c 5c 2f 67 2c 22 5c 5c 22 29 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 72 65 70 6c 61 63 65 28 67 2c 22 20 22 29 29 2c 68 2e 6a 73 6f 6e 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 3a 61 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 62 2c 63 29 7b 76 61 72 20 64 3d 68 2e 72 61 77 3f 62 3a 65 28 62 29 3b 72 65 74 75 72 6e 20 61 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 29 3f 63 28 64 29 3a 64 7d 76 61 72 20 67 3d 2f 5c 2b 2f 67 2c 68 3d 61 2e 63 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 67 2c 69 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 67 26 26 21 61 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 29 29 7b 69 66 28 69 3d 61 2e 65 Data Ascii: ').replace(/\\\\/g,"\\"));try{return a=decodeURIComponent(a.replace(g," ")),h.json?JSON.parse(a):a}catch(b){}}function f(b,c){var d=h.raw?b:e(b);return a.isFunction(c)?c(d):d}var g=/\+/g,h=a.cookie=function(e,g,i){if(void 0!==g&&!a.isFunction(g)){if(i=a.e
2024-07-10 01:44:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	151.101.130.137	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:15 UTC	533	OUT	GET /jquery-3.6.4.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ennexhorpps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:16 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89795 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15ec3" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 5500175 Date: Wed, 10 Jul 2024 01:44:16 GMT X-Served-By: cache-lga21953-LGA, cache-nyc-kteb1890049-NYC X-Cache: HIT, HIT X-Cache-Hits: 1355, 0 X-Timer: S1720575856.007949,VS0,VE1 Vary: Accept-Encoding
2024-07-10 01:44:16 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 34 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-07-10 01:44:16 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-07-10 01:44:16 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 79 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=y.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-07-10 01:44:16 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-07-10 01:44:16 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-07-10 01:44:16 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 76 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ve(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-07-10 01:44:16 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ve(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-07-10 01:44:16 UTC	1378	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f Data Ascii: "!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=functio
2024-07-10 01:44:16 UTC	1378	IN	Data Raw: 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 Data Ascii: ).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length\|\|y.push("\\["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|y.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|y.push(".#.+[+~]"),e.query
2024-07-10 01:44:16 UTC	1378	IN	Data Raw: 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 77 68 69 6c 65 28 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 74 3d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 6a 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 6e 3d 21 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 Data Ascii: ))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPositi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49743	18.245.31.89	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:15 UTC	534	OUT	GET /socket.io-3.0.1.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ennexhorpps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:16 UTC	707	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 62076 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io-3.0.1.min.js" Date: Tue, 02 Jul 2024 08:02:01 GMT ETag: "40ab217559e57f953aa43823f5db4634" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::cdvlx-1719907321779-93a3b95b0b43 X-Cache: Hit from cloudfront Via: 1.1 1feab8d6a8e5cc920c359b62fd33d3de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: Wav6mLnLebZiIPXdyhD-KRzgDkh81-o4nxU2yiXvD-9WcN_ru1CPmQ== Age: 668534
2024-07-10 01:44:16 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 33 2e 30 2e 31 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 30 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 Data Ascii: /! Socket.IO v3.0.1 * (c) 2014-2020 Guillermo Rauch * Released under the MIT License. */!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports
2024-07-10 01:44:16 UTC	16384	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 74 2c 74 68 69 73 29 3a 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 7d 7d 2c 7b 6b 65 79 3a 22 6d 61 79 62 65 52 65 63 6f 6e 6e 65 63 74 4f 6e 4f 70 65 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 21 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 26 26 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6f 6e 26 26 30 3d 3d 3d 74 68 69 73 2e 62 61 63 6b 6f 66 66 2e 61 74 74 65 6d 70 74 73 26 26 74 68 69 73 2e 72 65 63 6f 6e 6e 65 63 74 28 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 70 65 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 7e 74 68 69 73 2e 5f 72 65 61 64 79 53 74 61 74 65 2e 69 6e 64 65 78 4f 66 28 22 Data Ascii: ments.length?(this._timeout=t,this):this._timeout}},{key:"maybeReconnectOnOpen",value:function(){!this._reconnecting&&this._reconnection&&0===this.backoff.attempts&&this.reconnect()}},{key:"open",value:function(t){var e=this;if(~this._readyState.indexOf("
2024-07-10 01:44:16 UTC	16384	IN	Data Raw: 6c 6f 62 43 6f 6e 73 74 72 75 63 74 6f 72 5d 22 3d 3d 3d 69 2e 63 61 6c 6c 28 42 6c 6f 62 29 2c 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 46 69 6c 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 46 69 6c 65 26 26 22 5b 6f 62 6a 65 63 74 20 46 69 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 5d 22 3d 3d 3d 69 2e 63 61 6c 6c 28 46 69 6c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 72 65 74 75 72 6e 20 6f 26 26 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 3f 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 Data Ascii: lobConstructor]"===i.call(Blob),c="function"==typeof File\|\|"undefined"!=typeof File&&"[object FileConstructor]"===i.call(File);function a(t){return o&&(t instanceof ArrayBuffer\|\|function(t){return"function"==typeof ArrayBuffer.isView?ArrayBuffer.isView(t)
2024-07-10 01:44:16 UTC	12924	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 65 6d 69 74 28 22 64 61 74 61 22 2c 74 29 2c 74 68 69 73 2e 6f 6e 53 75 63 63 65 73 73 28 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 6e 45 72 72 6f 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 74 29 2c 74 68 69 73 2e 63 6c 65 61 6e 75 70 28 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 6e 75 70 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 78 68 72 26 26 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 78 68 72 29 7b 69 66 28 74 68 69 73 2e 68 61 73 58 44 52 28 29 3f 74 68 69 73 2e 78 68 72 2e 6f 6e 6c 6f 61 64 3d 74 68 69 73 2e 78 68 72 2e 6f 6e 65 72 72 6f 72 3d 6d 3a 74 68 69 73 2e 78 68 72 Data Ascii: unction(t){this.emit("data",t),this.onSuccess()}},{key:"onError",value:function(t){this.emit("error",t),this.cleanup(!0)}},{key:"cleanup",value:function(t){if(void 0!==this.xhr&&null!==this.xhr){if(this.hasXDR()?this.xhr.onload=this.xhr.onerror=m:this.xhr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	188.114.97.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:16 UTC	803	OUT	GET /socket.io/?EIO=4&transport=websocket HTTP/1.1 Host: ennexhorpps.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://ennexhorpps.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA Sec-WebSocket-Key: s/fJ6cIf0d+knToVZEAF+A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-10 01:44:17 UTC	653	IN	HTTP/1.1 400 BAD REQUEST Date: Wed, 10 Jul 2024 01:44:17 GMT Content-Type: text/plain Content-Length: 27 Connection: close Access-Control-Allow-Origin: https://ennexhorpps.com Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hpVYwGP1X9cwZZXEIwj7j8FqokYJOWpeMLVAFunj7yk7fW%2BVPkrSoDrek1vl8XPtQHX9FtTfYkp1vzI0qqWXj%2BkOERN6xC0xNnMiYOFhqNe5HRoJ4LLJYKI5lclhdQ98yYc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde2229151a28-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:17 UTC	27	IN	Data Raw: 22 49 6e 76 61 6c 69 64 20 77 65 62 73 6f 63 6b 65 74 20 75 70 67 72 61 64 65 22 Data Ascii: "Invalid websocket upgrade"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	188.114.97.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:17 UTC	990	OUT	GET /static/booking/favicon.ico HTTP/1.1 Host: ennexhorpps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ennexhorpps.com/sign-in?op_token=zOXLV7rAQ2nINTD54YAJF9Apo8Dv8JvpKlMaaaybSdzXywKpZmxso2VXRiyE1n8SxbGOKxxutHTJG3tUYfcyYqsEoMxwnSjRUuz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA
2024-07-10 01:44:17 UTC	762	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:17 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 610 Connection: close Content-Disposition: inline; filename=favicon.ico Last-Modified: Tue, 09 Jul 2024 17:34:25 GMT Cache-Control: max-age=14400 Etag: "1720546465.6908884-610-744427273" CF-Cache-Status: EXPIRED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fBRlFT0HRj%2BCc4a7CyZI%2BngBglnUYA8ULUJox9b50PAy%2BYIRM%2FEE%2Ffu5UukbBHhIE5aFHkNOqja1Ho1nP6teNlVoMM5yaN0qneQXl1fVDtyT16K2C3kux4LG4O7yONKuMTQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde22f94dc3f3-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:17 UTC	607	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 29 49 44 41 54 58 85 d5 97 3f 4c 1a 61 18 c6 7f 77 31 b0 1c 82 c9 0d 12 13 4b 53 89 9d 5a 18 ba 68 4d 8c 5d a4 8b ba d0 c1 10 b1 63 5d ba 52 17 16 db b9 31 76 a3 68 4c 17 bb c0 74 53 5b 5b aa 8b 83 d0 cd 48 83 31 69 5d 18 6c 64 b1 21 b1 03 70 70 78 fc b9 e3 e0 d2 67 e3 7b 73 f7 fc ee 7d bf ef 21 9f 40 4d d3 5b e3 c0 2e 30 05 0c d1 1f 95 81 43 20 c2 c1 da 39 80 50 35 0f 03 1f fa 68 ac 07 b2 cc c1 da 9e 50 fd f2 9f 03 34 6f 84 b8 27 52 69 fb a0 cd a9 7a ee 8a 54 66 6e 97 a6 44 ec f9 fa 9a 86 ba 32 f7 79 5d f8 46 87 35 6b fb c7 bf ac 21 e8 c6 3c 9b 7c 86 5b 72 e8 d6 d3 99 02 f1 f7 47 64 4f 8b a6 00 c4 76 45 8f e4 24 f5 26 d4 d2 1c 60 61 e6 2e fb 9b 8b Data Ascii: PNGIHDR szz)IDATX?Law1KSZhM]c]R1vhLtS[[H1i]ld!ppxg{s}!@M[.0C 9P5hP4o'RizTfnD2y]F5k!<\|[rGdOvE$&`a.
2024-07-10 01:44:17 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	18.245.31.129	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:17 UTC	624	OUT	GET /backend_static/common/flags/new/48-squared/us.png HTTP/1.1 Host: q-xx.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ennexhorpps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:17 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 642 Connection: close Server: nginx Date: Tue, 25 Jun 2024 14:00:11 GMT Last-Modified: Mon, 07 Sep 2020 10:40:08 GMT ETag: "5f560e08-282" Expires: Thu, 25 Jul 2024 14:00:11 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * X-Cache: Hit from cloudfront Via: 1.1 4bf44796811ecea5881c6668d3aa9226.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: EMkfiFjtXgQpaiSH4L1dg0QFZvGYuitXaEmWrtInQwHR_F6jS1B15w== Age: 1251846
2024-07-10 01:44:17 UTC	642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 75 50 4c 54 45 b4 1f 30 3c 39 70 b4 1f 30 97 27 40 ff ff ff b4 1f 30 3c 3a 70 d0 73 7d 54 53 82 ec c7 cb e3 ab b1 61 5f 8b 48 46 79 6d 6b 94 49 46 79 be 3b 49 91 90 ae c2 c2 d2 79 78 9c 85 84 a6 48 47 79 9d 9c b7 aa a9 c0 b6 b5 c9 c7 57 64 f3 f3 f6 db da e4 ce cd db 96 26 40 e7 e7 ed 6d 6b 93 9e 9d b7 ce ce db a1 47 5e b5 b5 c9 9e 9c b8 c0 a4 b4 b7 87 9a ae 6c 81 d6 1f 19 b1 00 00 00 04 74 52 4e 53 df bf bf bf 3b 25 6a 12 00 00 01 b8 49 44 41 54 48 c7 8c d4 61 93 94 30 0c 06 60 d4 f5 35 9a 14 4b 69 41 38 d9 dd bb 53 ff ff 4f b4 79 b9 b9 ce c0 ce 68 3e 3c d3 81 09 34 a4 a1 fb f0 1f f1 e9 63 8b 0e 30 83 87 50 6d eb 76 e5 e7 e7 16 1d fa 69 10 bc 89 69 Data Ascii: PNGIHDR00`uPLTE0<9p0'@0<:ps}TSa_HFymkIFy;IyxHGyWd&@mkG^ltRNS;%jIDATHa0`5KiA8SOyh><4c0Pmvii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-10 01:44:18 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=51962 Date: Wed, 10 Jul 2024 01:44:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49758	188.114.97.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:18 UTC	803	OUT	GET /socket.io/?EIO=4&transport=websocket HTTP/1.1 Host: ennexhorpps.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://ennexhorpps.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA Sec-WebSocket-Key: yO/SlrMvweJ4j1OafrV/ag== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-10 01:44:18 UTC	659	IN	HTTP/1.1 400 BAD REQUEST Date: Wed, 10 Jul 2024 01:44:18 GMT Content-Type: text/plain Content-Length: 27 Connection: close Access-Control-Allow-Origin: https://ennexhorpps.com Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=daggy%2FcOXv2eI9Y55lAWSMbRkStTNbXUrUQavEZxxZ%2FL5fnYQ9xSGFq%2BqrzwZ8LTARsUaJ3IcyMxmAag0xfXZjd1lP%2FukXKVaqpffTkn5CbKJ6e7GSce1OGv6FloRN%2FW4ls%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde2b9d3b43d3-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:18 UTC	27	IN	Data Raw: 22 49 6e 76 61 6c 69 64 20 77 65 62 73 6f 63 6b 65 74 20 75 70 67 72 61 64 65 22 Data Ascii: "Invalid websocket upgrade"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49761	188.114.96.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:18 UTC	638	OUT	GET /static/booking/favicon.ico HTTP/1.1 Host: ennexhorpps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA
2024-07-10 01:44:18 UTC	764	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:18 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 610 Connection: close Content-Disposition: inline; filename=favicon.ico Last-Modified: Tue, 09 Jul 2024 17:34:25 GMT Cache-Control: max-age=14400 Etag: "1720546465.6908884-610-744427273" CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sTLGqsPzHU831t%2BjNVnHKX4rVh%2FznL%2B4UNlZbOSFJeuDMr7G0VeVPWs0j3YTAxR4U3fI2IHfKMZNfaS4vRNZNvqKkAi%2BoQYiB7diyfSXd5Dru85DRDYn929oTs7YEtHGUxg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde2cfc014384-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:18 UTC	605	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 29 49 44 41 54 58 85 d5 97 3f 4c 1a 61 18 c6 7f 77 31 b0 1c 82 c9 0d 12 13 4b 53 89 9d 5a 18 ba 68 4d 8c 5d a4 8b ba d0 c1 10 b1 63 5d ba 52 17 16 db b9 31 76 a3 68 4c 17 bb c0 74 53 5b 5b aa 8b 83 d0 cd 48 83 31 69 5d 18 6c 64 b1 21 b1 03 70 70 78 fc b9 e3 e0 d2 67 e3 7b 73 f7 fc ee 7d bf ef 21 9f 40 4d d3 5b e3 c0 2e 30 05 0c d1 1f 95 81 43 20 c2 c1 da 39 80 50 35 0f 03 1f fa 68 ac 07 b2 cc c1 da 9e 50 fd f2 9f 03 34 6f 84 b8 27 52 69 fb a0 cd a9 7a ee 8a 54 66 6e 97 a6 44 ec f9 fa 9a 86 ba 32 f7 79 5d f8 46 87 35 6b fb c7 bf ac 21 e8 c6 3c 9b 7c 86 5b 72 e8 d6 d3 99 02 f1 f7 47 64 4f 8b a6 00 c4 76 45 8f e4 24 f5 26 d4 d2 1c 60 61 e6 2e fb 9b 8b Data Ascii: PNGIHDR szz)IDATX?Law1KSZhM]c]R1vhLtS[[H1i]ld!ppxg{s}!@M[.0C 9P5hP4o'RizTfnD2y]F5k!<\|[rGdOvE$&`a.
2024-07-10 01:44:18 UTC	5	IN	Data Raw: 44 ae 42 60 82 Data Ascii: DB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49759	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-10 01:44:19 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=51894 Date: Wed, 10 Jul 2024 01:44:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-10 01:44:19 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49760	18.245.31.129	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:18 UTC	389	OUT	GET /backend_static/common/flags/new/48-squared/us.png HTTP/1.1 Host: q-xx.bstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:19 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 642 Connection: close Server: nginx Date: Tue, 25 Jun 2024 14:00:11 GMT Last-Modified: Mon, 07 Sep 2020 10:40:08 GMT ETag: "5f560e08-282" Expires: Thu, 25 Jul 2024 14:00:11 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * X-Cache: Hit from cloudfront Via: 1.1 193d38535c6cb246e365763e9c32e672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: WaiRY2CrtQp4NT58M6R6nv1j3Fpsddr2WQfIRWzCF5xGYD_SpBXL9Q== Age: 1251848
2024-07-10 01:44:19 UTC	642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 75 50 4c 54 45 b4 1f 30 3c 39 70 b4 1f 30 97 27 40 ff ff ff b4 1f 30 3c 3a 70 d0 73 7d 54 53 82 ec c7 cb e3 ab b1 61 5f 8b 48 46 79 6d 6b 94 49 46 79 be 3b 49 91 90 ae c2 c2 d2 79 78 9c 85 84 a6 48 47 79 9d 9c b7 aa a9 c0 b6 b5 c9 c7 57 64 f3 f3 f6 db da e4 ce cd db 96 26 40 e7 e7 ed 6d 6b 93 9e 9d b7 ce ce db a1 47 5e b5 b5 c9 9e 9c b8 c0 a4 b4 b7 87 9a ae 6c 81 d6 1f 19 b1 00 00 00 04 74 52 4e 53 df bf bf bf 3b 25 6a 12 00 00 01 b8 49 44 41 54 48 c7 8c d4 61 93 94 30 0c 06 60 d4 f5 35 9a 14 4b 69 41 38 d9 dd bb 53 ff ff 4f b4 79 b9 b9 ce c0 ce 68 3e 3c d3 81 09 34 a4 a1 fb f0 1f f1 e9 63 8b 0e 30 83 87 50 6d eb 76 e5 e7 e7 16 1d fa 69 10 bc 89 69 Data Ascii: PNGIHDR00`uPLTE0<9p0'@0<:ps}TSa_HFymkIFy;IyxHGyWd&@mkG^ltRNS;%jIDATHa0`5KiA8SOyh><4c0Pmvii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	188.114.97.3	443	4348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:22 UTC	803	OUT	GET /socket.io/?EIO=4&transport=websocket HTTP/1.1 Host: ennexhorpps.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://ennexhorpps.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA Sec-WebSocket-Key: aRzQDdHJPjes2/GLQA0SUQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-10 01:44:22 UTC	653	IN	HTTP/1.1 400 BAD REQUEST Date: Wed, 10 Jul 2024 01:44:22 GMT Content-Type: text/plain Content-Length: 27 Connection: close Access-Control-Allow-Origin: https://ennexhorpps.com Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pklSB6Ve27uodZqcYpH1H27An6m0HLv06B1y8WApVjWyoq1%2BtvxWsf7NuxgxFFEomBDIEewMqShmhxqPTQ6offF4sECLvzzOFbaTpCT1TvIHA%2FWSUk5WMfIJ79dMVeYZPqE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde43b803c41b-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:22 UTC	27	IN	Data Raw: 22 49 6e 76 61 6c 69 64 20 77 65 62 73 6f 63 6b 65 74 20 75 70 67 72 61 64 65 22 Data Ascii: "Invalid websocket upgrade"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49768	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:26 UTC	678	OUT	GET /en-us?utm_source=extranet_login_page HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:27 UTC	2245	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Length: 283233 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:26 GMT Vary: Accept-Encoding x-content-type-options: nosniff vary: X-Forwarded-Proto,Cookie cache-control: max-age=2764800, public, s-maxage=2764800 x-drupal-dynamic-cache: UNCACHEABLE content-language: en-us x-frame-options: SAMEORIGIN expires: Sun, 19 Nov 1978 05:00:00 GMT last-modified: Wed, 10 Jul 2024 01:37:09 GMT etag: "1720575429" x-generator: Drupal 10 (https://www.drupal.org) cache-tags: fQEX k_Tz Xou0 GJxB AWdO 21qK sUVS 9fG4 7eMp EWM_ Ekbv Ey9p hli2 Cqjb qSVj y_wT w9KO f0XF FdHY W4wn ALIC 6FKK wAOz tjpR sMNG plB8 plHS WeKK c6Fq HXYD LOOH B1HR KL7M C-Gx CffH T9P4 4CZc B71G xa3g MBWz J3qc v_qA BLfI 6TZ_ F7Iv uEfh yHRg C7FX fwyz -7xA F1nB fB96 0pgW ZMJ8 vhRI -R3z DFos rDqw MvV3 CaK4 A5cI 2scP eeGG twcp Kwao Ljk4 ng5R CKC6 zl-1 ch2N 5Fbc 1TK0 5FnF 5_kf X_iJ pH05 8jW6 CpOm hEV8 ygdR bPFv UWiH WcJO sAnF IK_N Pp34 JqC5 R9Bp 8DVd hmWD Tf1e tvxk yuXc HUhR oUN7 eX-q qDM- SJQy vJh8 K6lJ JbXV bZk- sshE mtV8 eTe5 DG9y 5V8E niIL xgTq GkYU WPjs LGaQ KEyU qZAY a5dM e-Bj 73TU SCU9 RBMz ptte Bz0F OpPG k2D- 3fUw UqP0 MJwG Drj5 IZrf oJMo fl3n 2SYW wfKt oBbK EU0w JN3G fryN odpt ycRE uHr1 NklF BF33 5K-x Zyex xuh0 O1PF VJfL 3Vgk XFud 7pjX --0T zekn Z8D0 z_12 KW9o qphX MZkg Lzye DbSF ODyk hRA4 xHtc x5eU Agfx hRAk b5Ml IKp7 dSlC 9qyq sbdI zTw0 nxVs oEUd uNmJ _Six zu6i SmbE XKUO qLwN QBaD 9wv5 R208 MLEL IdxB xF_v wHPi 2DH4 NgoD GOcR DdEc ctIX 3FNs wV_e VjtB mMpR tjAa lSFi KUBL UE68 fm3q YsSx B4xN lico iA [TRUNCATED] content-security-policy: report-uri /report-csp-violation; upgrade-insecure-requests x-xss-protection: 1; mode=block x-webserver: webserver/1 X-Varnish-Storage: Malloc X-Url: /en-us X-Host: partner.booking.com X-Varnish: 230267860 230330227 Via: 1.1 varnish (Varnish/6.6), 1.1 9c920cc684a38b53bc9c7a44ba794874.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Pnf_smRKEedoKULpEBZZkLMFG9qjle-0dsYHaBil4GfBXcGGWh6Vng== Age: 435 Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:27 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://sch
2024-07-10 01:44:27 UTC	1514	IN	Data Raw: 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 74 61 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 77 69 64 74 68 5f 31 30 30 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 74 61 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 5f 31 30 30 29 7d 2e 62 75 69 2d 62 75 74 74 6f 6e 3a 6c 69 6e 6b 2c 2e 62 75 69 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 63 74 61 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 74 Data Ascii: t:0;left:0;background-color:var(--bui_color_cta_background);border:var(--bui_border_width_100) solid var(--bui_color_cta_background);border-radius:var(--bui_border_radius_100)}.bui-button:link,.bui-button:visited{color:var(--bui_color_on_cta_background);t
2024-07-10 01:44:27 UTC	16384	IN	Data Raw: 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 31 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 31 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 31 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 7d 2e 62 75 69 2d 63 61 72 64 5f 5f 73 75 62 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 62 6f 64 Data Ascii: ght:var(--DO_NOT_USE_bui_large_font_strong_1_font-weight);line-height:var(--DO_NOT_USE_bui_large_font_strong_1_line-height);font-family:var(--DO_NOT_USE_bui_large_font_strong_1_font-family)}.bui-card__subtitle{font-size:var(--DO_NOT_USE_bui_large_font_bod
2024-07-10 01:44:27 UTC	16384	IN	Data Raw: 6f 77 5f 32 30 30 3a 30 70 78 20 32 70 78 20 31 36 70 78 20 30 70 78 20 72 67 62 61 28 32 36 2c 32 36 2c 32 36 2c 30 2e 32 34 29 3b 2d 2d 62 75 69 5f 73 68 61 64 6f 77 5f 33 30 30 3a 30 70 78 20 34 70 78 20 31 36 70 78 20 30 70 78 20 72 67 62 61 28 32 36 2c 32 36 2c 32 36 2c 30 2e 33 32 29 3b 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 3a 34 70 78 3b 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 3a 38 70 78 3b 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 3a 31 32 70 78 3b 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 3a 31 36 70 78 3b 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 36 78 3a 32 34 70 78 3b 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 38 78 3a 33 32 70 78 3b 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 32 78 3a 34 38 70 78 3b 2d 2d 62 75 Data Ascii: ow_200:0px 2px 16px 0px rgba(26,26,26,0.24);--bui_shadow_300:0px 4px 16px 0px rgba(26,26,26,0.32);--bui_spacing_1x:4px;--bui_spacing_2x:8px;--bui_spacing_3x:12px;--bui_spacing_4x:16px;--bui_spacing_6x:24px;--bui_spacing_8x:32px;--bui_spacing_12x:48px;--bu
2024-07-10 01:44:27 UTC	16384	IN	Data Raw: 41 72 69 6d 6f 20 52 65 67 75 6c 61 72 2c 4b 61 6e 69 74 20 52 65 67 75 6c 61 72 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 66 65 61 74 75 72 65 64 5f 33 5f 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 66 65 61 74 75 72 65 64 5f 33 5f 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 66 65 61 74 75 72 65 64 5f 33 5f 6c 69 6e Data Ascii: Arimo Regular,Kanit Regular,BlinkMacSystemFont,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;--DO_NOT_USE_bui_large_font_featured_3_font-size:20px;--DO_NOT_USE_bui_large_font_featured_3_font-weight:400;--DO_NOT_USE_bui_large_font_featured_3_lin
2024-07-10 01:44:27 UTC	5608	IN	Data Raw: 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6e 6f 64 65 2d 2d 76 69 65 77 2d 6d 6f 64 65 2d 6d 65 6e 75 2d 74 65 61 73 65 72 5f 5f 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 7d 2e 61 75 74 68 6f 72 2d 62 6c 6f 63 6b 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 61 75 74 68 6f 72 2d 62 6c 6f 63 6b 20 2e 61 75 74 68 6f 72 2d 62 6c 6f 63 6b 5f 5f 61 76 61 74 61 72 7b 2d Data Ascii: e{margin-bottom:0}.node--view-mode-menu-teaser__text{font-size:12px;line-height:18px}.author-block{-webkit-box-align:center;-ms-flex-align:center;align-items:center;display:-webkit-box;display:-ms-flexbox;display:flex}.author-block .author-block__avatar{-
2024-07-10 01:44:27 UTC	16384	IN	Data Raw: 69 67 68 74 3a 33 36 70 78 7d 2e 68 65 61 64 65 72 20 2e 62 6c 6f 63 6b 2d 73 65 61 72 63 68 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 74 65 78 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 64 69 73 61 62 6c 65 64 29 7d 2e 68 65 61 64 65 72 20 2e 62 6c 6f 63 6b 2d 73 65 61 72 63 68 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 74 65 78 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 64 69 73 61 62 6c 65 64 29 7d 2e 68 65 61 64 65 72 20 2e 62 6c 6f 63 6b 2d 73 65 61 72 63 68 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 74 65 78 74 3a Data Ascii: ight:36px}.header .block-search-form .form-text::-webkit-input-placeholder{color:var(--bui_color_foreground_disabled)}.header .block-search-form .form-text::-moz-placeholder{color:var(--bui_color_foreground_disabled)}.header .block-search-form .form-text:
2024-07-10 01:44:27 UTC	5484	IN	Data Raw: 64 64 69 6e 67 3a 32 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 38 70 78 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 35 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 35 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 35 25 29 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 33 32 70 78 29 7d 2e 68 65 61 64 65 72 20 2e 62 6c 6f 63 6b 2d 73 65 61 72 63 68 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 74 79 70 65 2d 74 65 78 74 66 69 65 6c 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 Data Ascii: dding:24px;position:absolute;right:0;top:calc(100% - 8px);-webkit-transform:translateY(-15%);-ms-transform:translateY(-15%);transform:translateY(-15%);visibility:hidden;width:calc(100% - 32px)}.header .block-search-form .form-type-textfield{position:relat
2024-07-10 01:44:27 UTC	16384	IN	Data Raw: 73 73 2f 63 73 73 5f 38 78 72 58 54 41 69 71 68 4b 35 52 31 39 4e 32 63 49 37 78 6f 58 59 54 59 53 4c 54 44 50 33 64 58 36 59 57 39 74 4d 38 6c 4d 30 2e 63 73 73 3f 64 65 6c 74 61 3d 31 26 61 6d 70 3b 6c 61 6e 67 75 61 67 65 3d 65 6e 2d 75 73 26 61 6d 70 3b 74 68 65 6d 65 3d 62 6f 6f 6b 69 6e 67 26 61 6d 70 3b 69 6e 63 6c 75 64 65 3d 65 4a 78 31 55 51 74 75 77 79 41 4d 76 52 43 45 49 31 55 47 33 4d 42 43 4d 44 49 6d 62 58 62 36 6b 61 34 74 61 37 64 4a 79 4d 4b 66 35 2d 64 6e 67 5f 64 43 6b 48 63 44 39 38 39 30 5a 73 71 69 50 41 67 6b 32 4a 47 4e 78 51 42 62 4a 4b 34 71 77 65 64 75 44 71 50 71 58 67 56 58 59 36 47 69 73 6b 52 4c 7a 4c 4f 78 4c 57 70 58 36 37 75 76 68 57 48 44 6c 4a 42 31 69 6e 4d 51 4c 51 48 58 67 5a 6f 54 57 55 67 76 6f 49 5f 52 77 78 47 Data Ascii: ss/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG
2024-07-10 01:44:27 UTC	16384	IN	Data Raw: 22 36 30 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 31 32 38 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 62 75 74 74 6f 6e 20 64 61 74 61 2d 74 77 69 67 2d 73 75 67 67 65 73 74 69 6f 6e 3d 22 73 65 61 72 63 68 5f 73 75 62 6d 69 74 22 20 64 61 74 61 2d 64 72 75 70 61 6c 2d 73 65 6c 65 63 74 6f 72 3d 22 65 64 69 74 2d 73 75 62 6d 69 74 22 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 69 64 3d 22 65 64 69 74 2d 73 75 62 6d 69 74 2d 2d 32 22 20 6e 61 6d 65 3d 22 6f 70 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 22 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 20 6a 73 2d 66 6f 72 6d 2d 73 75 62 6d 69 74 20 66 6f 72 6d 2d 73 75 62 6d 69 74 20 62 75 69 2d 62 75 74 74 6f 6e 22 3e 0a 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 75 69 2d Data Ascii: "60" maxlength="128" /> </div><button data-twig-suggestion="search_submit" data-drupal-selector="edit-submit" type="submit" id="edit-submit--2" name="op" value="Search" class="button js-form-submit form-submit bui-button"> <span class="bui-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49767	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:27 UTC	643	OUT	GET /themes/custom/booking/fonts/icons/icons.woff?v=1.3.3 HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://partner.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:27 UTC	925	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 11392 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:27 GMT last-modified: Thu, 04 Jul 2024 09:16:17 GMT etag: "66866861-2c80" X-Url: /themes/custom/booking/fonts/icons/icons.woff?v=1.3.3 X-Host: partner.booking.com X-Varnish-Storage: File cache-control: max-age=2628000, public expires: 2628000 X-Varnish: 230299013 218761853 Via: 1.1 varnish (Varnish/6.6), 1.1 da78abc509aafffb42eec33ca2dc60d4.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: a1FHrlL8mYT7_3E6M5MCeOJE7TjZtInKI_-YuPVYA8RnW8O5uRughQ== Age: 58462 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:27 UTC	11392	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 2c 80 00 0b 00 00 00 00 4e 90 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 53 55 42 00 00 01 08 00 00 00 3b 00 00 00 54 20 8b 25 7a 4f 53 2f 32 00 00 01 44 00 00 00 42 00 00 00 56 36 22 48 d8 63 6d 61 70 00 00 01 88 00 00 01 78 00 00 05 60 e6 ff ce b5 67 6c 79 66 00 00 03 00 00 00 24 47 00 00 3e 44 0f 78 87 b4 68 65 61 64 00 00 27 48 00 00 00 33 00 00 00 36 2b c5 6c b3 68 68 65 61 00 00 27 7c 00 00 00 1e 00 00 00 24 0c 72 08 cf 68 6d 74 78 00 00 27 9c 00 00 00 43 00 00 01 28 23 56 ff f8 6c 6f 63 61 00 00 27 e0 00 00 00 96 00 00 00 96 67 26 59 f6 6d 61 78 70 00 00 28 78 00 00 00 1f 00 00 00 20 01 81 02 93 6e 61 6d 65 00 00 28 98 00 00 01 1d 00 00 01 f2 14 db c2 f8 70 6f 73 74 00 00 29 b8 00 00 02 Data Ascii: wOFF,NGSUB;T %zOS/2DBV6"Hcmapx`glyf$G>Dxhead'H36+lhhea'\|$rhmtx'C(#Vloca'g&Ymaxp(x name(post)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49770	188.114.97.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:27 UTC	803	OUT	GET /socket.io/?EIO=4&transport=websocket HTTP/1.1 Host: ennexhorpps.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://ennexhorpps.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA Sec-WebSocket-Key: XoQTcXdIixvtgzb62DpjxQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-10 01:44:27 UTC	657	IN	HTTP/1.1 400 BAD REQUEST Date: Wed, 10 Jul 2024 01:44:27 GMT Content-Type: text/plain Content-Length: 27 Connection: close Access-Control-Allow-Origin: https://ennexhorpps.com Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ySBcVF%2BqLsyH2GXoR%2BLQ8AFQ82GITyPMmfAoSKPSByXi09dyb4j3DRzJ9Yoy7hUuPG%2BbjhaeRpdeAgMtyt3paspYVDEvu33AriiXaTcBGP1ZGWF%2Fj2RHSYsaQBcHzle0Ndk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde640f4b0ca1-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:27 UTC	27	IN	Data Raw: 22 49 6e 76 61 6c 69 64 20 77 65 62 73 6f 63 6b 65 74 20 75 70 67 72 61 64 65 22 Data Ascii: "Invalid websocket upgrade"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49772	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:27 UTC	579	OUT	GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/OtAutoBlock.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:27 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:27 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a0cde64bb6a42f1-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 56242 Cache-Control: public, max-age=86400 Expires: Thu, 11 Jul 2024 01:44:27 GMT Last-Modified: Tue, 14 May 2024 12:26:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: xooZp6TemLhnIeMPp4lK1w== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c6d08f03-a01e-00a7-42f9-a5788a000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-10 01:44:27 UTC	467	IN	Data Raw: 32 38 31 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 63 3d 5b 5d 2c 62 3d 5b 5d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 7b 7d 2c 68 3d 30 3b 68 3c 75 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 64 3d 75 5b 68 5d 3b 69 66 28 64 2e 54 61 67 3d 3d 3d 66 29 7b 67 3d 64 3b 62 72 65 61 6b 7d 76 61 72 20 6c 3d 76 6f 69 64 20 30 2c 6b 3d 64 2e 54 61 67 3b 76 61 72 20 43 3d 28 6b 3d 2d 31 21 3d 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 3a 22 29 3f 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 3a 22 2c 22 22 29 3a 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 73 3a 22 2c 22 22 29 2c 2d 31 21 3d 3d 28 6c 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 3f 6b 2e 72 65 Data Ascii: 2819!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.re
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 0a 72 65 74 75 72 6e 20 6c 2e 68 72 65 66 3d 64 2c 2d 31 21 3d 3d 28 64 3d 6c 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 29 2e 69 6e 64 65 78 4f 66 28 22 77 77 77 22 29 7c 7c 32 3c 64 2e 6c 65 6e 67 74 68 3f 64 2e 73 6c 69 63 65 28 31 29 2e 6a 6f 69 6e 28 22 2e 22 29 3a 6c 2e 68 6f 73 74 6e 61 6d 65 7d 28 66 29 3b 76 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 3d 3d 3d 68 7d 29 26 26 28 67 3d 5b 22 43 30 30 30 34 22 5d 29 3b 72 65 74 75 72 6e 20 67 7d 28 61 29 29 2c 7b 63 61 74 65 67 6f 72 79 49 64 73 3a 63 2c 76 73 43 61 74 49 64 73 3a 62 7d 7d 66 75 6e 63 74 69 6f Data Ascii: =function(d){var l=document.createElement("a");return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(function(d){return d===h})&&(g=["C0004"]);return g}(a)),{categoryIds:c,vsCatIds:b}}functio
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 73 72 63 7c 7c 22 22 29 3b 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2e 6c 65 6e 67 74 68 7c 7c 62 2e 76 73 43 61 74 49 64 73 2e 6c 65 6e 67 74 68 29 26 26 28 78 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 61 2c 62 2e 76 73 43 61 74 49 64 73 29 2c 6d 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 62 2e 76 73 43 61 74 49 64 73 29 7c 7c 28 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 29 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 73 63 72 69 70 74 65 78 65 63 75 74 65 22 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 74 65 78 74 2f 70 6c 61 69 6e 22 3d 3d 3d 0a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 61 2e 72 65 6d 6f 76 Data Ascii: src\|\|"");(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.type="text/plain"),a.addEventListener("beforescriptexecute",c=function(e){"text/plain"===a.getAttribute("type")&&e.preventDefault();a.remov
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 2f 66 69 6c 65 73 2f 6a 73 2f 6a 73 5f 69 30 68 53 75 4b 6e 4b 43 49 41 32 68 34 42 55 61 49 45 33 64 42 49 5a 70 65 69 4e 34 30 65 39 67 4c 62 44 38 76 39 52 7a 5f 4d 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 74 72 79 2e 61 62 74 61 73 74 79 2e 63 6f 6d 2f 37 31 63 64 31 32 63 64 66 37 37 65 62 63 62 37 35 30 63 66 66 39 31 61 39 62 62 61 36 66 30 34 2f 6d 61 69 6e 2e 61 38 39 31 36 65 31 30 34 31 34 65 66 31 30 64 64 38 66 38 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 77 Data Ascii: efault/files/js/js_i0hSuKnKCIA2h4BUaIE3dBIZpeiN40e9gLbD8v9Rz_M.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71cd12cdf77ebcb750cff91a9bba6f04/main.a8916e10414ef10dd8f8.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://w
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 79 49 64 22 3a 5b 22 43 30 30 30 32 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 70 78 2e 61 64 73 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f 6c 6c 65 63 74 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 73 69 74 65 73 2f 64 65 66 61 75 6c 74 2f 66 69 6c 65 73 2f 6a 73 2f 6a 73 5f 44 61 30 4f 78 37 6e 37 34 47 33 2d 50 31 72 53 71 43 53 58 61 4e 57 32 52 70 6d 39 56 6f 65 4b 79 59 65 48 39 50 2d 41 31 55 63 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 5d 2c 22 56 65 6e 64 6f 72 22 3a Data Ascii: yId":["C0002"],"Vendor":null},{"Tag":"https://px.ads.linkedin.com/collect","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://partner.booking.com/sites/default/files/js/js_Da0Ox7n74G3-P1rSqCSXaNW2Rpm9VoeKyYeH9P-A1Uc.js","CategoryId":["C0002"],"Vendor":
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 73 69 74 65 73 2f 64 65 66 61 75 6c 74 2f 66 69 6c 65 73 2f 6a 73 2f 6a 73 5f 72 78 6e 33 7a 56 71 41 66 6d 6f 71 35 6b 62 47 45 79 36 64 70 78 6d 51 42 7a 51 75 51 6a 73 66 76 78 48 6f 5f 5a 52 6e 42 48 67 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 6f 6e 72 74 70 31 2e 6d 61 72 6b 65 74 6f 2e 63 6f 6d 2f 67 77 31 2f 74 72 77 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 Data Ascii: egoryId":["C0002"],"Vendor":null},{"Tag":"https://partner.booking.com/sites/default/files/js/js_rxn3zVqAfmoq5kbGEy6dpxmQBzQuQjsfvxHo_ZRnBHg.js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://lonrtp1.marketo.com/gw1/trw","CategoryId":["C0004"],"Vend
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 65 76 67 6e 65 74 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 62 6f 6f 6b 69 6e 67 64 6f 74 63 6f 6d 62 32 62 2f 62 6f 6f 6b 69 6e 67 5f 70 72 6f 64 2f 73 63 72 69 70 74 73 2f 65 76 65 72 67 61 67 65 2e 6d 69 6e 2e 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 34 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 67 74 6d 2f 6a 73 22 2c 22 43 61 74 65 67 6f 72 79 49 64 22 3a 5b 22 43 30 30 30 32 22 5d 2c 22 56 65 6e 64 6f 72 22 3a 6e 75 6c 6c 7d 2c 7b 22 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 74 72 79 2e 61 62 74 61 73 74 79 2e 63 6f 6d 2f 37 31 63 Data Ascii: },{"Tag":"https://cdn.evgnet.com/beacon/bookingdotcomb2b/booking_prod/scripts/evergage.min.js","CategoryId":["C0004"],"Vendor":null},{"Tag":"https://www.google-analytics.com/gtm/js","CategoryId":["C0002"],"Vendor":null},{"Tag":"https://try.abtasty.com/71c
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 28 29 3f 7a 28 62 29 3a 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 63 2e 74 61 72 67 65 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 41 28 62 29 29 7d 29 7d 29 29 2e 6f 62 73 65 72 76 65 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 2c 61 74 74 72 69 62 75 74 65 73 3a 21 30 2c 0a 61 74 74 72 69 62 75 74 65 46 69 6c 74 65 72 3a 5b 22 73 72 63 22 5d 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 2c 63 2c 62 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e Data Ascii: ()?z(b):-1!==t.indexOf(c.target.nodeName.toLowerCase())&&A(b))})})).observe(document.documentElement,{childList:!0,subtree:!0,attributes:!0,attributeFilter:["src"]}),document.createElement);document.createElement=function(){for(var a,c,b=[],e=0;e<argumen
2024-07-10 01:44:27 UTC	223	IN	Data Raw: 28 67 29 7c 7c 6d 28 64 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 64 2e 76 73 43 61 74 49 64 73 29 7c 7c 70 28 67 29 3f 68 28 22 63 6c 61 73 73 22 2c 66 29 3a 68 28 22 63 6c 61 73 73 22 2c 79 28 64 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 66 2c 64 2e 76 73 43 61 74 49 64 73 29 29 2c 21 30 3b 76 61 72 20 67 2c 68 2c 64 7d 7d 7d 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 22 74 79 70 65 22 21 3d 3d 66 26 26 22 73 72 63 22 21 3d 3d 66 7c 7c 68 3f 63 28 66 2c 67 29 3a 61 5b 66 5d 3d 67 7d 2c 61 29 3a 42 2e 62 69 6e 64 28 64 6f 63 75 6d 65 6e 74 29 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 62 29 7d 7d 28 29 3b 0d 0a Data Ascii: (g)\|\|m(d.categoryIds,d.vsCatIds)\|\|p(g)?h("class",f):h("class",y(d.categoryIds,f,d.vsCatIds)),!0;var g,h,d}}}),a.setAttribute=function(f,g,h){"type"!==f&&"src"!==f\|\|h?c(f,g):a[f]=g},a):B.bind(document).apply(void 0,b)}}();
2024-07-10 01:44:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49771	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:27 UTC	548	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:27 UTC	815	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: XOljGHrVMK6J8mT+Nl48OQ== Last-Modified: Mon, 08 Jul 2024 18:08:04 GMT x-ms-request-id: d7e1803d-b01e-00d2-1967-d12dd2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 36577 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a0cde64ee4a43b1-EWR
2024-07-10 01:44:27 UTC	554	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 44 6f 6d 61 69 6e 49 64 5d 5d 22 2c 74 68 Data Ascii: HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",th
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 74 2c 65 5d 29 2c 22 73 74 79 6c 65 Data Ascii: his.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this,[t,e]),"style
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 28 69 3d 73 2e 77 69 6e 29 3f Data Ascii: oveGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=null==(i=s.win)?
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 64 2b 2b 2c 6e 2e 65 76 65 6e 74 73 2e 70 Data Ascii: name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastId++,n.events.p
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 Data Ascii: ce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")\|\|null,this.pr
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 Data Ascii: ponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScri
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f Data Ascii: e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.o
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 52 75 Data Ascii: on,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var l=t.Ru
2024-07-10 01:44:27 UTC	1369	IN	Data Raw: 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 72 75 65 22 3d 3d 3d 74 3a 70 2e 6f 6e 65 Data Ascii: tCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="true"===t:p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49775	142.250.185.238	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:27 UTC	551	OUT	GET /optimize.js?id=GTM-MVTHSWF HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:28 UTC	608	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Wed, 10 Jul 2024 01:44:27 GMT Expires: Wed, 10 Jul 2024 01:44:27 GMT Cache-Control: private, max-age=900 Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-07-10 01:44:28 UTC	782	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 39 32 33 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 2c 7b 22 76 74 70 5f 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 4f 50 54 2d 4d 56 54 48 53 57 46 5f 4f 50 54 2d 54 33 44 32 4a 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 66 61 6c 73 65 7d Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"923", "macros":[{"function":"__e"},{"function":"__dee"},{"vtp_experimentKey":"OPT-MVTHSWF_OPT-T3D2J","function":"__c","vtp_value":false}
2024-07-10 01:44:28 UTC	1390	IN	Data Raw: 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 61 73 70 72 76 22 2c 22 76 74 70 5f 67 6c 6f 62 61 6c 4e 61 6d 65 22 3a 22 67 6f 6f 67 6c 65 5f 6f 70 74 69 6d 69 7a 65 22 2c 22 76 74 70 5f 6c 69 73 74 65 6e 46 6f 72 4d 75 74 61 74 69 6f 6e 73 22 3a 66 61 6c 73 65 2c 22 74 61 67 5f 69 64 22 3a 31 33 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 61 73 70 72 76 22 2c 22 74 61 67 5f 69 64 22 3a 31 34 7d 5d 2c 0a 20 20 22 70 72 65 64 69 63 61 74 65 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 65 71 22 2c 22 61 72 67 30 22 3a 5b 22 6d 61 63 72 6f 22 2c 30 5d 2c 22 61 72 67 31 22 3a 5b 22 6d 61 63 72 6f 22 2c 31 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 65 71 22 2c 22 61 72 67 30 22 3a 5b 22 6d 61 63 Data Ascii: }], "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":13},{"function":"__asprv","tag_id":14}], "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]},{"function":"_eq","arg0":["mac
2024-07-10 01:44:28 UTC	1390	IN	Data Raw: 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 66 5d 7d 76 61 72 20 67 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 2c 6b 3d 63 5b 67 5d 2c 6d 3d 62 28 6b 29 3b 6d 21 3d 6b 26 26 6d 21 3d 6e 75 6c 6c 26 26 65 61 28 63 2c 67 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6d 7d 29 7d 7d 3b 0a 6a 61 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 74 68 69 73 2e 6a 3d 66 3b 65 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 Data Ascii: ;e++){var f=d[e];if(!(f in c))break a;c=c[f]}var g=d[d.length-1],k=c[g],m=b(k);m!=k&&m!=null&&ea(c,g,{configurable:!0,writable:!0,value:m})}};ja("Symbol",function(a){if(a)return a;var b=function(f,g){this.j=f;ea(this,"description",{configurable:!0,writab
2024-07-10 01:44:28 UTC	1390	IN	Data Raw: 3d 7b 7d 3b 74 72 79 7b 77 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 76 61 3b 75 61 3d 77 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 75 61 3d 21 31 7d 74 61 3d 75 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 0a 76 61 72 20 78 61 3d 74 61 2c 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 73 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 78 61 Data Ascii: ={};try{wa.__proto__=va;ua=wa.a;break a}catch(a){}ua=!1}ta=ua?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var xa=ta,ya=function(a,b){a.prototype=sa(b.prototype);a.prototype.constructor=a;if(xa
2024-07-10 01:44:28 UTC	1390	IN	Data Raw: 73 65 74 28 61 2c 62 29 3b 74 68 69 73 2e 48 5b 22 64 75 73 74 2e 22 2b 61 5d 3d 21 30 7d 3b 63 61 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 75 73 74 2e 22 2b 61 29 7d 3b 63 61 2e 76 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 22 64 75 73 74 2e 22 2b 61 3b 74 68 69 73 2e 48 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 2e 6a 5b 61 5d 7d 3b 76 61 72 20 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 4a 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 4f 3d 61 3b 74 68 69 73 2e 70 61 72 Data Ascii: set(a,b);this.H["dust."+a]=!0};ca.has=function(a){return this.j.hasOwnProperty("dust."+a)};ca.vf=function(a){a="dust."+a;this.H.hasOwnProperty(a)\|\|delete this.j[a]};var Ja=function(){};Ja.prototype.reset=function(){};var Ka=function(a,b){this.O=a;this.par
2024-07-10 01:44:28 UTC	1390	IN	Data Raw: 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 28 62 29 7d 3b 51 61 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 2c 62 3d 30 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 61 3d 50 61 28 74 68 69 73 2e 6a 2c 61 72 67 75 6d 65 6e 74 73 5b 62 5d 29 3b 72 65 74 75 72 6e 20 61 7d 3b 51 61 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 4e 61 28 74 68 69 73 2e 6a 29 3b 62 2e 6a 3d 61 3b 66 6f 72 28 76 61 72 20 63 2c 64 3d 31 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: ute=function(a){var b=Array.prototype.slice.call(arguments,0);return this.D(b)};Qa.prototype.D=function(){for(var a,b=0;b<arguments.length;b++)a=Pa(this.j,arguments[b]);return a};Qa.prototype.O=function(a){var b=Na(this.j);b.j=a;for(var c,d=1;d<arguments.
2024-07-10 01:44:28 UTC	1390	IN	Data Raw: 20 63 3d 62 7c 7c 28 56 61 28 61 29 3d 3d 22 61 72 72 61 79 22 3f 5b 5d 3a 7b 7d 29 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 57 61 28 61 2c 64 29 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 56 61 28 65 29 3d 3d 22 61 72 72 61 79 22 3f 28 56 61 28 63 5b 64 5d 29 21 3d 22 61 72 72 61 79 22 26 26 28 63 5b 64 5d 3d 5b 5d 29 2c 63 5b 64 5d 3d 68 28 65 2c 63 5b 64 5d 29 29 3a 58 61 28 65 29 3f 28 58 61 28 63 5b 64 5d 29 7c 7c 28 63 5b 64 5d 3d 7b 7d 29 2c 63 5b 64 5d 3d 68 28 65 2c 63 5b 64 5d 29 29 3a 63 5b 64 5d 3d 65 7d 72 65 74 75 72 6e 20 63 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 29 7b 69 66 28 61 3d 3d 76 6f 69 64 20 30 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 58 61 28 61 29 29 72 65 74 75 72 6e 21 30 3b 73 77 69 74 63 68 28 Data Ascii: c=b\|\|(Va(a)=="array"?[]:{}),d;for(d in a)if(Wa(a,d)){var e=a[d];Va(e)=="array"?(Va(c[d])!="array"&&(c[d]=[]),c[d]=h(e,c[d])):Xa(e)?(Xa(c[d])\|\|(c[d]={}),c[d]=h(e,c[d])):c[d]=e}return c};function Ya(a){if(a==void 0\|\|Array.isArray(a)\|\|Xa(a))return!0;switch(
2024-07-10 01:44:28 UTC	1390	IN	Data Raw: 74 79 70 65 3b 0a 63 61 2e 70 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 2e 70 6f 70 28 29 7d 3b 63 61 2e 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 68 69 73 2e 6a 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 7d 3b 63 61 2e 73 68 69 66 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 2e 73 68 69 66 74 28 29 7d 3b 63 61 2e 73 70 6c 69 63 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 24 61 28 74 68 69 73 2e 6a 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 74 68 69 73 2e 6a 2c 61 72 67 75 6d 65 6e 74 73 29 29 Data Ascii: type;ca.pop=function(){return this.j.pop()};ca.push=function(){return this.j.push.apply(this.j,Array.prototype.slice.call(arguments))};ca.shift=function(){return this.j.shift()};ca.splice=function(a,b){return new $a(this.j.splice.apply(this.j,arguments))
2024-07-10 01:44:28 UTC	1390	IN	Data Raw: 65 36 34 20 65 6e 63 6f 64 69 6e 67 20 61 74 20 63 68 61 72 3a 20 22 2b 6e 29 3b 7d 72 65 74 75 72 6e 20 6d 7d 66 62 3d 66 62 7c 7c 67 62 28 29 3b 68 62 3d 68 62 7c 7c 65 62 28 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 3b 29 7b 76 61 72 20 65 3d 62 28 2d 31 29 2c 66 3d 62 28 30 29 2c 67 3d 62 28 36 34 29 2c 6b 3d 62 28 36 34 29 3b 69 66 28 6b 3d 3d 3d 36 34 26 26 65 3d 3d 3d 2d 31 29 72 65 74 75 72 6e 20 63 3b 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3c 3c 32 7c 66 3e 3e 34 29 3b 67 21 3d 3d 36 34 26 26 28 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 66 3c 3c 34 26 32 34 30 7c 67 3e 3e 32 29 2c 6b 21 3d 3d 36 34 26 26 28 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 Data Ascii: e64 encoding at char: "+n);}return m}fb=fb\|\|gb();hb=hb\|\|eb();for(var c="",d=0;;){var e=b(-1),f=b(0),g=b(64),k=b(64);if(k===64&&e===-1)return c;c+=String.fromCharCode(e<<2\|f>>4);g!==64&&(c+=String.fromCharCode(f<<4&240\|g>>2),k!==64&&(c+=String.fromCharCode
2024-07-10 01:44:28 UTC	1390	IN	Data Raw: 79 2e 63 61 6c 6c 28 61 2c 22 63 61 6c 6c 65 65 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 79 62 28 61 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 4e 75 6d 62 65 72 28 61 29 29 7c 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 7a 62 28 61 29 7b 72 65 74 75 72 6e 22 66 61 6c 73 65 22 3d 3d 3d 53 74 72 69 6e 67 28 61 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 21 31 3a 21 21 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 62 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 2e 70 75 73 68 28 53 74 72 69 6e 67 28 61 5b 63 5d 29 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 42 62 28 61 29 7b 72 65 74 75 72 6e 20 61 3f Data Ascii: y.call(a,"callee"))}function yb(a){return Math.round(Number(a))\|\|0}function zb(a){return"false"===String(a).toLowerCase()?!1:!!a}function Ab(a){var b=[];if(Array.isArray(a))for(var c=0;c<a.length;c++)b.push(String(a[c]));return b}function Bb(a){return a?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49783	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:28 UTC	1086	OUT	GET /sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:28 UTC	1419	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 147452 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:28 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:44:15 GMT etag: "6687c06f-23ffc" X-Varnish-Storage: Malloc X-Url: /sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 224580961 216745479 Via: 1.1 varnish (Varnish/6.6), 1.1 a962efd99fafcdb81ca24e0e8140a67c.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: CZLjz21ocR6sTQyFK7HX6dnAR-awWU5plH5mTXIgtAXvc6kkZ4-MWw== Age: 58323 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:28 UTC	14965	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 20 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2f 33 2e 37 2e 31 2f 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f Data Ascii: /* @license MIT https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt //! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license */!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.expo
2024-07-10 01:44:28 UTC	1949	IN	Data Raw: 76 61 72 20 69 2c 6f 3d 73 28 65 2c 6e 75 6c 6c 2c 72 2c 5b 5d 29 2c 61 3d 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 61 2d 2d 29 28 69 3d 6f 5b 61 5d 29 26 26 28 65 5b 61 5d 3d 21 28 74 5b 61 5d 3d 69 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 5b 30 5d 3d 65 2c 73 28 72 2c 6e 75 6c 6c 2c 6e 2c 69 29 2c 72 5b 30 5d 3d 6e 75 6c 6c 2c 21 69 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 46 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 3c 49 28 74 2c 65 29 2e 6c 65 6e 67 74 68 7d 7d 29 2c 63 6f 6e 74 61 69 6e 73 3a 46 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 2c 66 75 6e 63 74 69 Data Ascii: var i,o=s(e,null,r,[]),a=e.length;while(a--)(i=o[a])&&(e[a]=!(t[a]=i))}):function(e,t,n){return r[0]=e,s(r,null,n,i),r[0]=null,!i.pop()}}),has:F(function(t){return function(e){return 0<I(t,e).length}}),contains:F(function(t){return t=t.replace(O,P),functi
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 42 28 65 29 3b 66 6f 72 28 65 20 69 6e 7b 73 75 62 6d 69 74 3a 21 30 2c 72 65 73 65 74 3a 21 30 7d 29 62 2e 70 73 65 75 64 6f 73 5b 65 5d 3d 5f 28 65 29 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 63 5b 65 2b 22 20 22 5d 3b 69 66 28 6c 29 72 65 74 75 72 6e 20 74 3f 30 3a 6c 2e 73 6c 69 63 65 28 30 29 3b 61 3d 65 2c 73 3d 5b 5d 2c 75 3d 62 2e 70 72 65 46 69 6c 74 65 72 3b 77 68 69 6c 65 28 61 29 7b 66 6f 72 28 6f 20 69 6e 20 6e 26 26 21 28 72 3d 79 2e 65 78 65 63 28 61 29 29 7c 7c 28 72 26 26 28 61 3d 61 2e 73 6c 69 63 65 28 72 5b 30 5d 2e 6c 65 6e 67 74 68 29 7c 7c 61 29 2c 73 2e 70 75 73 68 28 69 3d 5b 5d 29 29 2c 6e 3d 21 31 2c 28 72 3d 6d 2e 65 Data Ascii: B(e);for(e in{submit:!0,reset:!0})b.pseudos[e]=_(e);function G(){}function Y(e,t){var n,r,i,o,a,s,u,l=c[e+" "];if(l)return t?0:l.slice(0);a=e,s=[],u=b.preFilter;while(a){for(o in n&&!(r=y.exec(a))\|\|(r&&(a=a.slice(r[0].length)\|\|a),s.push(i=[])),n=!1,(r=m.e
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 29 2c 69 2e 70 72 6f 6d 69 73 65 28 74 29 7d 7d 29 3b 76 61 72 20 47 3d 2f 5b 2b 2d 5d 3f 28 3f 3a 5c 64 2a 5c 2e 7c 29 5c 64 2b 28 3f 3a 5b 65 45 5d 5b 2b 2d 5d 3f 5c 64 2b 7c 29 2f 2e 73 6f 75 72 63 65 2c 59 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 47 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 51 3d 5b 22 54 6f 70 22 2c 22 52 69 67 68 74 22 2c 22 42 6f 74 74 6f 6d 22 2c 22 4c 65 66 74 22 5d 2c 4a 3d 43 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 65 2e 63 6f 6e 74 61 69 6e 73 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 65 29 7d 2c 5a 3d 7b 63 6f 6d 70 6f 73 65 64 3a 21 30 7d 3b 4a 2e 67 65 74 52 6f 6f 74 4e 6f 64 Data Ascii: ),i.promise(t)}});var G=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,Y=new RegExp("^(?:([+-])=\|)("+G+")([a-z%])$","i"),Q=["Top","Right","Bottom","Left"],J=C.documentElement,K=function(e){return ce.contains(e.ownerDocument,e)},Z={composed:!0};J.getRootNod
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 6e 65 77 20 52 65 67 45 78 70 28 51 2e 6a 6f 69 6e 28 22 7c 22 29 2c 22 69 22 29 3b 66 75 6e 63 74 69 6f 6e 20 47 65 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 3d 7a 65 2e 74 65 73 74 28 74 29 2c 75 3d 65 2e 73 74 79 6c 65 3b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 58 65 28 65 29 29 26 26 28 61 3d 6e 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 74 29 7c 7c 6e 5b 74 5d 2c 73 26 26 61 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 24 31 22 29 7c 7c 76 6f 69 64 20 30 29 2c 22 22 21 3d 3d 61 7c 7c 4b 28 65 29 7c 7c 28 61 3d 63 65 2e 73 74 79 6c 65 28 65 2c 74 29 29 2c 21 6c 65 2e 70 69 78 65 6c 42 6f 78 53 74 79 6c 65 73 28 29 26 26 5f 65 2e 74 65 73 74 28 61 29 26 26 56 65 2e 74 65 73 74 28 74 29 26 26 28 72 3d 75 2e 77 69 Data Ascii: new RegExp(Q.join("\|"),"i");function Ge(e,t,n){var r,i,o,a,s=ze.test(t),u=e.style;return(n=n\|\|Xe(e))&&(a=n.getPropertyValue(t)\|\|n[t],s&&a&&(a=a.replace(ve,"$1")\|\|void 0),""!==a\|\|K(e)\|\|(a=ce.style(e,t)),!le.pixelBoxStyles()&&_e.test(a)&&Ve.test(t)&&(r=u.wi
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 43 61 73 65 28 29 5d 3d 74 68 69 73 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 64 64 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 2c 69 2c 6f 2c 61 3b 72 65 74 75 72 6e 20 76 28 74 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 65 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 43 74 28 74 68 69 73 29 29 29 7d 29 3a 28 65 3d 6b 74 28 74 29 29 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 72 3d 43 74 28 74 68 69 73 29 2c 6e 3d 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 26 26 22 20 22 2b 54 74 28 72 29 2b 22 20 22 29 7b 66 6f 72 28 6f 3d 30 3b 6f 3c 65 2e 6c 65 6e 67 74 68 3b 6f 2b 2b Data Ascii: Case()]=this}),ce.fn.extend({addClass:function(t){var e,n,r,i,o,a;return v(t)?this.each(function(e){ce(this).addClass(t.call(this,e,Ct(this)))}):(e=kt(t)).length?this.each(function(){if(r=Ct(this),n=1===this.nodeType&&" "+Tt(r)+" "){for(o=0;o<e.length;o++
2024-07-10 01:44:28 UTC	3012	IN	Data Raw: 69 29 26 26 69 28 6f 5b 30 5d 29 2c 6f 3d 69 3d 76 6f 69 64 20 30 7d 29 2c 22 73 63 72 69 70 74 22 7d 29 2c 6c 65 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 3d 28 28 4a 74 3d 43 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 2e 62 6f 64 79 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 3c 66 6f 72 6d 3e 3c 2f 66 6f 72 6d 3e 22 2c 32 3d 3d 3d 4a 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 2c 63 65 2e 70 61 72 73 65 48 54 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 5b 5d 3a 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 6e Data Ascii: i)&&i(o[0]),o=i=void 0}),"script"}),le.createHTMLDocument=((Jt=C.implementation.createHTMLDocument("").body).innerHTML="<form></form><form></form>",2===Jt.childNodes.length),ce.parseHTML=function(e,t,n){return"string"!=typeof e?[]:("boolean"==typeof t&&(n
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 63 65 2e 65 61 63 68 28 7b 70 61 64 64 69 6e 67 3a 22 69 6e 6e 65 72 22 2b 61 2c 63 6f 6e 74 65 6e 74 3a 73 2c 22 22 3a 22 6f 75 74 65 72 22 2b 61 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 63 65 2e 66 6e 5b 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 28 72 7c 7c 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 2c 69 3d 72 7c 7c 28 21 30 3d 3d 3d 65 7c 7c 21 30 3d 3d 3d 74 3f 22 6d 61 72 67 69 6e 22 3a 22 62 6f 72 64 65 72 22 29 3b 72 65 74 75 72 6e 20 4d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 79 28 65 29 3f 30 3d 3d 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 6f 75 74 65 72 22 29 3f 65 5b 22 69 6e 6e 65 Data Ascii: ce.each({padding:"inner"+a,content:s,"":"outer"+a},function(r,o){ce.fn[o]=function(e,t){var n=arguments.length&&(r\|\|"boolean"!=typeof e),i=r\|\|(!0===e\|\|!0===t?"margin":"border");return M(this,function(e,t,n){var r;return y(e)?0===o.indexOf("outer")?e["inne
2024-07-10 01:44:28 UTC	10463	IN	Data Raw: 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 2e 2f 76 65 72 73 69 6f 6e 22 5d 2c 69 29 3a 69 28 6a 51 75 65 72 79 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 Data Ascii: * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery","./version"],i):i(jQuery)}((function(i){"use strict
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 6f 75 73 65 65 6e 74 65 72 20 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 3a 22 5f 61 63 74 69 76 61 74 65 49 74 65 6d 22 2c 22 6d 6f 75 73 65 6d 6f 76 65 20 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 3a 22 5f 61 63 74 69 76 61 74 65 49 74 65 6d 22 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 22 63 6f 6c 6c 61 70 73 65 41 6c 6c 22 2c 22 6d 6f 75 73 65 6c 65 61 76 65 20 2e 75 69 2d 6d 65 6e 75 22 3a 22 63 6f 6c 6c 61 70 73 65 41 6c 6c 22 2c 66 6f 63 75 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 61 63 74 69 76 65 7c 7c 74 68 69 73 2e 5f 6d 65 6e 75 49 74 65 6d 73 28 29 2e 66 69 72 73 74 28 29 3b 74 7c 7c 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 69 29 7d 2c 62 6c 75 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 64 65 6c Data Ascii: ouseenter .ui-menu-item":"_activateItem","mousemove .ui-menu-item":"_activateItem",mouseleave:"collapseAll","mouseleave .ui-menu":"collapseAll",focus:function(e,t){var i=this.active\|\|this._menuItems().first();t\|\|this.focus(e,i)},blur:function(t){this._del

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49784	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:28 UTC	1086	OUT	GET /sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:28 UTC	1419	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 132770 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:28 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 10:00:00 GMT etag: "6687c420-206a2" X-Varnish-Storage: Malloc X-Url: /sites/default/files/js/js_K9WZD6vkJ5WsZ0_HlzLgYDB_QmZWaIgJxtXOGpJfYD8.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 225660785 215433258 Via: 1.1 varnish (Varnish/6.6), 1.1 21369bf2bfeb79adaa5bef1cb96f8540.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _FHFH_PyqKQc6ErEuLhwCX2eTpFTO2jUeAAipc4cR5MGUQuoKEsd2w== Age: 58323 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:28 UTC	14612	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 47 4e 55 2d 47 50 4c 2d 32 2e 30 2d 6f 72 2d 6c 61 74 65 72 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 75 70 61 6c 2e 6f 72 67 2f 6c 69 63 65 6e 73 69 6e 67 2f 66 61 71 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 2c 44 72 75 70 61 6c 2c 6f 6e 63 65 29 7b 44 72 75 70 61 6c 2e 62 65 68 61 76 69 6f 72 73 2e 63 6f 6f 6b 69 65 70 72 6f 46 6f 63 75 73 48 61 6e 64 6c 65 72 3d 7b 61 74 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 20 61 74 74 61 63 68 28 29 7b 76 61 72 20 73 6b 69 70 54 6f 43 6f 6e 74 65 6e 74 4c 69 6e 6b 3d 24 28 27 23 73 6b 69 70 2d 74 6f 2d 63 6f 6e 74 65 6e 74 27 29 3b 24 28 6f 6e 63 65 28 27 63 6c 69 63 6b 46 6f 63 75 73 48 61 6e 64 6c 65 72 27 2c 27 62 6f 64 79 27 29 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c Data Ascii: /* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */(function($,Drupal,once){Drupal.behaviors.cookieproFocusHandler={attach:function attach(){var skipToContentLink=$('#skip-to-content');$(once('clickFocusHandler','body')).on('click',
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 77 28 6c 29 3a 62 3d 28 76 7c 7c 78 29 26 26 79 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 6e 65 77 20 46 6f 72 6d 44 61 74 61 2c 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 72 2e 61 70 70 65 6e 64 28 65 5b 74 5d 2e 6e 61 6d 65 2c 65 5b 74 5d 2e 76 61 6c 75 65 29 3b 69 66 28 4d 2e 65 78 74 72 61 44 61 74 61 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 61 3d 71 2e 70 61 72 61 6d 28 65 2c 4d 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 2e 73 70 6c 69 74 28 22 26 22 29 2c 6e 3d 61 2e 6c 65 6e 67 74 68 2c 6f 3d 5b 5d 3b 66 6f 72 28 74 3d 30 3b 74 3c 6e 3b 74 2b 2b 29 61 5b 74 5d 3d 61 5b 74 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 2c 72 3d 61 5b 74 5d 2e 73 70 6c 69 74 Data Ascii: w(l):b=(v\|\|x)&&y?function(e){for(var r=new FormData,t=0;t<e.length;t++)r.append(e[t].name,e[t].value);if(M.extraData){var a=function(e){var t,r,a=q.param(e,M.traditional).split("&"),n=a.length,o=[];for(t=0;t<n;t++)a[t]=a[t].replace(/\+/g," "),r=a[t].split
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 77 3d 69 6d 6d 65 64 69 61 74 65 26 26 21 74 69 6d 65 6f 75 74 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 69 6d 65 6f 75 74 29 3b 74 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 6c 61 74 65 72 2c 77 61 69 74 29 3b 69 66 28 63 61 6c 6c 4e 6f 77 29 72 65 73 75 6c 74 3d 66 75 6e 63 2e 61 70 70 6c 79 28 63 6f 6e 74 65 78 74 2c 61 72 67 73 29 3b 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 7d 3b 7d 3b 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 44 72 75 70 61 6c 2c 64 65 62 6f 75 6e 63 65 29 7b 6c 65 74 20 6c 69 76 65 45 6c 65 6d 65 6e 74 3b 63 6f 6e 73 74 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 3d 5b 5d 3b 44 72 75 70 61 6c 2e 62 65 68 61 76 69 6f 72 73 2e 64 72 75 70 61 6c 41 6e 6e 6f 75 6e 63 65 3d 7b 61 74 74 61 63 68 28 63 6f 6e 74 65 78 74 29 7b 69 66 Data Ascii: w=immediate&&!timeout;clearTimeout(timeout);timeout=setTimeout(later,wait);if(callNow)result=func.apply(context,args);return result;};};;(function(Drupal,debounce){let liveElement;const announcements=[];Drupal.behaviors.drupalAnnounce={attach(context){if
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 6e 73 65 3a 20 21 65 72 72 6f 72 27 2c 7b 27 21 65 72 72 6f 72 27 3a 65 72 72 6f 72 7d 29 29 29 29 3b 7d 3b 44 72 75 70 61 6c 2e 41 6a 61 78 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 7b 63 6f 6e 73 74 20 74 79 70 65 3d 72 65 73 70 6f 6e 73 65 2e 65 66 66 65 63 74 7c 7c 74 68 69 73 2e 65 66 66 65 63 74 3b 63 6f 6e 73 74 20 73 70 65 65 64 3d 72 65 73 70 6f 6e 73 65 2e 73 70 65 65 64 7c 7c 74 68 69 73 2e 73 70 65 65 64 3b 63 6f 6e 73 74 20 65 66 66 65 63 74 3d 7b 7d 3b 69 66 28 74 79 70 65 3d 3d 3d 27 6e 6f 6e 65 27 29 7b 65 66 66 65 63 74 2e 73 68 6f 77 45 66 66 65 63 74 3d 27 73 68 6f 77 27 3b 65 66 66 65 63 74 2e 68 69 64 65 45 66 66 65 63 74 3d 27 68 69 64 65 27 3b 65 66 66 65 63 Data Ascii: nse: !error',{'!error':error}))));};Drupal.Ajax.prototype.getEffect=function(response){const type=response.effect\|\|this.effect;const speed=response.speed\|\|this.speed;const effect={};if(type==='none'){effect.showEffect='show';effect.hideEffect='hide';effec
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 74 72 28 22 64 61 74 61 2d 73 6c 69 63 6b 2d 69 6e 64 65 78 22 2c 69 6e 64 65 78 29 7d 29 3b 5f 2e 24 73 6c 69 64 65 73 43 61 63 68 65 3d 5f 2e 24 73 6c 69 64 65 73 3b 5f 2e 72 65 69 6e 69 74 28 29 7d 3b 53 6c 69 63 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6e 69 6d 61 74 65 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 3d 74 68 69 73 3b 69 66 28 5f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 3d 3d 3d 31 26 26 5f 2e 6f 70 74 69 6f 6e 73 2e 61 64 61 70 74 69 76 65 48 65 69 67 68 74 3d 3d 3d 74 72 75 65 26 26 5f 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 3d 3d 3d 66 61 6c 73 65 29 7b 76 61 72 20 74 61 72 67 65 74 48 65 69 67 68 74 3d 5f 2e 24 73 6c 69 64 65 73 2e 65 71 28 5f 2e 63 75 72 72 65 6e 74 53 6c 69 64 Data Ascii: tr("data-slick-index",index)});_.$slidesCache=_.$slides;_.reinit()};Slick.prototype.animateHeight=function(){var _=this;if(_.options.slidesToShow===1&&_.options.adaptiveHeight===true&&_.options.vertical===false){var targetHeight=_.$slides.eq(_.currentSlid
2024-07-10 01:44:28 UTC	8563	IN	Data Raw: 6f 70 74 69 6f 6e 73 2e 69 6e 66 69 6e 69 74 65 3d 3d 3d 74 72 75 65 29 7b 5f 2e 73 6c 69 64 65 4f 66 66 73 65 74 2b 3d 5f 2e 73 6c 69 64 65 57 69 64 74 68 2a 4d 61 74 68 2e 66 6c 6f 6f 72 28 5f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2f 32 29 2d 5f 2e 73 6c 69 64 65 57 69 64 74 68 7d 65 6c 73 65 20 69 66 28 5f 2e 6f 70 74 69 6f 6e 73 2e 63 65 6e 74 65 72 4d 6f 64 65 3d 3d 3d 74 72 75 65 29 7b 5f 2e 73 6c 69 64 65 4f 66 66 73 65 74 3d 30 3b 5f 2e 73 6c 69 64 65 4f 66 66 73 65 74 2b 3d 5f 2e 73 6c 69 64 65 57 69 64 74 68 2a 4d 61 74 68 2e 66 6c 6f 6f 72 28 5f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2f 32 29 7d 69 66 28 5f 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 3d 3d 3d 66 61 6c 73 65 29 7b 74 61 72 Data Ascii: options.infinite===true){_.slideOffset+=_.slideWidthMath.floor(_.options.slidesToShow/2)-_.slideWidth}else if(_.options.centerMode===true){_.slideOffset=0;_.slideOffset+=_.slideWidthMath.floor(_.options.slidesToShow/2)}if(_.options.vertical===false){tar
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 61 72 74 2b 5f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2b 32 7d 65 6c 73 65 7b 72 61 6e 67 65 53 74 61 72 74 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 5f 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2d 28 5f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2f 32 2b 31 29 29 3b 72 61 6e 67 65 45 6e 64 3d 32 2b 28 5f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2f 32 2b 31 29 2b 5f 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 7d 7d 65 6c 73 65 7b 72 61 6e 67 65 53 74 61 72 74 3d 5f 2e 6f 70 74 69 6f 6e 73 2e 69 6e 66 69 6e 69 74 65 3f 5f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2b 5f 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3a 5f 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3b 72 61 6e 67 65 45 6e 64 3d 4d Data Ascii: art+_.options.slidesToShow+2}else{rangeStart=Math.max(0,_.currentSlide-(_.options.slidesToShow/2+1));rangeEnd=2+(_.options.slidesToShow/2+1)+_.currentSlide}}else{rangeStart=_.options.infinite?_.options.slidesToShow+_.currentSlide:_.currentSlide;rangeEnd=M
2024-07-10 01:44:28 UTC	10463	IN	Data Raw: 5f 2e 6f 70 74 69 6f 6e 73 2e 61 73 4e 61 76 46 6f 72 29 7b 6e 61 76 54 61 72 67 65 74 3d 5f 2e 67 65 74 4e 61 76 54 61 72 67 65 74 28 29 3b 6e 61 76 54 61 72 67 65 74 3d 6e 61 76 54 61 72 67 65 74 2e 73 6c 69 63 6b 28 22 67 65 74 53 6c 69 63 6b 22 29 3b 69 66 28 6e 61 76 54 61 72 67 65 74 2e 73 6c 69 64 65 43 6f 75 6e 74 3c 3d 6e 61 76 54 61 72 67 65 74 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 29 7b 6e 61 76 54 61 72 67 65 74 2e 73 65 74 53 6c 69 64 65 43 6c 61 73 73 65 73 28 5f 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 7d 7d 5f 2e 75 70 64 61 74 65 44 6f 74 73 28 29 3b 5f 2e 75 70 64 61 74 65 41 72 72 6f 77 73 28 29 3b 69 66 28 5f 2e 6f 70 74 69 6f 6e 73 2e 66 61 64 65 3d 3d 3d 74 72 75 65 29 7b 69 66 28 64 6f 6e 74 41 6e 69 6d 61 Data Ascii: _.options.asNavFor){navTarget=_.getNavTarget();navTarget=navTarget.slick("getSlick");if(navTarget.slideCount<=navTarget.options.slidesToShow){navTarget.setSlideClasses(_.currentSlide)}}_.updateDots();_.updateArrows();if(_.options.fade===true){if(dontAnima
2024-07-10 01:44:28 UTC	16384	IN	Data Raw: 65 6c 49 74 65 6d 73 54 6f 53 68 6f 77 4d 6f 62 69 6c 65 7d 7d 5d 7d 29 3b 7d 29 3b 7d 7d 7d 3b 7d 29 28 6a 51 75 65 72 79 2c 44 72 75 70 61 6c 2c 6f 6e 63 65 29 3b 3b 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 2c 44 72 75 70 61 6c 2c 6f 6e 63 65 29 7b 66 75 6e 63 74 69 6f 6e 20 64 61 74 61 4c 61 79 65 72 50 75 73 68 28 61 63 74 69 6f 6e 2c 6c 61 62 65 6c 29 7b 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 3d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 7b 63 61 74 65 67 6f 72 79 3a 27 42 61 6e 6e 65 72 20 43 6c 69 63 6b 27 2c 61 63 74 69 6f 6e 3a 61 63 74 69 6f 6e 2c 6c 61 62 65 6c 3a 6c 61 62 65 6c 2c 65 76 65 6e 74 3a 27 62 61 6e 6e 65 72 43 6c 69 63 6b 27 7d 29 3b 7d 0a Data Ascii: elItemsToShowMobile}}]});});}}};})(jQuery,Drupal,once);;(function($,Drupal,once){function dataLayerPush(action,label){window.dataLayer=window.dataLayer\|\|[];window.dataLayer.push({category:'Banner Click',action:action,label:label,event:'bannerClick'});}
2024-07-10 01:44:28 UTC	828	IN	Data Raw: 6f 6e 28 72 65 71 75 65 73 74 2c 72 65 73 70 6f 6e 73 65 29 7b 63 6f 6e 73 74 20 72 65 73 75 6c 74 73 3d 24 2e 75 69 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 66 69 6c 74 65 72 28 64 61 74 61 2c 72 65 71 75 65 73 74 2e 74 65 72 6d 29 3b 63 6f 6e 73 74 20 75 6e 69 71 75 65 52 65 73 75 6c 74 73 3d 72 65 6d 6f 76 65 44 75 70 6c 69 63 61 74 65 56 61 6c 75 65 28 72 65 73 75 6c 74 73 29 3b 72 65 73 70 6f 6e 73 65 28 75 6e 69 71 75 65 52 65 73 75 6c 74 73 2e 73 6c 69 63 65 28 30 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 52 65 73 75 6c 74 73 29 29 3b 7d 7d 3b 72 65 74 75 72 6e 20 66 6f 72 6d 49 6e 70 75 74 2e 73 65 61 72 63 68 53 75 67 67 65 73 74 69 6f 6e 28 73 75 67 67 65 73 74 69 6f 6e 43 6f 6e 66 69 67 29 2e 66 6f 63 75 73 28 66 75 6e 63 74 69 6f 6e Data Ascii: on(request,response){const results=$.ui.autocomplete.filter(data,request.term);const uniqueResults=removeDuplicateValue(results);response(uniqueResults.slice(0,this.options.maxResults));}};return formInput.searchSuggestion(suggestionConfig).focus(function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49782	151.101.128.114	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:28 UTC	577	OUT	GET /beacon/bookingdotcomb2b/booking_prod/scripts/evergage.min.js HTTP/1.1 Host: cdn.evgnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:28 UTC	912	IN	HTTP/1.1 200 OK Connection: close Content-Length: 55092 x-amz-id-2: f+g4MsiQZlPtkomIj4DmUlpj0eEylZYTjuZZzAIrpbQMjWBIkbGKR18eGwP4J3DmJvHr7NsqY5E= x-amz-request-id: 7E9897J90H1Q2D43 x-amz-replication-status: COMPLETED Last-Modified: Tue, 09 Jul 2024 12:26:48 GMT ETag: "6bf39376ae68c5f03b0a46144bb70d6a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=120 Content-Encoding: gzip x-amz-meta-evergage-beacon-ver: 16 x-amz-meta-evergage-sum: a85cdac6caf551101b8d77416cdc88eb9f15e951 x-amz-version-id: JfcQ97JzKT2ZprPWSMs.HhyP1W3802ff Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 10 Jul 2024 01:44:28 GMT Age: 74 X-Served-By: cache-iad-kiad7000131-IAD, cache-ewr18141-EWR X-Cache: HIT, MISS X-Cache-Hits: 5, 0 X-Timer: S1720575868.273755,VS0,VE10 Vary: Accept-Encoding Timing-Allow-Origin: *
2024-07-10 01:44:28 UTC	1379	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ec bd 69 7b db 46 b2 30 fa 9d bf 82 c2 cd d1 00 11 44 51 b2 9d 64 00 c3 3c b2 2c c7 4a bc c5 92 93 38 32 27 4f 03 68 90 8c 40 82 26 48 2d 16 79 7e fb ad aa 5e d0 58 a8 c5 c9 64 ce 7b df 3b 93 c7 22 1a 8d 5e aa ab ab ab aa 6b 19 25 6d fb 62 34 89 b3 8b ce e1 39 9f 0d d8 80 b7 37 37 db b2 e8 98 a5 3c 4f b2 59 c4 8f 26 73 3e 63 d1 7c 94 4d f2 5b 2b 74 c6 d1 28 77 da d7 ad 36 fc 6f 3e bb 92 bf f0 7f 37 7f 97 66 83 ce 05 9b 4d 6c 6b 3f cc 66 f3 d1 64 d0 3e 7e f6 63 3b cd 58 dc ce 47 93 88 b7 e7 43 de 5e 33 2a ac 79 c1 f2 36 4b 67 9c c5 57 ed 24 5b 4c e2 76 36 81 6f 46 79 7b 0a 33 eb 58 8e 4f 23 59 b5 23 36 8f 86 36 87 41 ae 5a ab 36 4f 73 0e 83 94 83 e3 12 10 4f 39 8b b2 c9 5b 36 cb f9 c9 68 cc 8f e7 6c 36 6f 07 6d 7b c2 2f da cf Data Ascii: i{F0DQd<,J82'Oh@&H-y~^Xd{;"^k%mb4977<OY&s>c\|M[+t(w6o>7fMlk?fd>~c;XGC^3*y6KgW$[Lv6oFy{3XO#Y#66AZ6OsO9[6hl6om{/
2024-07-10 01:44:28 UTC	1379	IN	Data Raw: db 28 2a 50 0f 1b 6c b9 2c 98 12 85 7f cc 3c 77 8d 62 c2 06 cd e7 b0 66 6a f8 8c cf 80 29 89 db c6 58 f3 f6 98 5d 81 dc 90 5e 29 f6 45 74 89 44 b1 d8 53 c0 f0 eb e6 71 2f e0 8c 8b 1e 60 b2 7c c6 e1 44 96 dd 90 08 32 64 f9 e4 1f 73 a0 b1 1c 4e ad 09 70 43 2c 1d e5 d0 f7 76 3b 47 9a 6c 3b a5 1a b8 50 d4 0f a3 c6 0b 26 bb 58 a2 3f 18 2c c2 1f 2c 30 b6 fa 46 75 ab 6f 6e 2a c0 03 8e f5 8c df 75 da 27 4e 51 5a 43 c2 ff 30 88 fc 8d 1a 56 c1 18 0d 54 15 f8 14 c2 de 23 51 e3 1d 60 a2 2b cf 9f d0 f1 69 d5 42 b9 15 d7 c9 2b 06 c3 8b ed b8 21 8d 94 fe 15 ad 3f 78 52 95 1d 80 2b 64 8e 17 0a 72 a2 49 e1 1f 6b 50 a7 00 d8 15 33 65 ae fd d9 8c 5d 75 46 39 fd 05 24 86 56 c5 7a 0a 5c 73 98 27 11 5a 92 8f 1e fe f5 5a 25 68 57 b9 bc d3 0a 1b d9 5f 2e a3 53 e0 8c d5 b3 d5 57 Data Ascii: (Pl,<wbfj)X]^)EtDSq/`\|D2dsNpC,v;Gl;P&X?,,0Fuonu'NQZC0VT#Q`+iB+!?xR+drIkP3e]uF9$Vz\s'ZZ%hW_.SW
2024-07-10 01:44:28 UTC	1379	IN	Data Raw: 38 f4 b0 5c 6e 5c a2 ce b0 d7 8a bd d2 94 a7 97 96 41 4d 9e ca ee 23 c0 a6 98 cd 01 70 73 58 7f 24 a6 ea e9 33 6e af be a9 6b f9 e1 f8 cd eb 0e e1 01 12 26 c1 aa 03 62 36 10 f2 83 d2 e4 04 2a 59 21 f1 64 c5 90 7a d6 4b 9e cc 2d cf 3a c9 a6 96 6b fd 32 8a e7 43 00 fb 96 a8 3d 65 71 8c 34 b4 b9 fa 4d d5 de 8d 06 43 ac f7 34 9b cf b3 71 51 b5 de 7f a5 66 31 86 62 26 cf 4a 33 d9 00 be 65 e3 42 ee 68 13 0d f4 54 bb c0 d5 28 8d 09 2b 9d b5 9f b9 d8 c9 6e e8 02 65 e2 9d c1 62 14 07 e2 cf 72 39 a5 bf 5b 5b be 50 fe a0 66 f0 f7 88 ab bf cb e5 f5 ca 4f 50 5b 9b d0 22 9d f6 e9 49 90 a6 53 6a b1 8f 0a 54 80 c5 e1 39 a0 c6 cb 51 3e e7 13 24 bb 6e 8b 1b 43 b8 a4 23 04 97 5c e2 73 c1 d7 9e 46 b0 8f dc 82 5b e9 e4 d9 6c 6e 3b 06 c2 be 63 e6 f8 d7 8f 93 d4 34 38 3c 38 be Data Ascii: 8\n\AM#psX$3nk&b6*Y!dzK-:k2C=eq4MC4qQf1b&J3eBhT(+nebr9[[PfOP["ISjT9Q>$nC#\sF[ln;c48<8
2024-07-10 01:44:28 UTC	1379	IN	Data Raw: bb 7b 0f ff b9 75 1a 6e 1e 2e ff 27 dc 3c 83 59 c0 1c f7 be 7d b4 fb f0 e1 96 1d fe eb f0 5f 67 8e fb dd 77 7b 0f 1f fd 13 fe 83 12 a8 07 d5 96 87 9b 50 3e 84 26 1e 3c fa e6 9f 0f 1f 7c f7 cf fe 69 ba b5 b5 f3 08 07 be 65 db c3 80 9d 76 fb 30 e2 47 cb e1 13 28 fb 16 2a bb e1 e3 c7 0f ba cb 10 9f dd 43 f7 ac ef 5c 0f 03 18 df f6 83 fe bf f0 cf 77 e2 cf ee 43 f9 f7 9b be df 02 8c 43 ad 3a 79 0d c1 cf bd be b4 ae 62 a7 0f fa 2b 9c 71 1a 3c f2 01 64 c9 29 00 b2 bf 05 e5 a9 28 1f 06 96 e5 3f 44 50 38 c3 ad c0 4e 10 a4 0f fa 4f 9e 3c fc da fe 76 1b 46 ea 6c ee 3e 72 f4 b1 60 03 00 15 26 0f 0d 53 cf c8 56 2a 5a e5 0c 36 61 e7 a3 01 6e ae ce 22 e7 b3 fd 01 50 74 d4 73 3b 5b f5 0a d3 94 cd 61 28 63 f9 5e 79 47 69 e7 a8 2d ba 9a 12 47 da 28 b9 b2 81 73 de 7a c5 e6 Data Ascii: {un.'<Y}_gw{P>&<\|iev0G(C\wCC:yb+q<d)(?DP8NO<vFl>r`&SVZ6an"Pts;[a(c^yGi-G(sz
2024-07-10 01:44:28 UTC	1379	IN	Data Raw: db 8b e4 11 df f0 ce 8b 8b ef 54 3b b6 51 5f 9e e1 fe cf 80 1d 78 8b c5 67 28 3d 21 63 8e 98 12 23 a8 ae dc 9f 60 41 94 12 6b 88 b7 79 b1 73 75 3a ec 03 16 d8 a5 4f a0 2c c0 17 8d 8a 45 3a 81 e1 58 34 b1 36 d4 fc 50 9d 94 08 42 dc 46 92 3d 43 cd b9 8b 64 ac 60 84 2e d1 52 51 d4 79 0a 55 9e eb bb 38 83 98 be be 43 fb 44 e7 a9 fd e7 eb da 7f 8e 55 1a 3b c0 21 51 fb 8a 7e d9 75 02 86 ca ce ea 89 0c ec 51 b7 a0 e8 c0 2b 6d bf c0 73 f1 6e 04 7a fe 1e 84 e0 a3 09 ae dc 39 2f d3 51 1f e8 72 ec df 91 2e df d4 ce 0b 18 76 61 b7 79 89 86 ae 95 0f 10 0e ad c2 d0 0c 01 a1 fb 65 92 de b7 67 92 89 a0 9b 8f 2f 80 d3 9f e3 5c 34 80 ef 06 59 35 ea 77 7a d0 95 43 0a 80 1b 6d 8b 73 84 5d da 2f 50 8d 7d b7 33 f0 b6 96 1d f7 45 10 55 50 af fe 4d 09 f3 de 84 ca 64 ae 41 3f df Data Ascii: T;Q_xg(=!c#`Akysu:O,E:X46PBF=Cd`.RQyU8CDU;!Q~uQ+msnz9/Qr.vayeg/\4Y5wzCms]/P}3EUPMdA?
2024-07-10 01:44:28 UTC	1379	IN	Data Raw: 6d 08 08 59 6f c5 17 57 bc 7b 4f e2 5e d7 db d5 46 1b 1a 41 91 13 30 39 4e 27 3a e5 fd 12 0f 8a d1 79 34 9e 21 c0 ea 93 50 cb 21 df d9 63 02 9b 70 f5 82 11 4f 95 6f 73 f0 29 84 87 51 fe 0b d1 e4 60 26 9e 94 68 1a 9c 31 7a 16 6c 50 f0 3d 3d bc 46 4e 7e 14 05 97 11 3d 12 44 82 9f 42 18 c7 b4 bc 1a 65 ab 1f c3 5f a8 bd 57 b7 d7 a2 1d d8 05 36 47 fe 80 15 f2 1a 56 91 91 03 1b 79 38 ae 9c b2 28 12 d1 2e a6 41 d8 ca db db 40 87 15 42 aa 74 8c 16 60 d2 66 7a 51 cf 44 5f c7 13 83 79 12 f5 a2 2d 83 6c 78 80 3d 08 f6 4f cd 9b 8a 6a a2 43 52 24 b6 0b f9 bb 04 75 93 15 31 bd 4f 76 97 6a a5 ec c6 4a 78 8b 40 6d e1 19 55 ea 57 e0 2a b9 68 17 6e 52 ca 39 ac bc b1 cd 1b 2c e9 7a 80 b6 12 4c 6c 6c 6c 68 01 9b f4 e3 31 b0 39 d0 d7 90 e5 14 4c a0 61 96 e4 b6 7e d1 d8 47 6c Data Ascii: mYoW{O^FA09N':y4!P!cpOos)Q`&h1zlP==FN~=DBe_W6GVy8(.A@Bt`fzQD_y-lx=OjCR$u1OvjJx@mUW*hnR9,zLlllh19La~Gl
2024-07-10 01:44:28 UTC	1379	IN	Data Raw: db 64 b6 5c 03 86 df 00 8c a4 00 46 22 80 81 7f 92 2a 30 06 02 18 43 01 0c 5e 63 a6 09 a6 45 b8 02 ae 82 6e 44 74 05 9f 03 df c5 97 cb 67 91 3d 74 8d 12 23 b2 8a a3 a2 a4 70 a9 ed 53 33 4d 83 08 36 fc 0c e8 ab bf f1 29 b4 53 74 b6 a1 a6 51 02 51 31 84 fc 34 48 8d 58 0c 04 30 15 e2 64 95 04 a9 1f c9 0d 89 0e 82 e2 e7 e6 e6 5a 97 d2 08 af db 27 f3 13 ea d5 22 7f d5 92 17 6e 0b 8a 1b 1c 3a 12 24 a5 a9 72 64 48 80 9d 13 f1 81 1c 3f dc dc 04 44 e1 18 ca 02 16 ea 05 60 da 06 92 f3 94 ec 10 80 17 46 d3 b5 67 42 6b 6d 3b 18 57 66 9e 4d 71 40 6c c0 44 17 40 a5 61 0a a4 0a 61 e6 1f 23 16 ce 67 ae 3b 10 22 48 1d c9 78 6d d3 99 94 43 e3 9e 16 44 58 7c 55 3a 07 2c b4 32 c3 83 06 1d d2 c5 7b 34 ef e5 bd c8 9e 3a de 71 dd 48 cf 7a f6 e6 95 8c 24 f2 12 3e e5 b1 65 3a 6c Data Ascii: d\F"*0C^cEnDtg=t#pS3M6)StQQ14HX0dZ'"n:$rdH?D`FgBkm;WfMq@lD@aa#g;"HxmCDX\|U:,2{4:qHz$>e:l
2024-07-10 01:44:28 UTC	1379	IN	Data Raw: d7 58 29 2c dd 88 96 c0 aa c3 56 d3 86 c8 6f bb eb bd b8 ef 4d 2f 36 3b 29 33 0a 06 f7 58 3e 1c ac 7a c4 45 8b b2 50 c8 43 01 5f 57 11 cf 9c 0b 85 19 d0 97 71 93 6c 1e b4 6e 99 8e 09 82 a6 d9 6c c4 2a a4 0c 85 3f 14 5b b7 72 fa ae 3b ea ac 82 89 b5 8a 39 10 63 de 00 e5 a8 27 51 53 29 f6 29 cc 25 dd d8 22 0f 53 b0 39 05 f3 e2 57 e2 6a d3 21 24 18 f9 9c e7 f3 86 4e cc e9 4a d3 ac 8a fe 3c 36 6e 9b 75 9f fa 22 a7 40 61 d9 07 a1 70 01 94 fc ce 50 91 ab 6c e1 62 69 d8 a0 36 e5 4e 78 82 15 47 d9 22 5f 8b 2b 2d d1 d8 4d c8 82 ef 0b 64 c9 45 13 f9 17 71 30 44 36 1b 16 08 51 90 36 b6 1c 15 82 f6 24 84 73 9c bc d8 e1 e8 c6 f4 ac f0 07 fd 09 e1 4f cc c3 05 4c c2 22 8b 7c ab ef ce c8 90 da 6e b6 d1 53 4b da bd 9b 89 5e d7 34 d1 03 24 43 03 cc 2f 35 ef eb fa 4f 0b f3 Data Ascii: X),VoM/6;)3X>zEPC_Wqlnl*?[r;9c'QS))%"S9Wj!$NJ<6nu"@apPlbi6NxG"_+-MdEq0D6Q6$sOL"\|nSK^4$C/5O
2024-07-10 01:44:28 UTC	1379	IN	Data Raw: 3c 3a 11 13 ca 53 24 6c 5f 84 67 24 f2 d3 2e af 52 3b 5c cc 89 8a 81 5c 08 a7 25 6c 00 24 61 46 c0 de 95 cb 4b c7 64 02 50 ef c1 b8 69 65 f0 1c ed 18 f3 75 3f 30 fb 3d 7a 6b 93 8c 68 5b e2 46 be ad 6b b4 47 82 db 40 97 f5 28 9b c5 6d 8c 22 2a 29 ab e1 ab 5d 31 96 7c 8f a6 c0 9e 0d 6d 63 d0 3a a3 f9 03 ba 54 8f c9 db 68 6d 1f 9d b6 b9 20 45 27 d8 aa 62 7e df af dc 24 6e b8 69 50 73 d4 d9 eb 30 e3 57 91 de 20 f8 81 f2 1b 74 1f 97 93 65 28 5d c5 ca fd 6d 9d eb 9a 73 5d 95 4d 75 38 9e e0 b4 5f 92 2e b3 46 61 42 a8 3f 48 3a f0 ed 4a 03 e5 47 cc 4e e4 88 cc 44 51 53 34 6a 66 7c 69 fc be 21 45 07 db 08 e8 b2 4b 4b 3d 42 c3 bf 6e 90 34 c6 8a 15 48 a9 ff c5 04 05 20 d4 34 0a b7 d5 22 ad 5c cd d7 48 c6 1f c6 70 c9 c2 95 36 24 1f da 18 73 70 17 c2 7f d2 c7 dc 4b 32 Data Ascii: <:S$l_g$.R;\\%l$aFKdPieu?0=zkh[FkG@(m"*)]1\|mc:Thm E'b~$niPs0W te(]ms]Mu8_.FaB?H:JGNDQS4jf\|i!EKK=Bn4H 4"\Hp6$spK2
2024-07-10 01:44:28 UTC	1379	IN	Data Raw: 34 38 ae 36 28 42 6e 16 54 ff 07 f2 65 d1 03 96 29 c5 ce 51 95 8a bf c5 e9 e3 08 d1 74 a3 2b 6c e7 2f ed 4a 2e 0c 39 45 b7 4d d6 e4 40 d1 d9 5c 95 a1 6a 85 b5 45 35 99 1d 89 4d 62 12 84 92 11 4f 63 78 0b 14 47 aa 5e d6 eb 43 c8 7c c0 3a 66 29 cf 61 fe b0 15 a5 8a da 42 77 05 91 1d 2b 74 28 38 cd 59 4c 81 6a 04 57 1d 6a e8 8b 89 f8 2d 8a 19 53 2e c4 00 96 b9 c4 bf e2 9d 82 02 be 55 bf 1d fd 3a 88 dd 90 22 35 88 5d 82 c7 71 60 a4 04 98 67 47 c7 6f 54 88 34 cc 84 07 98 50 c1 6c b1 3f 0a 18 37 56 80 6d b2 b9 39 41 5f 39 61 23 0e bb 4f 0e c0 8b dd 72 f7 de ba ee 01 b7 85 2a 04 04 01 46 e1 58 4b b3 bf b1 df 18 d3 86 94 91 ff 1e 9a bb d2 65 58 11 c4 7d 46 cf f1 81 9a 08 c5 92 77 87 65 5e 49 e8 51 d6 82 b4 79 1b 9c 21 a4 68 59 8e d1 84 17 17 05 ef 38 e4 5e 68 9d Data Ascii: 486(BnTe)Qt+l/J.9EM@\jE5MbOcxG^C\|:f)aBw+t(8YLjWj-S.U:"5]q`gGoT4Pl?7Vm9A_9a#Or*FXKeX}Fwe^IQy!hY8^h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49773	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:28 UTC	639	OUT	GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:28 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:28 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a0cde6909fbc402-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 45526 Cache-Control: public, max-age=86400 Expires: Thu, 11 Jul 2024 01:44:28 GMT Last-Modified: Tue, 14 May 2024 12:26:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: G4i22UW08v9MRLpiU1+29g== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c650eb5d-e01e-0082-1af9-a5e039000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-10 01:44:28 UTC	467	IN	Data Raw: 31 61 63 63 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 35 62 35 61 62 Data Ascii: 1acc{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202404.1.0","OptanonDataJSON":"5b5ab
2024-07-10 01:44:28 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 65 36 34 31 39 35 37 30 2d 35 32 63 63 2d 34 33 32 64 2d 62 61 31 65 2d 37 33 30 30 32 39 30 66 31 39 37 30 22 2c 22 4e 61 6d 65 22 3a 22 45 45 41 20 2b 20 52 75 73 73 69 61 20 2b 20 55 4b 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 6e 6f 22 2c 22 64 65 22 2c 22 72 75 22 2c 22 62 65 22 2c 22 66 69 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 68 72 22 2c 22 6c 76 22 2c 22 66 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 73 69 22 2c 22 6d 63 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 69 74 22 2c 22 67 72 22 2c 22 65 73 22 2c 22 61 74 22 2c 22 72 Data Ascii: ":[{"Id":"e6419570-52cc-432d-ba1e-7300290f1970","Name":"EEA + Russia + UK","Countries":["no","de","ru","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","at","r
2024-07-10 01:44:28 UTC	1369	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 2d 20 43 68 69 6e 61 20 56 69 73 69 74 6f 72 73 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 Data Ascii: ":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Customer - China Visitors","Conditions":[],"GCEnable":false,"IsGPPEnabled":false,"EnableJWTAuthForKnownUs
2024-07-10 01:44:28 UTC	1369	IN	Data Raw: 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 73 62 22 2c 22 62 71 22 2c 22 73 63 22 2c 22 62 72 22 2c 22 62 73 22 2c 22 73 64 22 2c 22 62 74 22 2c 22 73 67 22 2c 22 62 76 22 2c 22 62 77 22 2c 22 73 68 22 2c 22 73 6a 22 2c 22 62 79 22 2c 22 62 7a 22 2c 22 73 6c 22 2c 22 73 6e 22 2c 22 73 6f 22 2c 22 63 61 22 2c 22 73 72 22 2c 22 63 63 22 2c 22 73 73 22 2c 22 63 64 22 2c 22 73 74 22 2c 22 63 66 22 2c 22 73 76 22 2c 22 63 67 22 2c 22 73 78 22 2c 22 63 68 22 2c 22 63 69 22 2c 22 73 79 22 2c 22 73 7a 22 2c 22 63 6b 22 2c 22 63 6c 22 2c 22 63 6d 22 2c 22 63 6f 22 2c 22 63 72 22 2c 22 74 63 22 2c 22 74 64 22 2c 22 74 66 22 2c 22 63 75 22 2c 22 74 67 22 2c 22 63 Data Ascii: f","rw","bh","bi","bj","bl","bm","bn","bo","sa","sb","bq","sc","br","bs","sd","bt","sg","bv","bw","sh","sj","by","bz","sl","sn","so","ca","sr","cc","ss","cd","st","cf","sv","cg","sx","ch","ci","sy","sz","ck","cl","cm","co","cr","tc","td","tf","cu","tg","c
2024-07-10 01:44:28 UTC	1369	IN	Data Raw: 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 6a 61 22 3a 22 6a 61 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 70 6c 22 3a 22 70 6c 22 2c 22 72 6f 22 3a 22 72 6f 22 2c 22 68 65 22 3a 22 68 65 22 2c 22 64 61 22 3a 22 64 61 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 6e 6c 22 3a 22 6e 6c 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d Data Ascii: "th","es-AR":"es-AR","ja":"ja","tl":"tl","pl":"pl","ro":"ro","he":"he","da":"da","tr":"tr","nl":"nl"},"BannerPushesDown":false,"Default":true,"Global":true,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"Tem
2024-07-10 01:44:28 UTC	925	IN	Data Raw: 2e 6a 73 6f 6e 22 7d 2c 22 47 6f 6f 67 6c 65 44 61 74 61 22 3a 7b 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 2c 22 67 6f 6f 67 6c 65 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 67 6f 6f 67 6c 65 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 53 63 72 69 70 74 44 79 6e 61 6d 69 63 4c 6f 61 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 65 52 75 6c 65 22 3a 74 72 75 65 2c 22 43 Data Ascii: .json"},"GoogleData":{"vendorListVersion":1,"googleVendorListUrl":"https://cdn.cookielaw.org/vendorlist/googleData.json"},"ScriptDynamicLoadEnabled":false,"TenantFeatures":{"CookieV2BannerFocus":true,"CookieV2GPC":true,"CookieV2AssignTemplateRule":true,"C
2024-07-10 01:44:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49786	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	553	OUT	GET /71cd12cdf77ebcb750cff91a9bba6f04.js HTTP/1.1 Host: try.abtasty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:29 UTC	673	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 3306 Connection: close Last-Modified: Mon, 08 Jul 2024 12:19:42 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Q1iVRUYOPX975W_34U57h4wJ0tHw5Gxt Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 09 Jul 2024 23:33:06 GMT Cache-Control: s-maxage=21600,max-age=21600 ETag: "dc1a409c41799ba4f1c15e2e38bfd526" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fd9d525f4633063393693172d96013ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4nA11O-ZHP1DLgLlGuoQu89j5A8NkzpfJZO7sHUCJDhK4VonTtOI8Q== Age: 7884
2024-07-10 01:44:29 UTC	3306	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 38 31 3a 28 74 2c 61 29 3d 3e 7b 76 61 72 20 65 2c 6e 2c 72 3b 61 2e 6f 33 3d 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 69 64 65 6e 74 69 66 69 65 72 3d 22 69 6e 64 65 78 22 2c 74 2e 69 6e 69 74 69 61 74 6f 72 3d 22 69 6e 69 74 69 61 74 6f 72 22 2c 74 2e 6d 61 6e 69 66 65 73 74 3d 22 6d 61 6e 69 66 65 73 74 22 7d 28 65 7c 7c 28 61 2e 6f 33 3d 65 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 49 44 45 4e 54 49 46 49 45 52 3d 22 69 64 65 6e 74 69 66 69 65 72 22 2c 74 2e 49 4e 49 54 49 41 54 4f 52 3d 22 69 6e 69 74 69 61 74 6f 72 22 2c 74 2e 43 4c 49 45 4e 54 3d 22 63 6c 69 65 6e 74 22 2c 74 2e 4a 53 4f 4e 3d 22 6a 73 6f 6e 22 2c 74 2e 4d 41 4e 49 Data Ascii: (()=>{"use strict";var t={81:(t,a)=>{var e,n,r;a.o3=void 0,function(t){t.identifier="index",t.initiator="initiator",t.manifest="manifest"}(e\|\|(a.o3=e={})),function(t){t.IDENTIFIER="identifier",t.INITIATOR="initiator",t.CLIENT="client",t.JSON="json",t.MANI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49787	18.245.31.53	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	539	OUT	GET /libs/bui/9.5.6/bui.min.js HTTP/1.1 Host: bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:29 UTC	808	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 91785 Connection: close Server: nginx Date: Mon, 01 Jul 2024 12:43:21 GMT Last-Modified: Fri, 21 Jun 2024 14:35:24 GMT ETag: "66758fac-16689" Expires: Wed, 31 Jul 2024 12:43:21 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 74cd4e6bd806cc7209ac94e0173f5ac8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: Q54OKlfW3vv8mS64cdlEVkGY3YxjdW72lx-h0vBJ3FyntSf6RL6Nrw== Age: 738068
2024-07-10 01:44:29 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 29 28 65 29 7d 66 Data Ascii: !function(){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(e)}f
2024-07-10 01:44:29 UTC	16384	IN	Data Raw: 3d 74 68 69 73 2e 72 6f 6f 74 2c 65 3d 74 68 69 73 2e 70 72 6f 70 73 2e 76 65 72 74 69 63 61 6c 2c 69 3d 74 68 69 73 2e 73 74 61 74 65 2e 62 61 73 65 4d 6f 6e 74 68 44 61 74 65 3b 69 66 28 74 68 69 73 2e 65 6c 73 44 61 74 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 6c 73 4d 6f 6e 74 68 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 6c 43 6f 6e 74 65 6e 74 3d 67 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 2e 63 6f 6e 74 65 6e 74 2c 74 29 2c 74 68 69 73 2e 65 6c 53 65 6c 65 63 74 65 64 44 69 73 70 6c 61 79 3d 67 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 2e 73 65 6c 65 63 74 65 64 44 69 73 70 6c 61 79 2c 74 29 2c 74 68 69 73 2e 65 6c 50 72 65 76 3d 67 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 2e 70 72 65 76 42 75 74 74 6f 6e 2c 74 29 2c 74 68 69 73 2e 65 6c 4e 65 78 Data Ascii: =this.root,e=this.props.vertical,i=this.state.baseMonthDate;if(this.elsDate=null,this.elsMonth=null,this.elContent=g(this.selectors.content,t),this.elSelectedDisplay=g(this.selectors.selectedDisplay,t),this.elPrev=g(this.selectors.prevButton,t),this.elNex
2024-07-10 01:44:29 UTC	16384	IN	Data Raw: 74 65 3b 74 68 69 73 2e 63 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 3d 67 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 2e 63 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 2c 74 68 69 73 2e 6d 6f 64 61 6c 45 6c 29 2c 54 74 28 74 68 69 73 2e 63 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 2c 7b 74 65 6d 70 6c 61 74 65 73 3a 5b 74 68 69 73 2e 5f 67 65 74 43 6c 6f 73 65 54 65 6d 70 6c 61 74 65 28 29 2c 74 5d 2c 73 6f 75 72 63 65 45 6c 3a 67 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 2e 63 6f 6e 74 65 6e 74 29 7d 29 3b 76 61 72 20 65 3d 67 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 2e 74 69 74 6c 65 2c 74 68 69 73 2e 63 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 29 2c 69 3d 67 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 2e 73 75 62 74 69 74 6c 65 2c 74 68 69 73 2e 63 6f 6e Data Ascii: te;this.contentWrapper=g(this.selectors.contentWrapper,this.modalEl),Tt(this.contentWrapper,{templates:[this._getCloseTemplate(),t],sourceEl:g(this.selectors.content)});var e=g(this.selectors.title,this.contentWrapper),i=g(this.selectors.subtitle,this.con
2024-07-10 01:44:29 UTC	16384	IN	Data Raw: 2e 6d 61 78 2c 61 3d 65 2e 69 6e 74 65 72 76 61 6c 2c 6f 3d 74 68 69 73 2e 72 6f 6f 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 73 3d 6f 2e 6c 65 66 74 2c 72 3d 6f 2e 77 69 64 74 68 2c 6c 3d 74 68 69 73 2e 65 6c 73 48 61 6e 64 6c 65 5b 30 5d 2c 75 3d 74 68 69 73 2e 65 6c 73 48 61 6e 64 6c 65 5b 31 5d 2c 63 3d 74 68 69 73 2e 65 6c 43 75 72 72 65 6e 74 48 61 6e 64 6c 65 3d 3d 3d 6c 26 26 75 2c 68 3d 74 68 69 73 2e 65 6c 43 75 72 72 65 6e 74 48 61 6e 64 6c 65 3d 3d 3d 75 26 26 6c 2c 64 3d 74 68 69 73 2e 5f 67 65 74 44 72 61 67 49 64 28 29 2c 66 3d 74 68 69 73 2e 5f 66 69 6c 74 65 72 42 79 54 79 70 65 28 74 68 69 73 2e 65 6c 73 56 61 6c 75 65 2c 64 29 5b 30 5d 2c 76 3d 73 2c 70 3d 76 2b 72 2c 6d 3d 74 68 69 73 2e 5f 67 65 74 Data Ascii: .max,a=e.interval,o=this.root.getBoundingClientRect(),s=o.left,r=o.width,l=this.elsHandle[0],u=this.elsHandle[1],c=this.elCurrentHandle===l&&u,h=this.elCurrentHandle===u&&l,d=this._getDragId(),f=this._filterByType(this.elsValue,d)[0],v=s,p=v+r,m=this._get
2024-07-10 01:44:29 UTC	16384	IN	Data Raw: 22 62 6f 74 74 6f 6d 20 65 6e 64 22 3a 22 62 6f 74 74 6f 6d 20 73 74 61 72 74 22 2c 22 62 6f 74 74 6f 6d 20 73 74 61 72 74 22 3a 22 62 6f 74 74 6f 6d 20 65 6e 64 22 2c 22 62 6f 74 74 6f 6d 20 6c 65 66 74 22 3a 22 62 6f 74 74 6f 6d 20 72 69 67 68 74 22 2c 22 62 6f 74 74 6f 6d 20 72 69 67 68 74 22 3a 22 62 6f 74 74 6f 6d 20 6c 65 66 74 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 28 65 2d 74 29 2f 32 29 7d 66 75 6e 63 74 69 6f 6e 20 58 74 28 65 2c 69 2c 6e 29 7b 76 61 72 20 61 2c 6f 2c 73 2c 72 3d 6e 2e 70 6f 73 69 74 69 6f 6e 2c 6c 3d 6e 2e 6f 66 66 73 65 74 3b 73 77 69 74 63 68 28 75 74 28 29 26 26 28 72 3d 4b 74 5b 72 5d 7c 7c 72 29 2c 55 74 28 29 26 26 2d 31 21 3d 3d 5b 22 6c 65 Data Ascii: "bottom end":"bottom start","bottom start":"bottom end","bottom left":"bottom right","bottom right":"bottom left"};function Yt(t,e){return Math.floor(t+(e-t)/2)}function Xt(e,i,n){var a,o,s,r=n.position,l=n.offset;switch(ut()&&(r=Kt[r]\|\|r),Ut()&&-1!==["le
2024-07-10 01:44:29 UTC	9865	IN	Data Raw: 28 69 65 2c 22 74 72 75 65 22 29 3a 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 75 72 72 65 6e 74 22 2c 22 70 61 67 65 22 29 2c 44 28 69 2c 73 29 2c 69 2e 66 6f 63 75 73 28 29 29 2c 65 26 26 44 28 65 2c 72 29 2c 61 26 26 61 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 69 64 3a 74 7d 29 7d 7d 5d 29 2c 69 7d 28 29 3b 57 2e 72 65 67 69 73 74 65 72 28 22 54 61 62 22 2c 6e 65 29 3b 76 61 72 20 61 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 6e 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 69 29 2c 28 61 3d 68 28 74 68 69 73 2c 6c 28 69 29 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 6e 29 29 29 2e 70 72 6f 70 73 3d 6f 28 7b 7d 2c 7b 69 63 6f 6e 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 Data Ascii: (ie,"true"):i.setAttribute("aria-current","page"),D(i,s),i.focus()),e&&D(e,r),a&&a.call(this,{id:t})}}]),i}();W.register("Tab",ne);var ae=function(t){function i(t,n){var a;return e(this,i),(a=h(this,l(i).call(this,t,n))).props=o({},{icon:t.getAttribute("d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49792	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	655	OUT	GET /themes/custom/booking/images/1px.gif HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:29 UTC	892	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:29 GMT last-modified: Thu, 04 Jul 2024 09:16:17 GMT etag: "66866861-2a" X-Url: /themes/custom/booking/images/1px.gif X-Host: partner.booking.com X-Varnish-Storage: File cache-control: max-age=2628000, public expires: 2628000 X-Varnish: 223539408 217881786 Via: 1.1 varnish (Varnish/6.6), 1.1 19dbc4cbbe0be3dca8e57283a83b57c6.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: KFGzlqxZvIAcl0i1RHZsrEKaZHV9CcFuVdUUubwZjgg864i2PaKCLg== Age: 58477 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49791	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	748	OUT	POST /core/modules/statistics/statistics.php HTTP/1.1 Host: partner.booking.com Connection: keep-alive Content-Length: 9 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://partner.booking.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:29 UTC	9	OUT	Data Raw: 6e 69 64 3d 36 34 38 36 37 Data Ascii: nid=64867
2024-07-10 01:44:29 UTC	823	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:29 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /core/modules/statistics/statistics.php X-Host: partner.booking.com X-Varnish: 224897284 Via: 1.1 varnish (Varnish/6.6), 1.1 b47ba5841a54cf2d19fc521c78e94514.cloudfront.net (CloudFront) X-Varnish-Cache: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6pwLXZzDLVrvnSCBBQfVBNUN0hW7KFhxikj3FVdRDWzBjomIl3Hiaw== Age: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49790	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	1090	OUT	GET /sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:29 UTC	1393	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 26807 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:29 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:44:17 GMT etag: "6687c071-68b7" X-Varnish-Storage: Malloc X-Url: /sites/default/files/css/css_sUtND6IDwL1bFz0ypkAvBmuD5qhU9jBHfp4FZtLC4fw.css?delta=0&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 223539410 218762169 Via: 1.1 varnish (Varnish/6.6), 1.1 19dbc4cbbe0be3dca8e57283a83b57c6.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: D_U_Wodg1RE73dU6MflXhcoUVY95apTDW_wFwHNtU2bYiQDRTaF57w== Age: 58325 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:29 UTC	14991	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 47 4e 55 2d 47 50 4c 2d 32 2e 30 2d 6f 72 2d 6c 61 74 65 72 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 75 70 61 6c 2e 6f 72 67 2f 6c 69 63 65 6e 73 69 6e 67 2f 66 61 71 20 2a 2f 0a 2e 61 6a 61 78 2d 70 72 6f 67 72 65 73 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 35 70 78 20 32 70 78 20 35 70 78 3b 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 61 6a 61 78 2d 70 72 6f 67 72 65 73 73 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 7d 2e 61 6a 61 78 2d 70 72 6f 67 72 65 73 73 2d 74 68 72 6f 62 62 65 72 20 2e 74 68 72 6f 62 62 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 36 70 78 20 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 Data Ascii: /* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.ajax-progress{display:inline-block;padding:1px 5px 2px 5px;}[dir="rtl"] .ajax-progress{float:right;}.ajax-progress-throbber .throbber{display:inline;padding:1px 6px 2px;background:t
2024-07-10 01:44:29 UTC	11816	IN	Data Raw: 6f 72 2d 74 65 78 74 2c 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 35 66 33 66 33 66 3b 7d 2e 75 69 2d 70 72 69 6f 72 69 74 79 2d 70 72 69 6d 61 72 79 2c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 70 72 69 6f 72 69 74 79 2d 70 72 69 6d 61 72 79 2c 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 70 72 69 6f 72 69 74 79 2d 70 72 69 6d 61 72 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 7d 2e 75 69 2d 70 72 69 6f 72 69 74 79 2d 73 65 63 6f 6e 64 61 72 79 2c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 70 72 69 6f 72 69 74 79 2d 73 65 63 6f 6e 64 61 72 79 2c 2e 75 69 2d 77 69 64 67 65 74 Data Ascii: or-text,.ui-widget-header .ui-state-error-text{color:#5f3f3f;}.ui-priority-primary,.ui-widget-content .ui-priority-primary,.ui-widget-header .ui-priority-primary{font-weight:bold;}.ui-priority-secondary,.ui-widget-content .ui-priority-secondary,.ui-widget

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49789	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	1090	OUT	GET /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:29 UTC	1395	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 805884 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:29 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:44:14 GMT etag: "6687c06e-c4bfc" X-Varnish-Storage: Malloc X-Url: /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 223539406 216093510 Via: 1.1 varnish (Varnish/6.6), 1.1 d81b69368e6f8be2907e338480e58682.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6ciXE6dsjRIVyN1oyAJ-wFxbEy406eRl1e1shZvMk_ouQa-_wRA1Wg== Age: 58325 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:29 UTC	14989	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 47 50 4c 32 2b 20 6e 6f 20 55 52 4c 20 2a 2f 0a 3a 72 6f 6f 74 7b 2d 2d 62 75 69 5f 75 6e 69 74 5f 76 61 6c 75 65 3a 38 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 73 6d 61 6c 6c 65 72 3a 32 70 78 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 73 6d 61 6c 6c 3a 34 70 78 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 6d 65 64 69 75 6d 3a 38 70 78 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 3a 31 36 70 78 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 72 3a 32 34 70 78 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 73 74 3a 33 32 70 78 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 64 61 72 6b 3a 23 61 33 30 30 30 30 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 3a 23 63 30 30 3b 2d Data Ascii: /* @license GPL2+ no URL */:root{--bui_unit_value:8;--bui_unit_smaller:2px;--bui_unit_small:4px;--bui_unit_medium:8px;--bui_unit_large:16px;--bui_unit_larger:24px;--bui_unit_largest:32px;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;-
2024-07-10 01:44:29 UTC	15637	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 62 75 69 2d 75 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 75 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 62 75 69 2d 75 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 73 6d 61 6c 6c 65 72 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 74 6c 20 2e 62 75 69 2d 75 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 2d 2d 32 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 62 75 69 2d 75 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 Data Ascii: :before{content:" ";display:table;line-height:0}.bui-u-clearfix:after,.u-clearfix:after{clear:both}.bui-u-margin-start--2{margin-left:var(--bui_unit_smaller)!important}.rtl .bui-u-margin-start--2,[dir=rtl] .bui-u-margin-start--2{margin-left:0!important;ma
2024-07-10 01:44:29 UTC	1109	IN	Data Raw: 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 65 6c 65 76 61 74 69 6f 6e 5f 6f 6e 65 29 7d 2e 62 75 69 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 72 6f 77 2b 2e 62 75 69 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 72 6f 77 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 77 69 64 74 68 5f 31 30 30 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 61 6c 74 29 7d 2e 62 75 69 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 72 6f 77 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a Data Ascii: or_foreground);background:var(--bui_color_background_elevation_one)}.bui-accordion__row+.bui-accordion__row{border-top:var(--bui_border_width_100) solid var(--bui_color_border_alt)}.bui-accordion__row-inner{display:-webkit-box;display:-ms-flexbox;display:
2024-07-10 01:44:29 UTC	16384	IN	Data Raw: 75 73 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 33 70 78 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 66 6f 63 75 73 29 7d 2e 62 75 69 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 72 6f 77 2d 68 65 61 64 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 62 75 69 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 73 75 62 74 69 74 6c 65 2c 2e 62 75 69 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 74 69 74 6c 65 7b 6d 61 72 67 69 6e 3a 30 7d 2e 62 75 69 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 73 74 Data Ascii: us);box-shadow:0 0 0 3px var(--bui_color_action_focus)}.bui-accordion__row-header{-webkit-box-flex:1;-ms-flex-positive:1;flex-grow:1}.bui-accordion__subtitle,.bui-accordion__title{margin:0}.bui-accordion__title{font-size:var(--DO_NOT_USE_bui_large_font_st
2024-07-10 01:44:29 UTC	15596	IN	Data Raw: 68 74 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 31 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 38 78 29 7d 2e 72 74 6c 20 2e 62 75 69 2d 62 61 6e 6e 65 72 5f 5f 74 69 74 6c 65 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 62 75 69 2d 62 61 6e 6e 65 72 5f 5f 74 69 74 6c 65 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 38 78 29 7d 2e 62 75 69 2d 62 61 6e 6e 65 72 5f 5f 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f Data Ascii: ht);font-family:var(--DO_NOT_USE_bui_large_font_strong_1_font-family);margin:0;padding-right:var(--bui_spacing_8x)}.rtl .bui-banner__title,[dir=rtl] .bui-banner__title{padding-right:0;padding-left:var(--bui_spacing_8x)}.bui-banner__text{font-size:var(--DO
2024-07-10 01:44:29 UTC	16384	IN	Data Raw: 75 74 72 61 6c 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d 64 65 73 74 72 75 63 74 69 76 65 2c 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d 74 65 72 74 69 61 72 79 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d 64 65 73 74 72 75 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 66 6f 72 65 67 72 6f 75 6e 64 29 7d 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d 74 65 72 74 69 61 72 79 2d 6e 65 75 74 72 61 6c 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d 64 65 73 74 72 75 63 74 69 76 65 3a 62 65 66 6f 72 65 2c 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d 74 65 72 74 69 61 72 79 2d 6e 65 75 74 72 61 6c 3a 62 65 66 6f 72 65 2c 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d 74 65 72 74 69 61 72 79 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d 64 Data Ascii: utral.bui-button--destructive,.bui-button--tertiary.bui-button--destructive{color:var(--bui_color_destructive_foreground)}.bui-button--tertiary-neutral.bui-button--destructive:before,.bui-button--tertiary-neutral:before,.bui-button--tertiary.bui-button--d
2024-07-10 01:44:29 UTC	15596	IN	Data Raw: 63 75 73 29 7d 2e 62 75 69 2d 63 61 72 64 5f 5f 69 6d 61 67 65 7b 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 31 38 29 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 31 38 29 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 72 74 6c 20 2e 62 75 69 2d 63 61 72 64 5f 5f 69 6d 61 67 65 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 62 75 69 2d 63 61 72 64 5f 5f 69 6d 61 67 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 Data Ascii: cus)}.bui-card__image{width:calc(var(--bui_spacing_1x)18);height:calc(var(--bui_spacing_1x)18);margin-right:var(--bui_spacing_4x);border:none;-ms-flex-negative:0;flex-shrink:0;display:block}.rtl .bui-card__image,[dir=rtl] .bui-card__image{margin-right:0
2024-07-10 01:44:29 UTC	1967	IN	Data Raw: 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 36 78 29 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 36 78 29 3b 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 29 3b 6f 70 61 63 69 74 79 3a 2e 34 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b Data Ascii: :inline-block;position:absolute;height:var(--bui_spacing_6x);width:var(--bui_spacing_6x);top:var(--bui_spacing_4x);right:var(--bui_spacing_4x);margin-bottom:0;padding:0;text-decoration:none;color:var(--bui_color_foreground);opacity:.4;cursor:pointer;-webk
2024-07-10 01:44:29 UTC	2694	IN	Data Raw: 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 70 61 63 69 74 79 3a 2e 35 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 62 75 69 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6d 6f 72 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 33 70 78 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 66 6f 63 75 73 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 33 70 78 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 66 6f 63 75 73 29 7d 2e 62 75 69 2d 64 Data Ascii: moz-appearance:none;appearance:none;border:none;background:none;cursor:pointer;opacity:.5;padding:0}.bui-dropdown__more:focus{outline:none;-webkit-box-shadow:0 0 0 3px var(--bui_color_action_focus);box-shadow:0 0 0 3px var(--bui_color_action_focus)}.bui-d
2024-07-10 01:44:29 UTC	16384	IN	Data Raw: 20 2e 62 75 69 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 5f 5f 69 63 6f 6e 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 62 75 69 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 5f 5f 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 7d 2e 62 75 69 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 5f 5f 74 65 78 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 36 78 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 36 78 29 7d 2e 62 75 69 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 5f 5f 74 65 78 74 2d 73 6c 6f 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 Data Ascii: .bui-dropdown-menu__icon,[dir=rtl] .bui-dropdown-menu__icon{margin-right:0;margin-left:var(--bui_spacing_3x)}.bui-dropdown-menu__text{line-height:var(--bui_spacing_6x);height:var(--bui_spacing_6x)}.bui-dropdown-menu__text-slot{margin-left:var(--bui_spaci

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49778	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	596	OUT	GET /71cd12cdf77ebcb750cff91a9bba6f04/initiator.js HTTP/1.1 Host: try.abtasty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:29 UTC	703	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 6548 Connection: close Last-Modified: Mon, 08 Jul 2024 12:19:42 GMT x-amz-server-side-encryption: AES256 access-control-allow-origin: * x-amz-version-id: g6vl3AKXlSohxwfZh.DqmesHncg45MoY Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 10 Jul 2024 01:44:29 GMT Cache-Control: s-maxage=86400,max-age=30 ETag: "24b743cf3d6f5525b2a9e9fc60fd9125" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7af089de61bb0f71465732ed7f6f3386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: uk-MjBUCAuS2Cu8t4-o5I5PVKwJKl_kSHNjg7BFuFhcZ7YWh0aEl7Q== Age: 41015
2024-07-10 01:44:29 UTC	6548	IN	Data Raw: 2f 2a 20 43 72 65 61 74 65 64 3a 20 32 30 32 34 2f 30 37 2f 30 38 20 31 32 3a 31 39 3a 32 33 20 55 54 43 20 76 65 72 73 69 6f 6e 3a 20 6e 65 78 74 20 2a 2f 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 36 34 38 3a 28 65 2c 74 2c 61 29 3d 3e 7b 61 2e 64 28 74 2c 7b 46 46 3a 28 29 3d 3e 63 2c 4e 49 3a 28 29 3d 3e 73 2c 53 57 3a 28 29 3d 3e 69 2c 66 48 3a 28 29 3d 3e 6c 2c 76 56 3a 28 29 3d 3e 64 7d 29 3b 63 6f 6e 73 74 20 72 3d 7b 69 6e 66 6f 3a 22 69 6e 66 6f 3a 3a 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 3a 3a 22 2c 77 61 72 6e 69 6e 67 3a 22 77 61 72 6e 69 6e 67 3a 3a 22 2c 76 65 72 62 6f 73 65 3a 22 76 65 72 62 6f 73 65 3a 3a 22 2c 73 75 63 63 65 73 73 3a 22 73 75 63 63 65 73 73 3a 3a 22 7d 2c 6e 3d 7b 61 6c 6c 6f 77 65 Data Ascii: /* Created: 2024/07/08 12:19:23 UTC version: next */(()=>{"use strict";var e={648:(e,t,a)=>{a.d(t,{FF:()=>c,NI:()=>s,SW:()=>i,fH:()=>l,vV:()=>d});const r={info:"info::",error:"error::",warning:"warning::",verbose:"verbose::",success:"success::"},n={allowe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49795	104.18.32.137	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	605	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:29 UTC	370	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:29 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a0cde712d9143ad-EWR
2024-07-10 01:44:29 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49796	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	427	OUT	GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:29 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:29 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a0cde719df11a3c-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 41995 Cache-Control: public, max-age=86400 Expires: Thu, 11 Jul 2024 01:44:29 GMT Last-Modified: Tue, 14 May 2024 12:26:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: G4i22UW08v9MRLpiU1+29g== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5408f4e0-701e-0062-74fa-a506b1000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-10 01:44:29 UTC	467	IN	Data Raw: 31 61 63 63 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 35 62 35 61 62 Data Ascii: 1acc{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202404.1.0","OptanonDataJSON":"5b5ab
2024-07-10 01:44:29 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 65 36 34 31 39 35 37 30 2d 35 32 63 63 2d 34 33 32 64 2d 62 61 31 65 2d 37 33 30 30 32 39 30 66 31 39 37 30 22 2c 22 4e 61 6d 65 22 3a 22 45 45 41 20 2b 20 52 75 73 73 69 61 20 2b 20 55 4b 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 6e 6f 22 2c 22 64 65 22 2c 22 72 75 22 2c 22 62 65 22 2c 22 66 69 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 68 72 22 2c 22 6c 76 22 2c 22 66 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 73 69 22 2c 22 6d 63 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 69 74 22 2c 22 67 72 22 2c 22 65 73 22 2c 22 61 74 22 2c 22 72 Data Ascii: ":[{"Id":"e6419570-52cc-432d-ba1e-7300290f1970","Name":"EEA + Russia + UK","Countries":["no","de","ru","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","at","r
2024-07-10 01:44:29 UTC	1369	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 2d 20 43 68 69 6e 61 20 56 69 73 69 74 6f 72 73 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 Data Ascii: ":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Customer - China Visitors","Conditions":[],"GCEnable":false,"IsGPPEnabled":false,"EnableJWTAuthForKnownUs
2024-07-10 01:44:29 UTC	1369	IN	Data Raw: 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 73 62 22 2c 22 62 71 22 2c 22 73 63 22 2c 22 62 72 22 2c 22 62 73 22 2c 22 73 64 22 2c 22 62 74 22 2c 22 73 67 22 2c 22 62 76 22 2c 22 62 77 22 2c 22 73 68 22 2c 22 73 6a 22 2c 22 62 79 22 2c 22 62 7a 22 2c 22 73 6c 22 2c 22 73 6e 22 2c 22 73 6f 22 2c 22 63 61 22 2c 22 73 72 22 2c 22 63 63 22 2c 22 73 73 22 2c 22 63 64 22 2c 22 73 74 22 2c 22 63 66 22 2c 22 73 76 22 2c 22 63 67 22 2c 22 73 78 22 2c 22 63 68 22 2c 22 63 69 22 2c 22 73 79 22 2c 22 73 7a 22 2c 22 63 6b 22 2c 22 63 6c 22 2c 22 63 6d 22 2c 22 63 6f 22 2c 22 63 72 22 2c 22 74 63 22 2c 22 74 64 22 2c 22 74 66 22 2c 22 63 75 22 2c 22 74 67 22 2c 22 63 Data Ascii: f","rw","bh","bi","bj","bl","bm","bn","bo","sa","sb","bq","sc","br","bs","sd","bt","sg","bv","bw","sh","sj","by","bz","sl","sn","so","ca","sr","cc","ss","cd","st","cf","sv","cg","sx","ch","ci","sy","sz","ck","cl","cm","co","cr","tc","td","tf","cu","tg","c
2024-07-10 01:44:29 UTC	1369	IN	Data Raw: 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 6a 61 22 3a 22 6a 61 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 70 6c 22 3a 22 70 6c 22 2c 22 72 6f 22 3a 22 72 6f 22 2c 22 68 65 22 3a 22 68 65 22 2c 22 64 61 22 3a 22 64 61 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 6e 6c 22 3a 22 6e 6c 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d Data Ascii: "th","es-AR":"es-AR","ja":"ja","tl":"tl","pl":"pl","ro":"ro","he":"he","da":"da","tr":"tr","nl":"nl"},"BannerPushesDown":false,"Default":true,"Global":true,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"Tem
2024-07-10 01:44:29 UTC	925	IN	Data Raw: 2e 6a 73 6f 6e 22 7d 2c 22 47 6f 6f 67 6c 65 44 61 74 61 22 3a 7b 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 2c 22 67 6f 6f 67 6c 65 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 67 6f 6f 67 6c 65 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 53 63 72 69 70 74 44 79 6e 61 6d 69 63 4c 6f 61 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 65 52 75 6c 65 22 3a 74 72 75 65 2c 22 43 Data Ascii: .json"},"GoogleData":{"vendorListVersion":1,"googleVendorListUrl":"https://cdn.cookielaw.org/vendorlist/googleData.json"},"ScriptDynamicLoadEnabled":false,"TenantFeatures":{"CookieV2BannerFocus":true,"CookieV2GPC":true,"CookieV2AssignTemplateRule":true,"C
2024-07-10 01:44:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49793	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	620	OUT	GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:30 UTC	949	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1872 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:29 GMT Vary: Accept-Encoding last-modified: Sat, 27 Mar 2021 10:05:40 GMT etag: "605f0374-750" X-Varnish-Storage: Malloc X-Url: /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 224897290 216834766 Via: 1.1 varnish (Varnish/6.6), 1.1 b1c64361268fcbad3c03abbe37eb5cfa.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kkbj2usvZaLHMB1mGr2DSo9RD9dRWac8Fnsva7viaeUxHDllFlxkqQ== Age: 58467 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:30 UTC	1872	IN	Data Raw: 2f 2a 21 20 6c 61 7a 79 73 69 7a 65 73 20 2d 20 76 35 2e 33 2e 31 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2e 6c 61 7a 79 53 69 7a 65 73 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 61 7a 79 75 6e 76 65 69 6c 72 65 61 64 22 2c 61 2c 21 30 29 7d 3b 74 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 2c 65 2e 64 6f 63 75 6d 65 6e 74 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 74 28 72 65 71 75 69 72 65 28 22 6c 61 7a 79 73 69 7a 65 73 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e Data Ascii: /! lazysizes - v5.3.1 /!function(e,t){var a=function(){t(e.lazySizes),e.removeEventListener("lazyunveilread",a,!0)};t=t.bind(null,e,e.document),"object"==typeof module&&module.exports?t(require("lazysizes")):"function"==typeof define&&define.amd?defin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49794	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:29 UTC	1090	OUT	GET /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:30 UTC	1391	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1284 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:30 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:44:15 GMT etag: "6687c06f-504" X-Varnish-Storage: Malloc X-Url: /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 227950822 216108360 Via: 1.1 varnish (Varnish/6.6), 1.1 760a29e891ec10bba1274911260e1fc8.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: UT8OkkG0mzL2UCdcDADm6e9TyCnZu79OGZT_GEkj3V4PGhDxHeWWUQ== Age: 71912 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:30 UTC	1284	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 47 4e 55 2d 47 50 4c 2d 32 2e 30 2d 6f 72 2d 6c 61 74 65 72 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 75 70 61 6c 2e 6f 72 67 2f 6c 69 63 65 6e 73 69 6e 67 2f 66 61 71 20 2a 2f 0a 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 54 61 68 6f 6d 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 35 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 Data Ascii: /* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */body{background:none;color:#000000;font-family:Verdana,Tahoma,sans-serif;font-size:14pt;line-height:1.45;margin:0 !important;padding:0 !important;width:100% !important;}h1,h2,h3,h4,h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49797	18.239.50.78	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:30 UTC	379	OUT	GET /themes/custom/booking/images/1px.gif HTTP/1.1 Host: partner.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:30 UTC	892	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:30 GMT last-modified: Thu, 04 Jul 2024 09:16:17 GMT etag: "66866861-2a" X-Url: /themes/custom/booking/images/1px.gif X-Host: partner.booking.com X-Varnish-Storage: File cache-control: max-age=2628000, public expires: 2628000 X-Varnish: 229784684 217881786 Via: 1.1 varnish (Varnish/6.6), 1.1 40fb5e8791e3cb1337e56d76d11ee8fa.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zsnT6KzBDEKg2Euv2R8OPL1kCPZLTGT-juUtBh-JyJLojmdQPdMX-A== Age: 58478 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49798	18.239.50.78	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:30 UTC	381	OUT	GET /core/modules/statistics/statistics.php HTTP/1.1 Host: partner.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:30 UTC	823	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:30 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto x-webserver: webserver/1 X-Varnish-Storage: Malloc X-Url: /core/modules/statistics/statistics.php X-Host: partner.booking.com X-Varnish: 223429068 Via: 1.1 varnish (Varnish/6.6), 1.1 702b555619c53ec5f8f56dfeed61c334.cloudfront.net (CloudFront) X-Varnish-Cache: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: G1zDm6VZMbAb0YjFW0w-EQyVy9OnOjjrSoBvgm2tFZOsFeJ-cDDoOQ== Age: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49799	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:30 UTC	595	OUT	GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:30 UTC	925	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7889 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:30 GMT Vary: Accept-Encoding last-modified: Sat, 27 Mar 2021 10:05:40 GMT etag: "605f0374-1ed1" X-Varnish-Storage: Malloc X-Url: /libraries/lazysizes/lazysizes.min.js X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 230330870 217558402 Via: 1.1 varnish (Varnish/6.6), 1.1 dde951f556570d42a581084479d8b0e8.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7mMcLeh1UYu3McD8njt_v4Q3aOL4ZEPsBrKD5v9gNWnPIw1l_9J67A== Age: 58466 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:30 UTC	7889	IN	Data Raw: 2f 2a 21 20 6c 61 7a 79 73 69 7a 65 73 20 2d 20 76 35 2e 33 2e 31 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 44 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6b 2c 48 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 76 61 72 20 74 3d 7b 6c 61 7a 79 43 6c 61 73 73 3a 22 6c 61 7a 79 6c 6f 61 64 22 2c 6c 6f 61 64 65 64 43 6c 61 73 73 3a 22 6c 61 7a 79 6c 6f 61 64 65 64 22 2c 6c 6f 61 64 69 6e 67 43 6c 61 73 73 3a 22 6c 61 7a 79 6c 6f 61 64 69 6e 67 22 2c 70 72 65 6c 6f 61 64 43 6c 61 73 73 3a 22 6c 61 7a 79 70 72 65 6c 6f 61 64 22 2c 65 72 72 6f 72 43 6c 61 73 73 3a 22 6c 61 7a 79 65 72 72 6f 72 22 2c 61 75 74 6f 73 69 7a 65 73 43 6c 61 73 73 3a 22 6c 61 7a 79 61 75 Data Ascii: /! lazysizes - v5.3.1 /!function(e){var t=function(u,D,f){"use strict";var k,H;if(function(){var e;var t={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49804	172.64.155.119	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:30 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:30 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:30 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a0cde764c2e425d-EWR
2024-07-10 01:44:30 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49801	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:30 UTC	579	OUT	GET /71cd12cdf77ebcb750cff91a9bba6f04/main.1afc28a1a9a2da762946.js HTTP/1.1 Host: try.abtasty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:30 UTC	683	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 206222 Connection: close Date: Mon, 08 Jul 2024 12:20:05 GMT Last-Modified: Mon, 08 Jul 2024 12:19:42 GMT ETag: "2daccfde71e29c697f8b05a9c0c0f0cc" x-amz-server-side-encryption: AES256 Cache-Control: s-maxage=31536000,max-age=31536000 x-amz-version-id: mcA.FYKwyqSAoNpPlQ408._zpIiAyJVt Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 58e9d1f8f21a3575fa58a14f7f39c636.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Rs9vnlJHZsk3VphZEhrbwVZ7bxKq5F73VFyIsMblCGjng5H7f_ar4Q== Age: 134666
2024-07-10 01:44:30 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 67 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 67 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 32 5d 2c 7b 34 37 32 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 49 73 3a 28 29 3d 3e 64 2c 4b 36 3a 28 29 3d 3e 6c 2c 66 53 3a 28 29 3d 3e 72 2c 66 68 3a 28 29 3d 3e 73 2c 69 68 3a 28 29 3d 3e 63 2c 6c 24 3a 28 29 3d 3e 6f 2c 6e 63 3a 28 29 3d 3e 75 2c 74 76 3a 28 29 3d 3e 61 2c 76 77 3a 28 29 3d 3e 69 7d 29 3b 63 6f 6e 73 74 20 61 3d 22 61 62 74 61 73 74 79 5f 72 65 73 65 74 41 63 74 69 6f 6e 54 72 61 63 6b 69 6e 67 22 2c 69 3d 22 74 61 72 67 65 74 50 61 67 65 73 22 2c 6f 3d 22 71 61 50 61 72 61 6d 65 74 65 72 73 22 2c 72 3d 22 61 75 Data Ascii: "use strict";(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[792],{4721:(e,t,n)=>{n.d(t,{Is:()=>d,K6:()=>l,fS:()=>r,fh:()=>s,ih:()=>c,l$:()=>o,nc:()=>u,tv:()=>a,vw:()=>i});const a="abtasty_resetActionTracking",i="targetPages",o="qaParameters",r="au
2024-07-10 01:44:30 UTC	16384	IN	Data Raw: 2c 6f 3d 28 30 2c 70 2e 46 29 28 28 30 2c 72 2e 70 29 28 28 65 3d 3e 7b 6c 65 74 5b 74 5d 3d 65 3b 72 65 74 75 72 6e 21 28 74 20 69 6e 20 6e 29 26 26 69 2e 69 6e 63 6c 75 64 65 73 28 74 29 7d 29 29 2c 67 28 28 65 3d 3e 60 24 7b 65 5b 30 5d 7d 3d 24 7b 65 5b 31 5d 7d 60 29 29 29 28 61 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 3f 65 3a 65 2b 74 2b 6f 2e 6a 6f 69 6e 28 22 26 22 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6d 61 70 28 28 74 3d 3e 60 24 7b 74 7d 3d 24 7b 65 5b 74 5d 7d 60 29 29 2e 6a 6f 69 6e 28 22 26 22 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d Data Ascii: ,o=(0,p.F)((0,r.p)((e=>{let[t]=e;return!(t in n)&&i.includes(t)})),g((e=>`${e[0]}=${e[1]}`)))(a);return 0===o.length?e:e+t+o.join("&")}function F(e){return Object.keys(e).map((t=>`${t}=${e[t]}`)).join("&")}function H(e){let t=arguments.length>1&&void 0!==
2024-07-10 01:44:30 UTC	16384	IN	Data Raw: 6f 6b 69 6e 67 2e 63 6f 6d 2f 74 72 2f 79 61 72 64 25 43 34 25 42 31 6d 2f 64 65 73 74 65 6b 2d 69 6c 65 74 69 73 69 6d 2f 69 6c 65 74 69 73 69 6d 2f 64 65 73 74 65 6b 2d 69 25 43 33 25 41 37 69 6e 2d 62 69 7a 69 6d 6c 65 2d 69 6c 65 74 69 25 43 35 25 39 46 69 6d 65 2d 67 65 25 43 33 25 41 37 6d 65 6b 2d 30 22 2c 69 73 52 65 67 65 78 3a 21 31 2c 70 61 74 74 65 72 6e 3a 6e 75 6c 6c 2c 74 72 61 6e 73 66 65 72 50 61 72 61 6d 65 74 65 72 73 3a 21 31 2c 41 54 49 6e 74 65 72 6e 65 74 52 65 66 65 72 72 65 72 3a 21 30 7d 5d 7d 7d 7d 2c 31 32 33 36 31 36 33 3a 7b 6e 61 6d 65 3a 22 4a 61 70 61 6e 65 73 65 22 2c 74 72 61 66 66 69 63 3a 35 30 2c 74 79 70 65 3a 22 61 62 22 2c 70 61 72 65 6e 74 49 44 3a 31 32 33 36 31 36 31 2c 74 61 72 67 65 74 69 6e 67 4d 6f 64 65 3a Data Ascii: oking.com/tr/yard%C4%B1m/destek-iletisim/iletisim/destek-i%C3%A7in-bizimle-ileti%C5%9Fime-ge%C3%A7mek-0",isRegex:!1,pattern:null,transferParameters:!1,ATInternetReferrer:!0}]}}},1236163:{name:"Japanese",traffic:50,type:"ab",parentID:1236161,targetingMode:
2024-07-10 01:44:30 UTC	11610	IN	Data Raw: 3b 5c 6e 20 20 6c 65 66 74 3a 20 30 3b 5c 6e 20 20 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 76 65 72 3b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 5c 6e 20 20 74 6f 70 3a 20 32 33 70 78 3b 5c 6e 20 20 77 69 64 74 68 3a 20 33 35 33 70 78 3b 5c 6e 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 5c 6e 7d 5c 6e 22 7d 5d 7d 2c 31 35 35 38 35 31 37 3a 7b 69 64 3a 31 35 35 38 35 31 37 2c 6e 61 6d 65 3a 22 56 61 72 69 61 74 69 6f 6e 20 32 22 2c 74 72 61 66 66 69 63 3a 32 35 2c 6d 61 73 74 65 72 56 61 72 69 61 74 69 6f 6e 49 64 3a 30 2c 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 3a 5b 7b 69 64 3a 35 31 35 39 31 32 37 2c 73 65 6c 65 63 74 6f 72 3a 22 22 2c 74 79 70 65 3a 22 61 64 64 43 53 53 22 2c 76 61 Data Ascii: ;\n left: 0;\n object-fit: cover;\n opacity: 0;\n position: absolute;\n top: 23px;\n width: 353px;\n z-index: 10;\n}\n"}]},1558517:{id:1558517,name:"Variation 2",traffic:25,masterVariationId:0,modifications:[{id:5159127,selector:"",type:"addCSS",va
2024-07-10 01:44:30 UTC	16384	IN	Data Raw: 65 6e 74 5f 74 79 70 65 3a 21 30 2c 69 6e 63 6c 75 64 65 3a 21 30 7d 5d 2c 74 61 72 67 65 74 69 6e 67 5f 74 79 70 65 3a 31 37 7d 5d 7d 5d 2c 69 73 5f 73 65 67 6d 65 6e 74 3a 21 30 7d 2c 63 61 6d 70 61 69 67 6e 48 61 73 68 3a 22 38 39 62 35 62 66 39 61 36 33 31 36 65 62 33 30 64 63 66 63 35 62 31 66 37 34 30 63 37 36 63 38 22 2c 69 64 3a 31 32 36 30 36 34 34 2c 61 64 64 69 74 69 6f 6e 61 6c 54 79 70 65 3a 22 70 61 74 63 68 22 2c 69 73 41 73 79 6e 63 3a 21 30 2c 61 73 79 6e 63 56 61 72 69 61 74 69 6f 6e 49 6e 66 6f 42 79 49 64 3a 7b 31 35 36 32 33 36 34 3a 7b 69 64 3a 31 35 36 32 33 36 34 2c 74 72 61 66 66 69 63 3a 31 30 30 2c 6e 61 6d 65 3a 22 56 61 72 69 61 74 69 6f 6e 20 31 22 7d 7d 7d 2c 67 6c 6f 62 61 6c 3a 7b 6e 65 65 64 49 50 46 65 74 63 68 3a 5b 5d Data Ascii: ent_type:!0,include:!0}],targeting_type:17}]}],is_segment:!0},campaignHash:"89b5bf9a6316eb30dcfc5b1f740c76c8",id:1260644,additionalType:"patch",isAsync:!0,asyncVariationInfoById:{1562364:{id:1562364,traffic:100,name:"Variation 1"}}},global:{needIPFetch:[]
2024-07-10 01:44:30 UTC	16384	IN	Data Raw: 66 28 72 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 74 3d 72 2e 6d 61 70 28 28 65 3d 3e 28 65 5b 65 2e 6c 65 6e 67 74 68 5d 3d 7b 69 73 5f 73 75 63 63 65 73 73 3a 21 30 7d 2c 65 2e 6c 65 6e 67 74 68 2b 2b 2c 65 29 29 29 3b 72 65 74 75 72 6e 5b 2e 2e 2e 65 2c 2e 2e 2e 74 5d 7d 72 65 74 75 72 6e 5b 2e 2e 2e 65 2c 7b 6c 65 6e 67 74 68 3a 31 2c 30 3a 7b 69 73 5f 73 75 63 63 65 73 73 3a 21 31 7d 7d 5d 7d 63 6f 6e 73 74 20 72 3d 79 28 6f 2c 74 2c 6e 29 3b 69 66 28 72 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 74 3d 28 65 3d 3e 65 2e 6d 61 70 28 28 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 7b 69 73 5f 73 75 63 63 65 73 73 3a 21 30 7d 29 29 29 29 28 72 29 3b 72 65 74 75 72 6e 5b 2e 2e 2e 65 Data Ascii: f(r.length){const t=r.map((e=>(e[e.length]={is_success:!0},e.length++,e)));return[...e,...t]}return[...e,{length:1,0:{is_success:!1}}]}const r=y(o,t,n);if(r.length){const t=(e=>e.map((e=>Object.assign(Object.assign({},e),{is_success:!0}))))(r);return[...e
2024-07-10 01:44:30 UTC	16384	IN	Data Raw: 74 3d 3e 64 5b 65 5d 3f 2e 70 75 73 68 28 7b 2e 2e 2e 74 2c 74 65 73 74 49 64 3a 6e 7d 29 29 29 7d 29 28 61 2c 74 5b 61 5d 2c 6e 29 7d 29 29 7d 7d 2c 39 34 39 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4b 4b 3a 28 29 3d 3e 64 2c 73 43 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 61 3d 6e 28 36 35 35 32 29 2c 69 3d 6e 28 37 37 32 35 29 2c 6f 3d 6e 28 32 34 38 34 29 2c 72 3d 6e 28 33 35 39 35 29 3b 63 6f 6e 73 74 20 73 3d 61 73 79 6e 63 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 5b 5d 2c 61 3d 28 30 2c 69 2e 76 6d 29 28 29 2c 73 3d 61 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 2e 4b 73 2e 67 65 74 49 74 65 6d 28 6f 2e 62 31 2c 22 41 42 54 61 73 74 79 46 6f 72 63 65 64 4d 32 65 43 61 6d 70 61 69 67 6e 73 22 29 7c 7c 22 7b 7d 22 29 3a 7b 7d 2c 67 3d Data Ascii: t=>d[e]?.push({...t,testId:n})))})(a,t[a],n)}))}},9498:(e,t,n)=>{n.d(t,{KK:()=>d,sC:()=>s});var a=n(6552),i=n(7725),o=n(2484),r=n(3595);const s=async(e,t)=>{const n=[],a=(0,i.vm)(),s=a?JSON.parse(o.Ks.getItem(o.b1,"ABTastyForcedM2eCampaigns")\|\|"{}"):{},g=
2024-07-10 01:44:30 UTC	16384	IN	Data Raw: 6d 65 6e 74 73 5b 30 5d 3a 76 6f 69 64 20 30 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 2c 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 3f 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3a 76 6f 69 64 20 30 3b 28 30 2c 66 2e 4e 49 29 28 60 45 78 65 63 75 74 69 6e 67 20 63 61 6d 70 61 69 67 6e 20 24 7b 74 7d 20 4a 61 76 61 53 63 72 69 70 74 20 63 6f 64 65 2e 60 29 3b 63 6f 6e 73 74 20 69 3d 61 73 79 6e 63 28 29 3d 3e 7b 69 66 28 74 68 69 73 2e 67 65 74 41 62 6f 72 74 53 69 67 6e 61 6c 28 29 2e 61 62 6f 72 74 65 64 29 72 65 74 75 72 6e 28 30 2c 66 2e 4e Data Ascii: ments[0]:void 0,t=arguments.length>1?arguments[1]:void 0,n=arguments.length>2?arguments[2]:void 0,a=arguments.length>3?arguments[3]:void 0;(0,f.NI)(`Executing campaign ${t} JavaScript code.`);const i=async()=>{if(this.getAbortSignal().aborted)return(0,f.N
2024-07-10 01:44:30 UTC	3221	IN	Data Raw: 29 3b 69 66 28 69 2e 65 76 65 72 79 28 28 65 3d 3e 65 29 29 29 7b 63 6f 6e 73 74 20 74 3d 61 77 61 69 74 20 46 28 65 2c 6e 29 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 72 79 28 28 65 3d 3e 65 29 29 3f 59 28 6e 29 3a 4a 28 74 2c 5b 66 2e 42 2e 74 72 69 67 67 65 72 2c 66 2e 42 2e 73 65 67 6d 65 6e 74 5d 2c 65 2c 6e 29 7d 72 65 74 75 72 6e 20 4a 28 69 2c 5b 66 2e 42 2e 74 61 72 67 65 74 50 61 67 65 73 2c 66 2e 42 2e 71 61 4d 6f 64 65 5d 2c 65 2c 6e 29 7d 2c 24 3d 61 73 79 6e 63 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 7b 6f 6e 65 56 69 73 69 74 6f 72 4f 6e 65 54 65 73 74 3a 6e 7d 3d 28 30 2c 6c 2e 46 35 29 28 29 2c 7b 69 64 3a 61 2c 61 75 64 69 65 6e 63 65 54 72 69 67 67 65 72 3a 6f 2c 73 63 6f 70 65 73 3a 73 7d 3d 74 2e 64 61 74 61 3b 69 66 28 21 28 65 3d 3e 28 Data Ascii: );if(i.every((e=>e))){const t=await F(e,n);return t.every((e=>e))?Y(n):J(t,[f.B.trigger,f.B.segment],e,n)}return J(i,[f.B.targetPages,f.B.qaMode],e,n)},$=async(e,t)=>{const{oneVisitorOneTest:n}=(0,l.F5)(),{id:a,audienceTrigger:o,scopes:s}=t.data;if(!(e=>(
2024-07-10 01:44:30 UTC	16384	IN	Data Raw: 28 28 28 65 2c 6e 29 3d 3e 28 65 7c 7c 61 2e 73 65 74 53 74 61 74 75 73 28 74 5b 6e 5d 29 2c 21 65 29 29 29 2c 21 31 29 2c 75 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 21 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 7c 7c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3b 72 65 74 75 72 6e 20 61 77 61 69 74 20 4b 28 29 2e 74 68 65 6e 28 28 74 3d 3e 7b 69 66 28 22 73 74 61 72 74 50 65 6e 64 69 6e 67 4d 6f 64 65 22 69 6e 20 74 26 26 22 69 73 50 65 6e 64 69 6e 67 4d 6f 64 65 4f 76 65 72 22 69 6e 20 74 29 7b 63 6f 6e 73 74 7b 73 74 61 72 74 50 65 6e 64 69 6e 67 4d 6f 64 65 3a 69 2c 69 73 50 65 6e 64 69 6e 67 4d 6f 64 65 4f 76 65 72 3a 6f 7d 3d 74 3b 69 66 28 Data Ascii: (((e,n)=>(e\|\|a.setStatus(t[n]),!e))),!1),u=async function(){let e=!(arguments.length>0&&void 0!==arguments[0])\|\|arguments[0];return await K().then((t=>{if("startPendingMode"in t&&"isPendingModeOver"in t){const{startPendingMode:i,isPendingModeOver:o}=t;if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49802	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:30 UTC	551	OUT	GET /shared/me.7d4a349527f92fc578d9.js HTTP/1.1 Host: try.abtasty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:30 UTC	683	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 26708 Connection: close Date: Tue, 19 Mar 2024 09:20:59 GMT Last-Modified: Tue, 19 Mar 2024 09:20:56 GMT ETag: "a2b9bc5819aa624c49a0036b660ab72b" x-amz-server-side-encryption: AES256 Cache-Control: s-maxage=31536000,max-age=31536000 x-amz-version-id: 7E5lQH1Ialf11LbtcSGgw2jD3_p6PvVM Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fc3a32609a2b1f220f223f3b87919ac2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: KSenId5p36v6zUAXAn_61ZwzK4Ln-7Ix__tj0OGZsfz6pleLe9lGaA== Age: 9735812
2024-07-10 01:44:30 UTC	15701	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 67 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 67 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 33 5d 2c 7b 39 32 39 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 6c 65 74 65 45 76 65 6e 74 73 3d 74 2e 73 65 74 45 76 65 6e 74 73 3d 74 2e 73 65 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 44 75 72 69 6e 67 43 6c 69 63 6b 3d 74 2e 69 73 4d 6f 64 69 66 69 63 61 74 69 6f 6e 44 75 72 69 6e 67 43 6c 69 63 6b 3d 74 2e 69 73 43 6c 69 63 6b 49 6e 50 72 6f 67 72 65 73 73 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d Data Ascii: "use strict";(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[693],{9290:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.deleteEvents=t.setEvents=t.setModificationDuringClick=t.isModificationDuringClick=t.isClickInProgress=void 0;var n=
2024-07-10 01:44:30 UTC	11007	IN	Data Raw: 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 72 3d 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 72 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 28 30 2c 6e 2e 64 65 66 61 75 6c 74 29 28 65 29 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 30 2c 6f 2e 67 65 74 44 6f 63 75 6d 65 6e 74 29 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 68 72 65 66 3d 65 2e 75 72 6c 2c 74 2e 74 61 72 67 65 74 3d 65 2e 74 61 72 67 65 74 7c 7c 22 5f 73 65 6c 66 22 2c 28 30 2c 6f 2e 73 65 74 44 61 74 61 29 28 74 2c 22 61 62 54 61 73 74 79 4c 69 6e 6b 22 2c 31 29 2c 74 7d 7d 2c 34 30 35 33 Data Ascii: rray.isArray(e)){for(var t=0,r=Array(e.length);t<e.length;t++)r[t]=e[t];return r}return(0,n.default)(e)}var u=function(e){var t=(0,o.getDocument)().createElement("a");return t.href=e.url,t.target=e.target\|\|"_self",(0,o.setData)(t,"abTastyLink",1),t}},4053

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49803	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:30 UTC	384	OUT	GET /71cd12cdf77ebcb750cff91a9bba6f04/initiator.js HTTP/1.1 Host: try.abtasty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:31 UTC	703	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 6548 Connection: close Last-Modified: Mon, 08 Jul 2024 12:19:42 GMT x-amz-server-side-encryption: AES256 access-control-allow-origin: * x-amz-version-id: g6vl3AKXlSohxwfZh.DqmesHncg45MoY Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 10 Jul 2024 01:44:29 GMT Cache-Control: s-maxage=86400,max-age=30 ETag: "24b743cf3d6f5525b2a9e9fc60fd9125" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7af089de61bb0f71465732ed7f6f3386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: K04V0MaJzsCZgRExjSQyIInqdpSr4zExmcV9tcuXrHF-dxiSu1cmjw== Age: 41016
2024-07-10 01:44:31 UTC	6548	IN	Data Raw: 2f 2a 20 43 72 65 61 74 65 64 3a 20 32 30 32 34 2f 30 37 2f 30 38 20 31 32 3a 31 39 3a 32 33 20 55 54 43 20 76 65 72 73 69 6f 6e 3a 20 6e 65 78 74 20 2a 2f 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 36 34 38 3a 28 65 2c 74 2c 61 29 3d 3e 7b 61 2e 64 28 74 2c 7b 46 46 3a 28 29 3d 3e 63 2c 4e 49 3a 28 29 3d 3e 73 2c 53 57 3a 28 29 3d 3e 69 2c 66 48 3a 28 29 3d 3e 6c 2c 76 56 3a 28 29 3d 3e 64 7d 29 3b 63 6f 6e 73 74 20 72 3d 7b 69 6e 66 6f 3a 22 69 6e 66 6f 3a 3a 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 3a 3a 22 2c 77 61 72 6e 69 6e 67 3a 22 77 61 72 6e 69 6e 67 3a 3a 22 2c 76 65 72 62 6f 73 65 3a 22 76 65 72 62 6f 73 65 3a 3a 22 2c 73 75 63 63 65 73 73 3a 22 73 75 63 63 65 73 73 3a 3a 22 7d 2c 6e 3d 7b 61 6c 6c 6f 77 65 Data Ascii: /* Created: 2024/07/08 12:19:23 UTC version: next */(()=>{"use strict";var e={648:(e,t,a)=>{a.d(t,{FF:()=>c,NI:()=>s,SW:()=>i,fH:()=>l,vV:()=>d});const r={info:"info::",error:"error::",warning:"warning::",verbose:"verbose::",success:"success::"},n={allowe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49805	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:30 UTC	745	OUT	GET /sites/default/files/styles/huge_slider_teaser/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?h=a0c51cab&itok=O6kEyqHx HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:31 UTC	1062	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 62846 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:31 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Mon, 24 Jun 2024 13:31:04 GMT etag: "f57e-61ba2caf84441" cache-control: max-age=31536000 expires: Sun, 06 Jul 2025 03:22:57 GMT x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /sites/default/files/styles/huge_slider_teaser/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?h=a0c51cab&itok=O6kEyqHx X-Host: partner.booking.com X-Varnish: 223429075 164855101 Via: 1.1 varnish (Varnish/6.6), 1.1 21369bf2bfeb79adaa5bef1cb96f8540.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lLrUwfWp_moNHD81N3qf5KlVVEyQRrNqyTlbfn0KvbtSLHdIzqWKwQ== Age: 339693 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:31 UTC	15322	IN	Data Raw: 52 49 46 46 76 f5 00 00 57 45 42 50 56 50 38 20 6a f5 00 00 50 02 04 9d 01 2a d0 02 18 02 3e 19 0c 84 41 a1 04 9e 6f 4c 04 00 61 2c ec 55 81 8f 66 b9 d3 a9 be 17 38 28 bb fd 4e 45 65 d9 cb 17 b2 e6 a4 68 8d c0 22 0d 11 ea 2b 94 46 4a ff 69 bc 0b 66 12 80 ff 73 e8 3f eb b6 e2 54 f8 3c 96 75 ca d0 d1 5f 67 bd 80 fc 3f 9a fe d2 bc af e2 77 cf ff 23 fb 3b e1 57 fb 3d 4d 7b 67 fd 7f aa 4f 81 2e 92 ff 91 fe 6b fd 1f fe 1f f3 ff ff fe ae 7f d2 ff dd fe c3 df 47 f5 df f5 df f8 bf d1 7e f7 7d 0d fe bc 7f b4 ff 27 fe ab fe 57 f8 9f ff ff 76 7f f3 7e d2 7c 0a fd e9 f5 4d fd 87 fd 1f fd 9f f3 bf f2 3f f4 fc b9 7f ea fd cf f7 ef fd ab fe 47 ed 17 fd 1f 90 cf e9 5f e4 3f f0 7b 59 fa ce ff 97 f5 29 fd be ff e5 ed 2f ff b3 f7 4b e2 1f fa bf fc cf fd bf ef bf 7f fe 85 3f Data Ascii: RIFFvWEBPVP8 jP*>AoLa,Uf8(NEeh"+FJifs?T<u_g?w#;W=M{gO.kG~}'Wv~\|M?G_?{Y)/K?
2024-07-10 01:44:31 UTC	15604	IN	Data Raw: 09 e9 7e 56 ea 24 ac 6b 91 5f 8f 0a af 26 e5 a6 d3 e0 18 63 f7 4d 9e 92 c5 a0 1b c3 42 e0 86 ab c3 d9 3e 46 ab 97 ed ea 14 49 e5 a5 f7 21 c3 d7 84 dc 52 3f 9f 1f d8 89 4b f2 0b 3e d4 c8 f4 16 cf 62 78 68 f8 28 54 23 6a 64 32 68 8b 58 dc 03 ff 34 22 18 1f 19 25 46 ab 34 55 95 b2 dd 40 ed 5f 67 5d b1 82 78 45 6d 94 81 f0 5f be b2 d9 b4 af d7 06 27 f4 79 3e 18 d7 8c 21 7f bf f2 3e 9d 5d b5 73 af fd fe 8e 6b 90 32 4e de b4 57 d0 c4 35 67 2f 5e 25 15 88 35 c2 a6 8a 69 2f 25 9d c1 38 38 9d cf 88 c1 94 90 aa 3a cd 0a e6 a5 bc 15 93 16 f5 e8 d9 e0 cf fa b3 cb 89 80 33 5c 87 81 ae f5 af be 4f 4b 64 6e 19 f5 28 66 69 05 26 69 39 ad f9 8b c7 b1 d9 38 53 4a 89 e5 34 79 04 54 91 cd 45 71 02 f5 a7 cf 89 0c b5 ec 90 bb 95 2f ff fe 32 21 6a ec 44 04 f6 95 77 47 d7 b5 63 Data Ascii: ~V$k_&cMB>FI!R?K>bxh(T#jd2hX4"%F4U@_g]xEm_'y>!>]sk2NW5g/^%5i/%88:3\OKdn(fi&i98SJ4yTEq/2!jDwGc
2024-07-10 01:44:31 UTC	2673	IN	Data Raw: cf ec ee bf bb 86 51 49 fa 9c f7 39 15 ce 52 d8 c1 db a5 11 a9 d1 8c 84 75 b3 19 f2 80 82 66 22 d1 d4 64 76 33 8a 94 3a de 8a f7 fe ea 53 2d 31 82 fc 1f 4d 64 81 3c 81 78 e2 27 b4 bf f5 92 46 0e 79 e2 35 1b 4b f5 1a 38 3a 2d ee c8 18 6d c1 04 e9 7a 0d 04 e8 59 a3 34 fc e4 26 1a a3 f9 72 98 bb 4d f5 84 37 4d f6 89 ea cb 66 bc 5f ac 88 7e 67 d3 5b b7 de 63 53 ac 39 01 8b d8 c9 90 55 29 35 4a 6e 64 17 0f 8c c0 9b 58 bf 87 4a 0d 22 a0 5d 3e 1b 01 08 43 21 ec 01 fe ec 68 6a cb 46 eb 60 bc 98 1c 1c 60 ff 94 e3 3d e6 7e cb 4f 72 59 bf 1c 0b b2 9b 09 dd 1c 8e 80 71 63 bb 05 67 b2 33 17 0b b9 a4 8f 2d c5 01 80 d1 73 a8 e2 79 7e 41 b1 46 c6 8e 8f 2a 46 66 e4 7a a2 21 ff 7b 07 4d 53 15 0a 57 4e e8 af 25 53 0f 7d 75 88 7d e3 a3 bb 69 97 e3 3f 45 c7 b0 b0 f6 b1 41 15 Data Ascii: QI9Ruf"dv3:S-1Md<x'Fy5K8:-mzY4&rM7Mf_~g[cS9U)5JndXJ"]>C!hjF``=~OrYqcg3-sy~AF*Ffz!{MSWN%S}u}i?EA
2024-07-10 01:44:31 UTC	16384	IN	Data Raw: a6 3d fd 54 5f 44 36 17 cf 07 89 16 a3 7c 37 75 91 5f 07 fd ba 1f 5f 89 8e 58 f9 e5 24 df 66 b9 da 9b 8f 36 b3 c3 4c 43 db a1 fd 25 c6 f0 f6 13 d2 66 36 9b 79 a8 79 2c 3d 9f 0b 88 7a 39 14 94 23 3f 50 16 80 0a 5e 83 01 b4 52 38 da 34 03 22 76 fd 3b 69 eb 0b 8f 74 3d 44 c7 e9 b5 4c d6 18 ee 09 3a 67 29 41 38 82 9a cc 2b b2 04 bc c9 b2 e6 e8 57 33 e1 a2 5d a2 b9 b5 d1 d1 e8 b5 c1 b7 47 7c 25 7e bd 14 0f 07 bf 04 dd 2f bf 93 1b 8a 40 dc 07 21 5f 51 13 60 38 aa 25 63 01 b5 cb a7 8b fb 56 d8 8d fe 97 86 75 d6 a4 c8 3a 17 56 d1 5c 52 31 dc c5 d4 a3 ee 61 0d 4f b0 7b 88 07 f6 61 b0 7c d9 3c 57 16 61 6e a6 c2 45 f9 43 ea 4c 1a 45 ca 05 18 ff eb c3 c1 37 53 a5 45 fa 33 45 d7 cc 79 83 40 bf 3c 35 99 ec 3d 3c 3e 3e bf 24 c2 16 cb 4d f2 fb ca 47 25 14 a8 4b 2a f5 01 Data Ascii: =T_D6\|7u__X$f6LC%f6yy,=z9#?P^R84"v;it=DL:g)A8+W3]G\|%~/@!_Q`8%cVu:V\R1aO{a\|<WanECLE7SE3Ey@<5=<>>$MG%K*
2024-07-10 01:44:31 UTC	12863	IN	Data Raw: 35 24 5e 0f ed 8a 64 d9 1c 5a 7a 2a 9c 03 c6 3c 9e f6 c9 62 eb f9 3d 87 a0 48 f1 5e 75 99 eb 14 5b 99 e5 7f 49 f6 2b d5 56 04 75 9f ee 8d 22 21 a3 a0 12 14 47 52 6e ab 24 80 36 c8 3a 01 0e 56 6f cf 77 b0 02 dd 66 80 b4 73 4d fa db 2e e5 72 4e 76 81 3f 3f dd 88 42 f9 2d 10 59 6d a0 f3 68 fe ca 0e 66 0d ab 11 35 3e 88 d5 42 5d 60 f2 18 a7 31 3b 6c 80 c0 90 91 9f 37 ce 9d 61 75 69 13 27 e7 62 6a a7 56 a8 f1 96 32 08 29 f2 81 3b 80 e8 4e 5d c1 78 c2 26 6a 16 96 6b 06 48 d1 0c 7c d9 36 e7 4a e4 13 dd 7a 7d 05 2e 7f 0f 7b 8d 2a d7 4d 5b 85 a7 67 fa 27 91 46 6c 96 f1 c2 d7 7b 6a 91 72 47 a1 cc dc 27 d7 fa 7e e8 9f b6 fb 19 70 a0 32 ad 4a a5 13 3b 71 cb 07 f1 31 ef 29 31 42 47 e2 5d 9a 2a 9d 51 66 e9 ec 98 0c 76 10 c0 b9 38 e4 26 0e 06 09 6f a1 43 e5 47 38 91 a5 Data Ascii: 5$^dZz<b=H^u[I+Vu"!GRn$6:VowfsM.rNv??B-Ymhf5>B]`1;l7aui'bjV2);N]x&jkH\|6Jz}.{M[g'Fl{jrG'~p2J;q1)1BG]*Qfv8&oCG8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49806	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:31 UTC	561	OUT	GET /scripttemplates/202404.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:31 UTC	815	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: lAa4newgeifCObgQn9TUrg== Last-Modified: Tue, 11 Jun 2024 01:45:16 GMT x-ms-request-id: f471b9d7-c01e-0095-0e08-bc205a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 36568 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a0cde7bcf99434a-EWR
2024-07-10 01:44:31 UTC	554	IN	Data Raw: 37 63 37 31 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 34 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 78 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c71/** * onetrust-banner-sdk * v202404.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-07-10 01:44:31 UTC	1369	IN	Data Raw: 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 Data Ascii: otype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return ne
2024-07-10 01:44:31 UTC	1369	IN	Data Raw: 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 Data Ascii: l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=ar
2024-07-10 01:44:31 UTC	1369	IN	Data Raw: 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 59 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 59 28 74 29 7d 63 61 74 63 68 28 65 29 7b 4a 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 59 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d Data Ascii: ceof z)return t._state=3,t._value=e,void Y(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,Y(t)}catch(e){J(t,e)}var n,r}function J(e,t){e._state=2,e._value=t,Y(e)}function Y(e){2===e._state&&0==
2024-07-10 01:44:31 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 7a 2e 72 61 63 65 3d 66 75 6e 63 Data Ascii: eturn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){return new z(function(e,t){t(o)})},z.race=func
2024-07-10 01:44:31 UTC	1369	IN	Data Raw: 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 Data Ascii: e:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable
2024-07-10 01:44:31 UTC	1369	IN	Data Raw: 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 Data Ascii: .initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max
2024-07-10 01:44:31 UTC	1369	IN	Data Raw: 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 Data Ascii: e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=oe=oe\|\|{})[e.Purpose=1
2024-07-10 01:44:31 UTC	1369	IN	Data Raw: 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 43 65 3d 43 65 7c 7c 7b 7d Data Ascii: l"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.InActive="0",(e=ge=ge\|\|{}).Host="Host",e.GenVendor="GenVen",(e=Ce=Ce\|\|{}
2024-07-10 01:44:31 UTC	1369	IN	Data Raw: 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 Data Ascii: granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="vendors",(e=_e=_e\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49807	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:31 UTC	1090	OUT	GET /sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:31 UTC	1391	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1426 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:31 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:44:17 GMT etag: "6687c071-592" X-Varnish-Storage: Malloc X-Url: /sites/default/files/css/css_VT2uO3rIvz8wQKjBZTK55zRpppfj2I5f-jtzgH28ia4.css?delta=3&language=en-us&theme=booking&include=eJx1UQtuwyAMvRCEI1UG3MBCMDImbXb6ka4ta7dJyMKf5-dng_dCkHcD9890ZsqiPAgk2JGNxQBbJK4qweduDqPqXgVXY6GiskRLzLOxLWpX67uvhWHDlJB1inMQLQHXgZoTWUgvoI_RwxG5JWJh0mdyreoA2fdWox7cooX6KwqvkmJejOdWIE13V1UBiVWiq4_MiHRJOzU5-Vgdbci7oYyOkirAMDOU8ASNyNRyaTbFGtCrLeKlmpudVvIt4UsIPuA61AAztYpJC_bNsX72HOuQVVvIuSddil3bu-AfBQfDr_zgcP2MmOUPkoDgO74isAvKEeNDpGcqtolQVucEsznMdGzx9CLkGOJI_TNjO7TVOOeY-2EoSSyqr_mCp29Kc3Pu_F_xkPfW X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 225631649 213152270 Via: 1.1 varnish (Varnish/6.6), 1.1 a5a8e743f28968822c126102a78bb7c6.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qjeDpJMfTDVL36jtNC0ZYOPVkMFysIeRQ8u5yBLlPlH9AEdcxoii_A== Age: 58327 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:31 UTC	1426	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6b 65 6e 77 68 65 65 6c 65 72 2f 73 6c 69 63 6b 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b Data Ascii: /* @license MIT https://github.com/kenwheeler/slick/blob/master/LICENSE */.slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49808	18.239.50.78	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:32 UTC	469	OUT	GET /sites/default/files/styles/huge_slider_teaser/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?h=a0c51cab&itok=O6kEyqHx HTTP/1.1 Host: partner.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:32 UTC	1062	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 62846 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:32 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Mon, 24 Jun 2024 13:31:04 GMT etag: "f57e-61ba2caf84441" cache-control: max-age=31536000 expires: Sun, 06 Jul 2025 03:22:57 GMT x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /sites/default/files/styles/huge_slider_teaser/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?h=a0c51cab&itok=O6kEyqHx X-Host: partner.booking.com X-Varnish: 229784692 164855101 Via: 1.1 varnish (Varnish/6.6), 1.1 e1ffe469ec59bbd0f64b14eb9c83d0d4.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: GOrW9NcFn6ADqguAoqf7q0d_Mt-QPV6CLLTeX4P4ShrDYoIzjjyS0g== Age: 339694 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:32 UTC	15322	IN	Data Raw: 52 49 46 46 76 f5 00 00 57 45 42 50 56 50 38 20 6a f5 00 00 50 02 04 9d 01 2a d0 02 18 02 3e 19 0c 84 41 a1 04 9e 6f 4c 04 00 61 2c ec 55 81 8f 66 b9 d3 a9 be 17 38 28 bb fd 4e 45 65 d9 cb 17 b2 e6 a4 68 8d c0 22 0d 11 ea 2b 94 46 4a ff 69 bc 0b 66 12 80 ff 73 e8 3f eb b6 e2 54 f8 3c 96 75 ca d0 d1 5f 67 bd 80 fc 3f 9a fe d2 bc af e2 77 cf ff 23 fb 3b e1 57 fb 3d 4d 7b 67 fd 7f aa 4f 81 2e 92 ff 91 fe 6b fd 1f fe 1f f3 ff ff fe ae 7f d2 ff dd fe c3 df 47 f5 df f5 df f8 bf d1 7e f7 7d 0d fe bc 7f b4 ff 27 fe ab fe 57 f8 9f ff ff 76 7f f3 7e d2 7c 0a fd e9 f5 4d fd 87 fd 1f fd 9f f3 bf f2 3f f4 fc b9 7f ea fd cf f7 ef fd ab fe 47 ed 17 fd 1f 90 cf e9 5f e4 3f f0 7b 59 fa ce ff 97 f5 29 fd be ff e5 ed 2f ff b3 f7 4b e2 1f fa bf fc cf fd bf ef bf 7f fe 85 3f Data Ascii: RIFFvWEBPVP8 jP*>AoLa,Uf8(NEeh"+FJifs?T<u_g?w#;W=M{gO.kG~}'Wv~\|M?G_?{Y)/K?
2024-07-10 01:44:32 UTC	1893	IN	Data Raw: 09 e9 7e 56 ea 24 ac 6b 91 5f 8f 0a af 26 e5 a6 d3 e0 18 63 f7 4d 9e 92 c5 a0 1b c3 42 e0 86 ab c3 d9 3e 46 ab 97 ed ea 14 49 e5 a5 f7 21 c3 d7 84 dc 52 3f 9f 1f d8 89 4b f2 0b 3e d4 c8 f4 16 cf 62 78 68 f8 28 54 23 6a 64 32 68 8b 58 dc 03 ff 34 22 18 1f 19 25 46 ab 34 55 95 b2 dd 40 ed 5f 67 5d b1 82 78 45 6d 94 81 f0 5f be b2 d9 b4 af d7 06 27 f4 79 3e 18 d7 8c 21 7f bf f2 3e 9d 5d b5 73 af fd fe 8e 6b 90 32 4e de b4 57 d0 c4 35 67 2f 5e 25 15 88 35 c2 a6 8a 69 2f 25 9d c1 38 38 9d cf 88 c1 94 90 aa 3a cd 0a e6 a5 bc 15 93 16 f5 e8 d9 e0 cf fa b3 cb 89 80 33 5c 87 81 ae f5 af be 4f 4b 64 6e 19 f5 28 66 69 05 26 69 39 ad f9 8b c7 b1 d9 38 53 4a 89 e5 34 79 04 54 91 cd 45 71 02 f5 a7 cf 89 0c b5 ec 90 bb 95 2f ff fe 32 21 6a ec 44 04 f6 95 77 47 d7 b5 63 Data Ascii: ~V$k_&cMB>FI!R?K>bxh(T#jd2hX4"%F4U@_g]xEm_'y>!>]sk2NW5g/^%5i/%88:3\OKdn(fi&i98SJ4yTEq/2!jDwGc
2024-07-10 01:44:32 UTC	16384	IN	Data Raw: f6 39 33 ce f0 c2 d4 9e da 8a 74 da 92 c8 8a 0d 3e d4 cb 94 34 f3 8b 2c 9a 11 b4 da 24 8b a5 b5 df 46 cd 89 5b 34 2d ba 85 6c c3 54 b1 bf 04 92 aa 8f e7 07 25 8c 39 43 38 a7 89 e1 b4 2a 20 51 9d d4 c4 95 c5 35 f9 81 68 9f 70 d1 60 97 5e 14 a2 46 c4 0d 92 88 75 b3 7e 21 d6 f2 de be 1d f3 ff 61 db 75 7e 03 f6 d6 da e8 5f c5 bc 35 7d 9a 2e de ac 85 ca 03 67 91 35 00 29 94 1d 6f 09 b9 75 08 8c a3 be 56 41 8a 5c d4 12 c5 11 f2 77 12 e7 d4 c1 0d f8 d8 cf e6 82 01 f5 50 e8 76 12 b1 6c 52 6b 81 32 71 41 3e 05 bf c3 25 62 db 08 70 f3 36 a7 94 fd 1d 2b 1a 61 eb 22 95 bc 70 bf 7a d3 b3 f6 93 db 61 12 b3 fd 71 62 df 09 93 b4 f2 b3 42 bb c8 62 00 02 96 39 d6 1d 2c 5c 89 ca 02 f7 06 03 17 fb c8 71 3d 81 a3 e5 26 c9 3e ac 86 1a 60 29 a5 84 f5 4c f4 7d 7b 53 8b 0c bb 0d Data Ascii: 93t>4,$F[4-lT%9C8* Q5hp`^Fu~!au~_5}.g5)ouVA\wPvlRk2qA>%bp6+a"pzaqbBb9,\q=&>`)L}{S
2024-07-10 01:44:32 UTC	16384	IN	Data Raw: a6 3d fd 54 5f 44 36 17 cf 07 89 16 a3 7c 37 75 91 5f 07 fd ba 1f 5f 89 8e 58 f9 e5 24 df 66 b9 da 9b 8f 36 b3 c3 4c 43 db a1 fd 25 c6 f0 f6 13 d2 66 36 9b 79 a8 79 2c 3d 9f 0b 88 7a 39 14 94 23 3f 50 16 80 0a 5e 83 01 b4 52 38 da 34 03 22 76 fd 3b 69 eb 0b 8f 74 3d 44 c7 e9 b5 4c d6 18 ee 09 3a 67 29 41 38 82 9a cc 2b b2 04 bc c9 b2 e6 e8 57 33 e1 a2 5d a2 b9 b5 d1 d1 e8 b5 c1 b7 47 7c 25 7e bd 14 0f 07 bf 04 dd 2f bf 93 1b 8a 40 dc 07 21 5f 51 13 60 38 aa 25 63 01 b5 cb a7 8b fb 56 d8 8d fe 97 86 75 d6 a4 c8 3a 17 56 d1 5c 52 31 dc c5 d4 a3 ee 61 0d 4f b0 7b 88 07 f6 61 b0 7c d9 3c 57 16 61 6e a6 c2 45 f9 43 ea 4c 1a 45 ca 05 18 ff eb c3 c1 37 53 a5 45 fa 33 45 d7 cc 79 83 40 bf 3c 35 99 ec 3d 3c 3e 3e bf 24 c2 16 cb 4d f2 fb ca 47 25 14 a8 4b 2a f5 01 Data Ascii: =T_D6\|7u__X$f6LC%f6yy,=z9#?P^R84"v;it=DL:g)A8+W3]G\|%~/@!_Q`8%cVu:V\R1aO{a\|<WanECLE7SE3Ey@<5=<>>$MG%K*
2024-07-10 01:44:32 UTC	12863	IN	Data Raw: 35 24 5e 0f ed 8a 64 d9 1c 5a 7a 2a 9c 03 c6 3c 9e f6 c9 62 eb f9 3d 87 a0 48 f1 5e 75 99 eb 14 5b 99 e5 7f 49 f6 2b d5 56 04 75 9f ee 8d 22 21 a3 a0 12 14 47 52 6e ab 24 80 36 c8 3a 01 0e 56 6f cf 77 b0 02 dd 66 80 b4 73 4d fa db 2e e5 72 4e 76 81 3f 3f dd 88 42 f9 2d 10 59 6d a0 f3 68 fe ca 0e 66 0d ab 11 35 3e 88 d5 42 5d 60 f2 18 a7 31 3b 6c 80 c0 90 91 9f 37 ce 9d 61 75 69 13 27 e7 62 6a a7 56 a8 f1 96 32 08 29 f2 81 3b 80 e8 4e 5d c1 78 c2 26 6a 16 96 6b 06 48 d1 0c 7c d9 36 e7 4a e4 13 dd 7a 7d 05 2e 7f 0f 7b 8d 2a d7 4d 5b 85 a7 67 fa 27 91 46 6c 96 f1 c2 d7 7b 6a 91 72 47 a1 cc dc 27 d7 fa 7e e8 9f b6 fb 19 70 a0 32 ad 4a a5 13 3b 71 cb 07 f1 31 ef 29 31 42 47 e2 5d 9a 2a 9d 51 66 e9 ec 98 0c 76 10 c0 b9 38 e4 26 0e 06 09 6f a1 43 e5 47 38 91 a5 Data Ascii: 5$^dZz<b=H^u[I+Vu"!GRn$6:VowfsM.rNv??B-Ymhf5>B]`1;l7aui'bjV2);N]x&jkH\|6Jz}.{M[g'Fl{jrG'~p2J;q1)1BG]*Qfv8&oCG8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49809	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:32 UTC	645	OUT	GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-us.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:32 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:32 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a0cde831e91192a-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 42900 Cache-Control: public, max-age=86400 Expires: Thu, 11 Jul 2024 01:44:32 GMT Last-Modified: Tue, 14 May 2024 12:26:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 5lw/E0WaRkoXtoGlUPlJjA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0013363a-e01e-0023-65fa-a52ea2000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-10 01:44:32 UTC	467	IN	Data Raw: 37 63 31 61 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 4d 61 6e 61 67 65 20 79 6f 75 72 Data Ascii: 7c1a{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 6b 69 65 73 54 65 78 74 22 3a 22 59 6f 75 72 20 50 72 69 76 61 63 79 22 2c 22 43 6f 6e 66 69 72 6d 54 65 78 74 22 3a 22 41 6c 6c 6f 77 20 41 6c 6c 22 2c 22 41 6c 6c 6f 77 41 6c 6c 54 65 78 74 22 3a 22 53 61 76 65 20 53 65 74 74 69 6e 67 73 22 2c 22 43 6f 6f 6b 69 65 73 55 73 65 64 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 20 75 73 65 64 22 2c 22 43 6f 6f 6b 69 65 73 44 65 73 63 54 65 78 74 22 3a 22 44 65 73 63 72 69 70 74 69 6f 6e 22 2c 22 41 62 6f 75 74 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 3f 74 6d 70 6c 3d 64 6f 63 73 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 2c 22 41 63 74 69 76 65 54 65 78 74 22 3a 22 41 63 74 69 76 65 22 2c 22 41 6c 77 61 79 73 41 63 74 Data Ascii: kiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/general.html?tmpl=docs/privacy-policy","ActiveText":"Active","AlwaysAct
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 63 72 69 70 74 41 72 63 68 69 76 65 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 43 6f 6e 66 69 72 6d 54 65 78 74 22 3a 22 43 6f 6e 66 69 72 6d 20 4d 79 20 43 68 6f 69 63 65 73 22 2c 22 56 65 6e 64 6f 72 4c 69 73 74 54 65 78 74 22 3a 22 4c 69 73 74 20 6f 66 20 49 41 42 20 56 65 6e 64 6f 72 73 22 2c 22 54 68 69 72 64 50 61 72 74 79 43 6f 6f 6b 69 65 4c 69 73 74 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 20 77 65 20 75 73 65 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 4d 61 6e 61 67 65 50 72 65 66 65 72 65 6e 63 65 73 54 65 78 74 Data Ascii: criptArchive":false,"BannerPosition":"bottom","PreferenceCenterPosition":"default","PreferenceCenterConfirmText":"Confirm My Choices","VendorListText":"List of IAB Vendors","ThirdPartyCookieListText":"Cookies we use","PreferenceCenterManagePreferencesText
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 70 72 65 66 65 72 65 6e 63 65 73 2e 20 54 68 65 73 65 20 74 65 63 68 6e 69 63 61 6c 20 63 6f 6f 6b 69 65 73 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 20 74 6f 20 75 73 65 20 6f 75 72 20 73 69 74 65 20 61 6e 64 20 73 65 72 76 69 63 65 73 2e 22 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 4f 54 54 22 3a 22 46 75 6e 63 74 69 6f 6e 61 6c 20 63 6f 6f 6b 69 65 73 20 65 6e 61 62 6c 65 20 6f 75 72 20 77 65 62 73 69 74 65 20 74 6f 20 77 6f 72 6b 20 70 72 6f 70 65 72 6c 79 2c 20 73 6f 20 79 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 61 6e 20 61 63 63 6f 75 6e 74 2c 20 73 69 67 6e 20 69 6e 2c 20 61 6e 64 20 6d 61 6e 61 67 65 20 62 6f 6f 6b 69 6e 67 73 2e 20 54 68 65 79 20 61 6c 73 6f 20 72 65 6d 65 6d 62 65 72 20 Data Ascii: s, and other preferences. These technical cookies must be enabled to use our site and services.","GroupDescriptionOTT":"Functional cookies enable our website to work properly, so you can create an account, sign in, and manage bookings. They also remember
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 6f 6d 20 4f 6e 65 54 72 75 73 74 2e 20 20 49 74 20 69 73 20 73 65 74 20 61 66 74 65 72 20 76 69 73 69 74 6f 72 73 20 68 61 76 65 20 73 65 65 6e 20 61 20 63 6f 6f 6b 69 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6e 6f 74 69 63 65 20 61 6e 64 20 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 6f 6e 6c 79 20 77 68 65 6e 20 74 68 65 79 20 61 63 74 69 76 65 6c 79 20 63 6c 6f 73 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 6c 65 73 20 74 68 65 20 77 65 62 73 69 74 65 20 6e 6f 74 20 74 6f 20 73 68 6f 77 20 74 68 65 20 6d 65 73 73 61 67 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 20 74 6f 20 61 20 75 73 65 72 2e 20 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6f 6e 65 20 79 65 61 72 20 6c 69 66 65 73 70 61 6e 20 61 6e 64 Data Ascii: om OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 69 6e 67 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 31 38 32 35 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 6d 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 61 63 63 6f 75 6e 74 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 73 69 6e 67 6c 65 20 73 69 67 6e 2d 6f 6e 20 28 53 53 4f 29 20 73 6f 6c 75 74 69 6f 6e 2c 20 70 61 73 73 69 6e 67 20 73 69 67 6e 20 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 6f 74 68 65 72 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 73 75 62 64 6f 6d 61 69 6e 73 2e 20 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 31 38 Data Ascii: ing.com","IsSession":false,"Length":"1825","description":"Forms part of the account.booking.com single sign-on (SSO) solution, passing sign in information to other Booking.com subdomains. ","DurationType":1,"category":null,"isThirdParty":false},{"id":"018
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 65 61 64 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 75 73 65 72 27 73 20 63 6f 6e 73 65 6e 74 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 31 38 65 32 65 32 33 2d 65 62 37 66 2d 37 39 32 30 2d 39 64 64 61 2d 65 61 66 66 66 34 35 62 64 37 35 65 22 2c 22 4e 61 6d 65 22 3a 22 63 6e 66 75 6e 63 6f 5f 70 72 22 2c 22 48 6f 73 74 22 3a 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 20 63 6f 6f 6b 69 65 20 77 69 6c 6c Data Ascii: ead and determine the user's consent.","DurationType":1,"category":null,"isThirdParty":false},{"id":"018e2e23-eb7f-7920-9dda-eafff45bd75e","Name":"cnfunco_pr","Host":"booking.com","IsSession":false,"Length":"360","description":"This functional cookie will
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 64 20 61 74 20 61 6c 6c 20 61 66 74 65 72 20 69 74 73 20 64 75 72 61 74 69 6f 6e 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 33 30 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 61 35 63 38 65 63 32 61 2d 31 31 66 62 2d 34 37 38 36 2d 39 36 33 66 2d 36 65 33 66 39 36 66 38 66 34 63 33 22 2c 22 4e 61 6d 65 22 3a 22 70 63 6d 5f 63 6f 6e 73 65 6e 74 22 2c 22 48 6f 73 74 22 3a 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 36 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 73 65 74 20 62 79 20 74 68 65 20 70 72 69 76 61 63 79 20 63 6f Data Ascii: d at all after its duration.","DurationType":30,"category":null,"isThirdParty":false},{"id":"a5c8ec2a-11fb-4786-963f-6e3f96f8f4c3","Name":"pcm_consent","Host":"booking.com","IsSession":false,"Length":"6","description":"This cookie is set by the privacy co
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 66 32 61 63 33 37 34 31 2d 30 30 37 32 2d 34 31 64 66 2d 38 63 31 38 2d 30 65 35 38 62 37 36 66 32 61 61 61 22 2c 22 4e 61 6d 65 22 3a 22 62 22 2c 22 48 6f 73 74 22 3a 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 52 65 6d 65 6d 62 65 72 73 20 69 66 20 74 68 65 20 75 73 65 72 20 68 61 73 20 62 65 65 6e 20 61 73 6b 65 64 20 61 20 6d 61 78 2e 20 6f 66 20 74 68 72 65 65 20 74 69 6d 65 73 20 61 62 6f 75 74 20 68 69 73 2f 68 65 72 20 6c 61 6e 67 75 61 67 65 20 73 65 74 74 69 6e 67 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 Data Ascii: isThirdParty":false},{"id":"f2ac3741-0072-41df-8c18-0e58b76f2aaa","Name":"b","Host":"booking.com","IsSession":false,"Length":"30","description":"Remembers if the user has been asked a max. of three times about his/her language setting.","DurationType":1,"
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 61 74 65 20 77 68 65 6e 20 75 73 65 72 20 77 61 73 20 73 65 65 6e 20 6c 61 73 74 20 74 69 6d 65 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 66 66 38 64 38 32 36 64 2d 64 63 34 37 2d 34 34 62 32 2d 61 64 61 38 2d 37 35 38 61 66 36 63 65 39 37 37 65 22 2c 22 4e 61 6d 65 22 3a 22 5f 70 78 66 66 5f 66 70 22 2c 22 48 6f 73 74 22 3a 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 72 6f 70 70 65 64 20 62 79 20 53 65 63 75 72 69 74 79 20 74 65 61 6d 20 61 73 20 70 61 72 74 20 6f 66 Data Ascii: ate when user was seen last time.","DurationType":1,"category":null,"isThirdParty":false},{"id":"ff8d826d-dc47-44b2-ada8-758af6ce977e","Name":"_pxff_fp","Host":"booking.com","IsSession":false,"Length":"0","description":"Dropped by Security team as part of

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49812	104.26.6.229	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:32 UTC	535	OUT	GET /kindly-chat.js HTTP/1.1 Host: chat.kindlycdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:32 UTC	1342	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:32 GMT Content-Type: text/javascript Content-Length: 223977 Connection: close x-goog-generation: 1720106853025291 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 223977 x-goog-meta-goog-reserved-file-mtime: 1720106834 x-goog-meta-kindly-chat-version: v2.60.6 x-goog-hash: crc32c=0xqH8w== x-goog-hash: md5=vgS4UaXD0IscmcqYJjPCqA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: ACJd0NoC_EHIVMwqFkaNIOH3mPAYzfytDfHDACMuqVQWRUVdJryZLk3Ak2ZSnT5glS--1tBNAZg Expires: Wed, 10 Jul 2024 01:35:17 GMT Cache-Control: public, max-age=1800 Age: 1015 Last-Modified: Thu, 04 Jul 2024 15:27:33 GMT ETag: "be04b851a5c3d08b1c99ca982633c2a8" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8NtoNbj9X6i3mTpYWw%2Fp%2BBLBjUmiDMe7v3J%2FgEFzhXW%2B%2FQIQJQ4UVG5grFGqy0hliK9sMYU37VwDMT%2F4N4WLQcG6bCLWaa698dogp%2BUDnznDZdHSnHutx64i6gLekzIxvGJ64g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde832d3bc40e-EWR
2024-07-10 01:44:32 UTC	27	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e Data Ascii: /*! For license information
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 20 70 6c 65 61 73 65 20 73 65 65 20 6b 69 6e 64 6c 79 2d 63 68 61 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 3d 7b 38 39 35 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 72 2c 57 3a 28 29 3d 3e 61 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 76 32 22 2c 61 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 5b 22 61 67 65 6e 74 22 2c 22 61 6c 65 72 74 73 22 2c 22 62 6f 74 22 2c 22 63 68 61 74 62 75 62 62 6c 65 22 2c 22 66 65 65 64 62 61 63 6b 22 2c 22 70 72 69 76 61 63 79 22 2c 22 6c 69 67 68 74 62 6f 78 22 2c 22 6e 75 64 67 65 22 5d 29 7d 2c 32 31 38 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c Data Ascii: please see kindly-chat.js.LICENSE.txt */(()=>{var e,t,n={8959:(e,t,n)=>{"use strict";n.d(t,{A:()=>r,W:()=>a});const r="v2",a=Object.freeze(["agent","alerts","bot","chatbubble","feedback","privacy","lightbox","nudge"])},2186:(e,t,n)=>{"use strict";n.d(t,
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 6e 74 2c 73 74 61 74 65 3a 75 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 63 29 3a 76 6f 69 64 20 30 2c 2e 2e 2e 73 7d 2c 64 3d 7b 6d 65 73 73 61 67 65 3a 6e 75 6c 6c 21 3d 3d 28 74 3d 6c 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 6d 65 73 73 61 67 65 2c 6e 61 6d 65 3a 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 6e 61 6d 65 2c 73 74 61 63 6b 3a 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 73 74 61 63 6b 2c 63 6f 64 65 3a 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 63 6f 64 65 2c 73 69 67 6e 61 6c 3a 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 73 69 67 6e 61 6c 2c 66 69 6c 65 6e 61 6d 65 3a 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 66 69 6c 65 6e 61 6d 65 7d 3b Data Ascii: nt,state:u?JSON.stringify(c):void 0,...s},d={message:null!==(t=l)&&void 0!==t?t:null==i?void 0:i.message,name:null==i?void 0:i.name,stack:null==i?void 0:i.stack,code:null==i?void 0:i.code,signal:null==i?void 0:i.signal,filename:null==i?void 0:i.filename};
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 6e 28 33 31 32 38 29 2c 6e 28 31 35 35 35 29 2c 6e 28 31 30 31 29 2c 6e 28 37 31 30 30 29 2c 6e 28 33 33 39 31 29 2c 6e 28 32 37 31 32 29 2c 6e 28 33 37 31 34 29 2c 6e 28 31 37 31 33 29 2c 6e 28 39 33 35 37 29 2c 6e 28 34 37 29 2c 6e 28 37 32 35 33 29 2c 6e 28 32 31 33 36 29 2c 6e 28 37 31 39 33 29 2c 6e 28 34 38 35 30 29 2c 6e 28 36 31 31 31 29 2c 6e 28 32 32 35 39 29 2c 6e 28 33 30 38 29 3b 76 61 72 20 72 3d 6e 28 37 36 37 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 2e 53 79 6d 62 6f 6c 7d 2c 36 30 37 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 28 36 33 39 36 29 2c 6e 28 35 39 39 31 29 2c 6e 28 37 36 33 32 29 2c 6e 28 33 33 39 31 29 3b 76 61 72 20 72 3d 6e 28 31 36 33 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 2e 66 28 22 69 74 65 72 61 74 6f 72 22 29 7d 2c 39 Data Ascii: n(3128),n(1555),n(101),n(7100),n(3391),n(2712),n(3714),n(1713),n(9357),n(47),n(7253),n(2136),n(7193),n(4850),n(6111),n(2259),n(308);var r=n(7675);e.exports=r.Symbol},6075:(e,t,n)=>{n(6396),n(5991),n(7632),n(3391);var r=n(1635);e.exports=r.f("iterator")},9
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 6e 21 65 26 26 2d 31 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 69 6e 63 6c 75 64 65 73 3a 69 28 21 30 29 2c 69 6e 64 65 78 4f 66 3a 69 28 21 31 29 7d 7d 2c 32 32 31 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 32 31 31 36 29 2c 61 3d 6e 28 39 30 33 36 29 2c 6f 3d 6e 28 36 37 33 31 29 2c 69 3d 6e 28 35 38 30 39 29 2c 6c 3d 6e 28 39 35 34 29 2c 75 3d 6e 28 36 36 30 31 29 2c 73 3d 61 28 5b 5d 2e 70 75 73 68 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 31 3d 3d 65 2c 6e 3d 32 3d 3d 65 2c 61 3d 33 3d 3d 65 2c 63 3d 34 3d 3d 65 2c 66 3d 36 3d 3d 65 2c 64 3d 37 3d 3d 65 2c 70 3d 35 3d 3d 65 7c 7c 66 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 68 2c 6d 2c 76 2c 67 29 7b 66 6f 72 28 76 61 72 20 79 2c 62 2c 77 3d 69 28 68 Data Ascii: n!e&&-1}};e.exports={includes:i(!0),indexOf:i(!1)}},2217:(e,t,n)=>{var r=n(2116),a=n(9036),o=n(6731),i=n(5809),l=n(954),u=n(6601),s=a([].push),c=function(e){var t=1==e,n=2==e,a=3==e,c=4==e,f=6==e,d=7==e,p=5==e\|\|f;return function(h,m,v,g){for(var y,b,w=i(h
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 72 28 65 29 29 28 30 3d 3d 3d 74 3f 30 3a 74 29 7d 7d 2c 32 34 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 39 30 33 36 29 2c 61 3d 72 28 7b 7d 2e 74 6f 53 74 72 69 6e 67 29 2c 6f 3d 72 28 22 22 2e 73 6c 69 63 65 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 61 28 65 29 2c 38 2c 2d 31 29 7d 7d 2c 35 36 36 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 37 31 30 34 29 2c 61 3d 6e 28 32 30 37 33 29 2c 6f 3d 6e 28 32 34 34 29 2c 69 3d 6e 28 36 36 31 35 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 6c 3d 4f 62 6a 65 63 74 2c 75 3d 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 6f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 Data Ascii: ){return new(r(e))(0===t?0:t)}},244:(e,t,n)=>{var r=n(9036),a=r({}.toString),o=r("".slice);e.exports=function(e){return o(a(e),8,-1)}},5663:(e,t,n)=>{var r=n(7104),a=n(2073),o=n(244),i=n(6615)("toStringTag"),l=Object,u="Arguments"==o(function(){return arg
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 74 2c 6e 29 2c 65 7d 7d 2c 39 30 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 35 33 39 31 29 2c 61 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 61 28 72 2c 65 2c 7b 76 61 6c 75 65 3a 74 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 28 6e 29 7b 72 5b 65 5d 3d 74 7d 72 65 74 75 72 6e 20 74 7d 7d 2c 35 35 36 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 37 31 33 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 31 2c 7b 67 65 Data Ascii: t,n),e}},909:(e,t,n)=>{var r=n(5391),a=Object.defineProperty;e.exports=function(e,t){try{a(r,e,{value:t,configurable:!0,writable:!0})}catch(n){r[e]=t}return t}},5560:(e,t,n)=>{var r=n(7131);e.exports=!r((function(){return 7!=Object.defineProperty({},1,{ge
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 3d 28 72 3d 63 2e 73 70 6c 69 74 28 22 2e 22 29 29 5b 30 5d 3e 30 26 26 72 5b 30 5d 3c 34 3f 31 3a 2b 28 72 5b 30 5d 2b 72 5b 31 5d 29 29 2c 21 61 26 26 69 26 26 28 21 28 72 3d 69 2e 6d 61 74 63 68 28 2f 45 64 67 65 5c 2f 28 5c 64 2b 29 2f 29 29 7c 7c 72 5b 31 5d 3e 3d 37 34 29 26 26 28 72 3d 69 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5c 64 2b 29 2f 29 29 26 26 28 61 3d 2b 72 5b 31 5d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 61 7d 2c 35 32 39 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 37 36 37 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 5b 65 2b 22 50 72 6f 74 6f 74 79 70 65 22 5d 7d 7d 2c 33 34 37 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 5b 22 63 6f 6e 73 74 72 75 63 74 6f Data Ascii: =(r=c.split("."))[0]>0&&r[0]<4?1:+(r[0]+r[1])),!a&&i&&(!(r=i.match(/Edge\/(\d+)/))\|\|r[1]>=74)&&(r=i.match(/Chrome\/(\d+)/))&&(a=+r[1]),e.exports=a},5296:(e,t,n)=>{var r=n(7675);e.exports=function(e){return r[e+"Prototype"]}},347:e=>{e.exports=["constructo
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2e 61 70 70 6c 79 7c 7c 28 72 3f 69 2e 62 69 6e 64 28 6f 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 7d 2c 32 31 31 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 39 65 33 29 2c 61 3d 6e 28 31 38 32 29 2c 6f 3d 6e 28 35 31 36 34 29 2c 69 3d 72 28 72 2e 62 69 6e 64 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 28 65 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 3f 65 3a 6f 3f 69 28 65 2c 74 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d Data Ascii: s="object"==typeof Reflect&&Reflect.apply\|\|(r?i.bind(o):function(){return i.apply(o,arguments)})},2116:(e,t,n)=>{var r=n(9e3),a=n(182),o=n(5164),i=r(r.bind);e.exports=function(e,t){return a(e),void 0===t?e:o?i(e,t):function(){return e.apply(t,arguments)}}
2024-07-10 01:44:32 UTC	1369	IN	Data Raw: 28 32 34 34 29 2c 6c 3d 6e 28 37 38 30 33 29 2c 75 3d 72 28 5b 5d 2e 70 75 73 68 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6f 28 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 61 28 65 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 7b 76 61 72 20 73 3d 65 5b 72 5d 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 3f 75 28 6e 2c 73 29 3a 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 73 26 26 22 4e 75 6d 62 65 72 22 21 3d 69 28 73 29 26 26 22 53 74 72 69 6e 67 22 21 3d 69 28 73 29 7c 7c 75 28 6e 2c 6c 28 73 29 29 7d 76 61 72 20 63 3d 6e 2e 6c 65 6e 67 74 68 2c 66 3d 21 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 Data Ascii: (244),l=n(7803),u=r([].push);e.exports=function(e){if(o(e))return e;if(a(e)){for(var t=e.length,n=[],r=0;r<t;r++){var s=e[r];"string"==typeof s?u(n,s):"number"!=typeof s&&"Number"!=i(s)&&"String"!=i(s)\|\|u(n,l(s))}var c=n.length,f=!0;return function(e,t){i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49811	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:32 UTC	820	OUT	GET /en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:34 UTC	2125	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Length: 271368 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:34 GMT Vary: Accept-Encoding x-content-type-options: nosniff vary: X-Forwarded-Proto,Cookie cache-control: max-age=2764800, public, s-maxage=2764800 x-drupal-dynamic-cache: UNCACHEABLE content-language: en-us x-frame-options: SAMEORIGIN expires: Sun, 19 Nov 1978 05:00:00 GMT last-modified: Wed, 10 Jul 2024 01:44:32 GMT etag: "1720575872" x-generator: Drupal 10 (https://www.drupal.org) cache-tags: fQEX k_Tz Xou0 GJxB AWdO 21qK sUVS 9fG4 7eMp hRAk Ekbv Ey9p hli2 Cqjb qSVj y_wT w9KO f0XF FdHY W4wn ALIC 6FKK wAOz tjpR sMNG plB8 plHS WeKK c6Fq HXYD LOOH B1HR KL7M C-Gx CffH T9P4 4CZc B71G xa3g MBWz J3qc v_qA BLfI 6TZ_ F7Iv uEfh yHRg C7FX fwyz -7xA F1nB fB96 0pgW ZMJ8 vhRI -R3z DFos rDqw MvV3 CaK4 A5cI 2scP eeGG twcp Kwao Ljk4 ng5R CKC6 zl-1 ch2N 5Fbc 1TK0 5FnF 5_kf X_iJ pH05 4Qt6 EYZN Pjo1 h5KP qd9Q qZAY TpPV BF33 5K-x RBMz bxHt fryN odpt ycRE uHr1 2Lev x-s6 WLTs DeYN aIKB 6zBh JE6q w7M3 dN-t ZgVe XFud 73TU iUFC fpUN -WnX 0_AC SOhl 07zV hQRc P3IG YfBf 7Qkz ADSt LGaQ d4wT CpOm VCtR aMA2 pBn7 F38o 3jwy 2yS1 81bc td6_ _Six zu6i qjtI dSlC GnmL Xpiv fgLH 2tCd nxVs 8yix SmbE XKUO qLwN QBaD 9wv5 R208 MLEL IdxB xF_v wHPi 2DH4 NgoD GOcR DdEc ctIX 3FNs wV_e VjtB mMpR tjAa lSFi KUBL UE68 fm3q b5Ml IKp7 YsSx B4xN lico iAeu KWFG AGVr 6s2_ PxL9 3fUw oJMo content-security-policy: report-uri /report-csp-violation; upgrade-insecure-requests x-xss-protection: 1; mode=block x-webserver: webserver/1 X-Varnish-Storage: Malloc X-Url: /en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters X-Host: partner.booking.com X-Varnish: 224000618 Via: 1.1 varnish (Varnish/6.6), 1.1 544049d1dc4d534822b40b9f9c7529da.cloudfront.net (CloudFront) X-Varnish-Cache: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ugCX8BWy-YS59ENm2LX6fZawiIoavylOMPumGxJyo7ti-vBUd2KWxA== Age: 0 Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:34 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 Data Ascii: <!DOCTYPE html><html lang="en-us" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://sch
2024-07-10 01:44:34 UTC	10463	IN	Data Raw: 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 33 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 33 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 33 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 7d 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f Data Ascii: nt-size);font-weight:var(--DO_NOT_USE_bui_large_font_headline_3_font-weight);line-height:var(--DO_NOT_USE_bui_large_font_headline_3_line-height);font-family:var(--DO_NOT_USE_bui_large_font_headline_3_font-family)}h3{font-size:var(--DO_NOT_USE_bui_large_fo
2024-07-10 01:44:34 UTC	16384	IN	Data Raw: 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 7d 2e 62 75 69 2d 67 72 6f 75 70 3e 2a 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 75 69 2d 67 72 6f 75 70 3e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 75 69 2d 67 72 6f 75 70 2d 2d 69 6e 6c 69 6e 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f Data Ascii: -flex-direction:column;flex-direction:column;-ms-flex-wrap:nowrap;flex-wrap:nowrap}.bui-group>*{margin-top:var(--bui_spacing_2x)!important}.bui-group>:first-child{margin-top:0!important}.bui-group--inline{-webkit-box-orient:horizontal;-webkit-box-directio
2024-07-10 01:44:34 UTC	16384	IN	Data Raw: 79 5f 31 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 76 65 6e 69 72 20 4e 65 78 74 2c 4e 6f 74 6f 20 53 61 6e 73 20 53 43 20 42 6f 6c 64 2c 4e 6f 74 6f 20 53 61 6e 73 20 54 43 20 42 6f 6c 64 2c 4e 6f 74 6f 20 53 61 6e 73 20 4a 50 20 42 6f 6c 64 2c 4e 6f 74 6f 20 53 61 6e 73 20 4b 52 20 42 6f 6c 64 2c 54 61 6a 61 77 61 6c 20 45 78 74 72 61 42 6f 6c 64 2c 41 72 69 6d 6f 20 42 6f 6c 64 2c 4b 61 6e 69 74 20 53 65 6d 69 42 6f 6c 64 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6d 65 64 69 75 6d 5f 66 6f 6e 74 5f 64 69 73 70 6c 61 Data Ascii: y_1_font-family:Avenir Next,Noto Sans SC Bold,Noto Sans TC Bold,Noto Sans JP Bold,Noto Sans KR Bold,Tajawal ExtraBold,Arimo Bold,Kanit SemiBold,BlinkMacSystemFont,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;--DO_NOT_USE_bui_medium_font_displa
2024-07-10 01:44:34 UTC	16384	IN	Data Raw: 72 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 6e 6f 64 65 2d 2d 76 69 65 77 2d 6d 6f 64 65 2d 74 65 61 73 65 72 5f 5f 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 6e 6f 64 65 2d 74 65 61 73 65 72 2d 73 6d 61 6c 6c 2d 63 61 72 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6e 6f 64 65 2d 74 65 61 73 65 72 2d 73 6d 61 6c 6c 2d 63 61 72 64 20 2e 62 75 69 2d 63 61 72 64 5f 5f 69 6d 61 67 65 7b 68 Data Ascii: r__link{font-size:0;line-height:0;opacity:0}.node--view-mode-teaser__link:before{content:'';display:block;height:100%;left:0;position:absolute;top:0;width:100%;z-index:10}.node-teaser-small-card{position:relative}.node-teaser-small-card .bui-card__image{h
2024-07-10 01:44:34 UTC	4542	IN	Data Raw: 74 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 65 61 64 65 72 20 2e 62 6c 6f 63 6b 2d 73 65 61 72 63 68 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 73 75 62 6d 69 74 20 2e 62 75 69 2d 62 75 74 74 6f 6e 5f 5f 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 65 61 64 65 72 20 2e 62 6c 6f 63 6b 2d 73 65 61 72 63 68 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 73 75 62 6d 69 74 20 2e 62 75 69 2d 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 7d 2e 68 65 61 64 65 72 20 2e 62 6c 6f 63 6b 2d 73 65 61 72 63 68 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 73 75 62 6d 69 74 20 73 76 67 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 62 75 69 Data Ascii: t:before{display:none}.header .block-search-form .form-submit .bui-button__text{display:none}.header .block-search-form .form-submit .bui-button__icon{height:20px;width:20px;display:block;margin:0}.header .block-search-form .form-submit svg{fill:var(--bui
2024-07-10 01:44:34 UTC	16384	IN	Data Raw: 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 31 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 31 20 31 30 30 25 7d 2e 72 65 67 69 6f 6e 5f 5f 68 65 61 64 65 72 2d 6c 65 66 74 20 2e 6d 65 6e 75 2d 6c 65 76 65 6c 2d 2d 31 7b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 33 2c 6d 69 6e 6d 61 78 28 2d 77 65 62 6b 69 74 2d 6d 61 78 2d 63 6f 6e 74 65 6e 74 2c 32 38 34 70 78 29 29 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 33 2c 6d 69 6e 6d 61 78 28 6d 61 78 2d 63 6f 6e 74 65 6e 74 2c 32 38 34 70 78 29 29 7d 2e 72 65 67 69 6f 6e 5f 5f 68 65 61 64 65 72 2d 6c 65 66 74 20 2e 6d 65 6e 75 2d 69 74 65 6d 2d 6c Data Ascii: ebkit-box-flex:0;-ms-flex:0 1 100%;flex:0 1 100%}.region__header-left .menu-level--1{display:grid;grid-template-columns:repeat(3,minmax(-webkit-max-content,284px));grid-template-columns:repeat(3,minmax(max-content,284px))}.region__header-left .menu-item-l
2024-07-10 01:44:34 UTC	16384	IN	Data Raw: 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 43 6c 69 63 6b 2e 20 4d 61 67 61 7a 69 6e 65 2d 34 39 39 7c 49 6e 64 75 73 74 72 79 20 50 65 72 73 70 65 63 74 69 76 65 73 2d 37 7c 57 68 79 20 62 65 69 6e 67 20 54 72 61 76 65 6c 20 50 72 6f 75 64 20 43 65 72 74 69 66 69 65 64 20 6d 61 74 74 65 72 73 20 74 6f 20 6f 75 72 20 70 61 72 74 6e 65 72 73 2d 31 33 36 38 34 36 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 22 20 69 64 3d 22 73 6b 69 70 2d 74 6f 2d 63 6f 6e 74 65 6e 74 22 20 63 6c 61 73 73 3d 22 76 69 73 75 61 6c 6c 79 2d 68 69 64 64 65 6e 20 66 6f 63 75 73 61 62 6c 65 20 73 6b 69 70 2d 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 53 6b 69 70 20 74 6f 20 6d 61 69 6e 20 63 6f 6e 74 65 6e 74 0a 20 Data Ascii: isplay:none;">Click. Magazine-499\|Industry Perspectives-7\|Why being Travel Proud Certified matters to our partners-136846</div> <a href="#main-content" id="skip-to-content" class="visually-hidden focusable skip-link"> Skip to main content
2024-07-10 01:44:34 UTC	16384	IN	Data Raw: 42 6f 78 3d 22 30 20 30 20 31 32 20 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 39 39 33 20 31 2e 34 35 30 31 63 30 20 2e 32 2d 2e 30 37 38 2e 33 39 2d 2e 32 32 2e 35 33 6c 2d 35 20 35 61 31 2e 30 38 20 31 2e 30 38 20 30 20 30 20 31 2d 2e 37 38 2e 33 32 20 31 2e 30 39 39 38 20 31 2e 30 39 39 38 20 30 20 30 20 31 2d 2e 37 38 2d 2e 33 32 6c 2d 35 2d 35 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 30 2d 31 2e 30 36 2e 37 34 2e 37 34 20 30 20 30 20 31 20 31 2e 30 36 20 30 6c 34 2e 37 32 20 34 2e 37 32 20 34 2e 37 32 2d 34 2e 37 32 61 2e 37 34 30 39 2e 37 34 30 39 20 30 20 30 20 31 20 2e 35 33 2d 2e 32 32 33 36 2e 37 34 30 37 2e 37 34 30 37 20 30 20 30 Data Ascii: Box="0 0 12 8" xmlns="http://www.w3.org/2000/svg"><path d="M11.9993 1.4501c0 .2-.078.39-.22.53l-5 5a1.08 1.08 0 0 1-.78.32 1.0998 1.0998 0 0 1-.78-.32l-5-5a.75.75 0 0 1 0-1.06.74.74 0 0 1 1.06 0l4.72 4.72 4.72-4.72a.7409.7409 0 0 1 .53-.2236.7407.7407 0 0
2024-07-10 01:44:34 UTC	4542	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6c 65 76 65 6c 2d 2d 32 2d 2d 64 65 66 61 75 6c 74 20 6d 65 6e 75 2d 69 74 65 6d 2d 6c 65 76 65 6c 2d 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 65 6e 2d 75 73 2f 6c 65 61 72 6e 2d 6d 6f 72 65 2f 6e 65 77 2d 70 61 72 74 6e 65 72 2f 70 72 6f 76 69 64 69 6e 67 2d 67 72 65 61 74 2d 67 75 65 73 74 2d 65 78 70 65 72 69 65 6e 63 65 73 22 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 5f 5f 6c 69 6e 6b 20 6d 65 6e 75 2d 69 74 65 6d 5f 5f 6c 69 6e 6b 2d Data Ascii: <li class="menu-item menu-item-level--2--default menu-item-level--2"> <a href="/en-us/learn-more/new-partner/providing-great-guest-experiences" class="menu-item__link menu-item__link-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49810	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:32 UTC	612	OUT	GET /themes/custom/booking/images/favicons/site.webmanifest HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:33 UTC	1002	IN	HTTP/1.1 200 OK Content-Type: application/manifest+json Content-Length: 462 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:32 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Thu, 04 Jul 2024 09:16:17 GMT etag: "1ce-61c6866321a40" cache-control: max-age=31536000 expires: Fri, 04 Jul 2025 09:30:00 GMT x-webserver: webserver/1 X-Varnish-Storage: Malloc X-Url: /themes/custom/booking/images/favicons/site.webmanifest X-Host: partner.booking.com X-Varnish: 225068077 131170605 Via: 1.1 varnish (Varnish/6.6), 1.1 013a54c6b9caf01f403c247789c7256c.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8gUoorwfq1Hr3CPKrzDUNYPA-O8-5HpiuMtUlkREqeVa8kOUc1CYQQ== Age: 490472 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:33 UTC	462	IN	Data Raw: 7b 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 42 6f 6f 6b 69 6e 67 20 50 61 72 74 6e 65 72 20 48 75 62 22 2c 0a 20 20 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 42 6f 6f 6b 69 6e 67 20 50 61 72 74 6e 65 72 20 48 75 62 22 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a Data Ascii: { "name": "Booking Partner Hub", "short_name": "Booking Partner Hub", "icons": [ { "src": "android-chrome-192x192.png", "sizes": "192x192", "type": "image/png" }, { "src":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49813	18.66.112.126	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:32 UTC	544	OUT	GET /rc/19174/scripts/s.js HTTP/1.1 Host: cdn.spinnaker-js.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:33 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 83826 Connection: close Last-Modified: Mon, 03 Jun 2024 14:17:50 GMT x-amz-server-side-encryption: AES256 x-amz-meta-version: 6.19.22-1.0.15 x-amz-meta-previous: rc/19174/scripts/s-1717424269.js x-amz-meta-deployeddate: 2024-06-03 14:17:49 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 10 Jul 2024 01:44:34 GMT ETag: "db5a931b5024fe86a63d507a3f84d84f" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 02d68f3a4f2a3f8967c5e021dcd7f96a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: cYeBpuOMztTV6BKMzC2V-2DGGJtHib-5QZ_U5azpwjQfmdxhFYi2Xw==
2024-07-10 01:44:33 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 7c 7c 28 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 6e 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 3b 6e 2d 2d 3b 29 69 5b 6e 5d 3d 5b 74 5b 6e 5d 2c 65 5b 74 5b 6e 5d 5d 5d 3b 72 65 74 75 72 6e 20 69 7d 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 Data Ascii: "use strict";!function(n){function i(){Object.entries\|\|(Object.entries=function(e){for(var t=Object.keys(e),n=t.length,i=new Array(n);n--;)i[n]=[t[n],e[t[n]]];return i})}"undefined"!=typeof localStorage&&"undefined"!=typeof sessionStorage&&setTimeout(func
2024-07-10 01:44:33 UTC	16384	IN	Data Raw: 61 6d 65 3a 22 47 41 45 76 65 6e 74 22 2c 65 76 65 6e 74 43 61 74 65 67 6f 72 79 3a 22 6f 6e 73 69 74 65 20 72 65 63 68 65 63 6b 69 74 22 7d 2c 73 3d 65 2e 67 65 74 28 22 67 61 54 72 61 63 6b 69 6e 67 22 29 3b 69 66 28 73 29 7b 66 6f 72 28 76 61 72 20 75 3d 30 2c 63 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 73 29 3b 75 3c 63 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 6c 3d 70 28 63 5b 75 5d 2c 32 29 2c 64 3d 6c 5b 30 5d 2c 6c 3d 6c 5b 31 5d 3b 72 5b 64 5d 3d 6c 7d 6e 75 6c 6c 3d 3d 3d 74 7c 7c 74 2e 6c 65 6e 67 74 68 3c 31 3f 6f 28 22 70 61 72 61 6d 65 74 65 72 20 6d 69 73 73 69 6e 67 3a 20 61 63 74 69 6f 6e 22 2c 6e 75 6c 6c 2c 21 30 29 3a 28 28 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 6e 2e 6c 65 6e 67 74 68 3c 31 29 26 26 28 6e 3d 22 64 65 66 61 75 Data Ascii: ame:"GAEvent",eventCategory:"onsite recheckit"},s=e.get("gaTracking");if(s){for(var u=0,c=Object.entries(s);u<c.length;u++){var l=p(c[u],2),d=l[0],l=l[1];r[d]=l}null===t\|\|t.length<1?o("parameter missing: action",null,!0):((null===n\|\|n.length<1)&&(n="defau
2024-07-10 01:44:33 UTC	11977	IN	Data Raw: 74 69 66 69 65 72 2c 22 20 73 65 74 20 6f 6e 20 6f 6e 73 69 74 65 22 29 2c 65 29 2c 65 2e 73 65 74 45 76 65 6e 74 28 61 29 7d 7d 63 61 74 63 68 28 65 29 7b 69 2e 65 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 69 2e 66 28 29 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 50 6f 74 65 6e 74 69 61 6c 4f 6e 73 69 74 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 50 6f 74 65 6e 74 69 61 6c 4f 6e 73 69 74 65 28 29 3f 65 3a 6e 75 6c 6c 7d 7d 5d 29 2c 61 7d 28 29 2c 52 3d 28 77 2e 63 75 73 74 6f 6d 4f 6e 73 69 74 65 73 3d 5b 5d 2c 77 2e 69 64 6c 65 54 69 6d 65 72 3d 30 2c 77 2e 75 73 65 50 61 72 61 6d 65 74 65 72 73 3d 21 31 2c 6b 2e 73 75 62 73 63 72 69 62 65 28 75 2e 49 4e 49 54 2c 77 2e 69 6e 69 74 2e 62 69 6e 64 28 77 29 Data Ascii: tifier," set on onsite"),e),e.setEvent(a)}}catch(e){i.e(e)}finally{i.f()}}}},{key:"getPotentialOnsites",value:function(e){return e.isPotentialOnsite()?e:null}}]),a}(),R=(w.customOnsites=[],w.idleTimer=0,w.useParameters=!1,k.subscribe(u.INIT,w.init.bind(w)
2024-07-10 01:44:33 UTC	16384	IN	Data Raw: 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 74 29 7d 2c 41 65 3d 28 69 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 65 3d 6e 75 6c 6c 2c 5f 3d 69 2e 6d 61 74 63 68 28 2f 28 6f 70 65 72 61 7c 63 68 72 6f 6d 65 7c 73 61 66 61 72 69 7c 66 69 72 65 66 6f 78 7c 6d 73 69 65 7c 74 72 69 64 65 6e 74 28 3f 3d 5c 2f 29 29 5c 2f 3f 5c 73 2a 28 5c 64 2b 29 2f 69 29 7c 7c 5b 5d 2c 2f 74 72 69 64 65 6e 74 2f 69 2e 74 65 73 74 28 5f 5b 31 5d 29 3f 7b 6e 61 6d 65 3a 22 6d 73 69 65 22 2c 76 65 72 73 69 6f 6e 3a 28 65 3d 2f 5c 62 72 76 5b 20 3a 5d 2b 28 5c 64 2b 29 2f 67 2e 65 78 65 63 28 69 29 7c 7c 5b 5d 29 5b 31 5d 7c 7c 22 22 7d 3a 22 43 68 72 6f 6d 65 22 3d 3d 3d 5f 5b 31 5d 26 26 6e 75 6c 6c 21 3d 28 65 3d 69 2e 6d 61 74 63 68 28 2f 5c 62 Data Ascii: ion"==typeof n&&n(t)},Ae=(i=navigator.userAgent,e=null,_=i.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))\/?\s*(\d+)/i)\|\|[],/trident/i.test(_[1])?{name:"msie",version:(e=/\brv[ :]+(\d+)/g.exec(i)\|\|[])[1]\|\|""}:"Chrome"===_[1]&&null!=(e=i.match(/\b
2024-07-10 01:44:33 UTC	16384	IN	Data Raw: 72 61 6d 73 2e 70 61 72 73 65 72 3b 69 66 28 28 22 22 3d 3d 3d 65 7c 7c 22 6e 75 6c 6c 22 3d 3d 3d 22 22 2e 63 6f 6e 63 61 74 28 65 29 29 26 26 21 6e 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 22 22 3b 65 3d 22 22 2b 74 7d 72 65 74 75 72 6e 20 65 3d 74 3f 74 68 69 73 2e 70 61 72 73 65 56 61 6c 75 65 28 74 29 3a 6e 3f 74 68 69 73 2e 70 61 72 73 65 56 61 6c 75 65 28 65 29 3a 74 68 69 73 2e 70 61 72 73 65 56 61 6c 75 65 28 65 2c 74 68 69 73 2e 67 65 74 44 65 66 61 75 6c 74 50 61 72 73 65 72 28 74 68 69 73 2e 70 61 72 61 6d 73 5b 69 65 5d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 70 61 72 73 65 56 61 6c 75 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d Data Ascii: rams.parser;if((""===e\|\|"null"==="".concat(e))&&!n){if(!t)return"";e=""+t}return e=t?this.parseValue(t):n?this.parseValue(e):this.parseValue(e,this.getDefaultParser(this.params[ie]))}},{key:"parseValue",value:function(e){var t=1<arguments.length&&void 0!=
2024-07-10 01:44:33 UTC	6313	IN	Data Raw: 63 6c 61 73 73 3d 22 6e 75 64 67 65 2d 62 74 6e 2d 64 69 61 6c 6f 67 75 65 22 20 64 69 61 6c 6f 67 75 65 2d 74 72 69 67 67 65 72 3d 22 32 39 30 65 37 31 65 63 2d 65 37 38 33 2d 34 36 39 31 2d 61 30 65 33 2d 64 30 64 61 66 63 33 34 30 31 34 30 22 20 64 61 74 61 2d 72 63 69 2d 65 76 65 6e 74 3d 22 62 74 6e 44 69 73 70 75 74 65 49 6e 76 6f 69 63 65 43 6c 69 63 6b 65 64 22 3e 44 69 73 70 75 74 69 6e 67 20 79 6f 75 72 20 69 6e 76 6f 69 63 65 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 6e 75 64 67 65 2d 62 74 6e 2d 64 69 61 6c 6f 67 75 65 22 20 64 69 61 6c 6f 67 75 65 2d 74 72 69 67 67 65 72 3d 22 61 30 65 34 32 62 37 36 2d 63 66 35 64 2d 34 62 37 37 2d 39 32 65 63 2d 34 64 33 66 61 64 37 63 Data Ascii: class="nudge-btn-dialogue" dialogue-trigger="290e71ec-e783-4691-a0e3-d0dafc340140" data-rci-event="btnDisputeInvoiceClicked">Disputing your invoice</button>\n <button class="nudge-btn-dialogue" dialogue-trigger="a0e42b76-cf5d-4b77-92ec-4d3fad7c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49814	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:33 UTC	668	OUT	GET /themes/custom/booking/images/favicons/favicon.svg HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:33 UTC	935	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1367 Connection: close Vary: Accept-Encoding Server: nginx Date: Wed, 10 Jul 2024 01:44:33 GMT last-modified: Thu, 04 Jul 2024 09:16:17 GMT etag: "66866861-557" X-Url: /themes/custom/booking/images/favicons/favicon.svg X-Host: partner.booking.com X-Varnish-Storage: File cache-control: max-age=2628000, public expires: 2628000 X-Varnish: 225068082 217558384 Via: 1.1 varnish (Varnish/6.6), 1.1 cfa647edefc0769e715b9781478b0626.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: T-sqOTQHt2FwnlizZVLQUAIl260qrMpzzc6c_5KcUtVPN6SqluSBig== Age: 58479 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:33 UTC	1367	IN	Data Raw: 3c 73 76 67 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 2e 34 31 34 22 20 76 69 65 77 42 6f 78 3d 22 2d 2e 30 39 32 20 2e 30 31 35 20 32 37 33 32 2e 31 32 35 20 32 36 37 31 2e 39 39 36 22 20 77 69 64 74 68 3d 22 36 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 32 37 33 32 2e 30 33 32 20 35 31 33 2e 30 33 63 30 2d 32 38 33 2e 31 34 31 2d 32 32 39 2e 39 37 38 2d 35 31 33 2e 30 31 35 2d 35 31 33 2e 31 31 38 2d 35 31 33 Data Ascii: <svg clip-rule="evenodd" fill-rule="evenodd" height="64" stroke-linejoin="round" stroke-miterlimit="1.414" viewBox="-.092 .015 2732.125 2671.996" width="64" xmlns="http://www.w3.org/2000/svg"><path d="m2732.032 513.03c0-283.141-229.978-513.015-513.118-513

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49820	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:33 UTC	433	OUT	GET /consent/5b5ab62b-24f1-40fe-8bb1-6de0b3a94fda/8ead1a95-64b9-4e6c-877c-52602d89b97c/en-us.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:33 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:33 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a0cde885bee4255-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 19649 Cache-Control: public, max-age=86400 Expires: Thu, 11 Jul 2024 01:44:33 GMT Last-Modified: Tue, 14 May 2024 12:26:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 5lw/E0WaRkoXtoGlUPlJjA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ccd64d19-601e-0054-4efa-a5abe3000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-10 01:44:33 UTC	467	IN	Data Raw: 37 63 31 61 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 4d 61 6e 61 67 65 20 79 6f 75 72 Data Ascii: 7c1a{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Manage your
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 6b 69 65 73 54 65 78 74 22 3a 22 59 6f 75 72 20 50 72 69 76 61 63 79 22 2c 22 43 6f 6e 66 69 72 6d 54 65 78 74 22 3a 22 41 6c 6c 6f 77 20 41 6c 6c 22 2c 22 41 6c 6c 6f 77 41 6c 6c 54 65 78 74 22 3a 22 53 61 76 65 20 53 65 74 74 69 6e 67 73 22 2c 22 43 6f 6f 6b 69 65 73 55 73 65 64 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 20 75 73 65 64 22 2c 22 43 6f 6f 6b 69 65 73 44 65 73 63 54 65 78 74 22 3a 22 44 65 73 63 72 69 70 74 69 6f 6e 22 2c 22 41 62 6f 75 74 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 3f 74 6d 70 6c 3d 64 6f 63 73 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 2c 22 41 63 74 69 76 65 54 65 78 74 22 3a 22 41 63 74 69 76 65 22 2c 22 41 6c 77 61 79 73 41 63 74 Data Ascii: kiesText":"Your Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","CookiesDescText":"Description","AboutLink":"https://www.booking.com/general.html?tmpl=docs/privacy-policy","ActiveText":"Active","AlwaysAct
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 63 72 69 70 74 41 72 63 68 69 76 65 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 43 6f 6e 66 69 72 6d 54 65 78 74 22 3a 22 43 6f 6e 66 69 72 6d 20 4d 79 20 43 68 6f 69 63 65 73 22 2c 22 56 65 6e 64 6f 72 4c 69 73 74 54 65 78 74 22 3a 22 4c 69 73 74 20 6f 66 20 49 41 42 20 56 65 6e 64 6f 72 73 22 2c 22 54 68 69 72 64 50 61 72 74 79 43 6f 6f 6b 69 65 4c 69 73 74 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 20 77 65 20 75 73 65 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 4d 61 6e 61 67 65 50 72 65 66 65 72 65 6e 63 65 73 54 65 78 74 Data Ascii: criptArchive":false,"BannerPosition":"bottom","PreferenceCenterPosition":"default","PreferenceCenterConfirmText":"Confirm My Choices","VendorListText":"List of IAB Vendors","ThirdPartyCookieListText":"Cookies we use","PreferenceCenterManagePreferencesText
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 70 72 65 66 65 72 65 6e 63 65 73 2e 20 54 68 65 73 65 20 74 65 63 68 6e 69 63 61 6c 20 63 6f 6f 6b 69 65 73 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 20 74 6f 20 75 73 65 20 6f 75 72 20 73 69 74 65 20 61 6e 64 20 73 65 72 76 69 63 65 73 2e 22 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 4f 54 54 22 3a 22 46 75 6e 63 74 69 6f 6e 61 6c 20 63 6f 6f 6b 69 65 73 20 65 6e 61 62 6c 65 20 6f 75 72 20 77 65 62 73 69 74 65 20 74 6f 20 77 6f 72 6b 20 70 72 6f 70 65 72 6c 79 2c 20 73 6f 20 79 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 61 6e 20 61 63 63 6f 75 6e 74 2c 20 73 69 67 6e 20 69 6e 2c 20 61 6e 64 20 6d 61 6e 61 67 65 20 62 6f 6f 6b 69 6e 67 73 2e 20 54 68 65 79 20 61 6c 73 6f 20 72 65 6d 65 6d 62 65 72 20 Data Ascii: s, and other preferences. These technical cookies must be enabled to use our site and services.","GroupDescriptionOTT":"Functional cookies enable our website to work properly, so you can create an account, sign in, and manage bookings. They also remember
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 6f 6d 20 4f 6e 65 54 72 75 73 74 2e 20 20 49 74 20 69 73 20 73 65 74 20 61 66 74 65 72 20 76 69 73 69 74 6f 72 73 20 68 61 76 65 20 73 65 65 6e 20 61 20 63 6f 6f 6b 69 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6e 6f 74 69 63 65 20 61 6e 64 20 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 6f 6e 6c 79 20 77 68 65 6e 20 74 68 65 79 20 61 63 74 69 76 65 6c 79 20 63 6c 6f 73 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 6c 65 73 20 74 68 65 20 77 65 62 73 69 74 65 20 6e 6f 74 20 74 6f 20 73 68 6f 77 20 74 68 65 20 6d 65 73 73 61 67 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 20 74 6f 20 61 20 75 73 65 72 2e 20 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6f 6e 65 20 79 65 61 72 20 6c 69 66 65 73 70 61 6e 20 61 6e 64 Data Ascii: om OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 69 6e 67 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 31 38 32 35 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 6d 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 61 63 63 6f 75 6e 74 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 73 69 6e 67 6c 65 20 73 69 67 6e 2d 6f 6e 20 28 53 53 4f 29 20 73 6f 6c 75 74 69 6f 6e 2c 20 70 61 73 73 69 6e 67 20 73 69 67 6e 20 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 6f 74 68 65 72 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 73 75 62 64 6f 6d 61 69 6e 73 2e 20 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 31 38 Data Ascii: ing.com","IsSession":false,"Length":"1825","description":"Forms part of the account.booking.com single sign-on (SSO) solution, passing sign in information to other Booking.com subdomains. ","DurationType":1,"category":null,"isThirdParty":false},{"id":"018
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 65 61 64 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 75 73 65 72 27 73 20 63 6f 6e 73 65 6e 74 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 31 38 65 32 65 32 33 2d 65 62 37 66 2d 37 39 32 30 2d 39 64 64 61 2d 65 61 66 66 66 34 35 62 64 37 35 65 22 2c 22 4e 61 6d 65 22 3a 22 63 6e 66 75 6e 63 6f 5f 70 72 22 2c 22 48 6f 73 74 22 3a 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 20 63 6f 6f 6b 69 65 20 77 69 6c 6c Data Ascii: ead and determine the user's consent.","DurationType":1,"category":null,"isThirdParty":false},{"id":"018e2e23-eb7f-7920-9dda-eafff45bd75e","Name":"cnfunco_pr","Host":"booking.com","IsSession":false,"Length":"360","description":"This functional cookie will
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 64 20 61 74 20 61 6c 6c 20 61 66 74 65 72 20 69 74 73 20 64 75 72 61 74 69 6f 6e 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 33 30 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 61 35 63 38 65 63 32 61 2d 31 31 66 62 2d 34 37 38 36 2d 39 36 33 66 2d 36 65 33 66 39 36 66 38 66 34 63 33 22 2c 22 4e 61 6d 65 22 3a 22 70 63 6d 5f 63 6f 6e 73 65 6e 74 22 2c 22 48 6f 73 74 22 3a 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 36 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 73 65 74 20 62 79 20 74 68 65 20 70 72 69 76 61 63 79 20 63 6f Data Ascii: d at all after its duration.","DurationType":30,"category":null,"isThirdParty":false},{"id":"a5c8ec2a-11fb-4786-963f-6e3f96f8f4c3","Name":"pcm_consent","Host":"booking.com","IsSession":false,"Length":"6","description":"This cookie is set by the privacy co
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 66 32 61 63 33 37 34 31 2d 30 30 37 32 2d 34 31 64 66 2d 38 63 31 38 2d 30 65 35 38 62 37 36 66 32 61 61 61 22 2c 22 4e 61 6d 65 22 3a 22 62 22 2c 22 48 6f 73 74 22 3a 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 52 65 6d 65 6d 62 65 72 73 20 69 66 20 74 68 65 20 75 73 65 72 20 68 61 73 20 62 65 65 6e 20 61 73 6b 65 64 20 61 20 6d 61 78 2e 20 6f 66 20 74 68 72 65 65 20 74 69 6d 65 73 20 61 62 6f 75 74 20 68 69 73 2f 68 65 72 20 6c 61 6e 67 75 61 67 65 20 73 65 74 74 69 6e 67 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 Data Ascii: isThirdParty":false},{"id":"f2ac3741-0072-41df-8c18-0e58b76f2aaa","Name":"b","Host":"booking.com","IsSession":false,"Length":"30","description":"Remembers if the user has been asked a max. of three times about his/her language setting.","DurationType":1,"
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 61 74 65 20 77 68 65 6e 20 75 73 65 72 20 77 61 73 20 73 65 65 6e 20 6c 61 73 74 20 74 69 6d 65 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 66 66 38 64 38 32 36 64 2d 64 63 34 37 2d 34 34 62 32 2d 61 64 61 38 2d 37 35 38 61 66 36 63 65 39 37 37 65 22 2c 22 4e 61 6d 65 22 3a 22 5f 70 78 66 66 5f 66 70 22 2c 22 48 6f 73 74 22 3a 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 72 6f 70 70 65 64 20 62 79 20 53 65 63 75 72 69 74 79 20 74 65 61 6d 20 61 73 20 70 61 72 74 20 6f 66 Data Ascii: ate when user was seen last time.","DurationType":1,"category":null,"isThirdParty":false},{"id":"ff8d826d-dc47-44b2-ada8-758af6ce977e","Name":"_pxff_fp","Host":"booking.com","IsSession":false,"Length":"0","description":"Dropped by Security team as part of

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49821	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:33 UTC	605	OUT	GET /scripttemplates/202404.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:33 UTC	826	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:33 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Tue, 11 Jun 2024 01:45:22 GMT ETag: 0x8DC89B8282DD555 x-ms-request-id: f7a7fda3-501e-005c-6a15-bcb090000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 33487 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a0cde887be76a4f-EWR
2024-07-10 01:44:33 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49822	188.114.97.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:33 UTC	803	OUT	GET /socket.io/?EIO=4&transport=websocket HTTP/1.1 Host: ennexhorpps.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://ennexhorpps.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA Sec-WebSocket-Key: qNnunTcxE64/WqywCQjDpA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-10 01:44:33 UTC	657	IN	HTTP/1.1 400 BAD REQUEST Date: Wed, 10 Jul 2024 01:44:33 GMT Content-Type: text/plain Content-Length: 27 Connection: close Access-Control-Allow-Origin: https://ennexhorpps.com Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bXyoRufGTlvOsutM%2FUOsBltzCFfnVgMi1bNGF60RS53DYPSADRZN2RYbkzQBqgPoNVJtW2Wfcnmgn61kZe%2BrEyUlDEQ0uQy6UetaQnfVGVjbTHF71kuTr%2BnhosWozcGuN%2FI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde898d368c41-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:33 UTC	27	IN	Data Raw: 22 49 6e 76 61 6c 69 64 20 77 65 62 73 6f 63 6b 65 74 20 75 70 67 72 61 64 65 22 Data Ascii: "Invalid websocket upgrade"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49818	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:33 UTC	1008	OUT	GET /themes/custom/booking/images/favicons/favicon.ico HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
2024-07-10 01:44:33 UTC	999	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 15086 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:33 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Thu, 04 Jul 2024 09:16:17 GMT etag: "3aee-61c6866321a40" cache-control: max-age=31536000 expires: Fri, 04 Jul 2025 09:29:59 GMT x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /themes/custom/booking/images/favicons/favicon.ico X-Host: partner.booking.com X-Varnish: 225631662 132382740 Via: 1.1 varnish (Varnish/6.6), 1.1 a3c1615d6bdfc01a05a0b3a742d10d38.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -ZW90aMM0cwEYZFegH_OEzCf91DLcuvG8Gs11VBISKidkoV6GyYziQ== Age: 490474 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:33 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 35 00 05 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 34 00 06 7f Data Ascii: 00 %6 % h6(0` $555555555555555555555555555555555555554

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49819	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:33 UTC	732	OUT	GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:33 UTC	1049	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 14622 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:33 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Wed, 26 Jun 2024 08:18:53 GMT etag: "391e-61bc6aa3acad1" cache-control: max-age=31536000 expires: Fri, 04 Jul 2025 09:30:00 GMT x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt X-Host: partner.booking.com X-Varnish: 224051606 129533354 Via: 1.1 varnish (Varnish/6.6), 1.1 32db37931b5639dc27ebaba3ad4f3d2c.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8aE3LFTnk24N_UcLjqeKjrGeI0k_oa6vANO76X63aIWzeweA6rgpvA== Age: 490472 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:33 UTC	14622	IN	Data Raw: 52 49 46 46 16 39 00 00 57 45 42 50 56 50 38 20 0a 39 00 00 70 95 00 9d 01 2a dc 00 8c 00 3e 19 0a 83 41 21 05 9e ab b1 04 00 61 28 02 e3 88 9b 5c f9 ff fb 2f ca af 64 5b 03 f8 7f ef 1f ab bf bd 7b be eb 97 ad 3c a6 b9 bf fe 77 f8 af ca 2f 98 1f e5 7f e7 7b 37 fe b1 fe 5b fe 4f b8 27 ea e7 fb 3f ed de ba 3f b3 3e ee bf 73 3d 45 fe cd fe d4 fb b6 7f da f5 67 fd 8f fd bf ec af c0 3f f5 df ee 3f fb 3b 18 fd 03 ff 70 7d 38 ff 75 be 17 7f b3 ff d6 fd d5 f6 97 ff dd d9 db ca 6f 04 3d f3 7d b3 f1 c7 f6 63 d4 ff c7 3e 5f fb 97 f6 ff f1 bf e3 7f b3 7f e8 ff 49 f1 89 fd ef 7e 5e 94 ff 8b fe 1b f6 ab dc 3f e4 5f 6f ff 05 fd db fc 6f fa bf f0 3f b7 3f 26 7f b3 fc af f3 ff e1 5f f2 bf 98 3f dd 3f 63 7e c2 ff 1b fe 5b fd eb fb 97 ed 1f f7 ff dc 4f 73 1f ea 7b bb b7 6f Data Ascii: RIFF9WEBPVP8 9p*>A!a(\/d[{<w/{7[O'??>s=Eg??;p}8uo=}c>_I~^?_oo??&_??c~[Os{o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49817	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:33 UTC	556	OUT	GET /shared/commons.9b20dd57c6f12e1beb80.js HTTP/1.1 Host: try.abtasty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:33 UTC	660	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 6867 Connection: close Date: Mon, 26 Feb 2024 13:51:37 GMT Last-Modified: Mon, 26 Feb 2024 13:51:36 GMT ETag: "26c3c284edadc317106c9358baf83ab5" x-amz-server-side-encryption: AES256 Cache-Control: s-maxage=31536000,max-age=31536000 x-amz-version-id: 2swbMuOoUiGEaL6ZlwEPAvIaJZlx4UOq Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 5f5fdd347d6ea8b242af79ee38a02fae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wuv9hwtQRe5jPWB5Jj-qdnbJjBmvl4bJuKFaza7SbNXoaWDmWcGMHQ== Age: 11620377
2024-07-10 01:44:33 UTC	6867	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 67 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 67 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 33 5d 2c 7b 35 36 30 37 3a 28 74 2c 72 2c 65 29 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 66 72 6f 6d 3f 41 72 72 61 79 2e 66 72 6f 6d 3a 65 28 32 35 30 38 29 7d 2c 32 35 30 38 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 2c 72 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 35 33 29 2d 31 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 Data Ascii: (self.webpackChunktag=self.webpackChunktag\|\|[]).push([[223],{5607:(t,r,e)=>{t.exports="function"==typeof Array.from?Array.from:e(2508)},2508:t=>{t.exports=function(){var t=function(t){return"function"==typeof t},r=Math.pow(2,53)-1,e=function(t){var e=func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49824	104.26.6.229	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:33 UTC	555	OUT	GET /KindlyChat-2f88cfbafafa555baa4d.js HTTP/1.1 Host: chat.kindlycdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:33 UTC	1255	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:33 GMT Content-Type: text/javascript Content-Length: 287861 Connection: close x-goog-generation: 1720106853111263 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 287861 x-goog-meta-goog-reserved-file-mtime: 1720106834 x-goog-meta-kindly-chat-version: v2.60.6 x-goog-hash: crc32c=a4LwSA== x-goog-hash: md5=aa3JMEIEtbjEVo0Z1eE09w== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: ACJd0NoFL0meuNXgEQ64-a8uxWD0d4TGeMaSKb6zUbahXCGJ2makLsdP915haTr_b1IqqIXQnFQ Expires: Wed, 10 Jul 2024 01:36:09 GMT Cache-Control: public, max-age=1800 Age: 1002 Last-Modified: Thu, 04 Jul 2024 15:27:33 GMT ETag: "69adc9304204b5b8c4568d19d5e134f7" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sNA79%2B3JjAI24YSJ6by4Jv4Ff2bWkVL3WcBRFK2%2Fn%2BthV9h8mgPJcrnQstH1h96%2FXOTqI8sifLU1tnW1hGR%2FikR7O9HQF%2F10ySz4qE012yfyJlkYbphjajbiT8Gz%2BqvQHTlEqQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cde8bda7b78d5-EWR
2024-07-10 01:44:33 UTC	114	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 4b 69 6e 64 6c 79 43 68 61 74 2d 32 66 38 38 63 66 62 61 66 61 66 61 35 35 35 62 61 61 34 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 6b 69 6e 64 6c 79 4a 53 4f 4e 70 3d 73 65 6c 66 2e 6b 69 Data Ascii: /! For license information please see KindlyChat-2f88cfbafafa555baa4d.js.LICENSE.txt /(self.kindlyJSONp=self.ki
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 6e 64 6c 79 4a 53 4f 4e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 4b 69 6e 64 6c 79 43 68 61 74 22 5d 2c 7b 34 37 32 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 74 72 7d 29 3b 76 61 72 20 72 3d 7b 7d 3b 6e 2e 72 28 72 29 2c 6e 2e 64 28 72 2c 7b 61 67 65 6e 74 3a 28 29 3d 3e 78 74 2c 61 6c 65 72 74 73 3a 28 29 3d 3e 49 74 2c 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 3a 28 29 3d 3e 4c 74 2c 61 75 74 68 3a 28 29 3d 3e 4e 74 2c 62 6f 74 3a 28 29 3d 3e 6d 74 2c 63 68 61 74 62 75 62 62 6c 65 3a 28 29 3d 3e 76 74 2c 63 6f 6e 6e 65 63 74 69 6f 6e 3a 28 29 3d 3e 6a 74 2c 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 28 29 3d 3e 77 74 2c 66 65 65 64 62 61 63 6b 3a 28 29 Data Ascii: ndlyJSONp\|\|[]).push([["KindlyChat"],{4722:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>tr});var r={};n.r(r),n.d(r,{agent:()=>xt,alerts:()=>It,announcement:()=>Lt,auth:()=>Nt,bot:()=>mt,chatbubble:()=>vt,connection:()=>jt,environment:()=>wt,feedback:()
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 2c 53 3d 6e 28 33 37 38 30 29 2c 41 3d 6e 28 31 39 33 31 29 2c 43 3d 6e 28 39 34 38 30 29 2c 78 3d 6e 28 34 38 32 29 2c 4f 3d 6e 28 39 33 34 36 29 3b 63 6f 6e 73 74 20 49 3d 28 30 2c 64 2e 41 48 29 28 5b 22 26 20 3e 20 64 69 76 2c 26 20 3e 20 73 76 67 7b 7a 2d 69 6e 64 65 78 3a 33 3b 7d 26 20 3e 20 64 69 76 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7d 26 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 Data Ascii: ,S=n(3780),A=n(1931),C=n(9480),x=n(482),O=n(9346);const I=(0,d.AH)(["& > div,& > svg{z-index:3;}& > div{position:relative;display:flex;justify-content:center;align-items:center;}&:before{content:'';position:absolute;left:0;top:0;width:100%;height:100%;bac
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 2d 65 6e 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 38 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 32 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 20 32 34 30 6d 73 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 22 2c 22 3b 22 2c 22 20 40 6d 65 64 69 61 20 22 2c 22 7b 70 61 64 64 69 6e 67 3a 30 70 78 20 36 70 78 20 30 70 78 20 31 36 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 69 67 Data Ascii: -end;border-radius:48px;display:flex;flex-direction:row;align-items:center;justify-content:flex-end;position:relative;z-index:2;transition:border 240ms;cursor:pointer;height:100%;color:",";"," @media ","{padding:0px 6px 0px 16px;box-shadow:none;border-rig
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 73 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 22 5d 29 7d 29 2c 54 2e 6a 4f 2e 6d 61 78 50 68 6f 6e 65 2c 28 65 3d 3e 7b 6c 65 74 7b 62 75 74 74 6f 6e 57 69 64 74 68 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 28 74 7c 7c 30 29 2b 31 34 38 7d 29 2c 28 65 3d 3e 7b 6c 65 74 7b 6f 70 65 6e 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 21 74 26 26 28 30 2c 64 2e 41 48 29 28 5b 22 6d 61 78 2d 77 69 64 74 68 3a 30 3b 22 5d 29 7d 29 29 2c 4e 3d 64 2e 41 79 2e 64 69 76 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 73 74 79 6c 65 73 5f 5f 49 63 6f 6e 49 6d 61 67 65 57 72 61 70 70 65 72 22 2c 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 31 77 6b 6e 67 64 7a 2d 33 22 7d 29 28 5b 22 77 69 64 74 68 3a 33 36 70 78 3b 68 65 69 Data Ascii: s:none;user-select:none;"])}),T.jO.maxPhone,(e=>{let{buttonWidth:t}=e;return(t\|\|0)+148}),(e=>{let{open:t}=e;return!t&&(0,d.AH)(["max-width:0;"])})),N=d.Ay.div.withConfig({displayName:"styles__IconImageWrapper",componentId:"sc-1wkngdz-3"})(["width:36px;hei
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 67 68 74 3a 22 2c 22 3b 7d 22 5d 2c 28 65 3d 3e 7b 6c 65 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 20 74 7d 29 2c 54 2e 46 52 2e 6c 65 76 65 6c 32 2c 49 2c 54 2e 6a 4f 2e 6d 61 78 50 68 6f 6e 65 2c 28 65 3d 3e 7b 6c 65 74 7b 6f 70 65 6e 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 20 74 3f 22 38 70 78 3b 22 3a 22 31 36 70 78 22 7d 29 29 3b 76 61 72 20 55 3d 6e 28 32 31 38 36 29 2c 48 3d 6e 28 38 36 34 34 29 3b 63 6f 6e 73 74 20 42 3d 64 2e 41 79 2e 64 69 76 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 73 74 79 6c 65 73 5f 5f 50 75 73 68 4d 65 73 73 61 67 65 43 6f 6e 74 61 69 6e 65 72 22 2c 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 33 67 38 71 6e 74 2d 30 22 7d 29 28 5b 22 7a 2d 69 6e 64 65 78 3a Data Ascii: ght:",";}"],(e=>{let{background:t}=e;return t}),T.FR.level2,I,T.jO.maxPhone,(e=>{let{open:t}=e;return t?"8px;":"16px"}));var U=n(2186),H=n(8644);const B=d.Ay.div.withConfig({displayName:"styles__PushMessageContainer",componentId:"sc-3g8qnt-0"})(["z-index:
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 73 70 6c 61 79 4e 61 6d 65 3a 22 73 74 79 6c 65 73 5f 5f 43 6f 6e 74 65 6e 74 54 65 78 74 22 2c 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 33 67 38 71 6e 74 2d 34 22 7d 29 28 5b 22 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 22 2c 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 22 3b 73 70 61 6e 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 7d 70 7b 6d 61 72 67 69 6e 3a 30 3b 7d 40 6d 65 64 69 61 20 22 2c 22 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 22 5d 2c 28 65 3d 3e 7b 6c 65 74 7b 74 68 65 6d 65 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 28 30 2c 41 2e 77 29 28 74 2e 62 61 63 6b 67 72 6f 75 Data Ascii: splayName:"styles__ContentText",componentId:"sc-3g8qnt-4"})(["margin:0;color:",";font-size:",";font-weight:normal;line-height:24px;font-family:",";span{font-weight:500;}p{margin:0;}@media ","{font-size:14px;}"],(e=>{let{theme:t}=e;return(0,A.w)(t.backgrou
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 61 6e 22 2c 6e 75 6c 6c 2c 74 2e 6e 61 6d 65 7c 7c 22 41 6e 20 61 67 65 6e 74 22 29 2c 22 20 22 2c 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 6c 65 74 7b 74 65 78 74 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 20 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 47 2c 6e 75 6c 6c 2c 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 46 2c 7b 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3a 7b 5f 5f 68 74 6d 6c 3a 74 7d 7d 29 29 7d 63 6f 6e 73 74 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 7b 73 65 74 74 69 6e 67 73 3a 74 7d 3d 65 3b 63 6f 6e 73 74 7b 62 75 62 62 6c 65 53 69 7a 65 3a 6e 7d 3d 28 30 2c 75 2e 64 34 29 28 6b 2e 4f 64 29 2c 7b 61 67 65 6e 74 3a 72 2c 73 68 6f 77 3a 6f 2c 74 65 78 74 3a 69 2c 74 79 70 65 3a 61 7d Data Ascii: an",null,t.name\|\|"An agent")," ",a))}function X(e){let{text:t}=e;return s.createElement(G,null,s.createElement(F,{dangerouslySetInnerHTML:{__html:t}}))}const V=function(e){let{settings:t}=e;const{bubbleSize:n}=(0,u.d4)(k.Od),{agent:r,show:o,text:i,type:a}
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 3a 6f 7d 3d 65 3b 72 65 74 75 72 6e 20 74 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 21 6f 7c 7c 74 26 26 72 26 26 6f 7c 7c 6e 3f 22 33 36 70 78 22 3a 22 34 34 70 78 22 7d 29 2c 54 2e 6a 4f 2e 6d 61 78 54 61 62 6c 65 74 2c 28 65 3d 3e 7b 6c 65 74 7b 24 73 6d 61 6c 6c 42 75 62 62 6c 65 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 20 74 3f 28 30 2c 64 2e 41 48 29 28 5b 22 77 69 64 74 68 3a 33 36 70 78 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 22 5d 29 3a 28 30 2c 64 2e 41 48 29 28 5b 22 77 69 64 74 68 3a 34 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 34 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 22 5d 29 7d 29 29 2c 5a 3d 64 2e 41 79 2e 69 6d 67 2e 77 69 74 Data Ascii: :o}=e;return t&&void 0!==o&&!o\|\|t&&r&&o\|\|n?"36px":"44px"}),T.jO.maxTablet,(e=>{let{$smallBubble:t}=e;return t?(0,d.AH)(["width:36px;height:36px;animation:none;"]):(0,d.AH)(["width:44px !important;height:44px !important;animation:none;"])})),Z=d.Ay.img.wit
2024-07-10 01:44:33 UTC	1369	IN	Data Raw: 22 2c 24 67 6c 6f 62 61 6c 49 63 6f 6e 73 4f 70 65 6e 3a 63 2c 24 73 68 6f 77 47 6c 6f 62 61 6c 49 63 6f 6e 73 3a 74 2c 24 69 73 47 6c 6f 62 61 6c 49 63 6f 6e 73 44 65 6c 61 79 65 64 3a 6e 2c 24 61 63 74 69 76 65 3a 61 2c 24 73 6d 61 6c 6c 42 75 62 62 6c 65 3a 22 53 4d 41 4c 4c 22 3d 3d 3d 69 7d 29 7d 2c 6e 65 3d 28 30 2c 64 2e 41 48 29 28 5b 22 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 22 5d 2c 55 2e 6d 2e 64 65 66 61 75 6c 74 2c 54 2e 4a 2e 68 35 29 2c 72 65 3d 64 2e 41 79 2e 64 69 76 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 48 69 64 64 65 6e 42 75 74 74 6f 6e 73 74 Data Ascii: ",$globalIconsOpen:c,$showGlobalIcons:t,$isGlobalIconsDelayed:n,$active:a,$smallBubble:"SMALL"===i})},ne=(0,d.AH)(["white-space:nowrap;font-family:",";font-size:",";font-weight:500;"],U.m.default,T.J.h5),re=d.Ay.div.withConfig({displayName:"HiddenButtonst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49827	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:33 UTC	393	OUT	GET /scripttemplates/202404.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:34 UTC	826	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:34 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Tue, 11 Jun 2024 01:45:22 GMT ETag: 0x8DC89B8282DD555 x-ms-request-id: bb49cf11-c01e-0070-3c3d-bc32ad000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 85091 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a0cde8cd8a14303-EWR
2024-07-10 01:44:34 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-07-10 01:44:34 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-07-10 01:44:34 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-07-10 01:44:34 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-07-10 01:44:34 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-07-10 01:44:34 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-07-10 01:44:34 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-07-10 01:44:34 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-07-10 01:44:34 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-07-10 01:44:34 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49826	18.239.50.78	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	732	OUT	GET /themes/custom/booking/images/favicons/favicon.svg HTTP/1.1 Host: partner.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
2024-07-10 01:44:34 UTC	935	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1367 Connection: close Vary: Accept-Encoding Server: nginx Date: Wed, 10 Jul 2024 01:44:34 GMT last-modified: Thu, 04 Jul 2024 09:16:17 GMT etag: "66866861-557" X-Url: /themes/custom/booking/images/favicons/favicon.svg X-Host: partner.booking.com X-Varnish-Storage: File cache-control: max-age=2628000, public expires: 2628000 X-Varnish: 225135816 217558384 Via: 1.1 varnish (Varnish/6.6), 1.1 af1da25c2dddf71cac076999aa9861e6.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: WckjmxpohLPzCrC5eHgHxlHQ8WbGNwVB-Nn0kPLioz396cT8LKM5vQ== Age: 58480 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:34 UTC	1367	IN	Data Raw: 3c 73 76 67 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 2e 34 31 34 22 20 76 69 65 77 42 6f 78 3d 22 2d 2e 30 39 32 20 2e 30 31 35 20 32 37 33 32 2e 31 32 35 20 32 36 37 31 2e 39 39 36 22 20 77 69 64 74 68 3d 22 36 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 32 37 33 32 2e 30 33 32 20 35 31 33 2e 30 33 63 30 2d 32 38 33 2e 31 34 31 2d 32 32 39 2e 39 37 38 2d 35 31 33 2e 30 31 35 2d 35 31 33 2e 31 31 38 2d 35 31 33 Data Ascii: <svg clip-rule="evenodd" fill-rule="evenodd" height="64" stroke-linejoin="round" stroke-miterlimit="1.414" viewBox="-.092 .015 2732.125 2671.996" width="64" xmlns="http://www.w3.org/2000/svg"><path d="m2732.032 513.03c0-283.141-229.978-513.015-513.118-513

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49823	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	725	OUT	GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:34 UTC	1178	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 2864 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:34 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto cache-control: public, s-maxage=2764800 last-modified: Fri, 05 Jul 2024 08:08:03 GMT content-language: hr x-frame-options: SAMEORIGIN expires: Sun, 19 Nov 1978 05:00:00 GMT x-generator: Drupal 10 (https://www.drupal.org) content-security-policy: report-uri /report-csp-violation; upgrade-insecure-requests x-xss-protection: 1; mode=block x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z X-Host: partner.booking.com X-Varnish: 225660801 143396977 Via: 1.1 varnish (Varnish/6.6), 1.1 b1c64361268fcbad3c03abbe37eb5cfa.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: B16aIfC51KTC8Ii4_imiJ3oViT8_feOISwCGFBqBja1wxzJGpwVR0w== Age: 408991 Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:34 UTC	2864	IN	Data Raw: 52 49 46 46 28 0b 00 00 57 45 42 50 56 50 38 20 1c 0b 00 00 b0 33 00 9d 01 2a dc 00 8c 00 3e 19 0c 85 41 a1 04 a2 9b 2b 04 00 61 2c 6d dc 2e 67 7c 89 f1 df c8 0e fd 29 83 d5 ff 20 ff 6e bf cb fc bb d6 3f af fe 29 e1 90 39 7e a2 7b b5 f9 7f cc 7f ed dd a1 7c c0 3f 48 7f c8 ff 6e fd b0 f7 80 f5 0d e6 03 f5 97 fd 6f f9 cf 6a 0f 51 bf df 3f 5d 3d c0 3f a9 ff 59 eb 19 f4 00 fe 3f fd eb d2 f7 fe ef fb 8f 83 8f d9 ef fb 1f e5 bf f6 fc 8a 7e bb ff bf d6 6c 5e 5f df b9 6b e5 36 61 af b6 df 9f fc 83 fc 8e f8 df be 3e 00 5f 8d ff 3d ff 0d f9 51 c1 32 00 3e a9 7f 9a f5 60 98 77 7a 3f d7 7a 11 ff 84 fc c0 e6 3e a0 1f f3 4f ea 7f f1 7f be fe 40 7c 77 7f c1 fe 93 f1 db dc c7 cf 9f f2 bf c8 fc 09 ff 30 fe 9b fe 5b f3 6f fc 0f ff ff 11 3f b5 fe cb 5f ae c3 d3 0e ca 6b a7 Data Ascii: RIFF(WEBPVP8 3*>A+a,m.g\|) n?)9~{\|?HnojQ?]=?Y?~l^_k6a>_=Q2>`wz?z>O@\|w0[o?_k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49825	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	1082	OUT	GET /sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://partner.booking.com/en-us?utm_source=extranet_login_page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page
2024-07-10 01:44:34 UTC	1059	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 14826 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:34 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Mon, 20 Nov 2023 10:25:57 GMT etag: "39ea-60a92e9649471" cache-control: max-age=31536000 expires: Fri, 04 Jul 2025 09:30:00 GMT x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb X-Host: partner.booking.com X-Varnish: 225135818 125795653 Via: 1.1 varnish (Varnish/6.6), 1.1 a3c1615d6bdfc01a05a0b3a742d10d38.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1FxZsmJSVHLKik_mYxBNCs5SocJafPfQnN70TjjOOuTo7vtLf7vVsQ== Age: 490473 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:34 UTC	14826	IN	Data Raw: 52 49 46 46 e2 39 00 00 57 45 42 50 56 50 38 20 d6 39 00 00 90 9a 00 9d 01 2a dc 00 8c 00 3e 19 08 83 41 21 05 ae 61 c7 04 00 61 28 02 ec cc 5f 1b df 51 fd 7f e9 9b e4 b2 b4 fe 03 fb 77 ea ff ef 5f b7 3f 28 7f d0 7d aa f5 fd d6 5f ef 7c dd f9 d3 fe 07 f7 2f c9 2f 99 1f ea 7f 67 fd cc fe 89 fd 86 f8 07 fd 5b ff 97 fe 27 dc cf fc bf d8 7f 77 bf de ff f0 7a 8c fe ab fe 73 f6 fb dd 7f fe 3f ed 27 bb 9f ec 7f ee bf 2a be 42 bf a5 ff 97 ff e3 d8 97 e8 27 fb c3 e9 cf fb 95 f0 d1 fd a7 fe 77 ee 0f c0 af ed 5f ff fe ce cd 2b 3d ee fd 4f f1 5f f7 43 d4 df c7 3e 59 fb 2f f7 3f d9 7f ed df fa ff d3 fc 2c 7f 4f fd 67 c3 2f 3f 7f bb ff 09 ea 27 f1 af b4 9f 82 fe dd fb 65 fd ef f7 8b e4 3f f6 df 6e 7e 8a fe 57 fa bf f9 7f ef ff b7 df db 3e 42 3f 19 fe 55 fd c3 fb 47 ed Data Ascii: RIFF9WEBPVP8 9>A!aa(_Qw_?(}_\|//g['wzs?'B'w_+=O_C>Y/?,Og/?'e?n~W>B?UG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49830	34.36.178.232	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	573	OUT	GET /v1/ua-parser HTTP/1.1 Host: dcinfos-cache.abtasty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:34 UTC	517	IN	HTTP/1.1 200 OK date: Wed, 10 Jul 2024 01:44:34 GMT content-type: application/json vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers,User-Agent access-control-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains cache-control: public, max-age=86400 x-envoy-decorator-operation: uc-info.workload.svc.cluster.local:8080/* via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-07-10 01:44:34 UTC	97	IN	Data Raw: 35 36 0d 0a 7b 22 74 79 70 65 22 3a 22 44 65 73 6b 74 6f 70 22 2c 22 6f 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 22 62 72 6f 77 73 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 56{"type":"Desktop","os":{"name":"Windows"},"browser":{"name":"Chrome","version":"117"}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49831	34.36.178.232	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	583	OUT	GET /v1/geoip?weather=false HTTP/1.1 Host: dcinfos-cache.abtasty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:34 UTC	505	IN	HTTP/1.1 200 OK date: Wed, 10 Jul 2024 01:44:34 GMT content-type: application/json vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers access-control-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains cache-control: private, max-age=600 x-envoy-decorator-operation: uc-info.workload.svc.cluster.local:8080/* via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-07-10 01:44:34 UTC	436	IN	Data Raw: 31 61 38 0d 0a 7b 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 75 6e 74 72 79 5f 69 73 6f 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 73 74 61 74 65 5f 69 73 6f 5f 63 6f 64 65 22 3a 22 4e 59 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 69 74 79 5f 69 64 22 3a 35 31 32 38 35 38 31 2c 22 63 69 74 79 5f 63 6f 6e 66 69 64 65 6e 63 65 22 3a 2d 31 2c 22 70 6f 73 74 61 6c 5f 63 6f 64 65 22 3a 22 31 30 31 31 38 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 32 33 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 38 2c 22 61 63 63 75 72 61 63 79 5f 72 61 64 69 75 73 22 3a 32 30 2c 22 74 69 6d 65 5f 7a 6f 6e 65 22 3a 22 Data Ascii: 1a8{"country_name":"United States","country_iso_code":"US","state":"New York","state_iso_code":"NY","city":"New York","city_id":5128581,"city_confidence":-1,"postal_code":"10118","latitude":40.7123,"longitude":-74.0068,"accuracy_radius":20,"time_zone":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49833	18.239.50.78	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	1150	OUT	GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt HTTP/1.1 Host: partner.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22}; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=
2024-07-10 01:44:34 UTC	1049	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 14622 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:34 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Wed, 26 Jun 2024 08:18:53 GMT etag: "391e-61bc6aa3acad1" cache-control: max-age=31536000 expires: Fri, 04 Jul 2025 09:30:00 GMT x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /sites/default/files/styles/menu_teaser_desktop/public/2024-03/join-booking-hero.jpg.webp?h=56d0ca2e&itok=3dorJ9nt X-Host: partner.booking.com X-Varnish: 225631667 129533354 Via: 1.1 varnish (Varnish/6.6), 1.1 c2c44e18165da827386e0ed36aeea344.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YETIy-DwOpTyf592bDeK4Kgt43jGCE1WdWeC9H7U_nrZnqNLDfD8gQ== Age: 490473 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:34 UTC	14622	IN	Data Raw: 52 49 46 46 16 39 00 00 57 45 42 50 56 50 38 20 0a 39 00 00 70 95 00 9d 01 2a dc 00 8c 00 3e 19 0a 83 41 21 05 9e ab b1 04 00 61 28 02 e3 88 9b 5c f9 ff fb 2f ca af 64 5b 03 f8 7f ef 1f ab bf bd 7b be eb 97 ad 3c a6 b9 bf fe 77 f8 af ca 2f 98 1f e5 7f e7 7b 37 fe b1 fe 5b fe 4f b8 27 ea e7 fb 3f ed de ba 3f b3 3e ee bf 73 3d 45 fe cd fe d4 fb b6 7f da f5 67 fd 8f fd bf ec af c0 3f f5 df ee 3f fb 3b 18 fd 03 ff 70 7d 38 ff 75 be 17 7f b3 ff d6 fd d5 f6 97 ff dd d9 db ca 6f 04 3d f3 7d b3 f1 c7 f6 63 d4 ff c7 3e 5f fb 97 f6 ff f1 bf e3 7f b3 7f e8 ff 49 f1 89 fd ef 7e 5e 94 ff 8b fe 1b f6 ab dc 3f e4 5f 6f ff 05 fd db fc 6f fa bf f0 3f b7 3f 26 7f b3 fc af f3 ff e1 5f f2 bf 98 3f dd 3f 63 7e c2 ff 1b fe 5b fd eb fb 97 ed 1f f7 ff dc 4f 73 1f ea 7b bb b7 6f Data Ascii: RIFF9WEBPVP8 9p*>A!a(\/d[{<w/{7[O'??>s=Eg??;p}8uo=}c>_I~^?_oo??&_??c~[Os{o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49832	18.239.50.78	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	1086	OUT	GET /themes/custom/booking/images/favicons/favicon.ico HTTP/1.1 Host: partner.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22}; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=
2024-07-10 01:44:34 UTC	999	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 15086 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:34 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Thu, 04 Jul 2024 09:16:17 GMT etag: "3aee-61c6866321a40" cache-control: max-age=31536000 expires: Fri, 04 Jul 2025 09:29:59 GMT x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /themes/custom/booking/images/favicons/favicon.ico X-Host: partner.booking.com X-Varnish: 224897297 132382740 Via: 1.1 varnish (Varnish/6.6), 1.1 1d14130822f7563ef82bba830d521f72.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: LExmI1R283eqeKK-lQ77n9BJz3iAQVLHh4ZAsUqbjvDqAa2x_wagQQ== Age: 490475 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:34 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 35 00 05 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 35 00 09 80 34 00 06 7f Data Ascii: 00 %6 % h6(0` $555555555555555555555555555555555555554

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49835	18.245.60.76	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	994	OUT	GET /content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%20sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ&sid%20=930746e7f78d5b33410375991db31657 HTTP/1.1 Host: www.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
2024-07-10 01:44:35 UTC	2201	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Length: 774026 Connection: close server: nginx date: Wed, 10 Jul 2024 01:44:35 GMT vary: Accept-Encoding, User-Agent nel: {"max_age":604800,"report_to":"default"} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800,"group":"default"} set-cookie: _implmdnbl=2__1__0; path=/; expires=Fri, 12-Jul-2019 01:44:34 GMT; HttpOnly set-cookie: px_init=0; domain=booking.com; expires=Sat, 18-Mar-2079 03:29:08 GMT; SameSite=Strict; secure; HttpOnly set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; domain=.booking.com; path=/; expires=Mon, 09-Jul-2029 01:44:35 GMT; Secure; HTTPOnly; SameSite=None strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=c35a0c4170650183&e=UmFuZG9tSVYkc2RlIyh9YecJHbz5NppBoDlAMG_HuZ5JP8I5ynLDZwTLGDtKIXik x-xss-protection: 1; mode=block set-cookie: bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; Domain=.booking.com; Path=/; Expires=Fri, 10 Jul 2026 01:44:34 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; Domain=.booking.com; Path=/; Expires=Thu, 10 Jul 2025 01:44:34 GMT; HttpOnly; Secure; SameSite=Lax X-Cache: Miss from cloudfront Via: 1.1 76f18545659f3cecc2213d8e93d15fb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P5 X-Amz-Cf-Id: aHoExmLC5CbqdP0G_eCJLqklt3QZxHGBt9ZCGfYYKZKw5EeSkUvXcw==
2024-07-10 01:44:35 UTC	12792	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 6a 72 57 70 38 57 30 56 48 4e 4d 6e 50 73 61 22 3e 0a 64 6f 63 75 Data Ascii: <!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="jrWp8W0VHNMnPsa">docu
2024-07-10 01:44:35 UTC	16384	IN	Data Raw: 6f 6b 69 6e 67 20 66 6f 72 20 68 6f 74 65 6c 73 2c 20 68 6f 6d 65 73 2c 20 6f 72 20 68 6f 6c 69 64 61 79 20 72 65 6e 74 61 6c 73 2c 20 79 6f 75 e2 80 99 6c 6c 20 61 6c 77 61 79 73 20 66 69 6e 64 20 74 68 65 20 67 75 61 72 61 6e 74 65 65 64 20 6c 6f 77 65 73 74 20 70 72 69 63 65 2e 20 42 72 6f 77 73 65 20 6f 75 72 20 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 69 6e 20 6f 76 65 72 20 38 35 2c 30 30 30 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2e 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 63 6f 6d 70 61 6e 79 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 3a 20 54 68 65 20 6c 61 72 67 Data Ascii: oking for hotels, homes, or holiday rentals, youll always find the guaranteed lowest price. Browse our accommodations in over 85,000 destinations."><meta property="og:type" content="company" /><meta property="og:title" content="Booking.com: The larg
2024-07-10 01:44:35 UTC	12576	IN	Data Raw: 22 74 68 65 20 4d 61 79 22 2c 22 74 6f 5f 6d 6f 6e 74 68 5f 6c 63 22 3a 22 74 6f 20 4d 61 79 22 2c 22 6f 6e 5f 64 61 79 5f 6d 6f 6e 74 68 22 3a 22 30 35 22 2c 22 6e 61 6d 65 5f 75 63 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 64 65 66 5f 61 72 74 69 63 6c 65 5f 75 63 22 3a 22 54 68 65 20 4d 61 79 22 2c 22 6d 6f 6e 74 68 5f 31 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 6f 74 68 65 72 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 66 72 6f 6d 22 3a 22 4d 61 79 22 2c 22 6d 6f 6e 74 68 5f 32 22 3a 22 4d 61 79 22 2c 22 67 65 6e 69 74 69 76 65 5f 75 63 22 3a 22 4d 61 79 22 2c 22 69 6e 5f 6d 6f 6e 74 68 5f 6c 63 22 3a 22 69 6e 20 4d 61 79 22 2c 22 6e 61 6d 65 5f 77 69 74 68 5f 79 65 61 72 5f 6f 6e 6c 79 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 74 6f 22 3a 22 4d 61 79 Data Ascii: "the May","to_month_lc":"to May","on_day_month":"05","name_uc":"May","name_def_article_uc":"The May","month_1":"May","name_other":"May","name_from":"May","month_2":"May","genitive_uc":"May","in_month_lc":"in May","name_with_year_only":"May","name_to":"May
2024-07-10 01:44:35 UTC	16384	IN	Data Raw: 72 74 69 65 73 20 6e 65 61 72 62 79 27 2c 0a 68 6f 74 65 6c 3a 20 27 70 72 6f 70 65 72 74 79 27 2c 0a 68 6f 74 65 6c 73 3a 20 27 70 72 6f 70 65 72 74 69 65 73 27 2c 0a 68 6f 74 65 6c 73 5f 6e 65 61 72 62 79 3a 20 27 50 72 6f 70 65 72 74 69 65 73 20 6e 65 61 72 62 79 27 0a 7d 2c 0a 6c 69 73 74 73 3a 20 7b 0a 63 6f 6c 6c 65 63 74 69 6f 6e 3a 20 5b 0a 7b 0a 69 64 3a 20 22 30 22 2c 0a 6e 61 6d 65 3a 20 22 4d 79 20 6e 65 78 74 20 74 72 69 70 22 2c 0a 68 6f 74 65 6c 73 5f 63 6f 75 6e 74 3a 20 22 30 22 0a 7d 0a 5d 0a 7d 2c 0a 74 6f 75 63 68 5f 6f 73 3a 20 66 61 6c 73 65 2c 0a 63 61 6c 65 6e 64 61 72 5f 64 61 79 73 5f 61 6c 6c 6f 77 65 64 5f 6e 75 6d 62 65 72 3a 20 33 35 35 2c 0a 62 5f 73 65 61 72 63 68 5f 6d 61 78 5f 6d 6f 6e 74 68 73 3a 20 31 36 2c 0a 62 5f 72 Data Ascii: rties nearby',hotel: 'property',hotels: 'properties',hotels_nearby: 'Properties nearby'},lists: {collection: [{id: "0",name: "My next trip",hotels_count: "0"}]},touch_os: false,calendar_days_allowed_number: 355,b_search_max_months: 16,b_r
2024-07-10 01:44:35 UTC	16384	IN	Data Raw: 4b 65 59 45 47 65 5a 58 4b 46 4b 65 22 3a 31 2c 22 5a 56 4c 4c 42 47 56 50 4c 57 43 48 42 52 66 4f 48 66 4b 58 4e 57 58 46 5a 45 56 43 22 3a 31 2c 22 62 51 47 42 50 47 4a 49 4d 41 44 58 44 63 56 56 50 65 50 48 59 59 66 50 48 65 22 3a 31 2c 22 42 43 64 47 4e 51 62 48 56 45 5a 59 65 4e 62 4e 45 49 49 59 49 45 62 44 62 52 54 22 3a 31 2c 22 48 57 41 46 59 48 4e 54 51 54 4e 57 52 66 44 46 4f 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55 62 44 4f 51 52 54 57 5a 42 4e 48 44 46 58 58 63 63 42 50 4b 65 22 3a 31 2c 22 65 57 66 66 51 4c 51 42 54 41 55 52 41 66 50 4d 5a 61 65 57 57 55 42 42 45 63 53 43 48 52 41 4f 41 63 45 55 43 22 3a 31 2c 22 4f 4d 47 66 48 4d 63 51 59 49 4d 64 55 66 45 4a 53 57 65 22 3a 31 2c 22 4f 41 5a 4f 58 48 48 48 4f 64 43 59 4f 22 3a 31 2c 22 4f Data Ascii: KeYEGeZXKFKe":1,"ZVLLBGVPLWCHBRfOHfKXNWXFZEVC":1,"bQGBPGJIMADXDcVVPePHYYfPHe":1,"BCdGNQbHVEZYeNbNEIIYIEbDbRT":1,"HWAFYHNTQTNWRfDFO":1,"NAFQCJWZUbDOQRTWZBNHDFXXccBPKe":1,"eWffQLQBTAURAfPMZaeWWUBBEcSCHRAOAcEUC":1,"OMGfHMcQYIMdUfEJSWe":1,"OAZOXHHHOdCYO":1,"O
2024-07-10 01:44:35 UTC	10463	IN	Data Raw: 45 66 54 51 4a 4e 44 59 42 46 4b 59 4f 65 65 49 4b 64 46 48 61 4f 22 3a 31 2c 22 48 57 41 46 59 48 48 42 63 4b 5a 42 45 43 22 3a 31 2c 22 63 51 44 4a 47 5a 61 54 61 54 61 42 59 4e 59 65 56 61 63 44 59 4f 22 3a 32 2c 22 4e 41 46 51 51 41 46 4a 5a 65 4f 51 5a 52 45 4b 64 5a 43 46 58 53 54 48 4f 22 3a 31 2c 22 48 57 41 46 59 42 66 50 44 42 45 44 48 49 57 44 62 4b 49 64 44 5a 42 47 63 41 4e 64 53 53 4c 54 22 3a 31 2c 22 4f 41 5a 4f 58 48 65 43 58 4c 45 64 50 4b 46 54 56 47 55 56 43 55 43 22 3a 31 2c 22 61 58 62 53 62 63 4f 51 50 43 50 52 57 58 64 42 47 5a 58 65 4e 4c 4f 4c 4f 4c 4d 4f 22 3a 32 2c 22 59 64 58 66 54 51 64 65 41 57 4e 64 66 58 65 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 51 46 53 55 43 4b 56 65 4d 58 46 5a 58 44 4f 58 44 62 4a 4e 50 57 65 22 3a Data Ascii: EfTQJNDYBFKYOeeIKdFHaO":1,"HWAFYHHBcKZBEC":1,"cQDJGZaTaTaBYNYeVacDYO":2,"NAFQQAFJZeOQZREKdZCFXSTHO":1,"HWAFYBfPDBEDHIWDbKIdDZBGcANdSSLT":1,"OAZOXHeCXLEdPKFTVGUVCUC":1,"aXbSbcOQPCPRWXdBGZXeNLOLOLMO":2,"YdXfTQdeAWNdfXe":1,"dLYHMRFeRQFSUCKVeMXFZXDOXDbJNPWe":
2024-07-10 01:44:35 UTC	14689	IN	Data Raw: 41 44 50 46 44 55 43 22 3a 32 2c 22 61 58 54 66 48 41 45 44 64 51 5a 58 44 4f 58 46 41 48 4e 42 47 50 66 42 4b 57 62 57 4f 4f 43 22 3a 31 2c 22 48 4d 62 56 61 63 44 4e 56 41 62 63 59 54 45 54 22 3a 31 2c 22 61 58 54 66 48 41 45 44 42 4f 53 49 53 49 42 54 49 58 49 52 63 4a 49 65 50 59 62 45 43 45 4c 62 63 5a 54 54 61 65 22 3a 31 2c 22 48 4d 62 4b 41 63 51 4a 46 59 44 54 65 43 46 45 44 59 63 61 4d 45 41 4b 65 22 3a 32 2c 22 48 57 41 46 4e 4a 62 61 4f 4c 4a 44 55 57 65 22 3a 31 2c 22 42 43 4d 64 65 4c 41 62 49 42 48 58 43 62 66 5a 56 4f 22 3a 31 2c 22 4e 41 46 4c 66 4f 64 41 53 55 54 62 57 54 48 4e 4f 44 5a 55 42 47 53 63 53 55 48 48 56 50 5a 43 22 3a 31 2c 22 48 4d 65 41 46 4c 52 58 52 4b 54 57 45 63 4f 4f 46 45 51 4b 46 47 43 22 3a 31 2c 22 49 4e 4c 47 50 Data Ascii: ADPFDUC":2,"aXTfHAEDdQZXDOXFAHNBGPfBKWbWOOC":1,"HMbVacDNVAbcYTET":1,"aXTfHAEDBOSISIBTIXIRcJIePYbECELbcZTTae":1,"HMbKAcQJFYDTeCFEDYcaMEAKe":2,"HWAFNJbaOLJDUWe":1,"BCMdeLAbIBHXCbfZVO":1,"NAFLfOdASUTbWTHNODZUBGScSUHHVPZC":1,"HMeAFLRXRKTWEcOOFEQKFGC":1,"INLGP
2024-07-10 01:44:35 UTC	16384	IN	Data Raw: 31 2c 22 4e 56 4e 5a 59 65 4a 42 43 58 61 54 46 4b 47 48 59 62 4f 58 57 43 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 62 4a 66 45 44 56 61 63 44 64 51 65 52 48 66 41 4f 5a 45 56 61 4e 64 43 59 4f 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 62 4a 66 45 44 64 44 46 51 54 58 57 44 54 44 63 43 48 66 57 65 22 3a 31 2c 22 4f 44 52 45 5a 66 65 66 54 4c 4b 47 42 66 46 4b 4a 42 4b 57 55 4f 66 41 59 55 4c 4d 5a 5a 43 47 56 4b 65 22 3a 31 2c 22 62 50 46 63 43 63 43 63 43 53 66 64 46 53 53 47 4b 54 64 4a 46 4e 61 49 4e 4b 56 54 62 58 61 4b 65 22 3a 31 2c 22 48 49 4e 5a 4a 4c 65 55 58 53 61 5a 62 64 4b 4e 4b 4e 4b 48 46 42 64 64 51 44 56 63 4d 4c 61 43 22 3a 32 2c 22 59 54 42 65 57 66 43 44 49 58 4c 53 47 62 44 61 46 53 52 66 41 42 4e 49 50 52 61 4f 22 3a 31 2c 22 4e 41 46 51 Data Ascii: 1,"NVNZYeJBCXaTFKGHYbOXWC":1,"aWQOcYTBbJfEDVacDdQeRHfAOZEVaNdCYO":1,"aWQOcYTBbJfEDdDFQTXWDTDcCHfWe":1,"ODREZfefTLKGBfFKJBKWUOfAYULMZZCGVKe":1,"bPFcCcCcCSfdFSSGKTdJFNaINKVTbXaKe":1,"HINZJLeUXSaZbdKNKNKHFBddQDVcMLaC":2,"YTBeWfCDIXLSGbDaFSRfABNIPRaO":1,"NAFQ
2024-07-10 01:44:35 UTC	1514	IN	Data Raw: 65 22 3a 31 2c 22 48 57 41 46 4e 65 4f 59 46 57 55 52 46 43 55 42 51 61 65 22 3a 31 2c 22 64 4c 63 58 4a 65 49 54 50 4d 4f 62 4f 56 4b 47 61 46 45 4a 4b 61 45 48 54 22 3a 31 2c 22 63 43 47 61 59 53 64 45 54 66 62 46 62 63 5a 4e 54 55 50 51 46 41 65 46 64 64 4b 4e 4b 4e 4b 57 65 22 3a 31 2c 22 56 4b 47 63 43 63 43 63 43 46 45 65 4e 64 44 59 42 52 58 5a 58 65 22 3a 31 2c 22 42 43 56 50 65 55 49 65 4c 4c 57 62 54 55 54 5a 43 57 54 59 4b 65 22 3a 31 2c 22 4e 41 46 4c 53 52 62 57 4e 50 64 51 42 54 44 65 58 4e 4f 41 56 64 4e 48 57 54 52 54 66 49 5a 4b 65 22 3a 31 2c 22 59 54 54 48 62 58 65 65 56 4a 57 63 57 50 61 44 4d 57 4f 4d 48 54 63 63 54 42 4c 57 43 41 57 64 50 5a 4b 65 22 3a 31 2c 22 4f 4f 49 42 54 56 58 49 4e 4c 63 4d 59 4e 61 58 54 62 43 42 50 47 44 44 Data Ascii: e":1,"HWAFNeOYFWURFCUBQae":1,"dLcXJeITPMObOVKGaFEJKaEHT":1,"cCGaYSdETfbFbcZNTUPQFAeFddKNKNKWe":1,"VKGcCcCcCFEeNdDYBRXZXe":1,"BCVPeUIeLLWbTUTZCWTYKe":1,"NAFLSRbWNPdQBTDeXNOAVdNHWTRTfIZKe":1,"YTTHbXeeVJWcWPaDMWOMHTccTBLWCAWdPZKe":1,"OOIBTVXINLcMYNaXTbCBPGDD
2024-07-10 01:44:35 UTC	16384	IN	Data Raw: 4a 56 5a 41 58 49 56 58 53 4b 45 64 4b 51 4e 51 46 61 49 44 4a 4e 4d 54 62 57 4e 57 65 22 3a 31 2c 22 4f 4f 49 42 54 56 58 4f 43 5a 42 4b 65 4a 48 56 50 52 62 51 66 58 4a 48 4d 50 48 65 58 65 22 3a 31 2c 22 48 4d 62 4b 62 48 41 59 49 46 54 64 5a 66 4c 4c 43 63 59 54 45 54 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 48 42 54 4c 45 56 44 45 52 64 61 66 4e 5a 46 65 65 53 64 50 58 4d 50 50 57 66 5a 58 52 54 22 3a 31 2c 22 50 50 58 47 57 50 48 44 44 5a 4b 5a 64 4b 4e 4a 4d 4e 62 63 53 58 63 52 65 22 3a 31 2c 22 48 4d 62 56 41 62 63 64 4a 58 49 49 48 54 50 4d 4f 62 57 4e 57 65 22 3a 31 2c 22 61 58 62 58 44 44 5a 4e 50 63 52 58 4a 64 47 54 54 4b 64 57 5a 45 59 42 42 56 59 59 54 22 3a 31 2c 22 50 5a 65 51 46 63 65 48 64 59 66 53 4d 4d 52 63 55 53 43 5a 43 22 3a 31 2c Data Ascii: JVZAXIVXSKEdKQNQFaIDJNMTbWNWe":1,"OOIBTVXOCZBKeJHVPRbQfXJHMPHeXe":1,"HMbKbHAYIFTdZfLLCcYTET":1,"aWQOcYTBHBTLEVDERdafNZFeeSdPXMPPWfZXRT":1,"PPXGWPHDDZKZdKNJMNbcSXcRe":1,"HMbVAbcdJXIIHTPMObWNWe":1,"aXbXDDZNPcRXJdGTTKdWZEYBBVYYT":1,"PZeQFceHdYfSMMRcUSCZC":1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49834	18.157.249.141	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	822	OUT	POST /pr?.top=435&action=Viewed%20Homepage&.dt=3671&.lt=5950&.btdns=9&.bv=16&_ak=bookingdotcomb2b&_ds=booking_prod&.scv=138&channel=Web&_r=533068&.anonId=2ba526af6f8d14f2&_anon=true HTTP/1.1 Host: bookingdotcomb2b.germany-2.evergage.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:35 UTC	741	IN	HTTP/1.1 204 Date: Wed, 10 Jul 2024 01:44:34 GMT Content-Type: text/plain Connection: close Set-Cookie: AWSALBTG=UixvskPVprCQAO6zS6GwFCVMe81yrw8mtEDMYUa7SiFgXCH/7pqEsp8Wx+JGjPXMQOAElcYqf1GB6xs1f2QKHIfaohAWLs4JMP3lz7Z1AruxSaYNtLcokF17VLRrmHE8dVNh9CBsiNyM08irENu7C14Ana2KhBNPv723PdymJEtRWeZj6GI=; Expires=Wed, 17 Jul 2024 01:44:34 GMT; Path=/ Set-Cookie: AWSALBTGCORS=UixvskPVprCQAO6zS6GwFCVMe81yrw8mtEDMYUa7SiFgXCH/7pqEsp8Wx+JGjPXMQOAElcYqf1GB6xs1f2QKHIfaohAWLs4JMP3lz7Z1AruxSaYNtLcokF17VLRrmHE8dVNh9CBsiNyM08irENu7C14Ana2KhBNPv723PdymJEtRWeZj6GI=; Expires=Wed, 17 Jul 2024 01:44:34 GMT; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://partner.booking.com Timing-Allow-Origin: * X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49840	34.36.178.232	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	371	OUT	GET /v1/geoip?weather=false HTTP/1.1 Host: dcinfos-cache.abtasty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:35 UTC	505	IN	HTTP/1.1 200 OK date: Wed, 10 Jul 2024 01:44:34 GMT content-type: application/json vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers access-control-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains cache-control: private, max-age=600 x-envoy-decorator-operation: uc-info.workload.svc.cluster.local:8080/* via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-07-10 01:44:35 UTC	436	IN	Data Raw: 31 61 38 0d 0a 7b 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 75 6e 74 72 79 5f 69 73 6f 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 73 74 61 74 65 5f 69 73 6f 5f 63 6f 64 65 22 3a 22 4e 59 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 69 74 79 5f 69 64 22 3a 35 31 32 38 35 38 31 2c 22 63 69 74 79 5f 63 6f 6e 66 69 64 65 6e 63 65 22 3a 2d 31 2c 22 70 6f 73 74 61 6c 5f 63 6f 64 65 22 3a 22 31 30 31 31 38 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 32 33 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 38 2c 22 61 63 63 75 72 61 63 79 5f 72 61 64 69 75 73 22 3a 32 30 2c 22 74 69 6d 65 5f 7a 6f 6e 65 22 3a 22 Data Ascii: 1a8{"country_name":"United States","country_iso_code":"US","state":"New York","state_iso_code":"NY","city":"New York","city_id":5128581,"city_confidence":-1,"postal_code":"10118","latitude":40.7123,"longitude":-74.0068,"accuracy_radius":20,"time_zone":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49841	34.36.178.232	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	361	OUT	GET /v1/ua-parser HTTP/1.1 Host: dcinfos-cache.abtasty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:35 UTC	517	IN	HTTP/1.1 200 OK date: Wed, 10 Jul 2024 01:44:34 GMT content-type: application/json vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers,User-Agent access-control-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains cache-control: public, max-age=86400 x-envoy-decorator-operation: uc-info.workload.svc.cluster.local:8080/* via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-07-10 01:44:35 UTC	97	IN	Data Raw: 35 36 0d 0a 7b 22 74 79 70 65 22 3a 22 44 65 73 6b 74 6f 70 22 2c 22 6f 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 22 62 72 6f 77 73 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 56{"type":"Desktop","os":{"name":"Windows"},"browser":{"name":"Chrome","version":"117"}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49844	104.18.32.137	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:34 UTC	605	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:35 UTC	370	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:35 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a0cde931cd64334-EWR
2024-07-10 01:44:35 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49838	18.239.50.78	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:35 UTC	1163	OUT	GET /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z HTTP/1.1 Host: partner.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
2024-07-10 01:44:35 UTC	1178	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 2864 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:35 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto cache-control: public, s-maxage=2764800 last-modified: Fri, 05 Jul 2024 08:08:03 GMT content-language: hr x-frame-options: SAMEORIGIN expires: Sun, 19 Nov 1978 05:00:00 GMT x-generator: Drupal 10 (https://www.drupal.org) content-security-policy: report-uri /report-csp-violation; upgrade-insecure-requests x-xss-protection: 1; mode=block x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /sites/default/files/styles/menu_teaser_desktop/public/2024-03/group_15_0.jpg.webp?h=46498437&itok=qG67wD9Z X-Host: partner.booking.com X-Varnish: 230558493 143396977 Via: 1.1 varnish (Varnish/6.6), 1.1 ecbb6ac82f8f6ff46460b69097d121ec.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YyHKC4FczIiM7OA56slkg8ZmTyQhySE8LQn6i2FntIfZoh2kB8nCtw== Age: 408991 Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:35 UTC	2864	IN	Data Raw: 52 49 46 46 28 0b 00 00 57 45 42 50 56 50 38 20 1c 0b 00 00 b0 33 00 9d 01 2a dc 00 8c 00 3e 19 0c 85 41 a1 04 a2 9b 2b 04 00 61 2c 6d dc 2e 67 7c 89 f1 df c8 0e fd 29 83 d5 ff 20 ff 6e bf cb fc bb d6 3f af fe 29 e1 90 39 7e a2 7b b5 f9 7f cc 7f ed dd a1 7c c0 3f 48 7f c8 ff 6e fd b0 f7 80 f5 0d e6 03 f5 97 fd 6f f9 cf 6a 0f 51 bf df 3f 5d 3d c0 3f a9 ff 59 eb 19 f4 00 fe 3f fd eb d2 f7 fe ef fb 8f 83 8f d9 ef fb 1f e5 bf f6 fc 8a 7e bb ff bf d6 6c 5e 5f df b9 6b e5 36 61 af b6 df 9f fc 83 fc 8e f8 df be 3e 00 5f 8d ff 3d ff 0d f9 51 c1 32 00 3e a9 7f 9a f5 60 98 77 7a 3f d7 7a 11 ff 84 fc c0 e6 3e a0 1f f3 4f ea 7f f1 7f be fe 40 7c 77 7f c1 fe 93 f1 db dc c7 cf 9f f2 bf c8 fc 09 ff 30 fe 9b fe 5b f3 6f fc 0f ff ff 11 3f b5 fe cb 5f ae c3 d3 0e ca 6b a7 Data Ascii: RIFF(WEBPVP8 3*>A+a,m.g\|) n?)9~{\|?HnojQ?]=?Y?~l^_k6a>_=Q2>`wz?z>O@\|w0[o?_k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49839	18.239.50.78	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:35 UTC	1180	OUT	GET /sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb HTTP/1.1 Host: partner.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
2024-07-10 01:44:35 UTC	1059	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 14826 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:35 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Mon, 20 Nov 2023 10:25:57 GMT etag: "39ea-60a92e9649471" cache-control: max-age=31536000 expires: Fri, 04 Jul 2025 09:30:00 GMT x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /sites/default/files/styles/menu_teaser_desktop/public/2023-10/travel_predictions_2024_1_1.jpg.webp?h=db5e2b43&itok=jW2sd4Zb X-Host: partner.booking.com X-Varnish: 225660808 125795653 Via: 1.1 varnish (Varnish/6.6), 1.1 2b13b2ad91208ea27acb039cde3e8f42.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: goiqN1ZDtAk9nSCbqh2myN6GkFs7g8xno6XyocZy5oK8mw8U2EHXQw== Age: 490474 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:35 UTC	14826	IN	Data Raw: 52 49 46 46 e2 39 00 00 57 45 42 50 56 50 38 20 d6 39 00 00 90 9a 00 9d 01 2a dc 00 8c 00 3e 19 08 83 41 21 05 ae 61 c7 04 00 61 28 02 ec cc 5f 1b df 51 fd 7f e9 9b e4 b2 b4 fe 03 fb 77 ea ff ef 5f b7 3f 28 7f d0 7d aa f5 fd d6 5f ef 7c dd f9 d3 fe 07 f7 2f c9 2f 99 1f ea 7f 67 fd cc fe 89 fd 86 f8 07 fd 5b ff 97 fe 27 dc cf fc bf d8 7f 77 bf de ff f0 7a 8c fe ab fe 73 f6 fb dd 7f fe 3f ed 27 bb 9f ec 7f ee bf 2a be 42 bf a5 ff 97 ff e3 d8 97 e8 27 fb c3 e9 cf fb 95 f0 d1 fd a7 fe 77 ee 0f c0 af ed 5f ff fe ce cd 2b 3d ee fd 4f f1 5f f7 43 d4 df c7 3e 59 fb 2f f7 3f d9 7f ed df fa ff d3 fc 2c 7f 4f fd 67 c3 2f 3f 7f bb ff 09 ea 27 f1 af b4 9f 82 fe dd fb 65 fd ef f7 8b e4 3f f6 df 6e 7e 8a fe 57 fa bf f9 7f ef ff b7 df db 3e 42 3f 19 fe 55 fd c3 fb 47 ed Data Ascii: RIFF9WEBPVP8 9>A!aa(_Qw_?(}_\|//g['wzs?'B'w_+=O_C>Y/?,Og/?'e?n~W>B?UG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49846	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:35 UTC	1512	OUT	GET /themes/custom/booking/images/1px.gif HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
2024-07-10 01:44:35 UTC	892	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:35 GMT last-modified: Thu, 04 Jul 2024 09:16:17 GMT etag: "66866861-2a" X-Url: /themes/custom/booking/images/1px.gif X-Host: partner.booking.com X-Varnish-Storage: File cache-control: max-age=2628000, public expires: 2628000 X-Varnish: 230785712 217881786 Via: 1.1 varnish (Varnish/6.6), 1.1 b47ba5841a54cf2d19fc521c78e94514.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: i56fEqcliW-pM1k5QDZYOpxvKehrLQePKTyR8jDGdwNO0FCgQCtshg== Age: 58483 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49845	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:35 UTC	1926	OUT	GET /sites/default/files/css/css_8QaRnHRXZpp4JmK9lZ0mC_x1wXnsBgkI1SW4VYyWADE.css?delta=0&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
2024-07-10 01:44:35 UTC	1475	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 27801 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:35 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:54:37 GMT etag: "6687c2dd-6c99" X-Varnish-Storage: Malloc X-Url: /sites/default/files/css/css_8QaRnHRXZpp4JmK9lZ0mC_x1wXnsBgkI1SW4VYyWADE.css?delta=0&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 225631679 208426357 Via: 1.1 varnish (Varnish/6.6), 1.1 b2ba97e9b6a83eff85433dad7f6e6288.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: izUDWZgXOtoK7czbeh3Lk5njcXAygFnzHI4DlmSEV_5wYzo9h24azw== Age: 73344 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:35 UTC	14909	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 47 4e 55 2d 47 50 4c 2d 32 2e 30 2d 6f 72 2d 6c 61 74 65 72 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 75 70 61 6c 2e 6f 72 67 2f 6c 69 63 65 6e 73 69 6e 67 2f 66 61 71 20 2a 2f 0a 2e 61 6a 61 78 2d 70 72 6f 67 72 65 73 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 35 70 78 20 32 70 78 20 35 70 78 3b 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 61 6a 61 78 2d 70 72 6f 67 72 65 73 73 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 7d 2e 61 6a 61 78 2d 70 72 6f 67 72 65 73 73 2d 74 68 72 6f 62 62 65 72 20 2e 74 68 72 6f 62 62 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 36 70 78 20 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 Data Ascii: /* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */.ajax-progress{display:inline-block;padding:1px 5px 2px 5px;}[dir="rtl"] .ajax-progress{float:right;}.ajax-progress-throbber .throbber{display:inline;padding:1px 6px 2px;background:t
2024-07-10 01:44:35 UTC	12892	IN	Data Raw: 73 74 61 74 65 2d 61 63 74 69 76 65 2c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 2c 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 2c 61 2e 75 69 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 2e 75 69 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 2e 75 69 2d 62 75 74 74 6f 6e 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 33 65 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 66 66 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 75 69 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 75 69 Data Ascii: state-active,.ui-widget-content .ui-state-active,.ui-widget-header .ui-state-active,a.ui-button:active,.ui-button:active,.ui-button.ui-state-active:hover{border:1px solid #003eff;background:#007fff;font-weight:normal;color:#ffffff;}.ui-icon-background,.ui

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49848	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:35 UTC	1926	OUT	GET /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
2024-07-10 01:44:35 UTC	1477	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 805884 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:35 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:44:14 GMT etag: "6687c06e-c4bfc" X-Varnish-Storage: Malloc X-Url: /sites/default/files/css/css_8xrXTAiqhK5R19N2cI7xoXYTYSLTDP3dX6YW9tM8lM0.css?delta=1&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 230785714 215982826 Via: 1.1 varnish (Varnish/6.6), 1.1 02cd8164e89a1598d410a9198582d47c.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4z0FLkjZXmQ6x0Dvs_ixqpHgzxQjZZLxjKxeqUtA4X4FATK4vlr_bg== Age: 68313 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:35 UTC	14907	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 47 50 4c 32 2b 20 6e 6f 20 55 52 4c 20 2a 2f 0a 3a 72 6f 6f 74 7b 2d 2d 62 75 69 5f 75 6e 69 74 5f 76 61 6c 75 65 3a 38 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 73 6d 61 6c 6c 65 72 3a 32 70 78 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 73 6d 61 6c 6c 3a 34 70 78 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 6d 65 64 69 75 6d 3a 38 70 78 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 3a 31 36 70 78 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 72 3a 32 34 70 78 3b 2d 2d 62 75 69 5f 75 6e 69 74 5f 6c 61 72 67 65 73 74 3a 33 32 70 78 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 64 61 72 6b 3a 23 61 33 30 30 30 30 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 3a 23 63 30 30 3b 2d Data Ascii: /* @license GPL2+ no URL */:root{--bui_unit_value:8;--bui_unit_smaller:2px;--bui_unit_small:4px;--bui_unit_medium:8px;--bui_unit_large:16px;--bui_unit_larger:24px;--bui_unit_largest:32px;--bui_color_destructive_dark:#a30000;--bui_color_destructive:#c00;-
2024-07-10 01:44:35 UTC	362	IN	Data Raw: 70 6f 72 74 61 6e 74 7d 2e 62 75 69 2d 75 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 62 75 69 2d 75 2d 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 2e 75 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 75 2d 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 62 75 69 2d 75 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 75 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 62 75 69 2d 75 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 73 6d 61 6c 6c 65 72 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 74 6c 20 Data Ascii: portant}.bui-u-clearfix:after,.bui-u-clearfix:before,.u-clearfix:after,.u-clearfix:before{content:" ";display:table;line-height:0}.bui-u-clearfix:after,.u-clearfix:after{clear:both}.bui-u-margin-start--2{margin-left:var(--bui_unit_smaller)!important}.rtl
2024-07-10 01:44:35 UTC	10536	IN	Data Raw: 5f 73 6d 61 6c 6c 65 72 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 75 69 2d 75 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 2d 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 73 6d 61 6c 6c 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 74 6c 20 2e 62 75 69 2d 75 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 2d 2d 34 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 62 75 69 2d 75 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 2d 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 75 6e 69 74 5f 73 6d 61 6c 6c 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 75 69 2d 75 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 2d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 Data Ascii: _smaller)!important}.bui-u-margin-start--4{margin-left:var(--bui_unit_small)!important}.rtl .bui-u-margin-start--4,[dir=rtl] .bui-u-margin-start--4{margin-left:0!important;margin-right:var(--bui_unit_small)!important}.bui-u-margin-start--8{margin-left:var
2024-07-10 01:44:35 UTC	16384	IN	Data Raw: 6e 6c 69 6e 65 2c 2e 62 75 69 2d 75 2d 76 69 73 69 62 6c 65 2d 70 72 69 6e 74 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2e 62 75 69 2d 75 2d 68 69 64 64 65 6e 2d 70 72 69 6e 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 75 69 2d 75 2d 76 69 73 69 62 6c 65 2d 70 72 69 6e 74 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 75 69 2d 75 2d 76 69 73 69 62 6c 65 2d 70 72 69 6e 74 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 75 69 2d 75 2d 76 69 73 69 62 6c 65 2d 70 72 69 6e 74 Data Ascii: nline,.bui-u-visible-print-inline-block{display:none!important}@media print{.bui-u-hidden-print{display:none!important}.bui-u-visible-print-block{display:block!important}.bui-u-visible-print-inline-block{display:inline-block!important}.bui-u-visible-print
2024-07-10 01:44:35 UTC	15596	IN	Data Raw: 6f 63 6b 7d 2e 62 75 69 2d 61 76 61 74 61 72 2d 62 6c 6f 63 6b 5f 5f 73 75 62 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 5f 31 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 5f 31 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 5f 6c 61 72 67 65 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 5f 31 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 44 4f 5f 4e 4f 54 5f 55 53 45 5f 62 75 69 Data Ascii: ock}.bui-avatar-block__subtitle{font-size:var(--DO_NOT_USE_bui_large_font_small_1_font-size);font-weight:var(--DO_NOT_USE_bui_large_font_small_1_font-weight);line-height:var(--DO_NOT_USE_bui_large_font_small_1_line-height);font-family:var(--DO_NOT_USE_bui
2024-07-10 01:44:35 UTC	12970	IN	Data Raw: 6c 65 3a 65 6d 70 74 79 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 61 75 74 6f 7d 2e 62 75 69 2d 62 75 62 62 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 62 75 69 2d 62 75 62 62 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 5f 5f 76 61 6c 75 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 68 61 6c 66 29 2a 2d 31 29 3b Data Ascii: le:empty{width:var(--bui_spacing_2x);height:var(--bui_spacing_2x);padding:0;min-width:auto}.bui-bubble-container{position:relative;display:inline-block;vertical-align:top}.bui-bubble-container__value{position:absolute;top:calc(var(--bui_spacing_half)*-1);
2024-07-10 01:44:35 UTC	16384	IN	Data Raw: 74 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 62 75 69 2d 62 75 74 74 6f 6e 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d 6e 65 67 61 74 69 76 65 2d 69 6e 73 65 74 2d 61 64 6a 75 73 74 6d 65 6e 74 2d 2d 73 74 61 72 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 2a 2d 31 29 7d 2e 62 75 69 2d 62 75 74 74 6f 6e 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d 6e 65 67 61 74 69 76 65 2d 69 6e 73 65 74 2d 61 64 6a 75 73 74 6d 65 6e 74 2d 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 2a 2d 31 29 7d 2e 72 74 6c 20 2e 62 75 69 2d 62 75 74 74 6f 6e 2e 62 75 69 2d 62 75 74 74 6f 6e 2d 2d Data Ascii: t,[dir=rtl] .bui-button.bui-button--negative-inset-adjustment--start{margin-left:0;margin-right:calc(var(--bui_spacing_2x)-1)}.bui-button.bui-button--negative-inset-adjustment--end{margin-right:calc(var(--bui_spacing_2x)-1)}.rtl .bui-button.bui-button--
2024-07-10 01:44:35 UTC	10463	IN	Data Raw: 30 30 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 62 75 69 5f 73 68 61 64 6f 77 5f 31 30 30 29 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 65 6c 65 76 61 74 69 6f 6e 5f 74 77 6f 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f Data Ascii: 00);box-shadow:var(--bui_shadow_100);padding:var(--bui_spacing_1x);border-radius:50%;cursor:default;-webkit-appearance:none;-moz-appearance:none;appearance:none;border:none;background:var(--bui_color_background_elevation_two);color:var(--bui_color_foregro
2024-07-10 01:44:35 UTC	16384	IN	Data Raw: 7d 2e 62 75 69 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6d 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 70 61 63 69 74 79 3a 2e 35 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 62 75 69 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6d 6f 72 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 33 70 78 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 66 6f 63 75 Data Ascii: }.bui-dropdown__more{display:block;-webkit-appearance:none;-moz-appearance:none;appearance:none;border:none;background:none;cursor:pointer;opacity:.5;padding:0}.bui-dropdown__more:focus{outline:none;-webkit-box-shadow:0 0 0 3px var(--bui_color_action_focu
2024-07-10 01:44:35 UTC	1514	IN	Data Raw: 2d 73 69 7a 65 3a 36 36 2e 36 36 36 36 37 25 3b 66 6c 65 78 2d 62 61 73 69 73 3a 36 36 2e 36 36 36 36 37 25 3b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 37 25 7d 2e 62 75 69 2d 67 72 69 64 5f 5f 63 6f 6c 75 6d 6e 2d 33 5c 2f 34 5c 40 6c 61 72 67 65 2c 2e 62 75 69 2d 67 72 69 64 5f 5f 63 6f 6c 75 6d 6e 2d 39 5c 40 6c 61 72 67 65 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 37 35 25 3b 66 6c 65 78 2d 62 61 73 69 73 3a 37 35 25 3b 77 69 64 74 68 3a 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 62 75 69 2d 67 72 69 64 5f 5f 63 6f 6c 75 6d 6e 2d 31 30 5c 2f 31 32 5c 40 6c 61 72 67 65 2c 2e 62 75 69 2d 67 72 69 64 5f 5f 63 6f 6c 75 6d 6e 2d 31 30 5c 40 6c 61 72 67 Data Ascii: -size:66.66667%;flex-basis:66.66667%;width:66.66667%;max-width:66.66667%}.bui-grid__column-3\/4\@large,.bui-grid__column-9\@large{-ms-flex-preferred-size:75%;flex-basis:75%;width:75%;max-width:75%}.bui-grid__column-10\/12\@large,.bui-grid__column-10\@larg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49847	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:35 UTC	1926	OUT	GET /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A32+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1; _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}
2024-07-10 01:44:35 UTC	1473	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1284 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:35 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:44:15 GMT etag: "6687c06f-504" X-Varnish-Storage: Malloc X-Url: /sites/default/files/css/css_UvXyKwn0NQjGoY4ItVYtivOqsPRcB28Y3ICRoR_4aTg.css?delta=2&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 225631677 216047501 Via: 1.1 varnish (Varnish/6.6), 1.1 02cd8164e89a1598d410a9198582d47c.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6gQWt204tt2Bnu3tXv0wuYOunSpIIVSMrY4PeY_KYIRtlQ9e_GfHog== Age: 68302 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:35 UTC	1284	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 47 4e 55 2d 47 50 4c 2d 32 2e 30 2d 6f 72 2d 6c 61 74 65 72 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 75 70 61 6c 2e 6f 72 67 2f 6c 69 63 65 6e 73 69 6e 67 2f 66 61 71 20 2a 2f 0a 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 54 61 68 6f 6d 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 35 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 Data Ascii: /* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */body{background:none;color:#000000;font-family:Verdana,Tahoma,sans-serif;font-size:14pt;line-height:1.45;margin:0 !important;padding:0 !important;width:100% !important;}h1,h2,h3,h4,h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49849	172.64.155.119	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:35 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:35 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:35 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a0cde96e8cf0f45-EWR
2024-07-10 01:44:35 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49852	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	599	OUT	GET /static/css/main_cft.iq_ltr/7e335c31008a447192abd83491a4ee057583a557.css HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	797	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 515653 Connection: close Server: nginx Date: Wed, 26 Jun 2024 11:01:12 GMT Last-Modified: Wed, 26 Jun 2024 05:30:39 GMT ETag: "667ba77f-7de45" Expires: Fri, 26 Jul 2024 11:01:12 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 80b00aa2dcc58ca61b2465a37c89fc92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 1yJD6MlERuU3P2ZYoEVd2prPUxC2rTUMMCzh_nAV2vI05d-pBjBb0A== Age: 1176204
2024-07-10 01:44:36 UTC	15587	IN	Data Raw: 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 75 69 2d 74 68 65 6d 65 3d 22 74 72 61 76 65 6c 6c 65 72 5f 65 78 2d 6c 69 67 68 74 22 5d 7b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 3a 23 38 36 38 36 38 36 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 61 6c 74 3a 23 65 37 65 37 65 37 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 62 6f 72 64 65 72 3a 23 30 30 36 63 65 34 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 64 69 73 61 62 6c 65 64 3a 23 64 39 64 39 64 39 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 62 6f 72 64 65 72 3a 23 64 34 31 31 31 65 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 62 6f 72 64 65 72 3a 23 30 30 38 32 33 34 3b 2d 2d 62 75 Data Ascii: :root,[data-bui-theme="traveller_ex-light"]{--bui_color_border:#868686;--bui_color_border_alt:#e7e7e7;--bui_color_action_border:#006ce4;--bui_color_border_disabled:#d9d9d9;--bui_color_destructive_border:#d4111e;--bui_color_constructive_border:#008234;--bu
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 65 64 5f 32 5f 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 2d 2d 62 75 69 5f 66 6f 6e 74 5f 65 6d 70 68 61 73 69 7a 65 64 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 2d 2d 62 75 69 5f 66 6f 6e 74 5f 65 6d 70 68 61 73 69 7a 65 64 5f 32 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 75 69 2d 74 68 65 6d 65 3d 22 74 72 61 76 65 6c 6c 65 72 5f 65 78 2d 6c 69 67 68 74 22 5d 2c 5b 64 61 74 61 2d 62 75 69 2d 74 Data Ascii: ed_2_font-weight:500;--bui_font_emphasized_2_line-height:20px;--bui_font_emphasized_2_font-family:BlinkMacSystemFont,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif}}@media(min-width:1024px){:root,[data-bui-theme="traveller_ex-light"],[data-bui-t
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 72 74 6c 5d 20 2e 62 75 69 2d 75 2d 74 65 78 74 2d 6c 65 66 74 5c 40 6c 61 72 67 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 62 75 69 2d 75 2d 74 65 78 74 2d 72 69 67 68 74 5c 40 6c 61 72 67 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 75 69 2d 75 2d 74 65 78 74 2d 63 65 6e 74 65 72 5c 40 6c 61 72 67 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 38 30 70 78 29 7b 2e 62 75 69 2d 75 2d 74 65 78 74 2d 6c 65 66 74 5c 40 68 75 67 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 75 69 2d 75 2d 74 65 Data Ascii: rtl] .bui-u-text-left\@large{text-align:right!important}[dir=rtl] .bui-u-text-right\@large{text-align:left!important}.bui-u-text-center\@large{text-align:center!important}}@media(min-width:1280px){.bui-u-text-left\@huge{text-align:left!important}.bui-u-te
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 72 6f 6c 3a 64 69 73 61 62 6c 65 64 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 64 69 73 61 62 6c 65 64 29 7d 2e 62 75 69 2d 66 6f 72 6d 5f 5f 63 6f 6e 74 72 6f 6c 3a 64 69 73 61 62 6c 65 64 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 64 69 73 61 62 6c 65 64 29 7d 2e 62 75 69 2d 66 6f 72 6d 5f 5f 67 72 6f 75 70 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 7d 2e 62 75 69 2d 66 6f 72 6d 5f 5f 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 76 61 Data Ascii: rol:disabled:-ms-input-placeholder{color:var(--bui_color_foreground_disabled)}.bui-form__control:disabled::placeholder{color:var(--bui_color_foreground_disabled)}.bui-form__group{border:0;padding:0;margin:0}.bui-form__label{display:block;padding-bottom:va
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 72 61 6e 64 5f 70 72 69 6d 61 72 79 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 62 72 61 6e 64 5f 70 72 69 6d 61 72 79 5f 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 62 75 69 2d 62 61 64 67 65 2d 2d 6f 75 74 6c 69 6e 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 65 6c 65 76 61 74 69 6f 6e 5f 6f 6e 65 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 29 7d 2e 62 75 69 Data Ascii: ;border-color:var(--bui_color_brand_primary_background);color:var(--bui_color_on_brand_primary_background)}.bui-badge--outline{border-color:var(--bui_color_border);background:var(--bui_color_background_elevation_one);color:var(--bui_color_foreground)}.bui
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 6e 5f 5f 69 63 6f 6e 3a 6f 6e 6c 79 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 3a 30 20 2d 77 65 62 6b 69 74 2d 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 2a 2d 31 29 3b 6d 61 72 67 69 6e 3a 30 20 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 33 78 29 2a 2d 31 29 7d 2e 62 75 69 2d 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 2d 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 62 75 69 2d 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 2d 2d 65 6e 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 32 78 29 3b 6d 61 72 67 69 6e 2d 6c Data Ascii: n__icon:only-child{margin:0 -webkit-calc(var(--bui_spacing_3x)-1);margin:0 calc(var(--bui_spacing_3x)-1)}.bui-button__icon--end{margin-left:var(--bui_spacing_2x);margin-right:0}[dir=rtl] .bui-button__icon--end{margin-right:var(--bui_spacing_2x);margin-l
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 78 29 2a 39 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 39 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 2e 62 75 69 2d 63 61 6c 65 6e 64 61 72 5f 5f 64 61 74 65 3a 68 6f 76 65 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 68 69 67 68 6c 69 67 68 74 65 64 5f 61 6c 74 29 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 62 75 69 2d 63 61 Data Ascii: x)9);line-height:calc(var(--bui_spacing_1x)9);text-align:center;padding:0;border-spacing:0}.bui-calendar__date:hover:after{content:"";position:absolute;top:0;left:0;bottom:0;right:0;background:var(--bui_color_highlighted_alt);pointer-events:none}.bui-ca
2024-07-10 01:44:36 UTC	4731	IN	Data Raw: 3a 73 74 72 65 74 63 68 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 5f 33 30 30 29 20 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 5f 33 30 30 29 20 30 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 65 6c 65 76 61 74 69 6f 6e 5f 6f 6e 65 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 76 61 72 28 2d 2d 62 75 69 5f 74 69 6d 69 6e 67 2d 64 65 6c 69 62 65 72 61 74 65 29 20 76 61 72 28 2d 2d 62 75 69 5f 65 61 73 69 6e 67 Data Ascii: :stretch;align-items:stretch;position:fixed;border-radius:var(--bui_border_radius_300) var(--bui_border_radius_300) 0 0;background:var(--bui_color_background_elevation_one);-webkit-transition:-webkit-transform var(--bui_timing-deliberate) var(--bui_easing
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 30 7d 2e 62 75 69 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 65 6c 65 76 61 74 69 6f 6e 5f 74 77 6f 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 5f 32 30 30 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 69 6e 2d 77 69 64 74 68 3a 2d 77 65 62 6b 69 74 2d 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 35 30 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 2a 35 30 29 3b 7a 2d Data Ascii: 0}.bui-dropdown-menu{padding:var(--bui_spacing_4x);background:var(--bui_color_background_elevation_two);border-radius:var(--bui_border_radius_200);overflow:hidden;min-width:-webkit-calc(var(--bui_spacing_1x)50);min-width:calc(var(--bui_spacing_1x)50);z-
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 3b 66 6c 65 78 2d 62 61 73 69 73 3a 34 31 2e 36 36 36 36 37 25 3b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 7d 2e 62 75 69 2d 67 72 69 64 5f 5f 63 6f 6c 75 6d 6e 2d 31 5c 2f 32 5c 40 6c 61 72 67 65 2c 2e 62 75 69 2d 67 72 69 64 5f 5f 63 6f 6c 75 6d 6e 2d 36 5c 40 6c 61 72 67 65 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 62 61 73 69 73 3a 35 30 25 3b 66 6c 65 78 2d 62 61 73 69 73 3a 35 30 25 3b 77 69 64 74 68 3a 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 62 75 69 2d 67 72 69 64 5f 5f 63 6f 6c 75 6d 6e 2d 37 5c 2f 31 32 5c 40 6c 61 72 67 65 2c 2e 62 75 69 2d 67 72 69 64 5f 5f 63 6f 6c 75 6d 6e 2d 37 Data Ascii: ;flex-basis:41.66667%;width:41.66667%;max-width:41.66667%}.bui-grid__column-1\/2\@large,.bui-grid__column-6\@large{-ms-flex-preferred-size:50%;-webkit-flex-basis:50%;flex-basis:50%;width:50%;max-width:50%}.bui-grid__column-7\/12\@large,.bui-grid__column-7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49859	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	621	OUT	GET /static/js/core-deps-inlinedet_cft/9fc72199a3b8ae2b967821deb6fa10d92ce308fc.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	809	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 50379 Connection: close Server: nginx Date: Tue, 11 Jun 2024 07:27:17 GMT Last-Modified: Tue, 09 Apr 2024 08:42:28 GMT ETag: "6614ff74-c4cb" Expires: Thu, 11 Jul 2024 07:27:17 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b8f260e966cae470dbec70a43fd5e0ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: mlcLYQg8AMVRdnDSEohjR-2kw8Yvkoj2DgcVLd04pGx6zqpGdmdCXg== Age: 2485039
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 62 6f 6f 6b 69 6e 67 2e 65 6e 76 2e 65 6e 61 62 6c 65 5f 73 63 72 69 70 74 73 5f 74 72 61 63 6b 69 6e 67 26 26 28 62 6f 6f 6b 69 6e 67 2e 65 6e 76 2e 73 63 72 69 70 74 73 5f 74 72 61 63 6b 69 6e 67 2e 63 6f 72 65 5f 64 65 70 73 3d 7b 6c 6f 61 64 65 64 3a 21 30 2c 72 75 6e 3a 21 31 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 2f 2a 2a 0a 20 20 20 20 20 2a 20 40 6c 69 63 65 6e 73 65 20 61 6c 6d 6f 6e 64 20 30 2e 33 2e 30 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 31 2d 32 30 31 34 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 20 20 20 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 Data Ascii: booking.env.enable_scripts_tracking&&(booking.env.scripts_tracking.core_deps={loaded:!0,run:!1}),function(){/** * @license almond 0.3.0 Copyright (c) 2011-2014, The Dojo Foundation All Rights Reserved. * Available via the MIT or new BSD license
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7d 3b 73 2e 6a 73 74 6d 70 6c 2e 73 65 74 75 70 28 7b 67 65 74 5f 73 74 61 74 69 63 5f 68 6f 73 74 6e 61 6d 65 3a 65 2c 67 65 74 5f 64 61 74 65 3a 74 2c 67 65 74 5f 68 65 6c 70 65 72 3a 6e 2c 66 6e 3a 7b 65 73 63 61 70 65 5f 68 74 6d 6c 3a 6f 2c 65 73 63 61 70 65 5f 65 6e 74 69 74 69 65 73 3a 61 2c 61 72 72 61 79 5f 6c 65 6e 67 74 68 3a 69 2c 69 6e 64 65 78 3a 72 2c 69 63 6f 6e 3a 6c 2c 69 73 5f 72 6f 6f 6d 73 5f 74 61 62 6c 65 5f 73 70 6c 69 74 74 65 72 3a 66 2c 66 6c 6f 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 Data Ascii: ject Array]"===Object.prototype.toString.call(e);return Array.isArray(e)};s.jstmpl.setup({get_static_hostname:e,get_date:t,get_helper:n,fn:{escape_html:o,escape_entities:a,array_length:i,index:r,icon:l,is_rooms_table_splitter:f,floor:function(e){return Ma
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 3d 5b 6f 28 65 29 2c 74 2c 6e 7c 7c 74 68 69 73 2c 72 5d 29 26 26 75 2e 70 75 73 68 28 69 29 2c 21 63 26 26 75 2e 6c 65 6e 67 74 68 26 26 28 73 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2c 66 29 2c 73 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 29 2c 63 3d 21 30 29 7d 7d 29 2c 42 2e 64 65 66 69 6e 65 28 22 77 68 65 6e 2f 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 28 22 70 72 6f 6d 69 73 65 22 29 2c 69 3d 65 28 22 6a 71 75 65 72 79 22 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 7b 6e 61 6d 65 3a 22 63 6c 69 63 6b 22 2c 68 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 74 29 2e 6f 6e 28 22 63 6c 69 Data Ascii: =[o(e),t,n\|\|this,r])&&u.push(i),!c&&u.length&&(s.on("scroll",f),s.on("resize",f),c=!0)}}),B.define("when/click",function(e,t,n){var r=e("promise"),i=e("jquery");n.exports={name:"click",handler:function(t){return new r(function(e){i(function(){i(t).on("cli
2024-07-10 01:44:36 UTC	1227	IN	Data Raw: 6f 64 65 29 2c 69 74 65 6d 5f 63 61 74 65 67 6f 72 79 33 3a 42 2e 65 6e 76 2e 62 5f 68 6f 74 65 6c 5f 63 69 74 79 7c 7c 76 6f 69 64 20 30 2c 69 74 65 6d 5f 63 61 74 65 67 6f 72 79 34 3a 42 2e 65 6e 76 2e 68 6f 74 65 6c 5f 75 66 69 2c 69 74 65 6d 5f 63 61 74 65 67 6f 72 79 35 3a 22 48 6f 74 65 6c 22 2c 69 74 65 6d 5f 6c 69 73 74 5f 6e 61 6d 65 3a 42 2e 65 6e 76 2e 62 5f 64 65 73 74 69 6e 61 74 69 6f 6e 5f 66 75 6c 6c 6e 61 6d 65 2c 69 74 65 6d 5f 76 61 72 69 61 6e 74 3a 65 3f 65 2e 62 5f 68 6f 74 65 6c 5f 63 6c 61 73 73 3a 76 6f 69 64 20 30 2c 70 72 69 63 65 3a 42 2e 65 6e 76 2e 74 6f 74 61 6c 70 72 69 63 65 5f 65 75 72 6f 2c 71 75 61 6e 74 69 74 79 3a 31 7d 5d 7d 3b 6d 2e 74 72 61 63 6b 45 76 65 6e 74 47 41 28 72 2c 74 29 7d 2c 70 72 6f 63 65 73 73 43 61 Data Ascii: ode),item_category3:B.env.b_hotel_city\|\|void 0,item_category4:B.env.hotel_ufi,item_category5:"Hotel",item_list_name:B.env.b_destination_fullname,item_variant:e?e.b_hotel_class:void 0,price:B.env.totalprice_euro,quantity:1}]};m.trackEventGA(r,t)},processCa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49850	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	604	OUT	GET /static/css/main_exps_cft.iq_ltr/5e62043f93e28ff1fa2317e78b13f494ca8b061b.css HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	797	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 136989 Connection: close Server: nginx Date: Wed, 26 Jun 2024 11:01:12 GMT Last-Modified: Wed, 26 Jun 2024 05:30:39 GMT ETag: "667ba77f-2171d" Expires: Fri, 26 Jul 2024 11:01:12 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b8f260e966cae470dbec70a43fd5e0ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: -ovylXGaDkamSyjE5oWeYN2c2OfG_IzGAwVfIr18qtz1aDOpmh0_zw== Age: 1176204
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 2e 62 62 74 6f 6f 6c 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 36 65 36 65 36 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 61 66 63 66 66 7d 2e 62 62 74 6f 6f 6c 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 2d 74 6f 70 2d 6d 65 6e 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 77 68 69 74 65 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 62 66 33 66 66 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b Data Ascii: .bbtool-notification{clear:both;position:relative;background-color:#e6e6e6;border-bottom:1px solid #fafcff}.bbtool-notification--top-menu{background-color:var(--bui_color_white);border-bottom:1px solid #ebf3ff;-webkit-box-shadow:0 1px 2px rgba(0,0,0,0.1);
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 39 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 32 2d 77 72 61 70 70 65 72 2d 73 2d 72 61 6e 67 65 2d 61 72 72 6f 77 73 2e 63 32 2d 77 72 61 70 70 65 72 2d 73 2d 63 68 65 63 6b 69 6e 20 2e 63 32 2d 64 61 79 2e 63 32 2d 64 61 79 2d 73 2d 69 6e 2d 72 61 6e 67 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 32 2d 77 72 61 70 70 65 72 2d 73 2d 72 61 6e 67 65 2d 61 72 72 6f 77 73 2e 63 32 2d 77 72 61 70 70 65 72 2d 73 2d 63 68 65 63 6b 6f 75 74 20 2e 63 32 2d 64 61 79 2d 73 2d 73 65 6c 65 63 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 37 32 70 78 21 69 6d 70 6f 72 74 61 6e Data Ascii: ackground-position:0 -96px!important}.c2-wrapper-s-range-arrows.c2-wrapper-s-checkin .c2-day.c2-day-s-in-range:hover{background-position:0 0!important}.c2-wrapper-s-range-arrows.c2-wrapper-s-checkout .c2-day-s-selected{background-position:0 -72px!importan
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 34 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 62 2d 62 75 73 69 6e 65 73 73 5f 5f 74 6f 6f 6c 74 69 70 3a 68 6f 76 65 72 20 2e 62 2d 62 75 73 69 6e 65 73 73 2d 77 2d 2d 73 65 63 74 69 6f 6e 7b 74 6f 70 3a 30 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 62 2d 62 75 73 69 6e 65 73 73 2d 77 2d 2d 73 65 63 74 69 6f 6e 5f 5f 6c 61 73 74 2c 2e 62 2d 62 75 73 69 6e 65 73 73 2d 77 2d 2d 73 65 63 74 69 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 62 2d 62 75 73 69 6e 65 73 73 2d 77 2d 2d 73 65 63 74 69 6f 6e 2d 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 21 69 6d 70 6f 72 74 61 6e 74 3b 63 Data Ascii: 4);font-weight:normal}.b-business__tooltip:hover .b-business-w--section{top:0;opacity:1}.b-business-w--section__last,.b-business-w--section:last-child{border-bottom:0}.b-business-w--section--header{display:block;font-size:13px;font-weight:bold!important;c
2024-07-10 01:44:36 UTC	14808	IN	Data Raw: 65 64 7b 63 6f 6c 6f 72 3a 23 30 30 37 31 63 32 7d 2e 73 62 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5f 5f 69 74 65 6d 2d 2d 63 6a 6b 20 2e 73 62 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5f 5f 69 74 65 6d 5f 5f 68 69 67 68 6c 69 67 68 74 2c 2e 73 62 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5f 5f 69 74 65 6d 2d 2d 63 6a 6b 20 2e 73 65 61 72 63 68 5f 68 6c 5f 6e 61 6d 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 63 6f 6c 6f 72 3a 23 61 33 30 30 30 30 7d 2e 73 62 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5f 5f 69 74 65 6d 5f 5f 65 78 74 72 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 63 6f 6c 6f 72 3a 23 38 31 39 62 62 66 7d Data Ascii: ed{color:#0071c2}.sb-autocomplete__item--cjk .sb-autocomplete__item__highlight,.sb-autocomplete__item--cjk .search_hl_name{font-weight:normal;color:#a30000}.sb-autocomplete__item__extra{display:inline-block;margin-left:7px;font-style:italic;color:#819bbf}
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 3a 64 69 73 61 62 6c 65 64 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 73 62 2d 73 65 61 72 63 68 62 6f 78 5f 5f 62 75 74 74 6f 6e 2e 2d 66 75 6c 6c 2d 77 69 64 74 68 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 2d 62 75 74 74 6f 6e 2e 73 62 2d 73 65 61 72 63 68 62 6f 78 5f 5f 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 2d 6d 69 6e 69 66 69 65 64 29 2c 2e 62 2d 62 75 74 74 6f 6e 2e 73 62 2d 73 65 61 72 63 68 62 6f 78 5f 5f 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 2d 6d 69 6e 69 66 69 65 64 29 20 2e 62 2d 62 75 74 74 6f 6e 5f 5f 74 65 78 74 2c 2e 62 2d 62 75 74 74 6f 6e 2e 73 62 2d 73 65 61 72 63 68 62 6f 78 5f 5f 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 2d 6d 69 6e 69 66 69 65 64 29 3a 68 6f 76 65 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 34 70 78 21 69 Data Ascii: :disabled{cursor:not-allowed}.sb-searchbox__button.-full-width{width:100%}.b-button.sb-searchbox__button:not(.-minified),.b-button.sb-searchbox__button:not(.-minified) .b-button__text,.b-button.sb-searchbox__button:not(.-minified):hover{line-height:34px!i
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 2e 73 62 2d 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 20 73 65 6c 65 63 74 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 6e 6f 6e 65 7d 7d 40 73 75 70 70 6f 72 74 73 28 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 29 20 61 6e 64 20 28 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 29 7b 2e 73 62 2d 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 62 2d 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 20 73 65 6c 65 63 74 Data Ascii: rder:1px solid transparent;-webkit-appearance:none;-moz-appearance:none;appearance:none}.sb-custom-select select:focus{border-color:none}}@supports(-moz-appearance:none) and (mask-type:alpha){.sb-custom-select::after{display:block}.sb-custom-select select
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 20 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 36 78 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 69 62 6c 65 2d 64 61 74 65 73 2d 6d 6f 6e 74 68 20 2e 62 75 69 2d 69 6e 70 75 74 2d 63 68 65 63 6b 62 75 74 74 6f 6e 5f 5f 69 74 65 6d 3e 2a 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 6c 65 78 69 62 6c 65 2d 64 61 74 65 73 2d 6d 6f 6e 74 68 20 2e 62 75 69 2d 69 Data Ascii: flex-direction:column;flex-direction:column;padding:var(--bui_spacing_4x) var(--bui_spacing_6x);-webkit-box-shadow:none!important;box-shadow:none!important}.flexible-dates-month .bui-input-checkbutton__item>*{text-align:center}.flexible-dates-month .bui-i
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 61 64 65 72 5f 62 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 77 68 69 74 65 29 7d 2e 64 65 61 6c 73 70 61 67 65 2e 62 62 74 5f 6e 65 77 5f 68 65 61 64 65 72 3a 62 65 66 6f 72 65 7b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 64 65 61 6c 73 70 61 67 65 2e 62 62 74 5f 6e 65 77 5f 68 65 61 64 65 72 20 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6f 6f 6b 69 6e 67 2d 68 65 61 64 65 72 2d 62 61 72 2d 2d 61 6c 69 67 6e 6d 65 6e 74 2e 62 62 74 5f 6e 65 77 5f 68 65 61 64 65 72 20 23 62 6f 64 79 63 6f 6e 73 74 72 61 69 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 62 62 74 5f 6e 65 77 5f 68 65 61 64 Data Ascii: ader_bg{background:var(--bui_color_white)}.dealspage.bbt_new_header:before{z-index:2}.dealspage.bbt_new_header .page-content{background:none!important}.booking-header-bar--alignment.bbt_new_header #bodyconstraint{background-color:transparent}.bbt_new_head
2024-07-10 01:44:36 UTC	7493	IN	Data Raw: 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 6d 61 72 67 69 6e 3a 30 7d 2e 70 72 6f 70 65 72 74 79 5f 68 69 67 68 6c 69 67 68 74 73 5f 63 61 72 5f 72 65 6e 74 61 6c 5f 5f 74 6f 6f 6c 74 69 70 2c 2e 73 72 2d 69 74 65 6d 2d 62 61 6e 6e 65 72 5f 5f 74 6f 6f 6c 74 69 70 7b 63 6f 6c 6f 72 3a 23 39 37 65 35 39 63 3b 6d 61 72 67 69 6e 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e Data Ascii: :var(--bui_font_body_2_font-weight);line-height:var(--bui_font_body_2_line-height);font-family:var(--bui_font_body_2_font-family);margin:0}.property_highlights_car_rental__tooltip,.sr-item-banner__tooltip{color:#97e59c;margin:0;margin-top:16px;padding:0}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49853	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	606	OUT	GET /static/css/gprof_icons_cft.iq_ltr/e4765aae192d514fe8551e34b170c5bcdba4f06c.css HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	797	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 168346 Connection: close Server: nginx Date: Tue, 11 Jun 2024 07:27:12 GMT Last-Modified: Wed, 28 Feb 2024 12:32:02 GMT ETag: "65df27c2-2919a" Expires: Thu, 11 Jul 2024 07:27:12 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: _T6NtMOfojaumGVMFRs8Lgi2dPGCLf84kOAZMv5O0AovtKhgm45nsQ== Age: 2485044
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 2e 62 2d 62 6f 6f 6b 65 72 2d 74 79 70 65 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 66 6f 72 6d 20 64 69 76 20 6c 61 62 65 6c 2e 62 2d 62 6f 6f 6b 65 72 2d 74 79 70 65 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 6c 61 62 65 6c 2d 62 75 73 69 6e 65 73 73 2d 74 72 69 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 70 78 20 33 70 78 20 33 70 78 20 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: .b-booker-type__container{display:inline-block}form div label.b-booker-type{padding:0;font-weight:500}.label-business-trip{display:inline-block;margin-left:0;margin-right:5px;border-radius:20px 3px 3px 20px;padding:0 8px;line-height:24px;background-color:
2024-07-10 01:44:36 UTC	12398	IN	Data Raw: 6c 69 63 2d 73 77 69 74 63 68 2d 74 6f 6f 6c 74 69 70 2d 70 61 72 61 67 72 61 70 68 2e 70 61 72 61 67 72 61 70 68 2d 70 75 62 6c 69 63 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 72 6f 66 69 6c 65 2d 61 72 65 61 5f 5f 73 69 64 65 62 61 72 2d 70 75 62 6c 69 63 2d 73 77 69 74 63 68 2d 74 6f 6f 6c 74 69 70 2e 69 73 2d 70 75 62 6c 69 63 20 2e 70 72 6f 66 69 6c 65 2d 61 72 65 61 5f 5f 73 69 64 65 62 61 72 2d 70 75 62 6c 69 63 2d 73 77 69 74 63 68 2d 74 6f 6f 6c 74 69 70 2d 70 61 72 61 67 72 61 70 68 2e 70 61 72 61 67 72 61 70 68 2d 70 72 69 76 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 75 62 6c 69 63 2d 74 69 6d 65 6c 69 6e 65 2d 74 6f 70 5f 5f 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 64 64 3b 6d 61 72 67 69 6e 3a 30 20 Data Ascii: lic-switch-tooltip-paragraph.paragraph-public{display:none}.profile-area__sidebar-public-switch-tooltip.is-public .profile-area__sidebar-public-switch-tooltip-paragraph.paragraph-private{display:none}.public-timeline-top__wrapper{background:#ddd;margin:0
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 2e 73 65 61 72 63 68 5f 69 74 65 6d 5f 64 61 74 61 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 75 73 65 72 5f 66 6f 72 6d 20 2e 70 6f 70 6f 76 65 72 5f 63 6f 6e 74 65 6e 74 2e 65 6d 70 74 79 5f 6c 69 73 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 70 78 7d 23 75 73 65 72 5f 66 6f 72 6d 20 2e 70 6f 70 6f 76 65 72 5f 63 6f 6e 74 65 6e 74 2e 65 6d 70 74 79 5f 6c 69 73 74 20 2e 75 73 65 72 5f 73 65 61 72 63 68 65 73 5f 63 6f 6e 74 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 23 75 73 65 72 5f 66 6f 72 6d 20 2e 70 6f 70 6f 76 65 72 5f 63 6f 6e 74 65 6e 74 2e 65 6d 70 74 79 5f 6c 69 73 74 20 2e 70 6f 70 6f 76 65 72 5f 66 6f 6f 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 75 73 65 72 5f 66 6f 72 6d 20 Data Ascii: .search_item_data{width:100%}#user_form .popover_content.empty_list{min-height:50px}#user_form .popover_content.empty_list .user_searches_content{min-height:50px;overflow:auto}#user_form .popover_content.empty_list .popover_footer{display:none}#user_form
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 72 7b 72 69 67 68 74 3a 33 32 30 70 78 7d 62 6f 64 79 2e 67 65 6e 69 75 73 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 5f 70 72 6f 66 69 6c 65 2e 6c 69 73 74 6d 61 70 20 23 67 65 6e 69 75 73 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 62 6f 64 79 2e 67 65 6e 69 75 73 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 5f 70 72 6f 66 69 6c 65 2e 67 65 6e 69 75 73 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 2e 6c 69 73 74 6d 61 70 20 69 6d 67 23 6c 6f 67 6f 5f 6e 6f 5f 67 6c 6f 62 65 5f 6e 65 77 5f 6c 6f 67 6f 7b 6c 65 66 74 3a 37 70 78 7d 23 75 73 65 72 5f 66 6f 72 6d 20 2e 75 73 65 72 5f 63 65 6e 74 65 72 5f 6e 61 76 20 6c 69 20 61 2e 70 6f 70 6f 76 65 72 5f 74 72 69 67 67 65 72 2e 67 65 6e 69 75 73 5f 75 73 65 72 5f 62 6f 78 5f 75 70 64 61 74 65 7b 70 Data Ascii: r{right:320px}body.genius_header_logo_profile.listmap #genius_header_logo{display:none}body.genius_header_logo_profile.genius_header_logo.listmap img#logo_no_globe_new_logo{left:7px}#user_form .user_center_nav li a.popover_trigger.genius_user_box_update{p
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6c 61 63 6b 29 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 62 6f 6f 74 73 74 72 61 70 70 65 64 2d 6c 61 62 65 6c 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 62 6f 6f 74 73 74 72 61 70 70 65 64 2d 6c 61 62 65 6c 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 2e 62 6f 6f 74 73 74 72 61 70 70 65 64 2d 6c 61 62 65 6c 3a 68 6f 76 65 72 2c 61 2e 62 6f 6f 74 73 74 72 61 70 70 65 64 2d 6c 61 62 65 6c 3a 66 6f 63 75 73 7b Data Ascii: -block;padding:2px 4px;font-size:13;line-height:1.5;color:var(--bui_color_black);vertical-align:baseline;white-space:nowrap}.bootstrapped-label{border-radius:3px}.bootstrapped-label:empty{display:none}a.bootstrapped-label:hover,a.bootstrapped-label:focus{
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 70 78 20 73 6f 6c 69 64 20 23 62 64 62 64 62 64 7d 2e 69 61 6d 5f 6c 6f 67 69 6e 5f 69 6d 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 61 6d 5f 6c 6f 67 69 6e 5f 66 6f 72 6d 20 2e 75 73 65 72 5f 61 76 61 74 61 72 3e 2e 75 73 65 72 2d 61 76 61 74 61 72 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 61 6d 5f 6c 6f 67 69 6e 5f 61 75 74 68 5f 6c 6f 77 5f 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 Data Ascii: px solid #bdbdbd}.iam_login_img{position:relative;top:-1px;padding-right:12px;vertical-align:middle;display:inline!important;margin:0!important}.iam_login_form .user_avatar>.user-avatar{float:none!important}.iam_login_auth_low_header{display:-webkit-box;d
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 64 6f 77 3a 6e 6f 6e 65 7d 2e 77 69 73 68 6c 69 73 74 2d 61 63 74 69 6f 6e 73 2d 62 6c 6f 63 6b 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 61 66 63 66 66 7d 2e 77 69 73 68 6c 69 73 74 2d 61 63 74 69 6f 6e 73 2d 62 6c 6f 63 6b 20 2e 63 72 65 61 74 65 5f 77 6c 2c 2e 63 6c 6f 73 65 5f 77 6c 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 77 68 69 74 65 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 33 70 78 20 23 61 61 61 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 33 70 78 20 23 61 61 61 3b 70 61 64 64 69 6e 67 3a 37 70 78 20 31 35 70 78 7d Data Ascii: dow:none}.wishlist-actions-block{padding:10px;background:#fafcff}.wishlist-actions-block .create_wl,.close_wl{border-radius:4px;border:2px solid var(--bui_color_white);font-size:1em;-webkit-box-shadow:0 0 3px #aaa;box-shadow:0 0 3px #aaa;padding:7px 15px}
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 69 74 2e 6e 6f 74 2d 61 63 74 69 76 65 20 2e 70 72 6f 66 69 6c 65 2d 6d 65 6e 75 5f 5f 69 74 65 6d 2e 68 61 72 64 2d 70 72 6f 66 69 6c 65 2d 73 70 6c 69 74 2e 70 72 6f 66 69 6c 65 2d 6c 69 6e 6b 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 70 72 6f 66 69 6c 65 2d 6d 65 6e 75 2d 6c 69 6e 6b 2d 69 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 32 30 70 78 3b 66 69 6c 6c 3a 23 30 30 37 31 63 32 3b 77 69 64 74 68 3a 31 38 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 70 72 6f 66 69 6c 65 2d 6d 65 6e 75 5f 5f 73 65 70 61 72 61 74 6f 72 2e 68 61 72 64 2d 73 70 6c 69 74 7b 6d 61 72 67 69 6e 3a 30 7d 2e 70 72 6f 66 69 6c 65 2d 6d 65 6e 75 5f 5f 69 74 65 6d 2d 2d 73 69 67 6e 6f 75 74 2d 2d 68 61 72 64 2d 73 70 Data Ascii: it.not-active .profile-menu__item.hard-profile-split.profile-link{margin-top:0}.profile-menu-link-icon{position:absolute;top:0;left:20px;fill:#0071c2;width:18px;height:32px}.profile-menu__separator.hard-split{margin:0}.profile-menu__item--signout--hard-sp
2024-07-10 01:44:36 UTC	2615	IN	Data Raw: 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 31 63 32 3b 62 6f 72 64 65 72 3a 30 7d 2e 66 65 65 64 62 61 63 6b 2d 6c 6f 6f 70 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 66 65 65 64 62 61 63 6b 2d 6c 6f 6f 70 20 2e 66 65 65 64 62 61 63 6b 2d 6c 6f 6f 70 5f 5f 63 68 65 63 6b 62 6f 78 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 66 65 65 64 62 61 63 6b 2d 6c 6f 6f 70 20 2e 66 65 65 64 62 61 63 6b 2d 6c 6f 6f 70 5f 5f 63 68 65 63 6b 62 6f 78 2d 66 69 65 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 66 65 65 64 62 61 63 6b 2d 6c 6f 6f 70 20 2e 66 65 65 64 62 61 63 6b Data Ascii: d-color:#0071c2;border:0}.feedback-loop button:focus{outline:0}.feedback-loop .feedback-loop__checkbox{display:block;margin:20px 0;cursor:pointer}.feedback-loop .feedback-loop__checkbox-field{margin-right:5px;vertical-align:middle}.feedback-loop .feedback
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 65 72 65 64 2d 6c 69 67 68 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 35 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 31 35 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 61 66 63 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 63 6f 6c 6f 72 3a 23 34 37 37 38 62 38 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 69 6e 6c 69 6e 65 2d 66 65 65 64 62 61 63 6b 5f 63 6c 65 61 72 2d 72 69 67 68 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 63 6f 6c 6f 72 3a 23 34 37 37 38 62 38 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 69 6e 6c 69 6e 65 2d 66 65 65 64 62 61 63 6b 5f 6c 69 67 68 74 62 6f 78 2c 2e 69 6e 6c 69 6e 65 2d 66 65 65 64 62 61 63 6b 5f 69 6e 2d 6c 69 67 68 Data Ascii: ered-light{margin:0 0 15px;padding:0 0 15px;border-bottom:1px solid #fafcff;text-align:right;color:#4778b8;clear:both}.inline-feedback_clear-right{margin:0 0 15px;text-align:right;color:#4778b8;clear:both}.inline-feedback_lightbox,.inline-feedback_in-ligh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49854	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	573	OUT	GET /psb/capla/static/css/bui-react-9.12548206.css HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	661	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 188079 Connection: close Date: Tue, 09 Jul 2024 14:29:20 GMT Last-Modified: Mon, 08 Jul 2024 10:20:12 GMT ETag: "b8cb409b6ab6408c71a6ae603a5dcef4" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: foo x-amz-version-id: lKUyuVLeK1Y9mfaqjexdyvUmWh1VaV95 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 83f879b9257b55a619d0b5d3165412a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: UkEqHwLP7QCSwuM5gvAAgkdMwycUggyEnGlK0l55jhoiirzO5LnT7Q== Age: 40517 Cache-Control: public, max-age=604800 Vary: Origin
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 2e 63 32 65 39 30 61 35 39 64 39 7b 70 6f 73 69 74 69 6f 6e 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 32 65 39 30 61 35 39 64 39 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 2d 2d 73 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 3a 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 2d 2d 73 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 32 65 39 30 61 35 39 64 39 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 2d 2d 6d 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 6f 73 69 74 69 6f 6e 3a 76 61 72 28 2d 2d 62 75 69 5f Data Ascii: .c2e90a59d9{position:var(--bui_mixin_position)!important}.c2e90a59d9[style="--bui_mixin_position--s"]{--bui_mixin_position:var(--bui_mixin_position--s)}@media (min-width:576px){.c2e90a59d9[style="--bui_mixin_position--m"]{--bui_mixin_position:var(--bui_
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 30 32 34 70 78 29 7b 2e 66 36 30 39 39 37 39 39 34 32 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 2d 2d 6c 22 5d 7b 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 2d 2d 6c 29 20 2a 20 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 38 30 70 78 29 7b 2e 66 36 30 39 39 37 39 39 34 32 5b 73 74 79 6c 65 2a 3d 22 2d 2d 62 75 69 5f 6d 69 78 69 6e 5f 73 70 61 63 65 64 5f 70 61 64 64 69 6e Data Ascii: 024px){.f609979942[style="--bui_mixin_spaced_padding-inline-start--l"]{--bui_mixin_padding-inline-start:calc(var(--bui_mixin_spaced_padding-inline-start--l) var(--bui_spacing_1x))}}@media (min-width:1280px){.f609979942[style*="--bui_mixin_spaced_paddin
2024-07-10 01:44:36 UTC	12004	IN	Data Raw: 30 31 33 34 34 3a 6e 6f 74 28 2e 65 30 33 61 30 61 39 30 64 34 29 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 68 69 67 68 6c 69 67 68 74 65 64 5f 61 6c 74 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 7d 2e 62 64 66 62 34 63 63 33 30 63 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 66 6f 72 65 67 72 6f 75 6e 64 29 7d 2e 62 64 66 62 34 63 63 33 30 63 2e 61 38 65 31 34 31 64 64 33 36 2c 2e 62 64 66 62 34 63 63 33 30 63 3a 61 63 74 69 76 65 2c 2e 62 64 66 62 34 63 63 33 30 63 3a 66 6f 63 75 73 2c 2e 62 64 66 62 34 63 63 33 30 63 3a 68 6f 76 65 72 2c Data Ascii: 01344:not(.e03a0a90d4):hover:before{background-color:var(--bui_color_action_highlighted_alt);border-color:transparent}}.bdfb4cc30c{color:var(--bui_color_destructive_foreground)}.bdfb4cc30c.a8e141dd36,.bdfb4cc30c:active,.bdfb4cc30c:focus,.bdfb4cc30c:hover,
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 77 2d 72 65 76 65 72 73 65 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 65 62 30 35 66 31 66 31 35 62 7b 66 6c 65 78 2d 77 72 61 70 3a 69 6e 69 74 69 61 6c 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 7d 2e 62 63 66 64 39 30 61 32 33 61 7b 66 6c 65 78 2d 77 72 61 70 3a 69 6e 69 74 69 61 6c 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 7d 2e 63 30 62 32 65 32 63 34 33 35 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 Data Ascii: w-reverse;flex-wrap:wrap;align-items:flex-start}@media (min-width:576px){.eb05f1f15b{flex-wrap:initial;flex-direction:column;align-items:stretch}.bcfd90a23a{flex-wrap:initial;flex-direction:column-reverse;align-items:stretch}.c0b2e2c435{flex-direction:row
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 61 6c 65 72 74 5f 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 62 63 65 35 61 62 32 66 35 64 7b 2d 2d 62 75 69 5f 61 6c 65 72 74 5f 74 69 74 6c 65 5f 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 2d 62 75 69 5f 61 6c 65 72 74 5f 69 63 6f 6e 5f 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 73 74 72 6f 6e 67 5f 31 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 61 6c 65 72 74 5f 62 61 63 6b 67 72 6f 75 6e 64 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d Data Ascii: line-height);background-color:transparent;color:var(--bui_alert_color);border:none;padding:0}.bce5ab2f5d{--bui_alert_title_display:block;--bui_alert_icon_height:var(--bui_font_strong_1_line-height);background-color:var(--bui_alert_background);color:var(--
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 32 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 7d 2e 62 37 36 36 64 63 37 37 30 33 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 20 2a 20 33 32 29 3b 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 20 2a 20 33 32 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 68 65 61 64 6c 69 6e 65 5f 31 5f 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 Data Ascii: height:var(--bui_font_headline_2_line-height);font-family:var(--bui_font_headline_2_font-family)}.b766dc7703{height:calc(var(--bui_spacing_1x) * 32);width:calc(var(--bui_spacing_1x) * 32);font-size:var(--bui_font_headline_1_font-size);font-weight:var(--bu
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 5f 31 30 30 29 3b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 62 75 69 5f 73 6b 65 6c 65 74 6f 6e 5f 6c 6f 61 64 65 72 2d 2d 6f 70 61 63 69 74 79 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 34 78 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 62 32 61 39 36 30 33 33 34 36 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 69 6e 73 65 74 3a 30 3b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 62 75 69 5f 73 6b 65 6c 65 74 6f 6e 5f 6c 6f 61 64 65 72 2d 2d 63 6f 6c 6f 72 5f 6f 70 61 Data Ascii: lock;position:relative;border-radius:var(--bui_border_radius_100);opacity:var(--bui_skeleton_loader--opacity);height:var(--bui_spacing_4x);overflow:hidden}.b2a9603346:before{content:"";position:absolute;inset:0;opacity:var(--bui_skeleton_loader--color_opa
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 6f 66 66 73 65 74 5f 61 75 74 6f 3a 69 6e 69 74 69 61 6c 3b 2d 2d 62 75 69 5f 67 72 69 64 5f 63 6f 6c 75 6d 6e 5f 6f 66 66 73 65 74 3a 32 7d 2e 63 35 37 62 63 36 32 66 36 64 7b 2d 2d 62 75 69 5f 67 72 69 64 5f 63 6f 6c 75 6d 6e 5f 6f 66 66 73 65 74 5f 61 75 74 6f 3a 69 6e 69 74 69 61 6c 3b 2d 2d 62 75 69 5f 67 72 69 64 5f 63 6f 6c 75 6d 6e 5f 6f 66 66 73 65 74 3a 33 7d 2e 62 65 38 39 31 66 37 31 30 64 7b 2d 2d 62 75 69 5f 67 72 69 64 5f 63 6f 6c 75 6d 6e 5f 6f 66 66 73 65 74 5f 61 75 74 6f 3a 69 6e 69 74 69 61 6c 3b 2d 2d 62 75 69 5f 67 72 69 64 5f 63 6f 6c 75 6d 6e 5f 6f 66 66 73 65 74 3a 34 7d 2e 65 31 36 34 33 63 63 38 33 66 7b 2d 2d 62 75 69 5f 67 72 69 64 5f 63 6f 6c 75 6d 6e 5f 6f 66 66 73 65 74 5f 61 75 74 6f 3a 69 6e 69 74 69 61 6c 3b 2d 2d 62 75 Data Ascii: offset_auto:initial;--bui_grid_column_offset:2}.c57bc62f6d{--bui_grid_column_offset_auto:initial;--bui_grid_column_offset:3}.be891f710d{--bui_grid_column_offset_auto:initial;--bui_grid_column_offset:4}.e1643cc83f{--bui_grid_column_offset_auto:initial;--bu
2024-07-10 01:44:36 UTC	3329	IN	Data Raw: 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 75 69 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 29 7d 2e 63 35 32 37 35 63 38 31 34 65 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 20 2a 20 35 29 3b 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 20 2a 20 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 65 6c 65 76 61 74 69 6f 6e 5f 6f 6e 65 29 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 75 69 5f 62 6f 72 64 65 72 5f 77 69 64 74 68 5f 31 30 30 Data Ascii: tems:center;display:inline-flex;height:var(--bui_font_body_2_line-height)}.c5275c814e{height:calc(var(--bui_spacing_1x) * 5);width:calc(var(--bui_spacing_1x) * 5);background-color:var(--bui_color_background_elevation_one);border:var(--bui_border_width_100
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 6e 74 65 6e 74 3a 6e 6f 6e 65 7d 2e 63 34 64 37 37 64 63 61 38 30 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 2d 6e 75 6d 65 72 69 63 3a 74 61 62 75 6c 61 72 2d 6e 75 6d 73 7d 2e 64 32 61 33 30 61 37 61 39 37 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 20 2a 20 35 29 29 3b 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 73 70 61 63 69 6e 67 5f 31 78 29 20 2a 20 31 30 29 3b 6c 65 66 74 3a 35 30 25 3b 69 6e 73 65 74 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 Data Ascii: ntent:none}.c4d77dca80{line-height:20px;font-variant-numeric:tabular-nums}.d2a30a7a97{position:absolute;transform:translate(-50%,calc(var(--bui_spacing_1x) * 5));padding-block-end:calc(var(--bui_spacing_1x) * 10);left:50%;inset-block-end:100%;opacity:0;vi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49856	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	608	OUT	GET /static/js/jquery_cft/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	811	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 105026 Connection: close Server: nginx Date: Mon, 17 Jun 2024 00:35:11 GMT Last-Modified: Tue, 28 Jun 2022 15:19:38 GMT ETag: "62bb1c0a-19a42" Expires: Wed, 17 Jul 2024 00:35:11 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 3akltdR2hUyA7Eyb93muv5ElK35uqv7RvMtyWSdd5NJTMPKOzZbsPA== Age: 1991365
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 31 2e 33 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e Data Ascii: /* @preserve * jQuery JavaScript Library v1.11.3 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2014 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/licen
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 61 28 65 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 69 2d 2d 3b 29 65 5b 6e 3d 71 28 65 2c 72 5b 69 5d 29 5d 3d 21 28 74 5b 6e 5d 3d 72 5b 69 5d 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 30 2c 74 29 7d 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 70 73 65 75 64 6f 73 3a 7b 6e 6f 74 3a 61 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 5b 5d 2c 73 3d 66 28 65 2e 72 65 70 6c 61 63 65 28 24 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 73 5b 4e 5d 3f 61 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 2c 6f 3d 73 28 65 2c 6e 75 6c 6c 2c 72 2c 5b 5d 29 2c 61 3d 65 2e 6c 65 6e 67 74 68 3b 61 2d 2d 3b 29 28 69 3d 6f 5b 61 Data Ascii: t){for(var n,r=a(e,o),i=r.length;i--;)e[n=q(e,r[i])]=!(t[n]=r[i])}):function(e){return a(e,0,t)};return a}},pseudos:{not:ae(function(e){var r=[],i=[],s=f(e.replace($,"$1"));return s[N]?ae(function(e,t,n,r){for(var i,o=s(e,null,r,[]),a=e.length;a--;)(i=o[a
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 3f 65 5b 61 5d 3d 66 2e 70 6f 70 28 29 7c 7c 43 2e 67 75 69 64 2b 2b 3a 61 29 2c 75 5b 6c 5d 7c 7c 28 75 5b 6c 5d 3d 73 3f 7b 7d 3a 7b 74 6f 4a 53 4f 4e 3a 43 2e 6e 6f 6f 70 7d 29 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 28 72 3f 75 5b 6c 5d 3d 43 2e 65 78 74 65 6e 64 28 75 5b 6c 5d 2c 74 29 3a 75 5b 6c 5d 2e 64 61 74 61 3d 43 2e 65 78 74 65 6e 64 28 75 5b 6c 5d 2e 64 61 74 61 2c 74 29 29 2c 6f 3d 75 5b 6c 5d 2c 72 7c 7c 28 6f 2e 64 61 74 61 7c 7c 28 6f 2e 64 61 74 61 3d 7b 7d 29 2c 6f 3d 6f 2e 64 61 74 61 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 26 26 28 6f 5b 43 2e 63 61 6d 65 6c 43 61 73 65 28 74 29 5d 3d 6e 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f Data Ascii: ?e[a]=f.pop()\|\|C.guid++:a),u[l]\|\|(u[l]=s?{}:{toJSON:C.noop}),"object"!=typeof t&&"function"!=typeof t\|\|(r?u[l]=C.extend(u[l],t):u[l].data=C.extend(u[l].data,t)),o=u[l],r\|\|(o.data\|\|(o.data={}),o=o.data),void 0!==n&&(o[C.camelCase(t)]=n),"string"==typeof t?
2024-07-10 01:44:36 UTC	14808	IN	Data Raw: 74 3a 76 2e 68 74 6d 6c 53 65 72 69 61 6c 69 7a 65 3f 5b 30 2c 22 22 2c 22 22 5d 3a 5b 31 2c 22 58 3c 64 69 76 3e 22 2c 22 3c 2f 64 69 76 3e 22 5d 7d 2c 67 65 3d 74 65 28 4e 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 4e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 65 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 3d 30 2c 6f 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 4d 3f 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 7c 7c 22 2a 22 29 3a 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 21 3d 3d 4d 3f 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 74 7c 7c 22 2a 22 29 3a 76 6f 69 64 20 30 Data Ascii: t:v.htmlSerialize?[0,"",""]:[1,"X<div>","</div>"]},ge=te(N).appendChild(N.createElement("div"));function me(e,t){var n,r,i=0,o=typeof e.getElementsByTagName!==M?e.getElementsByTagName(t\|\|""):typeof e.querySelectorAll!==M?e.querySelectorAll(t\|\|""):void 0
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 43 2e 63 73 73 48 6f 6f 6b 73 5b 69 2b 6f 5d 3d 7b 65 78 70 61 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 7b 7d 2c 72 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 73 70 6c 69 74 28 22 20 22 29 3a 5b 65 5d 3b 74 3c 34 3b 74 2b 2b 29 6e 5b 69 2b 7a 5b 74 5d 2b 6f 5d 3d 72 5b 74 5d 7c 7c 72 5b 74 2d 32 5d 7c 7c 72 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 7d 7d 2c 4c 65 2e 74 65 73 74 28 69 29 7c 7c 28 43 2e 63 73 73 48 6f 6f 6b 73 5b 69 2b 6f 5d 2e 73 65 74 3d 58 65 29 7d 29 2c 43 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 63 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 58 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 7b 7d 2c 61 Data Ascii: C.cssHooks[i+o]={expand:function(e){for(var t=0,n={},r="string"==typeof e?e.split(" "):[e];t<4;t++)n[i+z[t]+o]=r[t]\|\|r[t-2]\|\|r[0];return n}},Le.test(i)\|\|(C.cssHooks[i+o].set=Xe)}),C.fn.extend({css:function(e,t){return X(this,function(e,t,n){var r,i,o={},a
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 2c 54 74 3d 2f 5c 3f 2f 2c 43 74 3d 2f 28 2c 29 7c 28 5c 5b 7c 7b 29 7c 28 7d 7c 5d 29 7c 22 28 3f 3a 5b 5e 22 5c 5c 5c 72 5c 6e 5d 7c 5c 5c 5b 22 5c 5c 5c 2f 62 66 6e 72 74 5d 7c 5c 5c 75 5b 5c 64 61 2d 66 41 2d 46 5d 7b 34 7d 29 2a 22 5c 73 2a 3a 3f 7c 74 72 75 65 7c 66 61 6c 73 65 7c 6e 75 6c 6c 7c 2d 3f 28 3f 21 30 5c 64 29 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 7c 29 28 3f 3a 5b 65 45 5d 5b 2b 2d 5d 3f 5c 64 2b 7c 29 2f 67 3b 43 2e 70 61 72 73 65 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 68 2e 4a 53 4f 4e 26 26 68 2e 4a 53 4f 4e 2e 70 61 72 73 65 29 72 65 74 75 72 6e 20 68 2e 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2b 22 22 29 3b 76 61 72 20 69 2c 6f 3d 6e 75 6c 6c 2c 74 3d 43 2e 74 72 69 6d 28 65 2b 22 22 29 3b 72 65 74 75 72 6e 20 74 26 26 Data Ascii: ,Tt=/\?/,Ct=/(,)\|(\[\|{)\|(}\|])\|"(?:[^"\\\r\n]\|\\["\\\/bfnrt]\|\\u[\da-fA-F]{4})"\s:?\|true\|false\|null\|-?(?!0\d)\d+(?:\.\d+\|)(?:[eE][+-]?\d+\|)/g;C.parseJSON=function(e){if(h.JSON&&h.JSON.parse)return h.JSON.parse(e+"");var i,o=null,t=C.trim(e+"");return t&&
2024-07-10 01:44:36 UTC	8298	IN	Data Raw: 65 6d 6f 76 65 4d 69 67 72 61 74 65 57 61 72 6e 73 2c 6c 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 65 29 2c 74 26 26 74 2e 65 72 72 6f 72 26 26 21 6c 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 74 2e 65 72 72 6f 72 28 65 29 2c 6c 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 74 2e 74 72 61 63 65 26 26 74 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 29 74 72 79 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: emoveMigrateWarns,l.migrateWarnings.push(e),t&&t.error&&!l.migrateMute&&(t.error(e),l.migrateTrace&&t.trace&&t.trace()))}function e(e,t,n,r){if(Object.defineProperty)try{return void Object.defineProperty(e,t,{configurable:!0,enumerable:!0,get:function(){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49858	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	606	OUT	GET /static/js/main_cft/e77ceeb677e7749eed78fc0ec1e617c3e5c210c2.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	810	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 588902 Connection: close Server: nginx Date: Mon, 01 Jul 2024 04:46:54 GMT Last-Modified: Mon, 01 Jul 2024 03:06:40 GMT ETag: "66821d40-8fc66" Expires: Wed, 31 Jul 2024 04:46:54 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: PBCEM9a1DDf72rDW-OU5nnStbuKCp84hnhk2FMc_W_35HhmLz-GMCw== Age: 766662
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 76 61 72 20 5f 69 5f 3d 74 68 69 73 2e 5f 69 5f 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 72 5f 3d 74 68 69 73 2e 5f 72 5f 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 61 6c 63 61 67 65 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 5f 69 5f 28 22 33 64 61 3a 66 38 37 38 34 30 31 34 22 29 2c 73 3d 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 2f 74 29 25 69 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 4c 65 61 64 69 6e 67 5a 65 72 6f 26 26 73 2e 6c 65 6e 67 74 68 3c 32 26 26 28 73 3d 22 30 22 2b 73 29 2c 5f 72 5f 28 22 3c 62 3e 22 2b 73 2b 22 3c 2f 62 3e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 43 6f 75 6e 74 42 61 63 6b 28 65 29 7b 69 66 28 5f 69 5f 28 22 33 64 61 3a 37 33 32 63 32 33 35 36 22 29 2c 65 3c 30 29 Data Ascii: var _i_=this._i_\|\|function(){},_r_=this._r_\|\|function(e){return e};function calcage(e,t,i){return _i_("3da:f8784014"),s=(Math.floor(e/t)%i).toString(),LeadingZero&&s.length<2&&(s="0"+s),_r_("<b>"+s+"</b>")}function CountBack(e){if(_i_("3da:732c2356"),e<0)
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 77 45 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 69 5f 28 22 33 64 61 3a 31 61 30 35 35 35 30 30 22 29 2c 24 28 22 23 22 2b 65 29 2e 73 68 6f 77 28 29 2c 5f 72 5f 28 29 7d 2c 77 69 6e 64 6f 77 2e 73 68 6f 77 46 72 61 6d 65 43 6f 6e 74 61 69 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 6e 2c 72 2c 61 2c 6f 2c 5f 29 7b 69 66 28 5f 69 5f 28 22 33 64 61 3a 30 61 32 65 64 36 34 35 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 29 7b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 2c 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 3b 69 66 28 22 62 Data Ascii: wEl=function(e){_i_("3da:1a055500"),$("#"+e).show(),_r_()},window.showFrameContainer=function(e,t,i,n,r,a,o,_){if(_i_("3da:0a2ed645"),document.getElementById){var s=document.getElementById(e),d=document.getElementById(t),c=document.getElementById(i);if("b
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 61 3d 21 31 29 3a 76 6f 69 64 20 30 21 3d 3d 6e 3f 28 6f 3d 6e 2c 61 3d 21 30 29 3a 28 6f 3d 74 68 69 73 2e 66 72 61 67 6d 65 6e 74 54 65 6d 70 6c 61 74 65 2c 61 3d 74 68 69 73 2e 66 72 61 67 6d 65 6e 74 49 73 43 53 29 3b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 68 69 73 2e 66 72 61 67 6d 65 6e 74 41 72 67 73 2c 65 29 2c 72 3d 7b 73 6f 72 75 63 65 3a 5f 2c 74 6d 70 6c 3a 6f 2c 69 73 43 53 3a 61 2c 61 72 67 73 3a 64 7d 3b 69 66 28 21 31 21 3d 3d 74 68 69 73 2e 66 72 61 67 6d 65 6e 74 42 65 66 6f 72 65 52 65 71 75 65 73 74 28 72 29 29 7b 64 3d 72 2e 61 72 67 73 2c 21 61 26 26 6f 26 26 28 64 2e 74 6d 70 6c 3d 6f 29 3b 76 61 72 20 63 3d 74 68 69 73 3b 74 68 69 73 2e 66 72 61 67 6d 65 6e 74 52 65 71 75 65 73 74 28 74 2c 64 29 2e Data Ascii: a=!1):void 0!==n?(o=n,a=!0):(o=this.fragmentTemplate,a=this.fragmentIsCS);var d=Object.assign({},this.fragmentArgs,e),r={soruce:_,tmpl:o,isCS:a,args:d};if(!1!==this.fragmentBeforeRequest(r)){d=r.args,!a&&o&&(d.tmpl=o);var c=this;this.fragmentRequest(t,d).
2024-07-10 01:44:36 UTC	15025	IN	Data Raw: 29 7d 2c 74 2e 6e 6f 64 65 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 69 5f 28 22 33 64 61 3a 63 30 64 36 33 31 37 65 22 29 2c 65 2e 6a 71 75 65 72 79 26 26 28 65 3d 65 5b 30 5d 29 2c 74 68 69 73 2e 61 73 73 65 72 74 45 78 69 73 74 73 28 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 29 3b 76 61 72 20 74 2c 69 2c 6e 2c 72 3d 7b 7d 3b 66 6f 72 28 74 3d 30 2c 69 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 3b 74 3c 69 3b 74 2b 2b 29 28 6e 3d 65 2e 61 74 74 72 69 62 75 74 65 73 5b 74 5d 29 26 26 30 3d 3d 6e 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 26 26 28 72 5b 6e 2e 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5e 64 61 74 61 2d 2f 2c 22 22 29 5d 3d 6e 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 5f 72 5f 28 74 68 Data Ascii: )},t.nodeData=function(e){_i_("3da:c0d6317e"),e.jquery&&(e=e[0]),this.assertExists(e,"attributes");var t,i,n,r={};for(t=0,i=e.attributes.length;t<i;t++)(n=e.attributes[t])&&0==n.name.indexOf("data-")&&(r[n.name.replace(/^data-/,"")]=n.value);return _r_(th
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 73 2e 5f 68 69 64 65 54 69 6d 65 6f 75 74 29 2c 74 68 69 73 2e 5f 68 69 64 65 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 71 75 69 72 65 54 6f 6f 6c 74 69 70 43 6c 61 73 73 26 26 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 71 75 69 72 65 54 6f 6f 6c 74 69 70 43 6c 61 73 73 2c 31 29 26 26 30 3c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 71 75 69 72 65 54 6f 6f 6c 74 69 70 43 6c 61 73 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 5f 24 68 61 6e 64 6c 65 26 26 21 74 68 69 73 2e 5f 24 68 61 6e 64 6c 65 2e 68 61 73 43 6c 61 73 73 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 71 75 69 72 65 54 6f 6f 6c 74 69 70 43 6c 61 73 73 29 29 72 65 74 75 72 6e 20 5f 72 5f 28 29 3b 74 68 69 73 2e 68 69 64 64 65 6e 28 29 26 Data Ascii: s._hideTimeout),this._hideTimeout=null),this.options.requireTooltipClass&&(this.options.requireTooltipClass,1)&&0<this.options.requireTooltipClass.length&&this._$handle&&!this._$handle.hasClass(this.options.requireTooltipClass))return _r_();this.hidden()&
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 3a 34 34 36 61 36 34 62 62 22 29 2c 21 61 28 65 29 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 63 2e 63 61 6c 6c 28 65 29 7c 7c 72 28 65 29 29 72 65 74 75 72 6e 20 5f 72 5f 28 21 31 29 3b 76 61 72 20 74 3d 6e 28 65 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 20 5f 72 5f 28 21 30 29 3b 76 61 72 20 69 3d 73 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 5f 72 5f 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 26 26 5f 2e 63 61 6c 6c 28 69 29 3d 3d 64 29 7d 2c 5f 72 5f 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 5f 69 5f Data Ascii: :446a64bb"),!a(e)\|\|"[object Object]"!=c.call(e)\|\|r(e))return _r_(!1);var t=n(e);if(null===t)return _r_(!0);var i=s.call(t,"constructor")&&t.constructor;return _r_("function"==typeof i&&i instanceof i&&_.call(i)==d)},_r_()},function(e,t,i){"use strict";_i_
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 29 2c 5f 72 5f 28 7b 70 72 6f 6d 69 73 65 3a 72 5b 74 5d 2c 72 65 73 6f 6c 76 65 3a 61 5b 74 5d 7d 29 7d 77 69 6e 64 6f 77 2e 42 2e 5f 5f 63 61 70 6c 61 49 6e 69 74 69 61 6c 69 73 65 64 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 77 69 6e 64 6f 77 2e 42 2e 5f 5f 63 61 70 6c 61 49 6e 69 74 69 61 6c 69 73 65 64 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 69 5f 28 22 33 64 61 3a 31 64 36 32 30 34 34 32 22 29 2c 5f 28 6f 28 65 29 29 2e 72 65 73 6f 6c 76 65 28 77 69 6e 64 6f 77 2e 42 2e 5f 5f 63 61 70 6c 61 49 6e 69 74 69 61 6c 69 73 65 64 5b 65 5d 29 2c 5f 72 5f 28 29 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6f 6f 6b 69 6e 67 2d 63 61 70 6c 61 2d 69 6e 69 74 69 61 6c 69 7a 65 64 22 2c Data Ascii: ),_r_({promise:r[t],resolve:a[t]})}window.B.__caplaInitialised&&Object.keys(window.B.__caplaInitialised).forEach(function(e){_i_("3da:1d620442"),_(o(e)).resolve(window.B.__caplaInitialised[e]),_r_()}),document.addEventListener("booking-capla-initialized",
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 28 74 68 69 73 29 2c 63 3d 64 3f 74 68 69 73 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 77 69 6e 64 6f 77 3a 74 68 69 73 2c 6c 3d 6f 28 63 29 2c 75 3d 65 2c 66 3d 7b 7d 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 75 29 7b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 63 61 73 65 22 73 74 72 69 6e 67 22 3a 69 66 28 2f 5e 28 5b 2b 2d 5d 3d 3f 29 3f 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 28 70 78 7c 25 29 3f 24 2f 2e 74 65 73 74 28 75 29 29 7b 75 3d 74 28 75 29 3b 62 72 65 61 6b 7d 75 3d 64 3f 6f 28 75 29 3a 6f 28 75 2c 63 29 3b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 69 66 28 30 3d 3d 3d 75 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 5f 72 5f 28 29 3b 28 75 2e 69 73 7c 7c 75 2e 73 74 79 6c 65 29 26 26 28 73 3d 28 75 3d 6f 28 75 29 29 2e 6f 66 66 73 65 74 28 29 29 Data Ascii: (this),c=d?this.contentWindow\|\|window:this,l=o(c),u=e,f={};switch(typeof u){case"number":case"string":if(/^([+-]=?)?\d+(\.\d+)?(px\|%)?$/.test(u)){u=t(u);break}u=d?o(u):o(u,c);case"object":if(0===u.length)return _r_();(u.is\|\|u.style)&&(s=(u=o(u)).offset())
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 6e 73 65 74 2f 63 6c 6f 73 65 22 2c 22 6c 61 72 67 65 22 2c 27 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 61 63 63 65 73 73 2d 66 6f 72 6d 2d 69 66 72 61 6d 65 2d 70 61 64 64 69 6e 67 22 3e 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 27 5d 3b 72 65 74 75 72 6e 20 5f 72 5f 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 69 5f 28 22 33 64 61 3a 65 39 39 62 30 64 30 33 22 29 3b 76 61 72 20 74 3d 22 22 2c 69 3d 74 68 69 73 2e Data Ascii: nset/close","large",'\n </div>\n </div>\n <div class="user-access-form-iframe-padding"> </div>\n </div>\n </div>\n </div>\n'];return _r_(function(e){_i_("3da:e99b0d03");var t="",i=this.
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 69 61 6c 5a 49 6e 64 65 78 29 2c 21 30 3d 3d 3d 69 2e 6e 6f 53 74 61 63 6b 69 6e 67 26 26 61 2e 64 61 74 61 28 22 6e 6f 2d 73 74 61 63 6b 69 6e 67 22 2c 31 29 2c 6f 3d 61 2e 63 6c 6f 6e 65 28 21 31 29 2e 63 73 73 28 7b 76 69 73 69 62 69 6c 69 74 79 3a 22 68 69 64 64 65 6e 22 7d 29 2e 61 64 64 43 6c 61 73 73 28 22 73 74 69 63 6b 65 64 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 29 2c 45 28 61 29 2c 5f 69 5f 28 22 33 64 61 3a 35 36 36 33 33 66 64 34 22 29 2c 5f 2e 62 69 6e 64 28 7b 73 63 72 6f 6c 6c 3a 68 2c 72 65 73 69 7a 65 3a 70 2c 6c 6f 61 64 3a 70 7d 29 2c 5f 72 5f 28 29 2c 62 28 29 2c 77 28 29 2c 68 28 29 2c 5f 72 5f 28 29 7d 2c 72 65 73 74 61 72 74 50 6f 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 69 5f 28 22 33 64 61 3a 33 64 33 32 32 32 32 Data Ascii: ialZIndex),!0===i.noStacking&&a.data("no-stacking",1),o=a.clone(!1).css({visibility:"hidden"}).addClass("sticked-placeholder"),E(a),_i_("3da:56633fd4"),_.bind({scroll:h,resize:p,load:p}),_r_(),b(),w(),h(),_r_()},restartPosition:function(){_i_("3da:3d32222

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49857	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	611	OUT	GET /static/js/searchbox_cft/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	809	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 243559 Connection: close Server: nginx Date: Tue, 09 Jul 2024 12:33:22 GMT Last-Modified: Tue, 09 Jul 2024 12:10:34 GMT ETag: "668d28ba-3b767" Expires: Thu, 08 Aug 2024 12:33:22 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 80b00aa2dcc58ca61b2465a37c89fc92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: cytcPFXn7laKfCmxiYlCM5loT4DsORV9O0pA8jXAUAx8s-mfQXoJ8Q== Age: 47474
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 76 61 72 20 5f 69 5f 3d 74 68 69 73 2e 5f 69 5f 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 72 5f 3d 74 68 69 73 2e 5f 72 5f 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 3b 62 6f 6f 6b 69 6e 67 2e 65 6e 76 2e 65 6e 61 62 6c 65 5f 73 63 72 69 70 74 73 5f 74 72 61 63 6b 69 6e 67 26 26 28 62 6f 6f 6b 69 6e 67 2e 65 6e 76 2e 73 63 72 69 70 74 73 5f 74 72 61 63 6b 69 6e 67 2e 73 65 61 72 63 68 62 6f 78 3d 7b 6c 6f 61 64 65 64 3a 21 30 2c 72 75 6e 3a 21 31 7d 29 2c 42 2e 64 65 66 69 6e 65 28 22 63 61 72 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 69 5f 28 22 34 61 62 3a 35 30 61 35 64 36 61 61 22 29 3b 72 65 74 75 72 6e 20 5f 72 5f 28 7b 67 65 74 50 6f 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 Data Ascii: var _i_=this._i_\|\|function(){},_r_=this._r_\|\|function(e){return e};booking.env.enable_scripts_tracking&&(booking.env.scripts_tracking.searchbox={loaded:!0,run:!1}),B.define("caret",function(){_i_("4ab:50a5d6aa");return _r_({getPosition:function(e){var t;i
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 62 65 20 61 20 73 74 72 69 6e 67 22 29 3b 69 66 28 22 22 3d 3d 3d 28 65 3d 65 2e 74 72 69 6d 28 29 29 29 72 65 74 75 72 6e 20 5f 72 5f 28 73 29 3b 72 65 74 75 72 6e 20 65 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 69 5f 28 22 34 61 62 3a 37 37 64 31 32 66 64 38 22 29 3b 76 61 72 20 74 2c 69 3d 65 2c 61 3d 21 30 2c 6e 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 3b 2d 31 21 3d 3d 6e 26 26 28 69 3d 65 2e 73 75 62 73 74 72 28 30 2c 6e 29 2c 28 61 3d 65 2e 73 75 62 73 74 72 28 6e 2b 31 29 29 7c 7c 28 61 3d 30 29 2c 74 3d 61 2c 5f 69 5f 28 22 34 61 62 3a 63 66 38 39 33 61 37 61 22 29 2c 5f 72 5f 28 21 69 73 4e 61 4e 28 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 26 26 69 73 46 69 6e 69 74 65 28 74 29 Data Ascii: be a string");if(""===(e=e.trim()))return _r_(s);return e.split(/\s+/).forEach(function(e){_i_("4ab:77d12fd8");var t,i=e,a=!0,n=e.indexOf(":");-1!==n&&(i=e.substr(0,n),(a=e.substr(n+1))\|\|(a=0),t=a,_i_("4ab:cf893a7a"),_r_(!isNaN(parseFloat(t))&&isFinite(t)
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 65 66 74 22 29 3b 72 65 74 75 72 6e 20 5f 72 5f 28 65 29 7d 2c 5f 70 6c 61 63 65 54 6f 6f 6c 74 69 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 69 5f 28 22 34 61 62 3a 65 65 66 64 31 63 62 35 22 29 3b 76 61 72 20 65 3d 74 68 69 73 2e 5f 61 63 63 6f 75 6e 74 46 6f 72 52 54 4c 28 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 29 2c 74 3d 74 68 69 73 2e 64 69 6d 65 6e 73 69 6f 6e 3b 74 68 69 73 2e 5f 61 63 63 6f 75 6e 74 46 6f 72 52 54 4c 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 29 3d 3d 3d 65 3f 74 68 69 73 5b 65 5d 3d 74 68 69 73 2e 65 6c 4f 66 66 73 65 74 5b 65 5d 2d 74 68 69 73 2e 24 74 69 70 5b 74 5d 28 29 3a 74 68 69 73 5b 65 5d 3d 74 68 69 73 2e 65 6c 4f 66 66 73 65 74 5b 65 5d 2b 74 68 69 73 2e 24 65 6c 5b 74 5d 28 29 2c 5f 72 5f 28 Data Ascii: eft");return _r_(e)},_placeTooltip:function(){_i_("4ab:eefd1cb5");var e=this._accountForRTL(this.position),t=this.dimension;this._accountForRTL(this.options.placement)===e?this[e]=this.elOffset[e]-this.$tip[t]():this[e]=this.elOffset[e]+this.$el[t](),_r_(
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 28 22 2d 76 69 73 69 62 6c 65 22 29 29 2c 5f 72 5f 28 29 7d 2c 68 69 64 65 4c 6f 61 64 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 69 5f 28 22 34 61 62 3a 35 37 61 33 61 30 62 30 22 29 2c 74 68 69 73 2e 73 68 6f 75 6c 64 53 68 6f 77 4c 6f 61 64 69 6e 67 53 74 61 74 65 26 26 74 68 69 73 2e 24 6c 6f 61 64 69 6e 67 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 2d 76 69 73 69 62 6c 65 22 29 2c 5f 72 5f 28 29 7d 2c 6d 6f 64 65 6c 49 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 69 5f 28 22 34 61 62 3a 31 63 30 63 30 65 65 35 22 29 3b 76 61 72 20 65 3d 7b 73 73 3a 74 68 69 73 2e 69 6e 70 75 74 2e 76 61 6c 75 65 7d 3b 74 68 69 73 2e 64 65 73 74 69 6e 61 74 69 6f 6e 4d 6f 64 65 6c 2e 69 6e 69 74 28 65 29 2c 5f 72 5f 28 29 7d 2c 6d 6f 64 65 6c 43 68 61 6e 67 65 Data Ascii: ("-visible")),_r_()},hideLoading:function(){_i_("4ab:57a3a0b0"),this.shouldShowLoadingState&&this.$loading.removeClass("-visible"),_r_()},modelInit:function(){_i_("4ab:1c0c0ee5");var e={ss:this.input.value};this.destinationModel.init(e),_r_()},modelChange
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 68 69 73 2e 73 65 61 72 63 68 49 6e 73 74 61 6e 63 65 2e 67 65 74 52 65 73 75 6c 74 44 65 74 61 69 6c 73 28 69 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 5f 69 5f 28 22 34 61 62 3a 38 37 31 64 63 34 39 30 22 29 2c 28 74 3d 74 7c 7c 7b 7d 29 2e 5f 64 65 74 61 69 6c 73 3d 21 30 2c 74 68 69 73 2e 73 65 74 28 74 29 2c 77 69 6e 64 6f 77 2e 67 61 26 26 77 69 6e 64 6f 77 2e 67 61 28 22 73 65 6e 64 22 2c 22 65 76 65 6e 74 22 2c 22 61 63 5f 67 6f 6f 67 6c 65 5f 70 6c 61 63 65 73 22 2c 5b 69 2e 70 6c 61 63 65 5f 74 79 70 65 73 7c 7c 22 75 6e 6b 6e 6f 77 6e 22 2c 69 2e 6e 61 6d 65 5d 2e 6a 6f 69 6e 28 22 7c 22 29 2c 74 68 69 73 2e 64 61 74 61 2e 73 73 5f 72 61 77 2c 69 2e 70 6f 73 69 74 69 6f 6e 29 2c 5f 72 5f 28 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 5f 72 Data Ascii: his.searchInstance.getResultDetails(i,function(e,t){_i_("4ab:871dc490"),(t=t\|\|{})._details=!0,this.set(t),window.ga&&window.ga("send","event","ac_google_places",[i.place_types\|\|"unknown",i.name].join("\|"),this.data.ss_raw,i.position),_r_()}.bind(this)),_r
2024-07-10 01:44:36 UTC	5606	IN	Data Raw: 29 2c 5f 72 5f 28 65 2e 74 65 78 74 29 7d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 29 29 29 2c 21 65 2e 6c 61 62 65 6c 73 7c 7c 22 7a 68 22 21 3d 3d 65 2e 6c 63 26 26 22 78 74 22 21 3d 3d 65 2e 6c 63 26 26 22 6a 61 22 21 3d 3d 65 2e 6c 63 26 26 22 6b 6f 22 21 3d 3d 65 2e 6c 63 7c 7c 28 65 2e 6c 61 62 65 6c 5f 62 6c 6f 63 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 69 5f 28 22 34 61 62 3a 64 61 64 37 37 33 36 30 22 29 3b 76 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 5f 69 5f 28 22 34 61 62 3a 63 34 66 37 64 61 62 37 22 29 2c 30 3c 74 26 26 69 2e 70 75 73 68 28 7b 74 65 78 74 3a 22 2c 20 22 7d 29 2c 69 2e 70 75 73 68 28 7b 68 69 67 68 6c 69 67 68 74 65 64 3a 21 21 65 2e 68 6c 2c 74 65 Data Ascii: ),_r_(e.text)}).join(", ")))),!e.labels\|\|"zh"!==e.lc&&"xt"!==e.lc&&"ja"!==e.lc&&"ko"!==e.lc\|\|(e.label_blocks=function(e){_i_("4ab:dad77360");var i=[];return e.forEach(function(e,t){_i_("4ab:c4f7dab7"),0<t&&i.push({text:", "}),i.push({highlighted:!!e.hl,te
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 6f 6e 4e 61 6d 65 2c 71 75 65 72 79 3a 5f 2e 71 75 65 72 79 2c 76 61 72 69 61 62 6c 65 73 3a 7b 69 6e 70 75 74 3a 7b 70 6c 61 63 65 49 64 3a 65 2e 70 6c 61 63 65 5f 69 64 2c 70 6c 61 63 65 53 6f 75 72 63 65 3a 65 2e 73 6f 75 72 63 65 7d 7d 7d 2c 24 2e 61 6a 61 78 28 7b 74 79 70 65 3a 73 2c 75 72 6c 3a 6e 2c 64 61 74 61 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 2c 78 68 72 46 69 65 6c 64 73 3a 7b 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 30 7d 2c 63 72 6f 73 73 44 6f 6d 61 69 6e 3a 21 30 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 5f 69 5f 28 22 34 61 62 3a 62 64 37 66 65 66 37 32 22 29 2c 65 26 26 65 2e 64 61 74 61 26 26 65 2e 64 61 74 61 2e 67 6f 6f 67 6c 65 50 6c 61 63 65 44 65 74 61 69 6c 73 26 26 Data Ascii: onName,query:_.query,variables:{input:{placeId:e.place_id,placeSource:e.source}}},$.ajax({type:s,url:n,data:JSON.stringify(e),xhrFields:{withCredentials:!0},crossDomain:!0,success:function(e,t){if(_i_("4ab:bd7fef72"),e&&e.data&&e.data.googlePlaceDetails&&
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 2e 4d 4a 28 61 2e 4d 43 28 72 5b 30 5d 29 2b 22 22 3d 3d 22 68 6f 74 65 6c 22 29 26 26 61 2e 74 72 61 63 6b 5f 65 78 70 65 72 69 6d 65 6e 74 28 22 41 45 4a 50 4f 54 49 4b 53 42 4f 45 51 43 22 29 29 2c 74 2b 3d 73 5b 34 5d 29 2c 74 2b 3d 73 5b 35 5d 2c 61 2e 4d 44 28 72 5b 31 5d 29 26 26 28 74 2b 3d 73 5b 36 5d 29 2c 74 2b 3d 73 5b 37 5d 2c 61 2e 4d 44 28 72 5b 31 5d 29 26 26 28 74 2b 3d 73 5b 38 5d 29 2c 74 2b 3d 73 5b 39 5d 2c 61 2e 4d 44 28 72 5b 32 5d 29 3f 74 2b 3d 5b 73 5b 31 30 5d 2c 28 65 2e 75 6e 73 68 69 66 74 28 7b 6e 75 6d 5f 77 65 65 6b 73 3a 61 2e 4d 42 28 72 5b 32 5d 29 7d 29 2c 6e 3d 61 2e 4d 45 28 73 5b 31 31 5d 2c 61 2e 4d 42 2c 61 2e 4d 4e 2c 61 2e 4d 4f 28 61 2e 4d 43 28 72 5b 32 5d 29 2c 6e 75 6c 6c 2c 73 5b 31 31 5d 29 29 2c 65 2e 73 Data Ascii: .MJ(a.MC(r[0])+""=="hotel")&&a.track_experiment("AEJPOTIKSBOEQC")),t+=s[4]),t+=s[5],a.MD(r[1])&&(t+=s[6]),t+=s[7],a.MD(r[1])&&(t+=s[8]),t+=s[9],a.MD(r[2])?t+=[s[10],(e.unshift({num_weeks:a.MB(r[2])}),n=a.ME(s[11],a.MB,a.MN,a.MO(a.MC(r[2]),null,s[11])),e.s
2024-07-10 01:44:36 UTC	9484	IN	Data Raw: 3a 61 2e 4d 4a 28 61 2e 4d 42 28 72 5b 31 5d 29 2b 22 22 3d 3d 22 6d 69 73 73 69 6e 67 2d 64 61 74 65 73 22 29 26 26 61 2e 4d 4a 28 61 2e 4d 42 28 72 5b 31 32 5d 29 29 3f 74 2b 3d 5b 73 5b 33 5d 2c 61 2e 4d 45 28 73 5b 31 36 5d 2c 61 2e 4d 42 2c 61 2e 4d 4e 2c 6e 75 6c 6c 29 2c 73 5b 32 5d 5d 2e 6a 6f 69 6e 28 22 22 29 3a 61 2e 4d 4a 28 61 2e 4d 42 28 72 5b 31 5d 29 29 26 26 28 74 2b 3d 5b 73 5b 33 5d 2c 61 2e 4d 45 28 73 5b 35 5d 2c 61 2e 4d 42 2c 61 2e 4d 4e 2c 6e 75 6c 6c 29 2c 73 5b 32 5d 5d 2e 6a 6f 69 6e 28 22 22 29 29 2c 74 2b 3d 73 5b 31 37 5d 2c 61 2e 4d 4e 28 72 5b 30 5d 2c 74 29 2c 65 2b 3d 73 5b 31 5d 2c 61 2e 4d 4a 28 61 2e 4d 42 28 72 5b 31 33 5d 29 2b 22 22 3d 3d 22 66 6c 69 67 68 74 73 22 29 26 26 28 65 2b 3d 73 5b 32 5d 2c 74 3d 22 22 2c Data Ascii: :a.MJ(a.MB(r[1])+""=="missing-dates")&&a.MJ(a.MB(r[12]))?t+=[s[3],a.ME(s[16],a.MB,a.MN,null),s[2]].join(""):a.MJ(a.MB(r[1]))&&(t+=[s[3],a.ME(s[5],a.MB,a.MN,null),s[2]].join("")),t+=s[17],a.MN(r[0],t),e+=s[1],a.MJ(a.MB(r[13])+""=="flights")&&(e+=s[2],t="",
2024-07-10 01:44:36 UTC	12792	IN	Data Raw: 70 2d 72 6f 6f 6d 73 2d 63 6f 75 6e 74 22 2c 22 6e 6f 5f 72 6f 6f 6d 73 22 2c 22 31 22 2c 22 5c 6e 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 22 2c 27 5c 6e 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 73 62 2d 73 65 61 72 63 68 62 6f 78 5f 5f 6c 61 62 65 6c 20 73 62 2d 67 72 6f 75 70 5f 5f 66 69 65 6c 64 5f 5f 6c 61 62 65 6c 20 27 2c 22 2d 69 6e 6c 69 6e 65 22 2c 22 20 2d 73 6d 61 6c 6c 20 22 2c 27 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 27 2c 27 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 3d 22 6e 6f 5f 72 6f 6f 6d 73 5f 27 2c 27 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 2c 27 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 3d 22 6e 6f 5f 72 6f 6f 6d 73 22 5c 6e 20 20 20 20 20 Data Ascii: p-rooms-count","no_rooms","1","\n </div>\n ",'\n <label class="sb-searchbox__label sb-group__field__label ',"-inline"," -small ",'"\n ','\n for="no_rooms_','"\n ','\n for="no_rooms"\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49855	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	619	OUT	GET /static/js/error_catcher_bec_cft/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	807	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6155 Connection: close Server: nginx Date: Sat, 06 Jul 2024 08:56:36 GMT Last-Modified: Wed, 21 Dec 2022 14:29:30 GMT Expires: Mon, 05 Aug 2024 08:56:36 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "63a3184a-180b" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 172c1df55a41f1a1b144f3711399cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: EBFeIaA4V5zXrg3PD50_s0mt85jQTfallbrJZ2pKmximeYhXnxDk1g== Age: 319680
2024-07-10 01:44:36 UTC	6155	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6c 2c 5f 2c 66 29 7b 76 61 72 20 73 2c 75 3d 5b 5d 2c 6f 3d 21 21 67 28 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 76 61 72 20 65 3b 69 66 28 6c 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 74 72 79 7b 65 3d 6e 65 77 20 6c 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 72 3d 6e 65 77 20 41 72 72 61 79 28 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 2e 35 2e 30 22 2c 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 2e 34 2e 30 22 2c 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 2e 33 2e 30 22 2c 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 22 2c 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 2c 74 3d 30 3b 74 3c 72 2e 6c Data Ascii: !function(l,_,f){var s,u=[],o=!!g();function g(){var e;if(l.XMLHttpRequest)try{e=new l.XMLHttpRequest}catch(e){return!1}else for(var r=new Array("Msxml2.XMLHTTP.5.0","Msxml2.XMLHTTP.4.0","Msxml2.XMLHTTP.3.0","Msxml2.XMLHTTP","Microsoft.XMLHTTP"),t=0;t<r.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49851	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	619	OUT	GET /static/js/crossorigin_check_cft/2454015045ef79168d452ff4e7f30bdadff0aa81.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	780	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 95 Connection: close Server: nginx Date: Sat, 06 Jul 2024 08:56:36 GMT Last-Modified: Wed, 10 Apr 2019 11:21:38 GMT Expires: Mon, 05 Aug 2024 08:56:36 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "5cadd1c2-5f" X-Cache: Hit from cloudfront Via: 1.1 43244f77affffa1d8942dd025413b8d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: mwJzomgf6g5qv5euy2gF8cmlbVHhFK8Fk297zC28XhUntSM3FbBUvQ== Age: 319680
2024-07-10 01:44:36 UTC	95	IN	Data Raw: 77 69 6e 64 6f 77 2e 62 5f 63 72 6f 73 73 6f 72 69 67 69 6e 5f 73 75 70 70 6f 72 74 3d 31 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 62 5f 63 6f 72 73 5f 63 68 65 63 6b 26 26 77 69 6e 64 6f 77 2e 62 5f 63 6f 72 73 5f 63 68 65 63 6b 28 21 30 29 3b Data Ascii: window.b_crossorigin_support=1,"function"==typeof window.b_cors_check&&window.b_cors_check(!0);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49862	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	568	OUT	GET /psb/capla/static/css/client.99a1ce89.css HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	696	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 25129 Connection: close Date: Tue, 09 Jul 2024 23:28:13 GMT Last-Modified: Tue, 09 Jul 2024 19:29:12 GMT ETag: "fc002aa04432327ec98ba19372d0b101" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: 014516277c6d4e5d72ce79249c67e38e4cf3828d x-amz-version-id: EMVbxua5H1MSanQAhCw5Hg8UJMmqyzPk Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 50d1552804e5c5074606d2b5a0eb8ef8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: pIwnJ91l43BCXd0rynbRMRAQhPFzluOJQC26-5zs1vYu9wywQnjO7Q== Age: 8184 Cache-Control: public, max-age=604800 Vary: Origin
2024-07-10 01:44:36 UTC	15688	IN	Data Raw: 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 75 69 2d 74 68 65 6d 65 3d 74 72 61 76 65 6c 6c 65 72 2d 6c 69 67 68 74 5d 7b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 3a 23 38 36 38 36 38 36 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 61 6c 74 3a 23 65 37 65 37 65 37 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 62 6f 72 64 65 72 3a 23 30 30 36 63 65 34 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 64 69 73 61 62 6c 65 64 3a 23 64 39 64 39 64 39 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 62 6f 72 64 65 72 3a 23 64 34 31 31 31 65 3b 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 62 6f 72 64 65 72 3a 23 30 30 38 32 33 34 3b 2d 2d 62 75 69 5f 63 6f 6c Data Ascii: :root,[data-bui-theme=traveller-light]{--bui_color_border:#868686;--bui_color_border_alt:#e7e7e7;--bui_color_action_border:#006ce4;--bui_color_border_disabled:#d9d9d9;--bui_color_destructive_border:#d4111e;--bui_color_constructive_border:#008234;--bui_col
2024-07-10 01:44:36 UTC	9441	IN	Data Raw: 79 5f 32 5f 6c 69 6e 65 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 72 65 6d 5f 70 69 78 65 6c 29 20 2a 20 32 30 29 3b 2d 2d 62 75 69 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 2d 62 75 69 5f 66 6f 6e 74 5f 62 6f 64 79 5f 32 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 62 75 69 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 5f 31 5f 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 75 69 5f 72 65 6d 5f 70 69 78 65 6c 29 20 2a 20 31 32 29 3b 2d 2d 62 75 69 5f Data Ascii: y_2_line-height:calc(var(--bui_rem_pixel) * 20);--bui_font_body_2_font-weight:400;--bui_font_body_2_font-family:BlinkMacSystemFont,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;--bui_font_small_1_font-size:calc(var(--bui_rem_pixel) * 12);--bui_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49861	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	2561	OUT	GET /sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJ [TRUNCATED]
2024-07-10 01:44:36 UTC	1501	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 147452 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:36 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:44:15 GMT etag: "6687c06f-23ffc" X-Varnish-Storage: Malloc X-Url: /sites/default/files/js/js_XgRhdDPWb33RcpJhPMJZtlmn458nD-GlhUL5Ud4J8h4.js?scope=footer&delta=0&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 227950830 212416352 Via: 1.1 varnish (Varnish/6.6), 1.1 ba67e20db38657ee5cb05d05b3da9d70.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XO9dAlc1upErzHaEJaG5V4vXfi1U0bRYa4qvCMRzkBGLw1MwcIkHcw== Age: 70268 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:36 UTC	14883	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 20 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2f 33 2e 37 2e 31 2f 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f Data Ascii: /* @license MIT https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt //! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license */!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.expo
2024-07-10 01:44:36 UTC	10898	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 5b 5d 2c 73 3d 6e 65 28 65 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 73 5b 53 5d 3f 46 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 3d 73 28 65 2c 6e 75 6c 6c 2c 72 2c 5b 5d 29 2c 61 3d 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 61 2d 2d 29 28 69 3d 6f 5b 61 5d 29 26 26 28 65 5b 61 5d 3d 21 28 74 5b 61 5d 3d 69 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 5b 30 5d 3d 65 2c 73 28 72 2c 6e 75 6c 6c 2c 6e 2c 69 29 2c 72 5b 30 5d 3d 6e 75 6c 6c 2c 21 69 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 46 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: unction(e){var r=[],i=[],s=ne(e.replace(ve,"$1"));return s[S]?F(function(e,t,n,r){var i,o=s(e,null,r,[]),a=e.length;while(a--)(i=o[a])&&(e[a]=!(t[a]=i))}):function(e,t,n){return r[0]=e,s(r,null,n,i),r[0]=null,!i.pop()}}),has:F(function(t){return function(
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 63 65 2e 65 61 63 68 28 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 77 68 69 6c 65 28 2d 31 3c 28 6e 3d 63 65 2e 69 6e 41 72 72 61 79 28 74 2c 73 2c 6e 29 29 29 73 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 6e 3c 3d 6c 26 26 6c 2d 2d 7d 29 2c 74 68 69 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 2d 31 3c 63 65 2e 69 6e 41 72 72 61 79 28 65 2c 73 29 3a 30 3c 73 2e 6c 65 6e 67 74 68 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 26 26 28 73 3d 5b 5d 29 2c 74 68 69 73 7d 2c 64 69 73 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3d 75 3d 5b 5d 2c 73 3d 74 3d 22 22 2c 74 68 69 73 7d 2c 64 Data Ascii: n(){return ce.each(arguments,function(e,t){var n;while(-1<(n=ce.inArray(t,s,n)))s.splice(n,1),n<=l&&l--}),this},has:function(e){return e?-1<ce.inArray(e,s):0<s.length},empty:function(){return s&&(s=[]),this},disable:function(){return a=u=[],s=t="",this},d
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 68 69 73 2e 74 69 6d 65 53 74 61 6d 70 3d 65 26 26 65 2e 74 69 6d 65 53 74 61 6d 70 7c 7c 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 5b 63 65 2e 65 78 70 61 6e 64 6f 5d 3d 21 30 7d 2c 63 65 2e 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 63 65 2e 45 76 65 6e 74 2c 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3a 71 65 2c 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3a 71 65 2c 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3a 71 65 2c 69 73 53 69 6d 75 6c 61 74 65 64 3a 21 31 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3b 74 68 69 73 2e 69 73 Data Ascii: his.timeStamp=e&&e.timeStamp\|\|Date.now(),this[ce.expando]=!0},ce.Event.prototype={constructor:ce.Event,isDefaultPrevented:qe,isPropagationStopped:qe,isImmediatePropagationStopped:qe,isSimulated:!1,preventDefault:function(){var e=this.originalEvent;this.is
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 6e 20 65 29 69 66 28 69 3d 74 5b 72 3d 46 28 6e 29 5d 2c 6f 3d 65 5b 6e 5d 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6f 29 26 26 28 69 3d 6f 5b 31 5d 2c 6f 3d 65 5b 6e 5d 3d 6f 5b 30 5d 29 2c 6e 21 3d 3d 72 26 26 28 65 5b 72 5d 3d 6f 2c 64 65 6c 65 74 65 20 65 5b 6e 5d 29 2c 28 61 3d 63 65 2e 63 73 73 48 6f 6f 6b 73 5b 72 5d 29 26 26 22 65 78 70 61 6e 64 22 69 6e 20 61 29 66 6f 72 28 6e 20 69 6e 20 6f 3d 61 2e 65 78 70 61 6e 64 28 6f 29 2c 64 65 6c 65 74 65 20 65 5b 72 5d 2c 6f 29 6e 20 69 6e 20 65 7c 7c 28 65 5b 6e 5d 3d 6f 5b 6e 5d 2c 74 5b 6e 5d 3d 69 29 3b 65 6c 73 65 20 74 5b 72 5d 3d 69 7d 28 63 2c 6c 2e 6f 70 74 73 2e 73 70 65 63 69 61 6c 45 61 73 69 6e 67 29 3b 72 3c 69 3b 72 2b 2b 29 69 66 28 6e 3d 79 74 2e 70 72 65 66 69 6c 74 65 72 73 5b 72 Data Ascii: n e)if(i=t[r=F(n)],o=e[n],Array.isArray(o)&&(i=o[1],o=e[n]=o[0]),n!==r&&(e[r]=o,delete e[n]),(a=ce.cssHooks[r])&&"expand"in a)for(n in o=a.expand(o),delete e[r],o)n in e\|\|(e[n]=o[n],t[n]=i);else t[r]=i}(c,l.opts.specialEasing);r<i;r++)if(n=yt.prefilters[r
2024-07-10 01:44:36 UTC	8806	IN	Data Raw: 76 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 3d 21 30 7d 7d 69 66 28 76 2e 64 61 74 61 26 26 76 2e 70 72 6f 63 65 73 73 44 61 74 61 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 76 2e 64 61 74 61 26 26 28 76 2e 64 61 74 61 3d 63 65 2e 70 61 72 61 6d 28 76 2e 64 61 74 61 2c 76 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 29 2c 56 74 28 42 74 2c 76 2c 74 2c 54 29 2c 68 29 72 65 74 75 72 6e 20 54 3b 66 6f 72 28 69 20 69 6e 28 67 3d 63 65 2e 65 76 65 6e 74 26 26 76 2e 67 6c 6f 62 61 6c 29 26 26 30 3d 3d 63 65 2e 61 63 74 69 76 65 2b 2b 26 26 63 65 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 28 22 61 6a 61 78 53 74 61 72 74 22 29 2c 76 2e 74 79 70 65 3d 76 2e 74 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 76 2e 68 61 73 43 6f 6e 74 65 6e 74 3d 21 46 74 Data Ascii: v.crossDomain=!0}}if(v.data&&v.processData&&"string"!=typeof v.data&&(v.data=ce.param(v.data,v.traditional)),Vt(Bt,v,t,T),h)return T;for(i in(g=ce.event&&v.global)&&0==ce.active++&&ce.event.trigger("ajaxStart"),v.type=v.type.toUpperCase(),v.hasContent=!Ft
2024-07-10 01:44:36 UTC	12325	IN	Data Raw: 3d 63 2e 70 6f 73 69 74 69 6f 6e 28 29 29 2e 74 6f 70 2c 69 3d 72 2e 6c 65 66 74 29 3a 28 61 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 29 7c 7c 30 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 75 29 7c 7c 30 29 2c 76 28 74 29 26 26 28 74 3d 74 2e 63 61 6c 6c 28 65 2c 6e 2c 63 65 2e 65 78 74 65 6e 64 28 7b 7d 2c 73 29 29 29 2c 6e 75 6c 6c 21 3d 74 2e 74 6f 70 26 26 28 66 2e 74 6f 70 3d 74 2e 74 6f 70 2d 73 2e 74 6f 70 2b 61 29 2c 6e 75 6c 6c 21 3d 74 2e 6c 65 66 74 26 26 28 66 2e 6c 65 66 74 3d 74 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2b 69 29 2c 22 75 73 69 6e 67 22 69 6e 20 74 3f 74 2e 75 73 69 6e 67 2e 63 61 6c 6c 28 65 2c 66 29 3a 63 2e 63 73 73 28 66 29 7d 7d 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 6f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b Data Ascii: =c.position()).top,i=r.left):(a=parseFloat(o)\|\|0,i=parseFloat(u)\|\|0),v(t)&&(t=t.call(e,n,ce.extend({},s))),null!=t.top&&(f.top=t.top-s.top+a),null!=t.left&&(f.left=t.left-s.left+i),"using"in t?t.using.call(e,f):c.css(f)}},ce.fn.extend({offset:function(t){
2024-07-10 01:44:36 UTC	4502	IN	Data Raw: 74 28 74 5b 30 5d 29 3f 69 2f 31 30 30 3a 31 29 2c 70 61 72 73 65 46 6c 6f 61 74 28 74 5b 31 5d 29 2a 28 68 2e 74 65 73 74 28 74 5b 31 5d 29 3f 6f 2f 31 30 30 3a 31 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 69 2c 6f 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 74 2e 63 73 73 28 69 2c 6f 29 2c 31 30 29 7c 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 74 3d 3d 3d 74 2e 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 76 61 72 20 69 3d 74 5b 30 5d 3b 72 65 74 75 72 6e 20 39 3d 3d 3d 69 2e 6e 6f 64 65 54 79 70 65 3f 7b 77 69 64 74 68 3a 74 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 74 2e 68 65 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 7d Data Ascii: t(t[0])?i/100:1),parseFloat(t[1])*(h.test(t[1])?o/100:1)]}function p(i,o){return parseInt(t.css(i,o),10)\|\|0}function a(t){return null!=t&&t===t.window}function d(t){var i=t[0];return 9===i.nodeType?{width:t.width(),height:t.height(),offset:{top:0,left:0}}
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 64 74 68 3a 22 72 69 67 68 74 22 3d 3d 3d 69 2e 61 74 5b 30 5d 3f 2d 69 2e 74 61 72 67 65 74 57 69 64 74 68 3a 30 2c 67 3d 2d 32 2a 69 2e 6f 66 66 73 65 74 5b 30 5d 3b 63 3c 30 3f 28 28 6f 3d 74 2e 6c 65 66 74 2b 61 2b 64 2b 67 2b 69 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 2d 73 2d 66 29 3c 30 7c 7c 6f 3c 65 28 63 29 29 26 26 28 74 2e 6c 65 66 74 2b 3d 61 2b 64 2b 67 29 3a 70 3e 30 26 26 28 28 6e 3d 74 2e 6c 65 66 74 2d 69 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2b 61 2b 64 2b 67 2d 68 29 3e 30 7c 7c 65 28 6e 29 3c 70 29 26 26 28 74 2e 6c 65 66 74 2b 3d 61 2b 64 2b 67 29 7d 2c 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 6f 2c 6e 2c 6c 3d 69 2e 77 69 74 68 69 6e 2c 66 3d 6c 2e 6f 66 Data Ascii: dth:"right"===i.at[0]?-i.targetWidth:0,g=-2*i.offset[0];c<0?((o=t.left+a+d+g+i.collisionWidth-s-f)<0\|\|o<e(c))&&(t.left+=a+d+g):p>0&&((n=t.left-i.collisionPosition.marginLeft+a+d+g-h)>0\|\|e(n)<p)&&(t.left+=a+d+g)},top:function(t,i){var o,n,l=i.within,f=l.of
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 68 69 73 2e 5f 63 6c 6f 73 65 28 29 7d 29 2c 74 68 69 73 2e 64 65 6c 61 79 29 2c 28 69 3d 74 2e 63 68 69 6c 64 72 65 6e 28 22 2e 75 69 2d 6d 65 6e 75 22 29 29 2e 6c 65 6e 67 74 68 26 26 65 26 26 2f 5e 6d 6f 75 73 65 2f 2e 74 65 73 74 28 65 2e 74 79 70 65 29 26 26 74 68 69 73 2e 5f 73 74 61 72 74 4f 70 65 6e 69 6e 67 28 69 29 2c 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 3d 74 2e 70 61 72 65 6e 74 28 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 2c 65 2c 7b 69 74 65 6d 3a 74 7d 29 7d 2c 5f 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 73 2c 6e 2c 61 2c 75 2c 6f 3b 74 68 69 73 2e 5f 68 61 73 53 63 72 6f 6c 6c 28 29 26 26 28 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 2e 63 73 73 28 Data Ascii: his._close()}),this.delay),(i=t.children(".ui-menu")).length&&e&&/^mouse/.test(e.type)&&this._startOpening(i),this.activeMenu=t.parent(),this._trigger("focus",e,{item:t})},_scrollIntoView:function(t){var i,s,n,a,u,o;this._hasScroll()&&(i=parseFloat(e.css(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49863	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	576	OUT	GET /psb/capla/static/css/256aa323.65a94ca2.chunk.css HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:36 UTC	624	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 478 Connection: close Date: Wed, 10 Jul 2024 01:44:37 GMT Last-Modified: Thu, 04 Jul 2024 12:27:48 GMT ETag: "a988fdeaa83dd606372e5b70bc69d687" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: foo x-amz-version-id: Gnufg2egVZPIqXCKAPLMvhyqOajETIkH Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 503c2bd0b7e26f747c58a5188346ef54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Y_KyIQbXw_bofUQEqJTYAVzTypwdBt80O9bdAcxnZIQFl_kdv2tuHA== Cache-Control: public, max-age=604800 Vary: Origin
2024-07-10 01:44:36 UTC	478	IN	Data Raw: 2e 61 32 37 33 31 30 30 36 38 61 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 75 70 70 65 72 2d 61 6c 70 68 61 7d 2e 62 36 61 63 61 31 34 37 39 35 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 68 65 62 72 65 77 7d 2e 61 66 63 39 35 66 39 39 62 30 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 68 69 6e 64 69 7d 2e 61 39 32 38 65 30 36 65 33 62 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6c 6f 77 65 72 2d 67 72 65 65 6b 7d 2e 64 30 64 36 39 63 65 62 36 34 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 75 70 70 65 72 2d 6c 61 74 69 6e 7d 2e 65 34 62 37 65 63 31 64 38 63 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 65 62 33 64 37 62 36 62 35 62 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a Data Ascii: .a27310068a{list-style-type:upper-alpha}.b6aca14795{list-style-type:hebrew}.afc95f99b0{list-style-type:hindi}.a928e06e3b{list-style-type:lower-greek}.d0d69ceb64{list-style-type:upper-latin}.e4b7ec1d8c{font-size:14px}.eb3d7b6b5b{padding:0 20px;font-family:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49865	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	2561	OUT	GET /sites/default/files/js/js_VkmDSMYWYbk1GzPhN1O6VYri69gfmqRRB6Kq_M8CTg8.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJ [TRUNCATED]
2024-07-10 01:44:36 UTC	1499	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11424 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:36 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:49:26 GMT etag: "6687c1a6-2ca0" X-Varnish-Storage: Malloc X-Url: /sites/default/files/js/js_VkmDSMYWYbk1GzPhN1O6VYri69gfmqRRB6Kq_M8CTg8.js?scope=footer&delta=4&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 227950832 215073348 Via: 1.1 varnish (Varnish/6.6), 1.1 ba67e20db38657ee5cb05d05b3da9d70.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZFTWhORdpMcncYkNRNQh4chuA93rpv-_lE881s78ZCpyCJiuCKwOYA== Age: 70268 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:36 UTC	11424	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 47 4e 55 2d 47 50 4c 2d 32 2e 30 2d 6f 72 2d 6c 61 74 65 72 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 75 70 61 6c 2e 6f 72 67 2f 6c 69 63 65 6e 73 69 6e 67 2f 66 61 71 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 2c 44 72 75 70 61 6c 2c 77 69 6e 64 6f 77 2c 6f 6e 63 65 29 7b 44 72 75 70 61 6c 2e 62 65 68 61 76 69 6f 72 73 2e 73 6f 63 69 61 6c 4d 65 64 69 61 49 6d 70 72 6f 76 65 6d 65 6e 74 73 3d 7b 61 74 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 20 61 74 74 61 63 68 28 63 6f 6e 74 65 78 74 29 7b 76 61 72 20 73 68 61 72 65 42 75 74 74 6f 6e 73 57 72 61 70 70 65 72 3d 24 28 27 2e 73 68 61 72 65 2d 62 75 74 74 6f 6e 73 27 2c 63 6f 6e 74 65 78 74 29 3b 76 61 72 20 73 68 61 72 65 42 75 74 74 6f 6e 73 4c 69 73 74 3d 73 68 Data Ascii: /* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */(function($,Drupal,window,once){Drupal.behaviors.socialMediaImprovements={attach:function attach(context){var shareButtonsWrapper=$('.share-buttons',context);var shareButtonsList=sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49864	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:36 UTC	2561	OUT	GET /sites/default/files/js/js_85stE81WnP63Pe_YSFFXekOQfuabHUZm1w0Qt0kOxRM.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJ [TRUNCATED]
2024-07-10 01:44:36 UTC	1499	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 50884 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:36 GMT Vary: Accept-Encoding last-modified: Fri, 05 Jul 2024 09:49:27 GMT etag: "6687c1a7-c6c4" X-Varnish-Storage: Malloc X-Url: /sites/default/files/js/js_85stE81WnP63Pe_YSFFXekOQfuabHUZm1w0Qt0kOxRM.js?scope=footer&delta=2&language=en-us&theme=booking&include=eJxtUgtu7CAMvBCEI0UGnMRdByPspM07_SO73U27qoQs_Bl7zAA5m0A5AnxfhqlJMZfBgOHAFiIusJM0dQz_jnAap4cariGCoosiNypziBv5pPrue2uwIzM2zzQv5m3B9ULNLBH4F-jj6pFE0o2wNvGTpE39AiX3Vlc9pJs36ac6_DKmcgu5bRV4-HadGhipUdJn5oq4nfBTw90Oq-SNL2YskL1SxgjNRyjlx9jZVo_FyA6fmDqFd14_Cs7mf-aLGE2UOhcpr4KJYQ6nGU7yI3zA1y_QmXqbWaHB3KAurwWvyLCVukUmXTB3_Q7ZbMykSXZsR5CCSdg9iI64RswhQT0J9ZfJKI_YOBFyDg21SlHa0d-TL14qiYD9ipnA09rV2rvExS4dNTXhvtDse3LujbS_aHNJGj455yY1bmZ99BO1af80SnOh0gUWNqqub_CJoyK0tIS74x_OC7Ug5BN3j_4HmRUcmA X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 224897307 220852129 Via: 1.1 varnish (Varnish/6.6), 1.1 f7aba4a0337c5f98c4703e2b10f1940a.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 27EqMAHLVbic_-Q2ATRQHV7pfS47txqLD9EGhgfaee4iSwb01UrOaA== Age: 27068 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:36 UTC	14885	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 20 47 4e 55 2d 47 50 4c 2d 32 2e 30 2d 6f 72 2d 6c 61 74 65 72 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 75 70 61 6c 2e 6f 72 67 2f 6c 69 63 65 6e 73 69 6e 67 2f 66 61 71 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 2c 44 72 75 70 61 6c 2c 6f 6e 63 65 29 7b 44 72 75 70 61 6c 2e 62 65 68 61 76 69 6f 72 73 2e 63 6f 6f 6b 69 65 70 72 6f 46 6f 63 75 73 48 61 6e 64 6c 65 72 3d 7b 61 74 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 20 61 74 74 61 63 68 28 29 7b 76 61 72 20 73 6b 69 70 54 6f 43 6f 6e 74 65 6e 74 4c 69 6e 6b 3d 24 28 27 23 73 6b 69 70 2d 74 6f 2d 63 6f 6e 74 65 6e 74 27 29 3b 24 28 6f 6e 63 65 28 27 63 6c 69 63 6b 46 6f 63 75 73 48 61 6e 64 6c 65 72 27 2c 27 62 6f 64 79 27 29 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c Data Ascii: /* @license GNU-GPL-2.0-or-later https://www.drupal.org/licensing/faq */(function($,Drupal,once){Drupal.behaviors.cookieproFocusHandler={attach:function attach(){var skipToContentLink=$('#skip-to-content');$(once('clickFocusHandler','body')).on('click',
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 6e 74 72 79 29 7b 69 66 28 65 6e 74 72 79 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 29 7b 76 61 72 20 65 6e 74 69 74 79 49 64 3d 65 6e 74 72 79 2e 74 61 72 67 65 74 2e 64 61 74 61 73 65 74 2e 65 6e 74 69 74 79 49 64 3b 76 61 72 20 65 6e 74 69 74 79 54 79 70 65 3d 65 6e 74 72 79 2e 74 61 72 67 65 74 2e 64 61 74 61 73 65 74 2e 65 6e 74 69 74 79 54 79 70 65 3b 76 61 72 20 75 73 65 72 49 64 3d 65 6e 74 72 79 2e 74 61 72 67 65 74 2e 64 61 74 61 73 65 74 2e 75 73 65 72 49 64 3b 76 61 72 20 61 74 74 72 69 62 75 74 69 6f 6e 4c 61 62 65 6c 3d 65 6e 74 72 79 2e 74 61 72 67 65 74 2e 64 61 74 61 73 65 74 2e 61 74 74 72 69 62 75 74 69 6f 6e 4c 61 62 65 6c 3b 76 61 72 20 63 6f 6e 74 65 6e 74 54 69 74 6c 65 3d 65 6e 74 72 79 Data Ascii: ach(function(entry){if(entry.isIntersecting){var entityId=entry.target.dataset.entityId;var entityType=entry.target.dataset.entityType;var userId=entry.target.dataset.userId;var attributionLabel=entry.target.dataset.attributionLabel;var contentTitle=entry
2024-07-10 01:44:36 UTC	16384	IN	Data Raw: 73 73 26 26 21 65 6c 65 6d 65 6e 74 29 73 65 74 74 69 6e 67 73 2e 70 72 6f 67 72 65 73 73 3d 66 61 6c 73 65 3b 63 6f 6e 73 74 20 61 6a 61 78 3d 6e 65 77 20 44 72 75 70 61 6c 2e 41 6a 61 78 28 62 61 73 65 2c 65 6c 65 6d 65 6e 74 2c 73 65 74 74 69 6e 67 73 29 3b 61 6a 61 78 2e 69 6e 73 74 61 6e 63 65 49 6e 64 65 78 3d 44 72 75 70 61 6c 2e 61 6a 61 78 2e 69 6e 73 74 61 6e 63 65 73 2e 6c 65 6e 67 74 68 3b 44 72 75 70 61 6c 2e 61 6a 61 78 2e 69 6e 73 74 61 6e 63 65 73 2e 70 75 73 68 28 61 6a 61 78 29 3b 72 65 74 75 72 6e 20 61 6a 61 78 3b 7d 3b 44 72 75 70 61 6c 2e 61 6a 61 78 2e 69 6e 73 74 61 6e 63 65 73 3d 5b 5d 3b 44 72 75 70 61 6c 2e 61 6a 61 78 2e 65 78 70 69 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 72 75 70 61 6c 2e 61 6a 61 Data Ascii: ss&&!element)settings.progress=false;const ajax=new Drupal.Ajax(base,element,settings);ajax.instanceIndex=Drupal.ajax.instances.length;Drupal.ajax.instances.push(ajax);return ajax;};Drupal.ajax.instances=[];Drupal.ajax.expired=function(){return Drupal.aja
2024-07-10 01:44:36 UTC	3231	IN	Data Raw: 73 65 2e 73 65 6c 65 63 74 6f 72 3b 77 68 69 6c 65 28 24 28 73 63 72 6f 6c 6c 54 61 72 67 65 74 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3d 3d 3d 30 26 26 24 28 73 63 72 6f 6c 6c 54 61 72 67 65 74 29 2e 70 61 72 65 6e 74 28 29 29 73 63 72 6f 6c 6c 54 61 72 67 65 74 3d 24 28 73 63 72 6f 6c 6c 54 61 72 67 65 74 29 2e 70 61 72 65 6e 74 28 29 3b 69 66 28 6f 66 66 73 65 74 2e 74 6f 70 2d 31 30 3c 24 28 73 63 72 6f 6c 6c 54 61 72 67 65 74 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 29 24 28 73 63 72 6f 6c 6c 54 61 72 67 65 74 29 2e 61 6e 69 6d 61 74 65 28 7b 73 63 72 6f 6c 6c 54 6f 70 3a 6f 66 66 73 65 74 2e 74 6f 70 2d 31 30 7d 2c 35 30 30 29 3b 7d 7d 3b 63 6f 6e 73 74 20 73 74 6f 70 45 76 65 6e 74 3d 28 78 68 72 2c 73 65 74 74 69 6e 67 73 29 3d 3e 7b 72 65 74 75 72 Data Ascii: se.selector;while($(scrollTarget).scrollTop()===0&&$(scrollTarget).parent())scrollTarget=$(scrollTarget).parent();if(offset.top-10<$(scrollTarget).scrollTop())$(scrollTarget).animate({scrollTop:offset.top-10},500);}};const stopEvent=(xhr,settings)=>{retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49837	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:37 UTC	558	OUT	GET /shared/analytics.47cf758c4d585426c29d.js HTTP/1.1 Host: try.abtasty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:37 UTC	682	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 21719 Connection: close Date: Tue, 02 Jul 2024 19:27:59 GMT Last-Modified: Tue, 02 Jul 2024 19:18:18 GMT ETag: "1e8f4ce1eef35fd6db9896a784a5e95b" x-amz-server-side-encryption: AES256 Cache-Control: s-maxage=31536000,max-age=31536000 x-amz-version-id: fXC2sfksIBl.AJKANcm9CAm4rzHQ6Dyi Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 df64c46f895e81567061da0488368914.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: tVK0jc5REXztQREnpIr5AfHrYn39_wgjJQjVVUPyZh6ieICMbDr8Lw== Age: 627399
2024-07-10 01:44:37 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 67 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 61 67 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 35 33 5d 2c 7b 32 30 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 41 54 5f 48 49 54 5f 4c 41 42 45 4c 3a 28 29 3d 3e 62 65 2c 48 69 74 54 79 70 65 3a 28 29 3d 3e 61 2e 59 51 2c 61 67 67 72 65 67 61 74 65 41 63 74 69 6f 6e 54 72 61 63 6b 69 6e 67 3a 28 29 3d 3e 45 65 2c 64 69 73 70 61 74 63 68 42 61 74 63 68 3a 28 29 3d 3e 59 2c 64 69 73 70 61 74 63 68 48 69 74 3a 28 29 3d 3e 76 65 2c 67 65 74 43 75 72 72 65 6e 74 53 63 72 6f 6c 6c 50 65 72 63 65 6e 74 3a 28 29 3d 3e 54 65 2c 6e 6f 74 69 66 79 48 69 74 3a 28 29 3d 3e 71 Data Ascii: "use strict";(self.webpackChunktag=self.webpackChunktag\|\|[]).push([[153],{206:(e,t,n)=>{n.r(t),n.d(t,{AT_HIT_LABEL:()=>be,HitType:()=>a.YQ,aggregateActionTracking:()=>Ee,dispatchBatch:()=>Y,dispatchHit:()=>ve,getCurrentScrollPercent:()=>Te,notifyHit:()=>q
2024-07-10 01:44:37 UTC	5335	IN	Data Raw: 75 73 74 6f 6d 20 76 61 6c 75 65 73 22 2c 72 65 71 75 69 72 65 64 3a 21 30 2c 74 79 70 65 73 3a 5b 7b 74 79 70 65 3a 61 2e 71 7a 2e 4f 62 6a 65 63 74 7d 5d 7d 7d 29 3b 72 65 74 75 72 6e 20 72 2e 6c 65 6e 67 74 68 3f 28 66 28 61 2e 59 51 2e 75 73 61 67 65 2c 72 2c 6e 29 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 29 3a 67 28 6e 2c 21 31 2c 22 68 74 74 70 73 3a 2f 2f 61 72 69 61 6e 65 2e 61 62 74 61 73 74 79 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 22 29 7d 3b 76 61 72 20 63 65 3d 6e 28 33 34 37 36 29 2c 6c 65 3d 6e 28 36 33 33 32 29 3b 63 6f 6e 73 74 20 70 65 3d 65 3d 3e 7b 28 30 2c 6c 65 2e 6a 33 29 28 7b 64 65 70 72 65 63 61 74 65 3a 22 77 69 6e 64 6f 77 2e 5f 61 62 74 61 73 74 79 2e 70 75 73 68 28 29 22 2c 65 6c 3a 60 70 75 73 68 2d 24 7b 65 Data Ascii: ustom values",required:!0,types:[{type:a.qz.Object}]}});return r.length?(f(a.YQ.usage,r,n),Promise.resolve()):g(n,!1,"https://ariane.abtasty.com/analytics")};var ce=n(3476),le=n(6332);const pe=e=>{(0,le.j3)({deprecate:"window._abtasty.push()",el:`push-${e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49829	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:37 UTC	597	OUT	GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1 Host: try.abtasty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:37 UTC	828	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 4265 Connection: close access-control-allow-origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: access-control-allow-origin Access-Control-Max-Age: 3000 Last-Modified: Mon, 08 Jul 2024 12:19:42 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 1ZhAO7QtEJbh4B.C8Bu7YWNjQcb5L9gN Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 10 Jul 2024 01:44:37 GMT Cache-Control: s-maxage=86400,max-age=30 ETag: "a895dc1dddcc9e033aa41147e7a69cd2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fd9d525f4633063393693172d96013ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2V7GAwv6Cpqavb7GXoI9_ydODQiSkOLPQ0LIIaAx1KMibLtDhm1KVw== Age: 36582
2024-07-10 01:44:37 UTC	4265	IN	Data Raw: 7b 0a 20 20 22 31 31 38 37 35 39 37 2e 31 34 37 33 35 36 39 2e 6a 73 6f 6e 22 3a 20 22 37 31 63 64 31 32 63 64 66 37 37 65 62 63 62 37 35 30 63 66 66 39 31 61 39 62 62 61 36 66 30 34 2f 31 31 38 37 35 39 37 2e 31 34 37 33 35 36 39 2e 6a 73 6f 6e 3f 61 66 64 33 62 36 37 33 37 35 65 33 34 32 37 32 61 65 38 66 35 63 38 39 63 65 36 63 64 32 61 61 22 2c 0a 20 20 22 31 31 38 37 35 39 37 2e 31 34 37 35 37 37 36 2e 6a 73 6f 6e 22 3a 20 22 37 31 63 64 31 32 63 64 66 37 37 65 62 63 62 37 35 30 63 66 66 39 31 61 39 62 62 61 36 66 30 34 2f 31 31 38 37 35 39 37 2e 31 34 37 35 37 37 36 2e 6a 73 6f 6e 3f 61 66 64 33 62 36 37 33 37 35 65 33 34 32 37 32 61 65 38 66 35 63 38 39 63 65 36 63 64 32 61 61 22 2c 0a 20 20 22 31 32 33 30 31 38 36 2e 31 35 32 33 39 38 39 2e 6a 73 Data Ascii: { "1187597.1473569.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1473569.json?afd3b67375e34272ae8f5c89ce6cd2aa", "1187597.1475776.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1475776.json?afd3b67375e34272ae8f5c89ce6cd2aa", "1230186.1523989.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49866	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:37 UTC	601	OUT	GET /static/css/static_cft.iq_ltr/ab3ca68bec5c969c1d26aca0ec2c584dfa312105.css HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:37 UTC	795	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 52016 Connection: close Server: nginx Date: Thu, 13 Jun 2024 13:29:07 GMT Last-Modified: Fri, 28 Jul 2023 11:29:03 GMT ETag: "64c3a67f-cb30" Expires: Sat, 13 Jul 2024 13:29:07 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9a97e41242551c9a56be1311e4d3db70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: qIC3m2md1Yixh6p2q1H6QZIAPMKHHKhlkoa-_Rtm407TaXWTDJKURg== Age: 2290530
2024-07-10 01:44:37 UTC	16384	IN	Data Raw: 23 64 6f 63 20 23 72 69 67 68 74 7b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 30 20 32 65 6d 20 32 34 30 70 78 7d 2e 62 6f 78 7b 70 61 64 64 69 6e 67 3a 30 20 30 20 33 70 78 20 30 7d 2e 62 6f 78 20 75 6c 20 6c 69 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 7d 23 64 6f 63 20 23 72 69 67 68 74 20 2e 62 6f 78 20 68 33 2c 23 64 6f 63 20 23 72 69 67 68 74 20 2e 6f 70 65 6e 69 6e 67 48 6f 75 72 73 20 68 33 2c 23 64 6f 63 20 23 72 69 67 68 74 20 23 74 6f 70 74 65 6e 20 68 33 2c 23 64 6f 63 20 23 72 69 67 68 74 20 2e 68 6f 74 65 6c 6c 69 73 74 20 68 33 2c 23 64 6f 63 20 2e 62 6f 78 20 68 33 7b 70 61 64 64 69 6e 67 3a 39 70 78 3b 6d 61 72 67 69 6e 3a 30 7d 23 64 6f 63 20 23 72 69 67 68 74 20 68 34 2c 23 64 6f 63 20 75 6c 20 6c 69 20 68 34 Data Ascii: #doc #right{border:0;margin:0 0 2em 240px}.box{padding:0 0 3px 0}.box ul li{padding:0;margin:0}#doc #right .box h3,#doc #right .openingHours h3,#doc #right #topten h3,#doc #right .hotellist h3,#doc .box h3{padding:9px;margin:0}#doc #right h4,#doc ul li h4
2024-07-10 01:44:37 UTC	16384	IN	Data Raw: 2e 65 6d 61 69 6c 5f 74 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6d 61 72 67 69 6e 3a 2d 35 70 78 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 33 70 78 20 35 70 78 7d 64 69 76 2e 66 6c 61 73 68 64 65 61 6c 73 6c 61 6e 64 69 6e 67 20 2e 6e 65 77 73 6c 65 74 74 65 72 5f 62 75 74 74 6f 6e 2c 64 69 76 2e 66 6c 61 73 68 64 65 61 6c 73 6c 61 6e 64 69 6e 67 20 2e 6e 65 77 73 6c 65 74 74 65 72 5f 62 75 74 74 6f 6e 5f 64 65 61 6c 73 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 7d 64 69 76 2e 66 6c 61 73 68 64 65 61 6c 73 6c 61 6e 64 69 6e 67 20 2e 6e 65 77 73 6c 65 74 74 65 72 5f 62 75 74 74 6f 6e 5f 64 65 61 6c 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 Data Ascii: .email_ta{font-size:1.3em;font-weight:bold;margin:-5px 0 0 0;padding:2px 3px 5px}div.flashdealslanding .newsletter_button,div.flashdealslanding .newsletter_button_deals{float:left;margin-top:12px}div.flashdealslanding .newsletter_button_deals{display:none
2024-07-10 01:44:37 UTC	16384	IN	Data Raw: 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 77 68 69 74 65 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 77 68 69 74 65 29 7d 2e 75 6e 73 75 62 48 65 72 6f 2d 73 75 62 6d 69 74 20 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 31 63 32 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 77 68 69 74 65 29 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 73 69 7a Data Ascii: x solid var(--bui_color_white);background-color:var(--bui_color_white)}.unsubHero-submit a{background-color:#0071c2;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;color:var(--bui_color_white);float:right;width:100%;font-siz
2024-07-10 01:44:37 UTC	2864	IN	Data Raw: 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 74 61 74 69 63 5f 63 6f 6e 74 65 6e 74 2d 6f 66 66 69 63 65 73 20 2e 74 64 2d 6f 66 66 69 63 65 6e 61 6d 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 73 74 61 74 69 63 5f 63 6f 6e 74 65 6e 74 2d 6f 66 66 69 63 65 73 20 2e 74 64 2d 6f 66 66 69 63 65 63 6f 6e 74 61 63 74 20 74 61 62 6c 65 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 74 61 74 69 63 5f 63 6f 6e 74 65 6e 74 2d 6f 66 66 69 63 65 73 20 2e 74 64 2d 6f 66 66 69 63 65 63 6f 6e 74 61 63 74 20 74 64 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 77 69 64 74 68 3a 35 30 25 7d Data Ascii: ertical-align:middle;padding-right:0!important}.static_content-offices .td-officename{font-weight:bold;vertical-align:top}.static_content-offices .td-officecontact table{width:100%}.static_content-offices .td-officecontact td{vertical-align:top;width:50%}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49867	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:37 UTC	580	OUT	GET /libs/privacy-consent/releases/2.1.55/customer/cookie-banner.min.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:37 UTC	809	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11709 Connection: close Server: nginx Date: Mon, 17 Jun 2024 05:53:01 GMT Last-Modified: Wed, 22 May 2024 16:50:25 GMT ETag: "664e2251-2dbd" Expires: Wed, 17 Jul 2024 05:53:01 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 192147d605f496db0417cf30a0012092.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Kj3cZRYwDWViqRYQRieulCesUyauPG_o6Y5VTlkjiAOIRFYe2Q8Mqw== Age: 1972296
2024-07-10 01:44:37 UTC	11709	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 65 2c 63 3d 21 31 2c 73 3d 22 43 30 30 30 32 22 2c 64 3d 22 43 30 30 30 34 22 2c 75 3d 7b 61 6e 61 6c 79 74 69 63 61 6c 3a 73 2b 22 25 33 41 31 22 2c 6d 61 72 6b 65 74 69 6e 67 3a 64 2b 22 25 33 41 31 22 7d 2c 69 3d 22 25 32 43 22 2c 61 3d 22 62 6b 6e 67 5f 77 76 70 63 22 2c 74 3d 28 2d 31 3c 28 6e 3d 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3a 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 2f 22 29 3f 6e 2e 73 70 6c 69 74 28 22 2f 22 29 5b 32 5d 3a 6e 2e 73 70 6c 69 74 28 22 2f 22 29 5b 30 5d 29 2e 73 70 6c 69 74 28 22 3a 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 2c 6f 3d 2f 62 6f 6f 6b 69 6e 67 5c 2e 63 Data Ascii: !function(){var n,e,c=!1,s="C0002",d="C0004",u={analytical:s+"%3A1",marketing:d+"%3A1"},i="%2C",a="bkng_wvpc",t=(-1<(n=window&&window.location?window.location.href:"").indexOf("/")?n.split("/")[2]:n.split("/")[0]).split(":")[0].split("?")[0],o=/booking\.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49868	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:37 UTC	2142	OUT	POST /core/modules/statistics/statistics.php HTTP/1.1 Host: partner.booking.com Connection: keep-alive Content-Length: 10 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://partner.booking.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJ [TRUNCATED]
2024-07-10 01:44:37 UTC	10	OUT	Data Raw: 6e 69 64 3d 31 33 36 38 34 36 Data Ascii: nid=136846
2024-07-10 01:44:37 UTC	823	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:37 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto x-webserver: webserver/1 X-Varnish-Storage: Malloc X-Url: /core/modules/statistics/statistics.php X-Host: partner.booking.com X-Varnish: 225785710 Via: 1.1 varnish (Varnish/6.6), 1.1 7bf0fe9eca07efaffe6363062053f386.cloudfront.net (CloudFront) X-Varnish-Cache: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 5xa72L-4O0WE0evvoPyjSRe-_wimJaeWPhaIjS8SDMf74focVL3pCQ== Age: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49869	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:37 UTC	653	OUT	GET /static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.png HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:37 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 522 Connection: close Server: nginx Date: Sat, 06 Jul 2024 14:45:42 GMT Last-Modified: Mon, 07 Sep 2020 09:08:23 GMT Expires: Mon, 05 Aug 2024 14:45:42 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "5f55f887-20a" X-Cache: Hit from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: I0k_uJxeta40HsNprgoLWyvgQnxuEr-tbo6Lcj-XyAOk_KpEblAwzg== Age: 298735
2024-07-10 01:44:37 UTC	522	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 7e 50 4c 54 45 00 1e 6b 00 1f 6b a8 0b 34 d4 da e7 44 5a 92 22 3d 7f ee f0 f5 cc d2 e1 bf 73 8e aa 60 80 15 30 78 00 1d 6a 00 1e 6b ca 08 28 ff ff ff eb a3 ae d7 46 5e e5 83 93 1f 3a 7e c5 67 80 df e3 ed d1 27 43 fc ef f2 ef f1 f6 60 72 a3 de 65 78 f2 c1 c9 7f 8f b5 ce 18 35 9f ab c7 f8 e0 e4 f9 e0 e4 10 2c 75 e4 84 94 40 56 90 bf c7 da d1 27 42 db 55 6b 8f 9d be 50 64 99 d4 75 8a da 55 6b 1e 44 ae de 00 00 00 0c 74 52 4e 53 df bf bf bf ef e7 ef ef bf bf bf af 8a ac 5a 64 00 00 01 2f 49 44 41 54 48 c7 e5 d5 49 72 83 30 14 45 d1 ef 60 a7 d7 47 10 d1 08 30 d8 10 a7 d9 ff 06 83 80 b2 d0 93 06 61 96 8a df 0c 74 cf 08 28 68 47 38 e6 44 4c 7b 63 3e 90 bf Data Ascii: PNGIHDR00`~PLTEkk4DZ"=s`0xjk(F^:~g'C`rex5,u@V'BUkPduUkDtRNSZd/IDATHIr0E`G0at(hG8DL{c>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49871	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:37 UTC	612	OUT	GET /static/js/sp-on-maps_cft/1d69e13e40d03fc59f58d76b31735d5d8c37416a.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:37 UTC	808	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9744 Connection: close Server: nginx Date: Tue, 11 Jun 2024 07:27:18 GMT Last-Modified: Fri, 19 Apr 2024 08:49:11 GMT ETag: "66223007-2610" Expires: Thu, 11 Jul 2024 07:27:18 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9b253b6508bd634345864697c48abb50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: as76eempwdx0TSvsTRfrcr03k-w9U_HIeJSsSAKhtJ4WF3NrfWgKLg== Age: 2485039
2024-07-10 01:44:37 UTC	9744	IN	Data Raw: 76 61 72 20 5f 69 5f 3d 74 68 69 73 2e 5f 69 5f 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 72 5f 3d 74 68 69 73 2e 5f 72 5f 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 3b 42 2e 64 65 66 69 6e 65 28 22 75 74 69 6c 73 2f 62 69 6e 64 2d 61 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 5f 69 5f 28 22 66 65 33 3a 63 61 32 30 64 35 36 32 22 29 2c 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 5f 69 5f 28 22 66 65 33 3a 66 65 37 32 33 37 31 31 22 29 2c 65 29 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 5b 74 5d 26 26 28 65 5b 74 5d 3d 65 5b 74 5d 2e 62 69 6e 64 28 65 29 29 3b 72 65 74 75 72 6e 20 5f 72 5f 28 65 29 7d 2c 5f 72 5f 28 29 7d 29 2c 42 Data Ascii: var _i_=this._i_\|\|function(){},_r_=this._r_\|\|function(e){return e};B.define("utils/bind-all",function(e,t,n){_i_("fe3:ca20d562"),n.exports=function(e){for(var t in _i_("fe3:fe723711"),e)"function"==typeof e[t]&&(e[t]=e[t].bind(e));return _r_(e)},_r_()}),B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49874	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:37 UTC	2045	OUT	GET /en-us/sidebar-banner-ajax-render/136846/node HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/html, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJ [TRUNCATED]
2024-07-10 01:44:38 UTC	1071	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:38 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto cache-control: must-revalidate, no-cache, private content-language: en-us x-frame-options: SAMEORIGIN expires: -1 x-generator: Drupal 10 (https://www.drupal.org) content-security-policy: report-uri /report-csp-violation; upgrade-insecure-requests x-xss-protection: 1; mode=block pragma: no-cache x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /en-us/sidebar-banner-ajax-render/136846/node X-Host: partner.booking.com X-Varnish: 225660832 Via: 1.1 varnish (Varnish/6.6), 1.1 32db37931b5639dc27ebaba3ad4f3d2c.cloudfront.net (CloudFront) X-Varnish-Cache: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: AxoOYdne9KbPKlNuWwM-T6xy4v6XcketdoM8uVwsibEOaMN2j2BW2A== Age: 0 Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49873	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:37 UTC	2010	OUT	GET /themes/custom/booking/js/libraries/addtoany.min.js?v=1.0.0 HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; ABTastySession=mrasn=&lp=https%253A%252F%252Fpartner.booking.com%252Fen-us%253Futm_source%253Dextranet_login_page; ABTasty=uid=y5fdnmttst6yv4bh&fst=1720575873099&pst=-1&cst=1720575873099&ns=1&pvt=1&pvis=1&th=; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A34+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJ [TRUNCATED]
2024-07-10 01:44:37 UTC	946	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3003 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:37 GMT Vary: Accept-Encoding last-modified: Thu, 04 Jul 2024 09:16:17 GMT etag: "66866861-bbb" X-Varnish-Storage: Malloc X-Url: /themes/custom/booking/js/libraries/addtoany.min.js?v=1.0.0 X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 230299060 218696309 Via: 1.1 varnish (Varnish/6.6), 1.1 02cd8164e89a1598d410a9198582d47c.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: V8B6w1Abhze68Z_BDHgXdIPxTtiG0QamU_qpnUyIA4D0lf3JzQwvQA== Age: 58271 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff
2024-07-10 01:44:37 UTC	3003	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 76 61 72 20 6e 2c 64 2c 73 2c 6c 2c 63 2c 75 2c 66 2c 6d 2c 65 2c 61 2c 74 2c 70 2c 79 2c 76 2c 68 3d 22 2e 45 70 35 62 53 45 6d 72 22 2c 5f 3d 6f 2e 68 65 61 64 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 5b 5d 2e 69 6e 64 65 78 4f 66 26 26 5f 26 26 28 69 2e 61 32 61 3d 69 2e 61 32 61 7c 7c 7b 7d 2c 6e 3d 69 2e 61 32 61 5f 63 6f 6e 66 69 67 3d 69 2e 61 32 61 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 2c 65 3d 28 64 3d 6f 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 26 26 64 2e 73 72 63 3f 64 2e 73 72 63 3a 22 22 2c 4e 6f 64 65 4c 69 73 74 26 26 4e 6f 64 65 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 26 26 28 69 2e 61 32 61 2e 69 6e 69 74 3d 66 Data Ascii: !function(o,i){function r(){}var n,d,s,l,c,u,f,m,e,a,t,p,y,v,h=".Ep5bSEmr",_=o.head;"function"==typeof[].indexOf&&_&&(i.a2a=i.a2a\|\|{},n=i.a2a_config=i.a2a_config\|\|{},e=(d=o.currentScript)&&d.src?d.src:"",NodeList&&NodeList.prototype.forEach&&(i.a2a.init=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49842	18.157.249.141	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:37 UTC	916	OUT	POST /api2/event/booking_prod HTTP/1.1 Host: bookingdotcomb2b.germany-2.evergage.com Connection: keep-alive Content-Length: 1949 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBTGCORS=UixvskPVprCQAO6zS6GwFCVMe81yrw8mtEDMYUa7SiFgXCH/7pqEsp8Wx+JGjPXMQOAElcYqf1GB6xs1f2QKHIfaohAWLs4JMP3lz7Z1AruxSaYNtLcokF17VLRrmHE8dVNh9CBsiNyM08irENu7C14Ana2KhBNPv723PdymJEtRWeZj6GI=
2024-07-10 01:44:37 UTC	1949	OUT	Data Raw: 65 76 65 6e 74 3d 25 37 42 25 32 32 73 6f 75 72 63 65 25 32 32 25 33 41 25 37 42 25 32 32 70 61 67 65 54 79 70 65 25 32 32 25 33 41 25 32 32 4e 65 77 73 25 32 30 61 6e 64 25 32 30 49 6e 73 69 67 68 74 73 25 32 30 41 72 74 69 63 6c 65 25 32 32 25 32 43 25 32 32 6c 6f 63 61 6c 65 25 32 32 25 33 41 25 32 32 65 6e 5f 55 53 25 32 32 25 32 43 25 32 32 75 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 61 72 74 6e 65 72 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 25 32 46 65 6e 2d 75 73 25 32 46 63 6c 69 63 6b 2d 6d 61 67 61 7a 69 6e 65 25 32 46 69 6e 64 75 73 74 72 79 2d 70 65 72 73 70 65 63 74 69 76 65 73 25 32 46 77 68 79 2d 62 65 69 6e 67 2d 70 72 6f 75 64 2d 63 65 72 74 69 66 69 65 64 2d 6d 61 74 74 65 72 73 25 32 32 25 32 43 25 32 32 Data Ascii: event=%7B%22source%22%3A%7B%22pageType%22%3A%22News%20and%20Insights%20Article%22%2C%22locale%22%3A%22en_US%22%2C%22url%22%3A%22https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters%22%2C%22
2024-07-10 01:44:38 UTC	887	IN	HTTP/1.1 200 Date: Wed, 10 Jul 2024 01:44:38 GMT Content-Type: application/json;charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALBTG=On+xTOYeemMB9shD/iSG2ouVqMJJOx6T5qnMTQ0tr89lwXsVC97GVLw/YbCd/RV17RieuwjRBsJ+T87J1TlgwTf6DUZnkEoVAH6MkjY5KmPkGgd0sd1yOoS6VFxVqAmyPO8YOL9srn0/dpT9ISLu9bqY0WHA1FGbZkqmwDgLWii23TwEADI=; Expires=Wed, 17 Jul 2024 01:44:38 GMT; Path=/ Set-Cookie: AWSALBTGCORS=On+xTOYeemMB9shD/iSG2ouVqMJJOx6T5qnMTQ0tr89lwXsVC97GVLw/YbCd/RV17RieuwjRBsJ+T87J1TlgwTf6DUZnkEoVAH6MkjY5KmPkGgd0sd1yOoS6VFxVqAmyPO8YOL9srn0/dpT9ISLu9bqY0WHA1FGbZkqmwDgLWii23TwEADI=; Expires=Wed, 17 Jul 2024 01:44:38 GMT; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://partner.booking.com Timing-Allow-Origin: * Cache-Control: no-cache, no-store Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff vary: accept-encoding
2024-07-10 01:44:38 UTC	3109	IN	Data Raw: 63 31 65 0d 0a 7b 22 69 64 22 3a 22 36 36 38 64 65 37 38 36 63 32 32 35 62 61 30 34 32 65 34 32 61 35 36 39 22 2c 22 63 61 6d 70 61 69 67 6e 52 65 73 70 6f 6e 73 65 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 6e 67 22 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 22 76 45 37 51 71 22 2c 22 63 61 6d 70 61 69 67 6e 4e 61 6d 65 22 3a 22 5b 4f 6e 67 6f 69 6e 67 20 2d 20 64 6f 20 6e 6f 74 20 70 61 75 73 65 5d 20 47 41 20 2d 20 4d 43 50 20 74 6f 20 64 61 74 61 4c 61 79 65 72 22 2c 22 63 61 6d 70 61 69 67 6e 54 79 70 65 22 3a 22 57 65 62 22 2c 22 65 78 70 65 72 69 65 6e 63 65 49 64 22 3a 22 37 63 48 4d 44 22 2c 22 65 78 70 65 72 69 65 6e 63 65 4e 61 6d 65 22 3a 22 45 78 70 65 72 69 65 6e 63 65 20 31 22 2c 22 65 78 70 65 72 69 65 6e 63 65 53 6f 75 72 63 65 43 6f 64 65 22 Data Ascii: c1e{"id":"668de786c225ba042e42a569","campaignResponses":[{"type":"ng","campaignId":"vE7Qq","campaignName":"[Ongoing - do not pause] GA - MCP to dataLayer","campaignType":"Web","experienceId":"7cHMD","experienceName":"Experience 1","experienceSourceCode"
2024-07-10 01:44:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49880	157.240.253.1	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	540	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' 'unsafe-eval' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-07-10 01:44:38 UTC	1705	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-07-10 01:44:38 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-07-10 01:44:38 UTC	14632	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-07-10 01:44:38 UTC	16384	IN	Data Raw: 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 73 65 6c 65 63 74 6f 72 3b 62 3d 64 28 62 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 3f 7b 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3a 62 2c 73 65 6c 65 63 74 6f 72 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 Data Ascii: typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.parameter_type;a=a.selector;b=d(b);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=null&&a!=null?{parameter_type:b,selector:a}:null}function j(a){if(a==null\|\|(typeof a==="unde
2024-07-10 01:44:38 UTC	16384	IN	Data Raw: 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 45 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 65 3d 64 2e 63 6f 6e 66 69 67 4c 6f 61 64 65 64 2c 6b 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 69 72 65 4c 6f 63 6b 22 29 2c 6f 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 Data Ascii: [d]=c[d])}return a},b=f.getFbeventsModules("SignalsEventValidation"),c=f.getFbeventsModules("SignalsFBEventsConfigStore"),d=f.getFbeventsModules("SignalsFBEventsEvents"),e=d.configLoaded,k=f.getFbeventsModules("SignalsFBEventsFireLock"),o=f.getFbeventsMod
2024-07-10 01:44:38 UTC	16384	IN	Data Raw: 6b 3d 65 28 68 2c 63 29 2c 6c 3d 6a 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 3f 62 28 6a 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6b 21 3d 6e 75 6c 6c 26 26 6c 21 3d 6e 75 6c 6c 3f 5b 7b 70 69 78 65 6c 3a 6b 2c 74 61 72 67 65 74 3a 6c 7d 5d 3a 6e 75 6c 6c 7d 6c 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 67 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 54 69 6d 69 6e 67 73 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b Data Ascii: k=e(h,c),l=j instanceof Node?b(j):null;return k!=null&&l!=null?[{pixel:k,target:l}]:null}l.exports=new a(g)})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetTimingsEvent",function(){return function(g,h,i,j){var k={exports:{}};k
2024-07-10 01:44:38 UTC	1751	IN	Data Raw: 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 61 67 67 72 65 67 61 74 65 64 2d 65 76 65 6e 74 2d 6d 65 61 73 75 72 65 6d 65 6e 74 2f 22 2c 47 50 53 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 73 61 6e 64 62 6f 78 2f 70 69 78 65 6c 2f 72 65 67 69 73 74 65 72 2f 74 72 69 67 67 65 72 2f 22 7d 3b 6a 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 65 6e 42 72 69 64 67 65 43 6f 6e 66 69 67 54 Data Ascii: T:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/"};j.exports=a})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOpenBridgeConfigT
2024-07-10 01:44:38 UTC	14633	IN	Data Raw: 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 21 31 3b 62 28 74 68 69 73 2e 5f 67 65 74 4f 70 74 73 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 66 3d 65 3d 3d 21 30 26 26 64 2e 69 73 4f 70 74 65 64 4f 75 74 28 61 2c 63 29 3b 66 7c 7c 64 2e 5f 73 65 74 4f 70 74 28 61 2c 62 2c 21 30 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 7b 6b 65 79 3a 22 6f 70 74 4f 75 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 62 28 74 68 69 73 2e 5f 67 65 74 4f 70 74 73 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 64 2e 5f 73 65 74 4f 70 74 28 61 2c 62 2c 21 31 29 7d Data Ascii: uments.length>2&&arguments[2]!==void 0?arguments[2]:!1;b(this._getOpts(c),function(b){var f=e==!0&&d.isOptedOut(a,c);f\|\|d._setOpt(a,b,!0)});return this}},{key:"optOut",value:function(a,c){var d=this;b(this._getOpts(c),function(b){return d._setOpt(a,b,!1)}
2024-07-10 01:44:38 UTC	16384	IN	Data Raw: 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 62 2e 42 41 54 43 48 49 4e 47 5f 45 58 50 45 52 49 4d 45 4e 54 3b 62 2e 53 45 4e 44 5f 58 48 52 5f 45 58 50 45 52 49 4d 45 4e 54 3b 67 2e 74 6f 70 21 3d 3d 67 3b 66 75 6e 63 74 69 6f 6e 20 72 28 62 29 7b 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 61 28 7b 7d 2c 62 2e 63 75 73 74 6f 6d 44 61 74 61 29 3b 62 2e 74 69 6d 65 73 74 61 6d 70 3d 6e 65 77 20 44 61 74 65 28 29 2e 76 61 6c 75 65 4f 66 28 29 3b 76 61 72 20 66 3d 6e 75 6c 6c 3b 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 21 3d 6e 75 6c 6c 26 26 28 66 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 67 65 74 28 22 65 69 64 22 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 7c 7c 66 3d 3d 3d 22 22 29 7b 62 2e 63 75 73 74 6f 6d 50 61 Data Ascii: alsFBEventsExperimentNames");b.BATCHING_EXPERIMENT;b.SEND_XHR_EXPERIMENT;g.top!==g;function r(b){b.customData=a({},b.customData);b.timestamp=new Date().valueOf();var f=null;b.customParams!=null&&(f=b.customParams.get("eid"));if(f==null\|\|f===""){b.customPa
2024-07-10 01:44:38 UTC	16384	IN	Data Raw: 73 74 72 69 6e 67 22 26 26 2f 5e 5c 64 2b 24 2f 2e 74 65 73 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 64 28 61 29 3d 3d 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 72 65 74 75 72 6e 20 66 28 61 29 3d 3d 3d 21 30 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3d 3d 3d 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 6a 28 61 29 3d 3d 3d 21 31 29 72 65 74 75 72 6e 21 31 3b 61 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f Data Ascii: string"&&/^\d+$/.test(a)}function f(a){return a!=null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&d(a)===!1}function j(a){return f(a)===!0&&Object.prototype.toString.call(a)==="[object Object]"}function k(a){if(j(a)===!1)return!1;a=a.constructo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49843	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	631	OUT	GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:38 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a0cdea659d943f2-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 30559 Cache-Control: public, max-age=86400 Expires: Thu, 11 Jul 2024 01:44:38 GMT Last-Modified: Thu, 11 Apr 2024 12:19:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: vvdnZW6WirMnzof2WS54RQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: f1f2afba-201e-0038-520a-8c9d43000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-10 01:44:38 UTC	467	IN	Data Raw: 31 61 63 38 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 33 65 61 39 34 Data Ascii: 1ac8{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.2.0","OptanonDataJSON":"3ea94
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 65 36 34 31 39 35 37 30 2d 35 32 63 63 2d 34 33 32 64 2d 62 61 31 65 2d 37 33 30 30 32 39 30 66 31 39 37 30 22 2c 22 4e 61 6d 65 22 3a 22 45 45 41 20 2b 20 52 75 73 73 69 61 20 2b 20 55 4b 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 6e 6f 22 2c 22 64 65 22 2c 22 72 75 22 2c 22 62 65 22 2c 22 66 69 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 68 72 22 2c 22 6c 76 22 2c 22 66 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 73 69 22 2c 22 6d 63 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 69 74 22 2c 22 67 72 22 2c 22 65 73 22 2c 22 61 74 22 2c 22 72 Data Ascii: ":[{"Id":"e6419570-52cc-432d-ba1e-7300290f1970","Name":"EEA + Russia + UK","Countries":["no","de","ru","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","at","r
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 2d 20 43 68 69 6e 61 20 56 69 73 69 74 6f 72 73 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 Data Ascii: ":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Customer - China Visitors","Conditions":[],"GCEnable":false,"IsGPPEnabled":false,"EnableJWTAuthForKnownUs
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 73 62 22 2c 22 62 71 22 2c 22 73 63 22 2c 22 62 72 22 2c 22 62 73 22 2c 22 73 64 22 2c 22 62 74 22 2c 22 73 67 22 2c 22 62 76 22 2c 22 62 77 22 2c 22 73 68 22 2c 22 73 6a 22 2c 22 62 79 22 2c 22 62 7a 22 2c 22 73 6c 22 2c 22 73 6e 22 2c 22 73 6f 22 2c 22 63 61 22 2c 22 73 72 22 2c 22 63 63 22 2c 22 73 73 22 2c 22 63 64 22 2c 22 73 74 22 2c 22 63 66 22 2c 22 73 76 22 2c 22 63 67 22 2c 22 73 78 22 2c 22 63 68 22 2c 22 63 69 22 2c 22 73 79 22 2c 22 73 7a 22 2c 22 63 6b 22 2c 22 63 6c 22 2c 22 63 6d 22 2c 22 63 6f 22 2c 22 63 72 22 2c 22 74 63 22 2c 22 74 64 22 2c 22 74 66 22 2c 22 63 75 22 2c 22 74 67 22 2c 22 63 Data Ascii: f","rw","bh","bi","bj","bl","bm","bn","bo","sa","sb","bq","sc","br","bs","sd","bt","sg","bv","bw","sh","sj","by","bz","sl","sn","so","ca","sr","cc","ss","cd","st","cf","sv","cg","sx","ch","ci","sy","sz","ck","cl","cm","co","cr","tc","td","tf","cu","tg","c
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 6a 61 22 3a 22 6a 61 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 70 6c 22 3a 22 70 6c 22 2c 22 72 6f 22 3a 22 72 6f 22 2c 22 68 65 22 3a 22 68 65 22 2c 22 64 61 22 3a 22 64 61 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 6e 6c 22 3a 22 6e 6c 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d Data Ascii: "th","es-AR":"es-AR","ja":"ja","tl":"tl","pl":"pl","ro":"ro","he":"he","da":"da","tr":"tr","nl":"nl"},"BannerPushesDown":false,"Default":true,"Global":true,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"Tem
2024-07-10 01:44:38 UTC	921	IN	Data Raw: 2e 6a 73 6f 6e 22 7d 2c 22 47 6f 6f 67 6c 65 44 61 74 61 22 3a 7b 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 2c 22 67 6f 6f 67 6c 65 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 67 6f 6f 67 6c 65 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 53 63 72 69 70 74 44 79 6e 61 6d 69 63 4c 6f 61 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 65 52 75 6c 65 22 3a 74 72 75 65 2c 22 43 Data Ascii: .json"},"GoogleData":{"vendorListVersion":1,"googleVendorListUrl":"https://cdn.cookielaw.org/vendorlist/googleData.json"},"ScriptDynamicLoadEnabled":false,"TenantFeatures":{"CookieV2BannerFocus":true,"CookieV2GPC":true,"CookieV2AssignTemplateRule":true,"C
2024-07-10 01:44:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49877	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	2094	OUT	GET /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&intera [TRUNCATED] If-None-Match: "605f0374-750" If-Modified-Since: Sat, 27 Mar 2021 10:05:40 GMT
2024-07-10 01:44:38 UTC	915	IN	HTTP/1.1 304 Not Modified Content-Type: application/javascript Connection: close Vary: Accept-Encoding Server: nginx Date: Wed, 10 Jul 2024 01:44:38 GMT last-modified: Sat, 27 Mar 2021 10:05:40 GMT etag: "605f0374-750" X-Varnish-Storage: Malloc X-Url: /libraries/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 225631698 216834766 Via: 1.1 varnish (Varnish/6.6), 1.1 0c371064bf157d89e4b3520c0b29474c.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C3NHfJQK7xJeZn5Tu79A7TeWF0lCa27UiQy6-0o_9qgDtNMBZexcVw== Age: 58475 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49879	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	637	OUT	GET /71cd12cdf77ebcb750cff91a9bba6f04/1260644.1562364.json?89b5bf9a6316eb30dcfc5b1f740c76c8 HTTP/1.1 Host: try.abtasty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	810	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 278 Connection: close Date: Sat, 06 Jul 2024 08:29:20 GMT access-control-allow-origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: access-control-allow-origin Access-Control-Max-Age: 3000 Last-Modified: Fri, 05 Jul 2024 15:14:05 GMT ETag: "901b2c0ab4fc768f490258d3d6119d3d" x-amz-server-side-encryption: AES256 Cache-Control: s-maxage=604800,max-age=604800 x-amz-version-id: fYoJ8MsQ2il7OwUsUTYJx1Inh7vszSu8 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d6f2ecdfd53b40c1776d655bd15fdeb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ow41Ty42JwqsUIuRKGt4-eJZtBgtQ4Q-JMW4c0NE84NYnisPobNHgw== Age: 321319
2024-07-10 01:44:38 UTC	278	IN	Data Raw: 7b 22 69 64 22 3a 31 35 36 32 33 36 34 2c 22 6e 61 6d 65 22 3a 22 56 61 72 69 61 74 69 6f 6e 20 31 22 2c 22 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 35 31 36 38 30 31 33 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 22 2c 22 74 79 70 65 22 3a 22 61 64 64 43 53 53 22 2c 22 76 61 6c 75 65 22 3a 22 23 62 6c 6f 63 6b 2d 73 65 63 6f 6e 64 61 72 79 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6d 65 6e 75 2d 69 74 65 6d 2e 6d 65 6e 75 2d 69 74 65 6d 2d 6c 65 76 65 6c 2d 2d 30 20 3e 20 61 5b 68 72 65 66 2a 3d 5c 22 6a 6f 69 6e 5c 22 5d 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6d 70 6c 65 6d 65 6e 74 29 3b 5c 6e 7d 22 7d 5d 2c 22 5f 74 61 67 49 6e 66 6f 22 3a 22 32 30 Data Ascii: {"id":1562364,"name":"Variation 1","modifications":[{"id":5168013,"selector":"","type":"addCSS","value":"#block-secondarynavigation .menu-item.menu-item-level--0 > a[href*=\"join\"]:not(:hover) {\n color: var(--bui_color_complement);\n}"}],"_tagInfo":"20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49878	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	2070	OUT	GET /libraries/lazysizes/lazysizes.min.js HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&intera [TRUNCATED] If-None-Match: "605f0374-1ed1" If-Modified-Since: Sat, 27 Mar 2021 10:05:40 GMT
2024-07-10 01:44:38 UTC	891	IN	HTTP/1.1 304 Not Modified Content-Type: application/javascript Connection: close Vary: Accept-Encoding Server: nginx Date: Wed, 10 Jul 2024 01:44:38 GMT last-modified: Sat, 27 Mar 2021 10:05:40 GMT etag: "605f0374-1ed1" X-Varnish-Storage: Malloc X-Url: /libraries/lazysizes/lazysizes.min.js X-Host: partner.booking.com cache-control: max-age=600, private expires: 0 X-Varnish: 230299065 217558402 Via: 1.1 varnish (Varnish/6.6), 1.1 307395f1eb3989f15e6f525475291c86.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OLEvZ-poW-qmdGdf6OkF3aBTjO6FGQdfMwmkFhKptA4d3XhfiTMDwA== Age: 58473 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49882	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	385	OUT	GET /71cd12cdf77ebcb750cff91a9bba6f04/manifest.json HTTP/1.1 Host: try.abtasty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	828	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 4265 Connection: close access-control-allow-origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: access-control-allow-origin Access-Control-Max-Age: 3000 Last-Modified: Mon, 08 Jul 2024 12:19:42 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 1ZhAO7QtEJbh4B.C8Bu7YWNjQcb5L9gN Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 10 Jul 2024 01:44:37 GMT Cache-Control: s-maxage=86400,max-age=30 ETag: "a895dc1dddcc9e033aa41147e7a69cd2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 10f6ed997c15c1439b3ae1db258c7d16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: KT7O9Jt1mbEfjcUB1N3EWuzh2jqInHDal_DmC8z7TQRisACvHI40Cw== Age: 36583
2024-07-10 01:44:38 UTC	4265	IN	Data Raw: 7b 0a 20 20 22 31 31 38 37 35 39 37 2e 31 34 37 33 35 36 39 2e 6a 73 6f 6e 22 3a 20 22 37 31 63 64 31 32 63 64 66 37 37 65 62 63 62 37 35 30 63 66 66 39 31 61 39 62 62 61 36 66 30 34 2f 31 31 38 37 35 39 37 2e 31 34 37 33 35 36 39 2e 6a 73 6f 6e 3f 61 66 64 33 62 36 37 33 37 35 65 33 34 32 37 32 61 65 38 66 35 63 38 39 63 65 36 63 64 32 61 61 22 2c 0a 20 20 22 31 31 38 37 35 39 37 2e 31 34 37 35 37 37 36 2e 6a 73 6f 6e 22 3a 20 22 37 31 63 64 31 32 63 64 66 37 37 65 62 63 62 37 35 30 63 66 66 39 31 61 39 62 62 61 36 66 30 34 2f 31 31 38 37 35 39 37 2e 31 34 37 35 37 37 36 2e 6a 73 6f 6e 3f 61 66 64 33 62 36 37 33 37 35 65 33 34 32 37 32 61 65 38 66 35 63 38 39 63 65 36 63 64 32 61 61 22 2c 0a 20 20 22 31 32 33 30 31 38 36 2e 31 35 32 33 39 38 39 2e 6a 73 Data Ascii: { "1187597.1473569.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1473569.json?afd3b67375e34272ae8f5c89ce6cd2aa", "1187597.1475776.json": "71cd12cdf77ebcb750cff91a9bba6f04/1187597.1475776.json?afd3b67375e34272ae8f5c89ce6cd2aa", "1230186.1523989.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49883	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	609	OUT	GET /static/js/content_cft/ece690fd13c824529e3870e0e662c417931b8461.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	809	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 19124 Connection: close Server: nginx Date: Thu, 13 Jun 2024 13:29:07 GMT Last-Modified: Fri, 05 Jan 2024 06:00:00 GMT ETag: "65979ae0-4ab4" Expires: Sat, 13 Jul 2024 13:29:07 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: gSNtSrCRIggm7pAaF1NPniwYgYZcuGwUHQ6LLTWM7NbrMO6Bx-nqsA== Age: 2290531
2024-07-10 01:44:38 UTC	15575	IN	Data Raw: 76 61 72 20 5f 69 5f 3d 74 68 69 73 2e 5f 69 5f 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 72 5f 3d 74 68 69 73 2e 5f 72 5f 7c 7c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 7d 3b 42 2e 77 68 65 6e 28 7b 63 6f 6e 64 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 5f 69 5f 28 22 39 31 35 3a 32 66 63 33 34 39 39 39 22 29 2c 5f 72 5f 28 69 2e 62 5f 74 68 69 73 5f 75 72 6c 5f 77 69 74 68 6f 75 74 5f 6c 61 6e 67 2e 6d 61 74 63 68 28 2f 6f 66 66 69 63 65 73 5c 2e 68 74 6d 6c 2f 29 29 7d 7d 29 2e 72 75 6e 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 5f 69 5f 28 22 39 31 35 3a 36 34 61 64 33 31 37 31 22 29 3b 76 61 72 20 65 3d 22 6f 66 66 69 63 65 73 2d 63 6f 6e 74 69 6e 65 6e 74 73 5f 5f 73 74 69 63 6b 79 5f 66 69 78 22 Data Ascii: var _i_=this._i_\|\|function(){},_r_=this._r_\|\|function(i){return i};B.when({condition:function(i){return _i_("915:2fc34999"),_r_(i.b_this_url_without_lang.match(/offices\.html/))}}).run(function(i){_i_("915:64ad3171");var e="offices-continents__sticky_fix"
2024-07-10 01:44:38 UTC	415	IN	Data Raw: 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 5f 69 5f 28 22 39 31 35 3a 30 63 36 35 34 33 37 62 22 29 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 69 7c 7c 30 3d 3d 3d 69 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 73 6c 69 64 69 6e 67 2d 70 61 6e 65 6c 2d 61 6a 61 78 3a 20 69 6e 76 61 6c 69 64 20 2e 67 65 74 28 29 20 61 72 67 75 6d 65 6e 74 21 22 29 3b 72 65 74 75 72 6e 20 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 7c 7c 28 6f 5b 69 5d 3d 6e 65 77 20 73 2c 6f 5b 69 5d 2e 69 64 3d 69 2c 6f 5b 69 5d 2e 6c 6f 61 64 4d 6f 64 65 6c 28 69 29 29 2c 5f 72 5f 28 6f 5b 69 5d 29 7d 7d 2c 5f 72 5f 28 29 7d 29 2c 42 2e 64 65 66 69 6e 65 28 22 70 61 67 65 2d 73 63 72 6f 6c 6c 2d 62 6c 6f 63 6b 22 2c 66 Data Ascii: get:function(i){if(_i_("915:0c65437b"),"string"!=typeof i\|\|0===i.length)throw new Error("sliding-panel-ajax: invalid .get() argument!");return o.hasOwnProperty(i)\|\|(o[i]=new s,o[i].id=i,o[i].loadModel(i)),_r_(o[i])}},_r_()}),B.define("page-scroll-block",f
2024-07-10 01:44:38 UTC	3134	IN	Data Raw: 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 69 29 7b 5f 69 5f 28 22 39 31 35 3a 35 33 35 39 63 65 35 34 22 29 2c 69 3f 61 2e 6f 6e 28 22 72 65 73 69 7a 65 2e 70 61 67 65 53 63 72 6f 6c 6c 42 6c 6f 63 6b 22 2c 5f 29 3a 61 2e 6f 66 66 28 22 72 65 73 69 7a 65 2e 70 61 67 65 53 63 72 6f 6c 6c 42 6c 6f 63 6b 22 29 2c 5f 72 5f 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 69 66 28 5f 69 5f 28 22 39 31 35 3a 37 35 39 62 63 66 66 31 22 29 2c 73 29 72 65 74 75 72 6e 20 5f 72 5f 28 29 3b 72 28 29 3f 6f 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 52 69 67 68 74 3d 6e 2b 22 70 78 22 3a 6f 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 52 69 67 68 74 3d 22 22 2c 73 3d 21 30 2c 77 Data Ascii: ment.documentElement.clientHeight)}function d(i){_i_("915:5359ce54"),i?a.on("resize.pageScrollBlock",_):a.off("resize.pageScrollBlock"),_r_()}function _(){if(_i_("915:759bcff1"),s)return _r_();r()?o.style.paddingRight=n+"px":o.style.paddingRight="",s=!0,w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49884	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	622	OUT	GET /static/js/plugable-access-form_cft/3ae2aaac8c7322f2908109b6a9e7446001225f2b.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	808	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7116 Connection: close Server: nginx Date: Wed, 12 Jun 2024 07:42:58 GMT Last-Modified: Wed, 12 Jun 2024 07:18:44 GMT ETag: "66694bd4-1bcc" Expires: Fri, 12 Jul 2024 07:42:58 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9a97e41242551c9a56be1311e4d3db70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: GZUVGIuENoOMTqNC9k499kj6-XRL7bncXMjxWv8lmNzf9Ts6Yw5vTQ== Age: 2397700
2024-07-10 01:44:38 UTC	7116	IN	Data Raw: 76 61 72 20 5f 69 5f 3d 74 68 69 73 2e 5f 69 5f 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 72 5f 3d 74 68 69 73 2e 5f 72 5f 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 3b 42 2e 64 65 66 69 6e 65 28 22 63 6f 6d 70 6f 6e 65 6e 74 2f 73 70 2f 70 6c 75 67 61 62 6c 65 2d 61 63 63 65 73 73 2d 66 6f 72 6d 2f 64 69 73 70 61 74 63 68 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 72 29 7b 5f 69 5f 28 22 35 64 65 3a 32 66 31 38 33 63 32 34 22 29 3b 76 61 72 20 73 3d 5b 5d 3b 72 65 74 75 72 6e 20 5f 72 5f 28 7b 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 69 5f 28 22 35 64 65 3a 61 36 63 33 32 65 64 66 22 29 2c 73 2e 70 75 73 68 28 65 29 2c 5f 72 5f 28 29 7d 2c 63 68 65 63 6b 52 65 73 65 72 76 Data Ascii: var _i_=this._i_\|\|function(){},_r_=this._r_\|\|function(e){return e};B.define("component/sp/plugable-access-form/dispatcher",function(e,i,r){_i_("5de:2f183c24");var s=[];return _r_({registerPlugin:function(e){_i_("5de:a6c32edf"),s.push(e),_r_()},checkReserv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49894	172.67.39.148	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	700	OUT	GET /menu/sm.25.html HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	842	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=315360000, immutable referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1nw%2Fk0qz10xl%2Fq6ahK%2FF81oXWfBym1yq4xzM8PfophfUhqh9RmMifzF2AbNH1lGBSUvV0LVCin7tk6qGeZjsmPETTRmNRGMN5bkD3b2IGee5rc8i%2FSGri2WqnMPLzctGtxOnnxBF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 27523 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a0cdea9795a8c54-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:38 UTC	527	IN	Data Raw: 32 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 32 41 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2c 74 3d 30 3c 6f 2e 6c 65 6e 67 74 68 3b 76 61 72 20 6e 2c 61 3d 7b 66 65 65 64 3a 5b 5d 2c 70 61 67 65 3a 5b 5d 7d 3b 74 26 26 5b 22 66 65 65 64 22 2c 22 70 61 67 65 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2b 22 5f 73 65 72 76 69 63 65 73 22 2c 6e 3d 6f 2e 69 6e 64 65 78 4f 66 28 74 2b 22 3d 22 29 3b 2d 31 21 3d 6e 26 Data Ascii: 2cc<!doctype html><html><head><title>A2A</title><meta name="robots" content="noindex"><script>!function(e){var o=document.cookie,t=0<o.length;var n,a={feed:[],page:[]};t&&["feed","page"].forEach(function(e){var t=e+"_services",n=o.indexOf(t+"=");-1!=n&
2024-07-10 01:44:38 UTC	196	IN	Data Raw: 22 22 2c 74 3d 2f 5e 68 74 74 70 5c 2f 31 2f 2e 74 65 73 74 28 6e 29 29 2c 74 29 2c 75 73 65 72 5f 73 65 72 76 69 63 65 73 3a 7b 66 65 65 64 3a 61 2e 66 65 65 64 2c 70 61 67 65 3a 61 2e 70 61 67 65 7d 7d 2c 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 26 26 65 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 2c 22 2a 22 29 7d 28 77 69 6e 64 6f 77 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: "",t=/^http\/1/.test(n)),t),user_services:{feed:a.feed,page:a.page}},e.postMessage&&e.parent.postMessage(n,"*")}(window);</script></head><body style="background-color:transparent"></body></html>
2024-07-10 01:44:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49885	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	658	OUT	GET /static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	770	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1628 Connection: close Server: nginx Date: Sat, 06 Jul 2024 11:50:39 GMT Last-Modified: Wed, 10 Apr 2019 11:21:55 GMT Expires: Mon, 05 Aug 2024 11:50:39 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "5cadd1d3-65c" X-Cache: Hit from cloudfront Via: 1.1 7ccd3c44ed70cdb4cd40f0ff29b1254c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: gzz6s8HNHU1ybnvdfHyIvRWmiHTBe2KcsgNu29ymdpkQJY2DkUJ-LQ== Age: 309239
2024-07-10 01:44:38 UTC	1628	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5b 00 00 00 1a 08 06 00 00 00 d8 32 20 50 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 05 b0 49 44 41 54 68 de ed d9 7d 6c 5f 65 15 07 f0 4f 3b 9c 1a e7 84 a1 88 a6 2a c2 4c e6 f6 53 27 be 47 2f 6e a2 cb 32 32 9d 62 64 be b4 73 fb 8d 28 64 b2 78 8d 98 b8 28 4a 88 e0 1f de d4 21 11 c6 aa bc cf 45 02 9b 0e 25 2c c2 e0 32 03 03 75 63 65 44 7c 19 93 1f 63 c8 d8 98 a8 98 ce 75 fe f1 9c 5f 7b 5b 5b 5c 4c 6d 33 ec 37 b9 f9 9d e7 9c e7 3e 2f df e7 3c e7 9c db b6 1c 3e 7c d8 38 46 07 ad 63 bd 80 ff 27 8c 93 3d 8a 18 Data Ascii: PNGIHDR[2 PgAMAa cHRMz&u0`:pQ<bKGDCIDATh}l_eO;*LS'G/n22bds(dx(J!E%,2uceD\|cu_{[[\Lm37>/<>\|8Fc'=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49887	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	660	OUT	GET /static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	770	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1591 Connection: close Server: nginx Date: Sat, 06 Jul 2024 11:50:39 GMT Last-Modified: Wed, 10 Apr 2019 11:21:55 GMT Expires: Mon, 05 Aug 2024 11:50:39 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "5cadd1d3-637" X-Cache: Hit from cloudfront Via: 1.1 80b00aa2dcc58ca61b2465a37c89fc92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: nOsetPE7cypA8xg1Vu1aaCvykqoP_NdVuMFG1ZAKknmXWI7D5IV86g== Age: 309239
2024-07-10 01:44:38 UTC	1591	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5b 00 00 00 1a 08 03 00 00 00 ef ec d0 62 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 2e 50 4c 54 45 ff ff ff 00 00 00 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 Data Ascii: PNGIHDR[bgAMAa cHRMz&u0`:pQ<.PLTE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49886	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	656	OUT	GET /static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	770	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1154 Connection: close Server: nginx Date: Sat, 06 Jul 2024 11:50:40 GMT Last-Modified: Wed, 10 Apr 2019 11:21:55 GMT Expires: Mon, 05 Aug 2024 11:50:40 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "5cadd1d3-482" X-Cache: Hit from cloudfront Via: 1.1 425709fb5486bea91d36ef6c75d4ffac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: iDrBRflb9GbGIBgKz4pF-glPl3xJuu2qQayTGdlWVfMybbMCHHbzPA== Age: 309238
2024-07-10 01:44:38 UTC	1154	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4f 00 00 00 1a 08 06 00 00 00 f6 77 01 c2 00 00 04 49 49 44 41 54 78 01 ed 98 03 b0 ed 3a 18 85 73 6c 9f 67 db b6 79 6d df 7b 6c 6c 3d db b6 6d db b6 6d db b6 cd ef b5 b3 66 5e f6 41 b3 31 7a 68 67 fe 69 3a c9 ca ca 5a 4d fe a4 35 40 18 59 46 9a 0d c3 08 cd 0b cd 0b cd 0b cd 0b cd eb af fa c0 8b 6f b3 88 03 bc 68 55 39 ab 98 e0 c5 dd ff 42 ee 73 bd 68 f2 e2 1c df 3c b2 8c 93 bc 88 91 3d 7e 96 17 af fe 0b b9 ef f2 62 8a 17 27 18 b9 a9 0a e2 35 d0 6c 60 aa 81 56 a3 e7 e9 7a a6 a7 14 62 35 c9 9d 1c ee 45 d7 a0 8e 85 e9 c8 17 c6 8f ee 92 c1 38 85 06 f0 a8 17 10 a9 f6 a2 06 66 0a 43 5b 0e 6c 53 03 8d 7a a6 49 63 49 8b bb cd 58 ee de 72 88 3a b9 87 ea ee 2e d6 78 a7 59 dd 83 fa b8 11 f0 7d 2b 1b 68 5e 47 Data Ascii: PNGIHDROwIIDATx:slgym{ll=mmf^A1zhgi:ZM5@YFohU9Bsh<=~b'5l`Vzb5E8fC[lSzIcIXr:.xY}+h^G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49888	18.239.50.78	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	1745	OUT	GET /core/modules/statistics/statistics.php HTTP/1.1 Host: partner.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&intera [TRUNCATED]
2024-07-10 01:44:38 UTC	832	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:38 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto x-webserver: webserver/1 X-Varnish-Storage: Malloc X-Url: /core/modules/statistics/statistics.php X-Host: partner.booking.com X-Varnish: 224051622 223429069 Via: 1.1 varnish (Varnish/6.6), 1.1 ed6e39eea0e39e463514b9421b7a2806.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: q7X8NfzX1l9TXADkiFj0zx0z4RkMbOtxaYXw_9kZaX-OZLJGuoaAew== Age: 8 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49889	13.35.58.6	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	418	OUT	GET /static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.png HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 522 Connection: close Server: nginx Date: Sat, 06 Jul 2024 14:45:42 GMT Last-Modified: Mon, 07 Sep 2020 09:08:23 GMT Expires: Mon, 05 Aug 2024 14:45:42 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "5f55f887-20a" X-Cache: Hit from cloudfront Via: 1.1 9b253b6508bd634345864697c48abb50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: G2RUWDeatQK7gFg9DGIha4DtLEDukwfSZMJJoBUvK3Uq_KVAanJ0_w== Age: 298736
2024-07-10 01:44:38 UTC	522	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 7e 50 4c 54 45 00 1e 6b 00 1f 6b a8 0b 34 d4 da e7 44 5a 92 22 3d 7f ee f0 f5 cc d2 e1 bf 73 8e aa 60 80 15 30 78 00 1d 6a 00 1e 6b ca 08 28 ff ff ff eb a3 ae d7 46 5e e5 83 93 1f 3a 7e c5 67 80 df e3 ed d1 27 43 fc ef f2 ef f1 f6 60 72 a3 de 65 78 f2 c1 c9 7f 8f b5 ce 18 35 9f ab c7 f8 e0 e4 f9 e0 e4 10 2c 75 e4 84 94 40 56 90 bf c7 da d1 27 42 db 55 6b 8f 9d be 50 64 99 d4 75 8a da 55 6b 1e 44 ae de 00 00 00 0c 74 52 4e 53 df bf bf bf ef e7 ef ef bf bf bf af 8a ac 5a 64 00 00 01 2f 49 44 41 54 48 c7 e5 d5 49 72 83 30 14 45 d1 ef 60 a7 d7 47 10 d1 08 30 d8 10 a7 d9 ff 06 83 80 b2 d0 93 06 61 96 8a df 0c 74 cf 08 28 68 47 38 e6 44 4c 7b 63 3e 90 bf Data Ascii: PNGIHDR00`~PLTEkk4DZ"=s`0xjk(F^:~g'C`rex5,u@V'BUkPduUkDtRNSZd/IDATHIr0E`G0at(hG8DL{c>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49896	104.18.32.137	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	597	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	370	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:38 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a0cdeaa3b0d7d24-EWR
2024-07-10 01:44:38 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49890	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	656	OUT	GET /static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2146 Connection: close Server: nginx Date: Tue, 09 Jul 2024 10:44:32 GMT Last-Modified: Thu, 12 Mar 2020 10:15:57 GMT Expires: Thu, 08 Aug 2024 10:44:32 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "5e6a0bdd-862" X-Cache: Hit from cloudfront Via: 1.1 bf5a173128ca82b73dcca1031d4b3d94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: b90vG5JyqAkqRNTWIhmeEuavypxFdB7AY9_9dU4vxH_fnmfDs33abg== Age: 54006
2024-07-10 01:44:38 UTC	2146	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 46 00 00 00 1a 08 06 00 00 00 0a 62 2a 08 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 f7 49 44 41 54 78 01 ed 59 0d 70 54 d5 15 3e f7 be f7 96 b0 09 91 90 84 1a 13 65 19 a5 ad 96 66 00 2b 28 54 c9 4c 06 04 4b 69 5a 0b f9 d9 8d 04 d3 80 60 d5 da b1 63 3b 76 20 99 b6 d8 b1 d3 b1 83 75 c4 88 4d 82 bb 9b 68 a6 94 aa 80 18 a7 a4 02 05 44 4a eb 0f 52 51 a0 0a 2d 3f 21 46 6c 42 d8 7d ef de 7e 77 cd 8b 2f 9b b7 ce db 19 98 11 c7 33 73 f7 fe 7d ef dc 73 bf 7b ee b9 f7 bd 65 74 91 4b 79 79 f9 95 ba ae af 3b 76 ec d8 cc ce ce 4e 93 ce 93 70 ba c8 85 1b c6 04 49 34 3d 10 08 e8 74 1e e5 a2 27 e6 42 Data Ascii: PNGIHDRFb*pHYssRGBgAMAaIDATxYpT>ef+(TLKiZ`c;v uMhDJRQ-?!FlB}~w/3s}s{etKyy;vNpI4=t'B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49897	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	427	OUT	GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:38 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a0cdeaa388178e8-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 47850 Cache-Control: public, max-age=86400 Expires: Thu, 11 Jul 2024 01:44:38 GMT Last-Modified: Thu, 11 Apr 2024 12:19:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: vvdnZW6WirMnzof2WS54RQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b6904e95-a01e-0019-5b10-8cb938000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-10 01:44:38 UTC	467	IN	Data Raw: 31 61 63 38 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 33 65 61 39 34 Data Ascii: 1ac8{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.2.0","OptanonDataJSON":"3ea94
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 65 36 34 31 39 35 37 30 2d 35 32 63 63 2d 34 33 32 64 2d 62 61 31 65 2d 37 33 30 30 32 39 30 66 31 39 37 30 22 2c 22 4e 61 6d 65 22 3a 22 45 45 41 20 2b 20 52 75 73 73 69 61 20 2b 20 55 4b 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 6e 6f 22 2c 22 64 65 22 2c 22 72 75 22 2c 22 62 65 22 2c 22 66 69 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 68 72 22 2c 22 6c 76 22 2c 22 66 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 73 69 22 2c 22 6d 63 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 69 74 22 2c 22 67 72 22 2c 22 65 73 22 2c 22 61 74 22 2c 22 72 Data Ascii: ":[{"Id":"e6419570-52cc-432d-ba1e-7300290f1970","Name":"EEA + Russia + UK","Countries":["no","de","ru","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","at","r
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 2d 20 43 68 69 6e 61 20 56 69 73 69 74 6f 72 73 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 Data Ascii: ":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Customer - China Visitors","Conditions":[],"GCEnable":false,"IsGPPEnabled":false,"EnableJWTAuthForKnownUs
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 73 62 22 2c 22 62 71 22 2c 22 73 63 22 2c 22 62 72 22 2c 22 62 73 22 2c 22 73 64 22 2c 22 62 74 22 2c 22 73 67 22 2c 22 62 76 22 2c 22 62 77 22 2c 22 73 68 22 2c 22 73 6a 22 2c 22 62 79 22 2c 22 62 7a 22 2c 22 73 6c 22 2c 22 73 6e 22 2c 22 73 6f 22 2c 22 63 61 22 2c 22 73 72 22 2c 22 63 63 22 2c 22 73 73 22 2c 22 63 64 22 2c 22 73 74 22 2c 22 63 66 22 2c 22 73 76 22 2c 22 63 67 22 2c 22 73 78 22 2c 22 63 68 22 2c 22 63 69 22 2c 22 73 79 22 2c 22 73 7a 22 2c 22 63 6b 22 2c 22 63 6c 22 2c 22 63 6d 22 2c 22 63 6f 22 2c 22 63 72 22 2c 22 74 63 22 2c 22 74 64 22 2c 22 74 66 22 2c 22 63 75 22 2c 22 74 67 22 2c 22 63 Data Ascii: f","rw","bh","bi","bj","bl","bm","bn","bo","sa","sb","bq","sc","br","bs","sd","bt","sg","bv","bw","sh","sj","by","bz","sl","sn","so","ca","sr","cc","ss","cd","st","cf","sv","cg","sx","ch","ci","sy","sz","ck","cl","cm","co","cr","tc","td","tf","cu","tg","c
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 6a 61 22 3a 22 6a 61 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 70 6c 22 3a 22 70 6c 22 2c 22 72 6f 22 3a 22 72 6f 22 2c 22 68 65 22 3a 22 68 65 22 2c 22 64 61 22 3a 22 64 61 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 6e 6c 22 3a 22 6e 6c 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d Data Ascii: "th","es-AR":"es-AR","ja":"ja","tl":"tl","pl":"pl","ro":"ro","he":"he","da":"da","tr":"tr","nl":"nl"},"BannerPushesDown":false,"Default":true,"Global":true,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"Tem
2024-07-10 01:44:38 UTC	921	IN	Data Raw: 2e 6a 73 6f 6e 22 7d 2c 22 47 6f 6f 67 6c 65 44 61 74 61 22 3a 7b 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 2c 22 67 6f 6f 67 6c 65 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 67 6f 6f 67 6c 65 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 53 63 72 69 70 74 44 79 6e 61 6d 69 63 4c 6f 61 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 65 52 75 6c 65 22 3a 74 72 75 65 2c 22 43 Data Ascii: .json"},"GoogleData":{"vendorListVersion":1,"googleVendorListUrl":"https://cdn.cookielaw.org/vendorlist/googleData.json"},"ScriptDynamicLoadEnabled":false,"TenantFeatures":{"CookieV2BannerFocus":true,"CookieV2GPC":true,"CookieV2AssignTemplateRule":true,"C
2024-07-10 01:44:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49891	18.245.31.49	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	600	OUT	GET /design-assets/assets/v3.81.0/fonts-brand/BookingBold.woff HTTP/1.1 Host: t-cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cf2.bstatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	586	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 41976 Connection: close Last-Modified: Tue, 25 Jul 2023 15:38:06 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 09 Jul 2024 03:58:22 GMT ETag: "b2ca1822b16a92e0a0111c994cfe4b8a" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 851fdca2e1873274a995295ecd94732e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: R2ceeGFPo2N3Cd9GWU8xkgzTJgA267ZOSNP0Iexfshean6BzZMnpqw== Age: 82720 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-07-10 01:44:38 UTC	15798	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 a3 f8 00 11 00 00 00 01 d6 c4 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 7c d0 00 00 00 f9 00 00 01 78 5c e2 5d 09 47 50 4f 53 00 00 7d cc 00 00 20 af 00 00 e9 fc 82 6d c9 90 47 53 55 42 00 00 9e 7c 00 00 05 7a 00 00 0d de d3 00 a2 14 4f 53 2f 32 00 00 01 f8 00 00 00 5a 00 00 00 60 6a ae 43 b1 63 6d 61 70 00 00 07 84 00 00 03 eb 00 00 05 6c 61 d8 44 c6 63 76 74 20 00 00 11 08 00 00 00 c3 00 00 0b f2 21 ed 13 bd 66 70 67 6d 00 00 0b 70 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 7c c4 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 16 b0 00 00 65 2f 00 00 af ca c8 eb 7a ef 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 1d cf ec 4a 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFFGDEF\|x\]GPOS} mGSUB\|zOS/2Z`jCcmaplaDcvt !fpgmp06gasp\|glyfe/zhead66Jhhea
2024-07-10 01:44:39 UTC	16384	IN	Data Raw: 17 63 46 04 33 56 3f 82 19 51 19 3f 7e e1 ce cf 01 62 ff 39 5e 8e 6c 7a 3c dd 08 b8 18 95 76 ef fe fd 57 f0 ba 2b 04 87 9e f5 f5 cb 71 e0 6c ae 60 91 93 2c 0a a1 28 6a 21 15 92 f4 89 d8 91 b0 ac 76 a4 46 e4 f2 16 9d 76 6c 92 b1 32 a5 ba a8 90 62 23 35 a2 a3 ab bc b7 2c d7 5e 07 5e 95 c3 cd c4 52 b4 bb 88 55 82 b9 11 d3 c4 07 f8 37 99 cd a6 27 9b 3c ad e6 b0 c5 e6 06 06 7e a1 71 7d ba b5 9e 63 67 e0 d0 a1 57 ae f4 93 3d 4c 81 45 66 aa 95 d3 ca 70 80 10 42 29 aa 78 7b 03 5f e9 8a 5c f0 d4 a5 72 8e 08 fa 1f 52 f6 3f 27 ec 06 62 d2 eb 52 64 3e 0c 2a bb ef 96 5b fe fe ca 87 10 51 35 39 fc c4 20 8a 97 61 82 7b 18 45 73 96 ba 91 5a 91 db 57 74 fd 37 b0 fe 2f 71 5e ee 6c df c8 fd 8d 9c e3 ad 74 eb bc b5 67 ce dc 88 af a8 b0 21 42 fc 70 65 84 f3 c3 01 57 33 de 83 Data Ascii: cF3V?Q?~b9^lz<vW+ql`,(j!vFvl2b#5,^^RU7'<~q}cgW=LEfpB)x{_\rR?'bRd>*[Q59 a{EsZWt7/q^ltg!BpeW3
2024-07-10 01:44:39 UTC	9794	IN	Data Raw: 6a 36 52 64 57 b4 8a 40 75 d5 ed 9a d6 c1 3f 68 66 3e 68 00 00 00 78 da 3c 8d 33 80 58 01 10 44 df 6c 6c db b6 8d 26 76 9a d8 b6 6d d6 41 17 b3 0c eb 34 b1 6d 27 67 37 67 e3 df 1e d7 9c 41 40 75 fa 33 9d 8a 63 c7 4f 9d 49 f3 15 fb b6 6f a4 f9 9a ed ab 36 d0 7c e3 b2 9d 9b 69 4e 45 80 20 c0 00 61 1b 56 6d df 4c ed 4d cb b6 6f a0 21 20 00 0c b9 57 a0 6a 58 58 fc 5e 8c aa ee d5 35 16 31 9f 8a 40 57 de 14 eb 5d ee 11 e6 fa 80 18 9e 15 4f bc e3 13 7f 3c ba fa b4 2c c6 94 4f d2 d4 5a ad c9 51 45 55 57 53 af 3b aa bb fa 22 ba 52 91 ca d4 66 1d 87 39 c9 39 ae 72 8d eb 7c e4 0b d1 c4 10 4b 1c 09 aa a0 0e ea e2 f7 a3 35 56 b3 35 57 8b b4 4b 67 75 5e 57 f5 44 9f 94 6f 2d ad 9b f5 b6 3e 36 c8 c6 d8 42 8c 9b 41 0e 49 54 47 24 04 f9 48 57 82 97 88 a4 20 03 8f 80 69 22 Data Ascii: j6RdW@u?hf>hx<3XDll&vmA4m'g7gA@u3cOIo6\|iNE aVmLMo! WjXX^51@W]O<,OZQEUWS;"Rf99r\|K5V5WKgu^WDo->6BAITG$HW i"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49899	216.239.36.181	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	1776	OUT	POST /g/collect?v=2&tid=G-LVHK6H547B&gtm=45je4730v889588973z8811498483za200zb811498483&_p=1720575873843&_gaz=1&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&tag_exp=0&gdid=dYWJhMj&cid=1532117314.1720575878&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1720575877&sct=1&seg=0&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters&dr=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&dt=Why%20being%20Travel%20Proud%20Certified%20matters%20to%20our%20partners%20%7C%20Click.%20Magazine&en=page_view&_fv=1&_nsi=1&_ss=1&ep.custom_page_title=Click.%20Magazine-499%7CIndustry%20Perspectives-7%7CWhy%20being%20Travel%20Proud%20Certified%20matters%20to%20our%20partners-136846&ep.article_author=Alice%20Piercy&ep.article_publish_time=2024-06-24&ep.article_modify_time=2024-0 [TRUNCATED] Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://partner.booking.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://partner.booking.com Date: Wed, 10 Jul 2024 01:44:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49893	185.17.186.161	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	1290	OUT	GET /init?v=18.07&p=b18d32a2-ec35-41cf-9425-b945bb4c2fa5&s=1081587288e1c42126592dee7a0498ee&page=070937457e9a146494e54253f9387735ba4ce91d&ret=0&u=c5543b84877e5405209bd06a667f9ac4&href=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters&url=click.%20magazine-499%7Cindustry%20perspectives-7%7Cwhy%20being%20travel%20proud%20certified%20matters%20to%20our%20partners-136846&ref=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&title=Why%20being%20Travel%20Proud%20Certified%20matters%20to%20our%20partners%20%7C%20Click.%20Magazine&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=3566&pxr=1&gdpr=0&pst=1720575877370 HTTP/1.1 Host: o2.mouseflow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:39 UTC	411	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:38 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://partner.booking.com X-Recorder: rec-12-eu Server: Mouseflow Alt-Svc: h3=":443"; ma=86400 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49892	18.245.31.49	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	603	OUT	GET /design-assets/assets/v3.81.0/fonts-brand/BookingRegular.woff HTTP/1.1 Host: t-cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cf2.bstatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:39 UTC	586	IN	HTTP/1.1 200 OK Content-Type: font/woff Content-Length: 40120 Connection: close Last-Modified: Tue, 25 Jul 2023 15:38:06 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 09 Jul 2024 01:51:37 GMT ETag: "f2953af89807609f49b87237180bb450" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f99e0a5708c6297d4aa91b3e4794707e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: mtiFIaeclCrALs7F0BKW9QOY_099Dmxb-EvUB0ayXzhcjmasYW9Gkw== Age: 85982 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-07-10 01:44:39 UTC	15798	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 9c b8 00 11 00 00 00 01 d3 e0 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 7b 5c 00 00 00 f9 00 00 01 78 5c e2 5d 09 47 50 4f 53 00 00 7c 58 00 00 1a e2 00 00 e6 82 7e 96 43 32 47 53 55 42 00 00 97 3c 00 00 05 7a 00 00 0d de d3 00 a2 14 4f 53 2f 32 00 00 01 f8 00 00 00 5a 00 00 00 60 69 82 40 b5 63 6d 61 70 00 00 07 78 00 00 03 eb 00 00 05 6c 61 d8 44 c6 63 76 74 20 00 00 11 3c 00 00 00 bb 00 00 0b f2 23 9c 16 c9 66 70 67 6d 00 00 0b 64 00 00 03 ab 00 00 06 d7 0a 30 87 36 67 61 73 70 00 00 7b 50 00 00 00 0c 00 00 00 0c 00 07 00 1b 67 6c 79 66 00 00 16 dc 00 00 63 8f 00 00 b0 00 bd e1 67 9c 68 65 61 64 00 00 01 80 00 00 00 36 00 00 00 36 1d ce ec 55 68 68 65 61 00 00 01 b8 00 00 00 Data Ascii: wOFFGDEF{\x\]GPOS\|X~C2GSUB<zOS/2Z`i@cmapxlaDcvt <#fpgmd06gasp{Pglyfcghead66Uhhea
2024-07-10 01:44:39 UTC	16384	IN	Data Raw: 7c 11 79 52 00 19 00 ef ae 4c bd d1 72 54 0a 3b 8a 91 f3 28 a6 e9 3a 95 52 a9 c9 ce ab f6 a8 28 95 e2 88 9a 3b 51 ef 51 53 6a 2d 8d 20 f8 0c 40 d4 19 e0 02 d0 13 2a fe 21 1d ec 5b 7b a4 a1 2a fc d4 e9 36 84 44 4a da 35 1a eb ca 26 e3 0d 7e 6f 6b c4 d2 95 fb 60 b7 37 e0 6a f0 d8 fd cd f8 40 53 3c d9 d2 92 b2 d9 9d 9e ba 70 e0 f0 d7 6e a0 75 4e 78 e2 a2 09 30 ad 07 4c af 04 4c 6b 90 89 e8 77 f9 11 84 94 70 19 99 b5 47 58 1a f1 55 3e 58 79 95 00 f0 2c 5f ec e4 f0 5c 70 2c 02 cd 68 4b 28 1e 6f 6c 4a c4 f1 45 8b 63 91 d1 e0 c2 38 34 ed a9 28 4c 44 24 0c 5c a1 b9 b8 fe 04 97 77 b5 a3 38 e8 57 53 34 bc d7 11 73 34 04 f7 fa fc 3e 07 bc 94 c6 bd 22 4a b9 97 cf 88 57 8a 36 a7 c3 5c 03 66 f6 6c 97 b0 92 56 e3 f2 6a 89 0a 92 06 b6 3a 46 c5 97 9d 77 e7 54 e1 5f ce db Data Ascii: \|yRLrT;(:R(;QQSj- @![{6DJ5&~ok`7j@S<pnuNx0LLkwpGXU>Xy,_\p,hK(olJEc84(LD$\w8WS4s4>"JW6\flVj:FwT_
2024-07-10 01:44:39 UTC	7938	IN	Data Raw: 2d b3 1d 65 6d bb ac 31 24 e9 1e 52 f9 24 bf e7 e6 7b 81 c0 9e ab 7b 86 58 7f 41 7a c2 eb 15 05 83 78 9b 6d b2 b8 65 b3 82 98 7b f6 51 ec 1e 3a 51 ae 43 24 e1 be 9d e0 78 dc ae 27 5a dc 45 52 3c 5d d9 0f 61 3d 05 05 8e 6b 56 ab 00 47 c4 6b e0 0a af 5f ad 3a 18 21 21 ed 71 b5 22 dc a1 4d bf ae c7 d7 cd e9 b2 d9 92 5b 9e 7d 3f aa ef 2b 0a 4e 3f 70 2e 12 a2 3c 7a 8c 32 2c e0 6b ac ce 6f 27 e2 78 1e 37 42 81 f9 0e 03 af 3d c6 3c 4a 89 16 f4 af 61 87 a4 c6 65 c7 be 84 c9 b3 63 f9 1d 59 42 12 af 38 66 7c 97 e6 09 e3 0f a4 9f e9 ed 51 08 78 62 c5 96 c5 88 1c 42 3f 22 93 ff 1a fe d6 cb 5d 41 fb 04 f1 2a ae 6d ef 28 3b 7d 14 c7 bf 06 f1 9f 3b 88 c5 13 fb 0a 6e bf 15 3c 23 88 72 4f 59 c3 d4 b2 3e 22 46 9c e0 0f 0e fe d0 21 4a 38 c8 de 75 cd de 3f b4 c7 c6 9e 88 33 Data Ascii: -em1$R${{XAzxme{Q:QC$x'ZER<]a=kVGk_:!!q"M[}?+N?p.<z2,ko'x7B=<JaecYB8f\|QxbB?"]A*m(;};n<#rOY>"F!J8u?3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49815	104.19.177.52	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	557	OUT	GET /scripttemplates/202403.2.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	815	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: NaqcG2ILVJmSrG/q1ZpJ7w== Last-Modified: Mon, 22 Apr 2024 06:06:18 GMT x-ms-request-id: c839b996-c01e-001f-188e-948a87000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 26706 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a0cdeaafcbf42ee-EWR
2024-07-10 01:44:38 UTC	554	IN	Data Raw: 37 63 37 31 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 33 2e 32 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 78 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c71/** * onetrust-banner-sdk * v202403.2.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 Data Ascii: otype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return ne
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 Data Ascii: l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=ar
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 59 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 59 28 74 29 7d 63 61 74 63 68 28 65 29 7b 4a 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 59 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d Data Ascii: ceof z)return t._state=3,t._value=e,void Y(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,Y(t)}catch(e){J(t,e)}var n,r}function J(e,t){e._state=2,e._value=t,Y(e)}function Y(e){2===e._state&&0==
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 7a 2e 72 61 63 65 3d 66 75 6e 63 Data Ascii: eturn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){return new z(function(e,t){t(o)})},z.race=func
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 Data Ascii: e:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 Data Ascii: .initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 Data Ascii: e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=oe=oe\|\|{})[e.Purpose=1
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 43 65 3d 43 65 7c 7c 7b 7d Data Ascii: l"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.InActive="0",(e=ge=ge\|\|{}).Host="Host",e.GenVendor="GenVen",(e=Ce=Ce\|\|{}
2024-07-10 01:44:38 UTC	1369	IN	Data Raw: 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 Data Ascii: granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="vendors",(e=_e=_e\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49898	173.194.76.157	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	833	OUT	POST /g/collect?v=2&tid=G-LVHK6H547B&cid=1532117314.1720575878&gtm=45je4730v889588973z8811498483za200zb811498483&aip=1&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://partner.booking.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:39 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://partner.booking.com Date: Wed, 10 Jul 2024 01:44:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49895	18.239.50.78	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	1972	OUT	GET /en-us/sidebar-banner-ajax-render/136846/node HTTP/1.1 Host: partner.booking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&intera [TRUNCATED]
2024-07-10 01:44:39 UTC	1071	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:39 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto cache-control: must-revalidate, no-cache, private content-language: en-us x-frame-options: SAMEORIGIN expires: -1 x-generator: Drupal 10 (https://www.drupal.org) content-security-policy: report-uri /report-csp-violation; upgrade-insecure-requests x-xss-protection: 1; mode=block pragma: no-cache x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /en-us/sidebar-banner-ajax-render/136846/node X-Host: partner.booking.com X-Varnish: 230687526 Via: 1.1 varnish (Varnish/6.6), 1.1 af1da25c2dddf71cac076999aa9861e6.cloudfront.net (CloudFront) X-Varnish-Cache: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: AMS58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bhgy939pPcDpgdgqrZgmuKTkEFC_1KU_TmXT422obSe_Z-ARoRQy8w== Age: 0 Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49905	216.239.36.181	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	1464	OUT	POST /g/collect?v=2&tid=G-LVHK6H547B&gtm=45je4730v889588973z8811498483za200zb811498483&_p=1720575873843&gcs=G111&gcd=13r3r3r3r5&npa=0&dma=0&tag_exp=0&gdid=dYWJhMj&cid=1532117314.1720575878&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&sid=1720575877&sct=1&seg=0&dl=https%3A%2F%2Fpartner.booking.com%2Fen-us%2Fclick-magazine%2Findustry-perspectives%2Fwhy-being-proud-certified-matters&dr=https%3A%2F%2Fpartner.booking.com%2Fen-us%3Futm_source%3Dextranet_login_page&dt=Why%20being%20Travel%20Proud%20Certified%20matters%20to%20our%20partners%20%7C%20Click.%20Magazine&_s=2&tfd=6185&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 681 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://partner.booking.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:38 UTC	681	OUT	Data Raw: 65 6e 3d 61 72 74 69 63 6c 65 5f 70 72 6f 64 75 63 74 5f 61 74 74 72 69 62 75 74 69 6f 6e 26 65 70 2e 63 75 73 74 6f 6d 5f 70 61 67 65 5f 74 69 74 6c 65 3d 43 6c 69 63 6b 2e 25 32 30 4d 61 67 61 7a 69 6e 65 2d 34 39 39 25 37 43 49 6e 64 75 73 74 72 79 25 32 30 50 65 72 73 70 65 63 74 69 76 65 73 2d 37 25 37 43 57 68 79 25 32 30 62 65 69 6e 67 25 32 30 54 72 61 76 65 6c 25 32 30 50 72 6f 75 64 25 32 30 43 65 72 74 69 66 69 65 64 25 32 30 6d 61 74 74 65 72 73 25 32 30 74 6f 25 32 30 6f 75 72 25 32 30 70 61 72 74 6e 65 72 73 2d 31 33 36 38 34 36 26 65 70 2e 61 72 74 69 63 6c 65 5f 61 75 74 68 6f 72 3d 41 6c 69 63 65 25 32 30 50 69 65 72 63 79 26 65 70 2e 61 72 74 69 63 6c 65 5f 70 75 62 6c 69 73 68 5f 74 69 6d 65 3d 32 30 32 34 2d 30 36 2d 32 34 26 65 70 2e Data Ascii: en=article_product_attribution&ep.custom_page_title=Click.%20Magazine-499%7CIndustry%20Perspectives-7%7CWhy%20being%20Travel%20Proud%20Certified%20matters%20to%20our%20partners-136846&ep.article_author=Alice%20Piercy&ep.article_publish_time=2024-06-24&ep.
2024-07-10 01:44:39 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://partner.booking.com Date: Wed, 10 Jul 2024 01:44:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49904	104.22.70.197	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	585	OUT	GET /menu/modules/core.Ep5bSEmr.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://partner.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:39 UTC	900	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=315360000, immutable Cf-Bgj: minify ETag: W/"a995aaed2cd978eb5749462d1dc3635e" NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nO8DvmHIcwYyZK8%2BRouHzphROeVa4g8KTUhREhUVg%2BBkVeXKDgU14sbFBsTjnWYf%2Fn8P9v9DC4IZIUH2KlKCe2GiTykYE2Cfy277GBbWakmTyR%2BoqykoKjTxg6KQHcinIdx493d0"}],"group":"cf-nel","max_age":604800} Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff CF-Cache-Status: HIT Age: 25820 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a0cdeab998a43c9-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:39 UTC	469	IN	Data Raw: 37 63 33 34 0d 0a 63 6f 6e 73 74 20 74 3d 22 2e 45 70 35 62 53 45 6d 72 22 2c 4a 3d 77 69 6e 64 6f 77 2c 4b 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 58 3d 76 6f 69 64 20 30 3b 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 3d 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 3b 76 61 72 20 65 3d 7b 6c 6f 63 61 6c 69 7a 65 3a 4a 2e 61 32 61 5f 6c 6f 63 61 6c 69 7a 65 7c 7c 7b 7d 2c 73 74 61 74 69 63 5f 73 65 72 76 65 72 3a 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 2e 73 74 61 74 69 63 5f 73 65 72 76 65 72 7c 7c 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 61 64 64 74 6f 61 6e 79 2e 63 6f 6d 2f 6d 65 6e 75 22 2c 74 65 6d 70 6c 61 74 65 73 3a 7b 7d 2c 6e 61 74 69 76 65 3a 58 2c 6f 6e 63 6c 69 63 6b 3a 32 2c 6f 72 69 65 6e 74 61 74 69 6f 6e Data Ascii: 7c34const t=".Ep5bSEmr",J=window,K=document,p=function(){},X=void 0;J.a2a_config=J.a2a_config\|\|{};var e={localize:J.a2a_localize\|\|{},static_server:J.a2a_config.static_server\|\|"https://static.addtoany.com/menu",templates:{},native:X,onclick:2,orientation
2024-07-10 01:44:39 UTC	1369	IN	Data Raw: 2c 6f 76 65 72 6c 61 79 73 3a 5b 5d 7d 3b 63 6f 6e 73 74 20 4c 3d 7b 6e 75 6d 5f 73 65 72 76 69 63 65 73 3a 38 2c 70 72 69 6f 72 69 74 69 7a 65 3a 58 2c 65 78 63 6c 75 64 65 5f 73 65 72 76 69 63 65 73 3a 58 2c 63 75 73 74 6f 6d 5f 73 65 72 76 69 63 65 73 3a 58 2c 64 65 6c 61 79 3a 30 2c 73 68 6f 77 5f 6d 65 6e 75 3a 58 2c 62 6f 6f 6b 6d 61 72 6b 6c 65 74 3a 58 7d 2c 6d 3d 7b 6c 69 6e 6b 6d 65 64 69 61 3a 58 2c 6c 69 6e 6b 6e 61 6d 65 3a 58 2c 6c 69 6e 6b 75 72 6c 3a 58 2c 6c 69 6e 6b 6e 61 6d 65 5f 65 73 63 61 70 65 3a 58 2c 6d 65 6e 75 5f 74 79 70 65 3a 58 2c 74 61 72 67 65 74 3a 58 7d 2c 5a 3d 7b 2e 2e 2e 65 2c 2e 2e 2e 4c 2c 2e 2e 2e 6d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 4a 2e 61 32 61 5f 63 6f 6e Data Ascii: ,overlays:[]};const L={num_services:8,prioritize:X,exclude_services:X,custom_services:X,delay:0,show_menu:X,bookmarklet:X},m={linkmedia:X,linkname:X,linkurl:X,linkname_escape:X,menu_type:X,target:X},Z={...e,...L,...m},y=function(){for(const e in J.a2a_con
2024-07-10 01:44:39 UTC	1369	IN	Data Raw: 61 74 73 41 70 70 22 2c 22 77 68 61 74 73 61 70 70 22 2c 22 77 68 61 74 73 61 70 70 22 2c 22 31 32 41 46 30 41 22 2c 7b 70 75 3a 31 2c 6e 61 3a 31 7d 5d 2c 5b 22 45 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 38 38 38 39 39 30 22 2c 7b 75 72 6c 3a 22 6d 61 69 6c 74 6f 3a 3f 73 75 62 6a 65 63 74 3d 24 7b 74 69 74 6c 65 7d 26 62 6f 64 79 3d 24 7b 6c 69 6e 6b 7d 22 7d 5d 2c 5b 22 50 69 6e 74 65 72 65 73 74 22 2c 22 70 69 6e 74 65 72 65 73 74 22 2c 22 70 69 6e 74 65 72 65 73 74 22 2c 22 65 36 30 30 32 33 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 2f 6a 73 2f 70 69 6e 6d 61 72 6b 6c 65 74 2e 6a 73 22 2c 6d 65 64 69 61 3a 31 2c 70 75 3a 31 7d Data Ascii: atsApp","whatsapp","whatsapp","12AF0A",{pu:1,na:1}],["Email","email","email","888990",{url:"mailto:?subject=${title}&body=${link}"}],["Pinterest","pinterest","pinterest","e60023",{type:"js",src:"https://assets.pinterest.com/js/pinmarklet.js",media:1,pu:1}
2024-07-10 01:44:39 UTC	1369	IN	Data Raw: 2c 5b 22 44 69 61 72 79 2e 52 75 22 2c 22 64 69 61 72 79 5f 72 75 22 2c 22 64 69 61 72 79 5f 72 75 22 2c 22 39 31 32 44 33 31 22 5d 2c 5b 22 44 69 61 73 70 6f 72 61 22 2c 22 64 69 61 73 70 6f 72 61 22 2c 22 64 69 61 73 70 6f 72 61 22 2c 22 32 45 33 34 33 36 22 5d 2c 5b 22 44 69 67 67 22 2c 22 64 69 67 67 22 2c 22 64 69 67 67 22 2c 22 31 41 31 41 31 41 22 5d 2c 5b 22 44 69 69 67 6f 22 2c 22 64 69 69 67 6f 22 2c 22 64 69 69 67 6f 22 2c 22 34 41 38 42 43 41 22 5d 2c 5b 22 44 6f 75 62 61 6e 22 2c 22 64 6f 75 62 61 6e 22 2c 22 64 6f 75 62 61 6e 22 2c 22 30 37 31 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 44 72 61 75 67 69 65 6d 22 2c 22 64 72 61 75 67 69 65 6d 22 2c 22 64 72 61 75 67 69 65 6d 22 2c 22 46 36 30 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 45 76 65 72 6e 6f 74 Data Ascii: ,["Diary.Ru","diary_ru","diary_ru","912D31"],["Diaspora","diaspora","diaspora","2E3436"],["Digg","digg","digg","1A1A1A"],["Diigo","diigo","diigo","4A8BCA"],["Douban","douban","douban","071",{pu:1}],["Draugiem","draugiem","draugiem","F60",{pu:1}],["Evernot
2024-07-10 01:44:39 UTC	1369	IN	Data Raw: 62 6f 61 72 64 22 2c 22 31 33 34 31 44 45 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 50 6c 75 72 6b 22 2c 22 70 6c 75 72 6b 22 2c 22 70 6c 75 72 6b 22 2c 22 43 46 36 38 32 46 22 5d 2c 5b 22 50 72 69 6e 74 22 2c 22 70 72 69 6e 74 22 2c 22 70 72 69 6e 74 22 2c 22 38 38 38 39 39 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 6a 61 76 61 73 63 72 69 70 74 3a 70 72 69 6e 74 28 29 22 7d 5d 2c 5b 22 50 72 69 6e 74 46 72 69 65 6e 64 6c 79 22 2c 22 70 72 69 6e 74 66 72 69 65 6e 64 6c 79 22 2c 22 70 72 69 6e 74 66 72 69 65 6e 64 6c 79 22 2c 22 36 44 39 46 30 30 22 5d 2c 5b 22 50 75 73 68 61 22 2c 22 70 75 73 68 61 22 2c 22 70 75 73 68 61 22 2c 22 30 30 37 32 42 38 22 5d 2c 5b 22 51 7a 6f 6e 65 22 2c 22 71 7a 6f 6e 65 22 2c 22 71 7a 6f 6e 65 22 2c 22 32 42 38 32 Data Ascii: board","1341DE",{pu:1}],["Plurk","plurk","plurk","CF682F"],["Print","print","print","888990",{type:"js",src:"javascript:print()"}],["PrintFriendly","printfriendly","printfriendly","6D9F00"],["Pusha","pusha","pusha","0072B8"],["Qzone","qzone","qzone","2B82
2024-07-10 01:44:39 UTC	1369	IN	Data Raw: 78 69 6e 67 22 2c 22 31 36 35 42 36 36 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 59 61 68 6f 6f 20 4d 61 69 6c 22 2c 22 79 61 68 6f 6f 5f 6d 61 69 6c 22 2c 22 79 61 68 6f 6f 22 2c 22 34 30 30 30 39 30 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 2c 5b 22 59 75 6d 6d 6c 79 22 2c 22 79 75 6d 6d 6c 79 22 2c 22 79 75 6d 6d 6c 79 22 2c 22 45 31 36 31 32 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 75 6d 6d 6c 79 2e 63 6f 6d 2f 6a 73 2f 79 75 6d 6c 65 74 2e 6a 73 22 2c 6d 65 64 69 61 3a 31 2c 70 75 3a 31 7d 5d 5d 2c 65 6d 61 69 6c 3a 5b 5b 22 45 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 38 38 38 39 39 30 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 2c 5b 22 47 6d 61 69 6c 22 2c Data Ascii: xing","165B66",{pu:1}],["Yahoo Mail","yahoo_mail","yahoo","400090",{type:"email"}],["Yummly","yummly","yummly","E16120",{type:"js",src:"https://www.yummly.com/js/yumlet.js",media:1,pu:1}]],email:[["Email","email","email","888990",{type:"email"}],["Gmail",
2024-07-10 01:44:39 UTC	1369	IN	Data Raw: 64 2e 6d 6f 73 74 29 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 69 2e 70 75 73 68 28 65 5b 32 5d 29 29 2c 7b 61 70 70 6c 65 5f 6d 75 73 69 63 3a 7b 6e 61 6d 65 3a 22 41 70 70 6c 65 20 4d 75 73 69 63 22 2c 69 63 6f 6e 3a 22 61 70 70 6c 65 5f 6d 75 73 69 63 22 2c 63 6f 6c 6f 72 3a 22 66 61 32 33 33 62 22 7d 2c 62 65 68 61 6e 63 65 3a 7b 6e 61 6d 65 3a 22 42 65 68 61 6e 63 65 22 2c 69 63 6f 6e 3a 22 62 65 68 61 6e 63 65 22 2c 63 6f 6c 6f 72 3a 22 30 30 37 45 46 46 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 68 61 6e 63 65 2e 6e 65 74 2f 24 7b 69 64 7d 22 7d 2c 62 6c 75 65 73 6b 79 3a 7b 6e 61 6d 65 3a 22 42 6c 75 65 73 6b 79 22 2c 69 63 6f 6e 3a 22 62 6c 75 65 73 6b 79 22 2c 63 6f 6c 6f 72 3a 22 31 32 38 35 66 65 22 7d 2c 64 69 73 63 6f 72 64 Data Ascii: d.most)).forEach(e=>i.push(e[2])),{apple_music:{name:"Apple Music",icon:"apple_music",color:"fa233b"},behance:{name:"Behance",icon:"behance",color:"007EFF",url:"https://www.behance.net/${id}"},bluesky:{name:"Bluesky",icon:"bluesky",color:"1285fe"},discord
2024-07-10 01:44:39 UTC	1369	IN	Data Raw: 72 3a 22 32 41 32 41 32 41 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6e 61 70 63 68 61 74 2e 63 6f 6d 2f 61 64 64 2f 24 7b 69 64 7d 22 7d 2c 73 6f 75 6e 64 63 6c 6f 75 64 3a 7b 6e 61 6d 65 3a 22 53 6f 75 6e 64 43 6c 6f 75 64 22 2c 69 63 6f 6e 3a 22 73 6f 75 6e 64 63 6c 6f 75 64 22 2c 63 6f 6c 6f 72 3a 22 66 66 35 35 30 30 22 7d 2c 73 70 6f 74 69 66 79 3a 7b 6e 61 6d 65 3a 22 53 70 6f 74 69 66 79 22 2c 69 63 6f 6e 3a 22 73 70 6f 74 69 66 79 22 2c 63 6f 6c 6f 72 3a 22 31 65 64 37 36 30 22 7d 2c 74 68 72 65 61 64 73 3a 7b 6e 61 6d 65 3a 22 54 68 72 65 61 64 73 22 2c 69 63 6f 6e 3a 22 74 68 72 65 61 64 73 22 2c 63 6f 6c 6f 72 3a 22 32 61 32 61 32 61 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 68 72 65 61 64 73 2e 6e 65 74 2f Data Ascii: r:"2A2A2A",url:"https://www.snapchat.com/add/${id}"},soundcloud:{name:"SoundCloud",icon:"soundcloud",color:"ff5500"},spotify:{name:"Spotify",icon:"spotify",color:"1ed760"},threads:{name:"Threads",icon:"threads",color:"2a2a2a",url:"https://www.threads.net/
2024-07-10 01:44:39 UTC	1369	IN	Data Raw: 21 31 29 2c 4a 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 65 28 65 2c 61 3d 7b 7d 29 7b 79 28 29 3b 76 61 72 20 74 2c 6e 2c 6f 2c 69 2c 72 2c 6c 2c 73 3d 5a 2c 63 3d 7b 7d 2c 64 3d 6e 75 6c 6c 2c 70 3d 7b 7d 2c 75 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 66 6f 72 28 74 20 69 6e 20 72 61 28 65 29 2c 61 29 73 5b 74 5d 3d 61 5b 74 5d 3b 66 6f 72 28 74 20 69 6e 20 73 29 63 5b 74 5d 3d 73 5b 74 5d 3b 69 66 28 6e 3d 73 2e 74 61 72 67 65 74 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 6f 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 29 2c 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 22 2e 22 3d 3d 6f 29 72 65 74 75 72 6e 20 48 Data Ascii: !1),J.addEventListener("load",t,!1))}};function ae(e,a={}){y();var t,n,o,i,r,l,s=Z,c={},d=null,p={},u=location.href;for(t in ra(e),a)s[t]=a[t];for(t in s)c[t]=s[t];if(n=s.target)if("string"==typeof n){if(o=n.substring(0,1),n=n.substring(1),"."==o)return H
2024-07-10 01:44:39 UTC	1369	IN	Data Raw: 3f 70 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 6e 2e 6c 69 6e 6b 6e 61 6d 65 3a 70 2e 69 6e 6e 65 72 54 65 78 74 3d 6e 2e 6c 69 6e 6b 6e 61 6d 65 2c 28 69 3d 70 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 26 26 28 6e 2e 6c 69 6e 6b 6e 61 6d 65 3d 69 2e 6e 6f 64 65 56 61 6c 75 65 29 2c 64 2e 61 32 61 5f 6b 69 74 3f 71 28 6e 2c 6f 29 3a 57 28 6e 29 29 3a 75 2e 73 68 6f 77 5f 6d 65 6e 75 7c 7c 6a 2d 2d 2c 59 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 50 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3c 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 61 32 61 5f 66 6f 6c 6c 6f 77 22 29 3f 61 65 28 22 66 65 65 64 22 2c 7b 74 61 72 67 65 74 3a 65 7d 29 3a 61 65 28 61 7c 7c 22 70 61 67 65 22 2c 7b 74 61 72 67 65 74 3a 65 7d 29 7d 2c 21 30 29 Data Ascii: ?p.textContent=n.linkname:p.innerText=n.linkname,(i=p.childNodes[0])&&(n.linkname=i.nodeValue),d.a2a_kit?q(n,o):W(n)):u.show_menu\|\|j--,Y()}function r(a){P(function(e){0<=e.className.indexOf("a2a_follow")?ae("feed",{target:e}):ae(a\|\|"page",{target:e})},!0)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49836	18.245.60.76	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	2045	OUT	GET /logo?ver=1&sid=8ac6b1f85386b93507ae3cb6dc426561&t=17205758751 HTTP/1.1 Host: www.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.booking.com/content/privacy.en-gb.html?label=gen173bo-1DCBQoggJCB3ByaXZhY3lIM1gDaLYBiAEBmAEJuAEZyAEP2AED6AEBiAIBmAIhqAIDuAKC4pmxB%20sACAdICJDFlZWY0ZmRjLTU5MGUtNDcxMi1iOTk5LTZiMmU0N2E5MjY2YdgCBOACAQ&sid%20=930746e7f78d5b33410375991db31657 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; cors_js=1; mf_user=c5543b84877e5405209bd06a667f9ac4\|; mf_b18d32a2-ec35-41cf-9425-b945bb4c2fa5=1081587288e1c42126592dee7a0498ee\|070937457e9a146494e54253f9387735ba4ce91d.17267618343.1720575877370\|1720575877345\|\|0\|\|\|\|0\| [TRUNCATED]
2024-07-10 01:44:39 UTC	792	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 35 Connection: close server: nginx date: Wed, 10 Jul 2024 01:44:39 GMT vary: User-Agent, Accept-Encoding set-cookie: BJS=-; domain=booking.com; expires=Thu, 11-Jul-2024 01:44:39 GMT; Secure; HTTPOnly strict-transport-security: max-age=63072000; includeSubDomains; preload content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=622f0c43274300ab&e=UmFuZG9tSVYkc2RlIyh9YbpBYTW1tHKzlOaNIHFwY3BuysDMJZy_bzQ7KfmlnWVv x-xss-protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 4d156fc02c81ad97b906c107779265e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P5 X-Amz-Cf-Id: IwIt6w_WTmXA7ccUemZuffPM0U8Z5mFtN9gBj1TwYB6UrRhMRaKZqA==
2024-07-10 01:44:39 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49900	142.250.184.226	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	967	OUT	GET /td/ga/rul?tid=G-LVHK6H547B&gacid=1532117314.1720575878&gtm=45je4730v889588973z8811498483za200zb811498483&dma=0&gcs=G111&gcd=13r3r3r3r5&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1625852243 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:39 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 10 Jul 2024 01:44:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 10-Jul-2024 01:59:39 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-10 01:44:39 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-10 01:44:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49902	18.157.249.141	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:38 UTC	1168	OUT	POST /pr?.top=353&item=%7B%22type%22%3A%22Article%22%2C%22_id%22%3A%22136846%22%2C%22categories%22%3A%5B%7B%22type%22%3A%22c%22%2C%22_id%22%3A%22499%7C7%22%7D%5D%7D&action=View%20Catalog%20Object&.tt=305&.dt=4806&.bv=16&_ak=bookingdotcomb2b&_ds=booking_prod&.scv=138&channel=Web&_r=023287&.anonId=2ba526af6f8d14f2&_anon=true HTTP/1.1 Host: bookingdotcomb2b.germany-2.evergage.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBTGCORS=On+xTOYeemMB9shD/iSG2ouVqMJJOx6T5qnMTQ0tr89lwXsVC97GVLw/YbCd/RV17RieuwjRBsJ+T87J1TlgwTf6DUZnkEoVAH6MkjY5KmPkGgd0sd1yOoS6VFxVqAmyPO8YOL9srn0/dpT9ISLu9bqY0WHA1FGbZkqmwDgLWii23TwEADI=
2024-07-10 01:44:39 UTC	741	IN	HTTP/1.1 204 Date: Wed, 10 Jul 2024 01:44:39 GMT Content-Type: text/plain Connection: close Set-Cookie: AWSALBTG=9blcpq0d0zf8u69KB4zB1yFV0SvQc7uuSk4UVbq7ueyX10Mp9OsLKntaIKLDUO5mHs4JjagAVsWX+GSoYVg8Qhs26/yVXhe0L8C1+xnHqkV0cEWyDuFDlMDw+dYAulOOChQPou692zMAef8KzEQ6VLahoJDUGDZG68l4imhHR0FgqjG7lno=; Expires=Wed, 17 Jul 2024 01:44:39 GMT; Path=/ Set-Cookie: AWSALBTGCORS=9blcpq0d0zf8u69KB4zB1yFV0SvQc7uuSk4UVbq7ueyX10Mp9OsLKntaIKLDUO5mHs4JjagAVsWX+GSoYVg8Qhs26/yVXhe0L8C1+xnHqkV0cEWyDuFDlMDw+dYAulOOChQPou692zMAef8KzEQ6VLahoJDUGDZG68l4imhHR0FgqjG7lno=; Expires=Wed, 17 Jul 2024 01:44:39 GMT; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://partner.booking.com Timing-Allow-Origin: * X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49903	18.172.112.27	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	425	OUT	GET /71cd12cdf77ebcb750cff91a9bba6f04/1260644.1562364.json?89b5bf9a6316eb30dcfc5b1f740c76c8 HTTP/1.1 Host: try.abtasty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:39 UTC	810	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 278 Connection: close Date: Sat, 06 Jul 2024 08:29:20 GMT access-control-allow-origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: access-control-allow-origin Access-Control-Max-Age: 3000 Last-Modified: Fri, 05 Jul 2024 15:14:05 GMT ETag: "901b2c0ab4fc768f490258d3d6119d3d" x-amz-server-side-encryption: AES256 Cache-Control: s-maxage=604800,max-age=604800 x-amz-version-id: fYoJ8MsQ2il7OwUsUTYJx1Inh7vszSu8 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d60e84ebd0183f97f50eb1677fb4b7be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: dsy8dzTZAT0e5nTmji03B89gRfLOScsHT67Jbz-0g7h0afGhRKQ-8Q== Age: 321320
2024-07-10 01:44:39 UTC	278	IN	Data Raw: 7b 22 69 64 22 3a 31 35 36 32 33 36 34 2c 22 6e 61 6d 65 22 3a 22 56 61 72 69 61 74 69 6f 6e 20 31 22 2c 22 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 35 31 36 38 30 31 33 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 22 2c 22 74 79 70 65 22 3a 22 61 64 64 43 53 53 22 2c 22 76 61 6c 75 65 22 3a 22 23 62 6c 6f 63 6b 2d 73 65 63 6f 6e 64 61 72 79 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6d 65 6e 75 2d 69 74 65 6d 2e 6d 65 6e 75 2d 69 74 65 6d 2d 6c 65 76 65 6c 2d 2d 30 20 3e 20 61 5b 68 72 65 66 2a 3d 5c 22 6a 6f 69 6e 5c 22 5d 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6d 70 6c 65 6d 65 6e 74 29 3b 5c 6e 7d 22 7d 5d 2c 22 5f 74 61 67 49 6e 66 6f 22 3a 22 32 30 Data Ascii: {"id":1562364,"name":"Variation 1","modifications":[{"id":5168013,"selector":"","type":"addCSS","value":"#block-secondarynavigation .menu-item.menu-item-level--0 > a[href*=\"join\"]:not(:hover) {\n color: var(--bui_color_complement);\n}"}],"_tagInfo":"20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49907	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	2512	OUT	GET /sites/default/files/styles/click_article_header_desktop/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?itok=cVuzdpd9 HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&intera [TRUNCATED]
2024-07-10 01:44:39 UTC	1049	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 201762 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:39 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Thu, 06 Jun 2024 10:03:29 GMT etag: "31422-61a35cb7a8beb" cache-control: max-age=31536000 expires: Thu, 10 Jul 2025 01:44:39 GMT x-webserver: webserver/2 X-Varnish-Storage: Malloc X-Url: /sites/default/files/styles/click_article_header_desktop/public/2024-06/ukb5394_asset_bank_shot_10_0719.jpg.webp?itok=cVuzdpd9 X-Host: partner.booking.com X-Varnish: 225631703 Via: 1.1 varnish (Varnish/6.6), 1.1 0c371064bf157d89e4b3520c0b29474c.cloudfront.net (CloudFront) X-Varnish-Cache: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: caYH2fy2qLhfOGxp-SNL57bES48Nkgf5NGxZL0Pc2T_dB07IBd5A5g== Age: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:39 UTC	15335	IN	Data Raw: 52 49 46 46 1a 14 03 00 57 45 42 50 56 50 38 20 0e 14 03 00 b0 7a 0b 9d 01 2a 80 07 15 02 3e 19 0c 85 41 a1 04 56 49 33 04 00 61 2c eb 94 e7 d5 cf 6c cf c6 ff f9 d1 b6 8d fd af ff ce 6a 7f ff d0 83 e1 72 ef c7 97 f8 1d 2e 59 77 ff 3b 9d 8f ff fe 4d 3f b4 ff ff bd d9 4a 2b 35 7b d2 80 ef 9f aa 6d 71 f9 fb 94 47 27 fe c7 e0 4f f0 1e 02 9e 83 fd 7f d8 03 f5 b7 84 8d 00 38 c0 e7 fd fe bf d0 23 ea 9e a1 ff f2 78 d2 ef 25 89 fe 6e 00 d7 a3 e4 fd ea fb 66 72 6f 95 3f 57 f1 c7 f9 1f dd 0f b7 6f f5 7f f0 fb 72 f2 4f e0 bf f4 fd 40 7c 54 74 ff fc 3f f3 7f bc 7f ea 7f ff ff ea fb c3 ff a3 ff 47 fb ef 81 1f d2 ff e4 7f e8 fc d6 fa 23 fe 47 fd 73 fd 8f f7 df f2 5f f7 bf cc 7f ff ff d1 f9 7f d5 af e6 17 b3 3f db 0f fc df ea bd e8 bf 36 fe 09 7f 79 ff a1 fb 1b fe e3 e4 Data Ascii: RIFFWEBPVP8 z*>AVI3a,ljr.Yw;M?J+5{mqG'O8#x%nfro?WorO@\|Tt?G#Gs_?6y
2024-07-10 01:44:39 UTC	15604	IN	Data Raw: ef fa 4b 0c f9 f9 9e 86 b0 ac 14 3c f6 bc 97 cd 0e 94 a7 df 91 32 54 77 48 3d 60 0a 97 48 84 c5 30 42 71 1c b3 fd e8 28 f3 8f f1 c4 e2 47 1d de 5b 21 96 ed 1d 11 a5 04 6d d1 d1 22 02 9b a6 b5 4a 99 fd 22 37 16 72 f5 99 f4 62 84 94 2a 9a f9 9d 2d d5 57 9c bd 27 b5 9d 48 94 d2 c6 5f 03 50 e8 62 db cb b6 b3 3d 3a ac 4b 7b ab fa 45 21 e6 7b 82 e7 6d 0c 62 0e 3e 98 3a 83 ef c6 e3 fb 2f 7b d0 35 5a 0e 73 94 7c 4b 61 55 38 c6 96 d4 0d d0 69 8d 82 41 63 f3 c5 f4 10 98 d3 ae 6c de e4 04 c6 40 83 3f 3c a4 a6 15 f8 86 c2 5b b6 d3 cb 2f ad 88 3c f3 90 60 da e5 56 80 99 00 c3 ee ab 08 eb 82 0d c3 cb 0b 90 bb 7e 98 42 e5 5f 1c 99 11 6a 76 a7 56 b7 47 77 b5 87 c0 31 8c 1c b0 24 7d ce 6d 87 a1 17 40 b7 69 36 e8 19 af ad 45 2e fd 4f 6f cf 9c be 4c c7 fe d9 b4 1b eb f4 60 Data Ascii: K<2TwH=`H0Bq(G[!m"J"7rb*-W'H_Pb=:K{E!{mb>:/{5Zs\|KaU8iAcl@?<[/<`V~B_jvVGw1$}m@i6E.OoL`
2024-07-10 01:44:39 UTC	4187	IN	Data Raw: 25 e2 00 ed 51 44 48 53 60 bb 56 3a 9c d7 55 5a 69 8b dd f2 6d ff 43 ae 1f 7c a5 ef 0e fd e6 77 ed a0 4c 5b 17 1b 8e ce c7 6d e4 d2 be 75 a4 54 0a c0 be 1a c9 80 04 07 73 f9 ee a2 85 40 39 e4 74 8e bb ad ea 61 e1 38 b5 28 17 f9 db 2a 56 94 d9 b2 3b 7b b0 72 ca af ad 9a aa 60 3d 36 24 3d b1 4c df b6 fb 50 6a d7 2e c0 96 44 2f 3e e1 a3 a6 93 40 b9 2f 0c d7 e5 ef 68 a6 6a 5f f7 e6 04 ef a3 f7 13 f0 60 9b 3d df de db 5d 6b d5 8e ce 4c a2 f3 b5 da d6 3e fb f2 d8 5e dc ef 64 66 e9 75 e3 ac bb 9e 75 52 17 e5 b2 0c 06 d2 9a 7d 5e a8 6e 46 f7 0a 6a 6c 96 74 50 fc ec 93 9a fa 4f a4 8f 71 57 17 12 c1 c0 e8 29 20 71 31 9d 9b a2 fa fe 53 6c 7d bf db d9 8a 74 6e 0e 87 84 65 29 af c8 6c 40 b5 44 be 9b 39 0c 9a dd 04 4f d9 57 c9 31 a9 ed 45 6e 7f 1f b2 99 de df 3c af df Data Ascii: %QDHS`V:UZimC\|wL[muTs@9ta8(*V;{r`=6$=LPj.D/>@/hj_`=]kL>^dfuuR}^nFjltPOqW) q1Sl}tne)l@D9OW1En<
2024-07-10 01:44:39 UTC	16384	IN	Data Raw: 14 d7 c8 44 17 ca 0c 2a 54 49 10 c0 b9 17 78 96 59 e2 a1 8b cc f9 06 9b 82 72 c6 77 2c 8b 3c 4d ae 04 fd 6e 28 7c af a9 ab d9 09 77 5e 75 83 53 05 cd 3b b3 6c 91 bd b7 97 1d ae 9d 8d 9c d5 41 3d c6 6d a2 f1 09 31 e6 96 4a 8a 31 79 65 b6 cd 50 8b 62 7e e0 94 b7 58 ef 38 16 2d 66 ee f1 b5 e1 59 a2 ef 0c 07 76 b6 00 90 fa 33 4c be aa e5 4a d1 9b c7 68 cd 22 9d 40 31 1d e9 8f 3c 33 2b 8e 0e f5 91 25 50 a2 0a 95 7f 92 01 96 67 40 41 bb a4 31 bb 81 eb b6 b6 95 2c 76 bc 56 82 60 4b 33 9d 2b ad 75 85 00 58 92 61 4e 92 6c 9e 5a f6 4d f8 66 39 78 59 ea d2 72 48 ab 44 b3 3a 12 84 3f 97 1c bf 56 76 12 07 90 fe 2d 87 24 ba 1f b3 78 6e 15 2d 35 6b b7 62 a8 b5 99 00 02 77 ca 67 6a 25 8d 5d 5c 6c b7 af c8 ac 6a c2 41 84 c2 7a 55 ce b5 88 61 3d f1 b7 f3 56 6c f4 1e ef 1e Data Ascii: D*TIxYrw,<Mn(\|w^uS;lA=m1J1yePb~X8-fYv3LJh"@1<3+%Pg@A1,vV`K3+uXaNlZMf9xYrHD:?Vv-$xn-5kbwgj%]\ljAzUa=Vl
2024-07-10 01:44:39 UTC	16384	IN	Data Raw: 0e 4e 59 72 3c 8e 32 63 65 d3 53 25 60 fc 28 a9 52 fb f4 47 47 11 1d 7a 14 0b 23 63 36 4e e8 9e 06 ca ff eb c8 c9 e7 24 a4 c0 c2 17 7b 80 8a 2b 04 ef 6a d3 84 52 83 b9 68 41 04 c8 12 2c 06 4c 84 e4 73 66 de 2f 4d 30 36 a5 c8 da 83 a5 97 c0 6b ed 21 6e 39 64 d4 5f ad 86 59 6e 7b cc da 08 ad c9 0c 31 dd 5f 3d ab 7d ed d5 7a 7f 40 f8 c0 af 91 0e 72 60 82 57 77 62 ea a5 36 51 65 f0 4e 5d 69 6a 44 cc 7a e9 8d 56 6c 57 3c 91 67 2b 05 ca 9d 64 8b d6 7d b2 81 1f 8b f1 22 16 85 c2 11 63 04 97 68 e9 24 6c 33 e3 42 96 c1 df d7 2d ef c2 2e 27 6b da 42 82 7e 8e 43 34 0f b8 07 01 96 e4 6a 8a 44 fc 0d ec 3f 06 89 7b 14 6e 15 0c c8 18 01 d7 8b a8 91 14 57 1a 8b 02 02 0c 04 12 40 9c a6 c6 d0 35 62 01 6f 9a a0 7f 25 5c ce eb 4c ef e2 82 4a 32 09 cb 06 d2 65 7a 86 3b 61 d9 Data Ascii: NYr<2ceS%`(RGGz#c6N${+jRhA,Lsf/M06k!n9d_Yn{1_=}z@r`Wwb6QeN]ijDzVlW<g+d}"ch$l3B-.'kB~C4jD?{nW@5bo%\LJ2ez;a
2024-07-10 01:44:39 UTC	2410	IN	Data Raw: 04 3e 69 f4 f0 f3 29 12 51 e5 42 76 84 2d 9d 31 7e 9b 57 d3 ec ab 7e 19 fc 13 87 fe 0c d8 36 70 b1 3b cd 1b 0e e5 6f c1 7a 54 7b c6 41 dd 1f 23 15 c7 c2 8b 17 5e d0 37 97 24 89 d5 bf d9 4a e7 69 75 c2 4e 91 bf 35 c2 9a b9 09 fd 02 f6 2e 07 ec 55 db 80 3c 1c 55 1f a6 5f f4 56 77 b8 d4 bf 5b fd 0f b4 1e 14 a3 e7 bc 88 5c e1 34 96 c1 a2 0c b1 75 e2 61 bf ac ea 70 6f 42 2a 48 80 c1 ec 39 45 1d d3 ab 1f 5b 21 5d 2d 8e 78 fd bc e8 45 42 3c b6 5d 53 59 71 15 89 4a 5f b2 4a 02 bd 19 29 86 ae bc 83 9b ae 97 7e f9 ce c4 e7 25 8b 6b 08 1d d4 1b ed 4f 1a 7c a8 97 34 bb f0 43 dc d0 e6 36 35 90 61 8e dd 41 a1 58 f5 41 eb 0d c8 3b a1 73 ae cf fa 70 16 4c 3a 3b 3a 2e e7 ae 83 69 13 a6 af 00 d3 ac 1a c4 e1 e0 b2 10 fb 30 f0 12 20 ee 66 c1 64 63 25 05 01 fb e9 ee 4f 00 15 Data Ascii: >i)QBv-1~W~6p;ozT{A#^7$JiuN5.U<U_Vw[\4uapoB*H9E[!]-xEB<]SYqJ_J)~%kO\|4C65aAXA;spL:;:.i0 fdc%O
2024-07-10 01:44:39 UTC	16384	IN	Data Raw: 5a a1 29 39 0f 79 b0 26 b5 12 40 67 08 0e 77 58 20 36 74 01 93 08 f0 31 fa 1f db c3 d8 ac 8d 9a 3d c9 ad 31 bd 6e 87 2a 7e 15 80 3b 73 dd a1 29 8a 3a 10 5f 10 e7 57 19 2e 37 fa a5 c1 92 a4 aa e1 93 b0 2a 59 c7 0d 50 d9 af 44 00 8d e6 92 15 01 17 e5 fa 40 71 7c be 1c 3d 9a b5 c0 45 ce a7 9e d0 40 cd f9 c8 8d 56 79 8d 03 d0 3f 6c c2 ac 06 a5 fb 2e 1d f0 52 2e 65 b7 26 f7 31 75 77 26 d0 6e ad ad 2c e3 fc 26 46 d5 9e 00 8c 1e a4 d4 9b 9d d0 cf 99 12 ec cb 64 cc 0b c6 7b 6a 3a 8a 4c 4b df 9e 96 75 df ac 5d 7d 18 2e 0a ee 92 62 7d eb 88 ab c8 fe 02 bd c6 d5 1c 57 9d 6f 61 6b cb ae 8c bd 1b 6e 87 9b c3 cd c0 ed 17 7f 00 33 f6 5b 79 b4 0d 71 ce 47 51 29 03 94 71 53 b7 9c 26 87 d9 15 ba 26 93 f7 7c c3 a0 d4 27 0e db 9e fe 63 32 1d 85 89 a3 ce 8d f2 6f e9 36 ef a6 Data Ascii: Z)9y&@gwX 6t1=1n~;s):_W.7YPD@q\|=E@Vy?l.R.e&1uw&n,&Fd{j:LKu]}.b}Woakn3[yqGQ)qS&&\|'c2o6
2024-07-10 01:44:39 UTC	2337	IN	Data Raw: 1c f7 a9 72 52 37 50 3c 94 70 c1 a7 37 ef c5 b5 c7 a9 5f 8b fe ff 0d c5 a8 cc c8 c9 d8 4e 13 71 2c bd 59 50 7b 6d 6e c3 04 86 c5 92 65 f4 f4 4a 70 14 cb ca c4 53 fa 8c 51 70 6d c8 21 82 21 1a 3f 13 f5 ba d9 0d 46 ac f7 f2 ea 8a 1c 1f 39 9a de 29 4f ba 2e b7 45 58 dc 02 9e ce 67 9f 25 00 ee a2 fa c6 49 e4 28 17 fc 3c 58 a6 75 38 b3 b9 09 49 d0 d4 bc fd 3e be 2f 68 c0 cb e9 ff 4c aa da a8 81 4a bd ca ea a5 6c 96 af ea 2a 6e 5b aa b6 a5 5e d4 57 1e 82 08 8c e4 29 9c ec 2e ec ca 8e 78 0d 29 9b 0a d7 1a ff d8 7c 2a e8 fe 39 4a 99 8e 31 ed 3e c5 63 d8 70 79 62 0d 54 94 b9 4d 52 34 d6 60 58 80 3d ce 3f cd ad d5 ab b6 86 6a b4 82 a2 b1 d9 f2 66 27 b6 b9 13 49 22 13 72 46 26 c8 7d 56 3b 61 3b 87 f4 41 da fc 64 08 be 46 a6 5e a2 48 5c 80 84 fc 64 46 b4 42 3e 06 13 Data Ascii: rR7P<p7_Nq,YP{mneJpSQpm!!?F9)O.EXg%I(<Xu8I>/hLJln[^W).x)\|9J1>cpybTMR4`X=?jf'I"rF&}V;a;AdF^H\dFB>
2024-07-10 01:44:39 UTC	16384	IN	Data Raw: ee 2e d3 ed e9 ee 31 c0 b0 04 00 a8 34 d6 9d cf 32 2f 9f 10 cc 2f bd 50 6f 72 dc 66 8e c6 3a a2 d8 17 4f c6 b9 67 10 53 7b 74 b7 66 b9 1f 29 bb 7f ad 59 8c 10 e0 a0 d8 f9 74 74 53 3f 50 cf a8 21 c0 29 ec 26 88 21 8d 52 1e 8a 19 91 53 e9 31 d2 f2 dc 57 f0 7d a1 a3 29 ce a7 c4 ee 00 e8 54 e9 0f e9 72 09 07 b1 cf 94 4f b9 21 b7 b0 3b 04 8b 3e 60 51 99 a9 13 f5 2d d0 ca 17 89 04 3c 32 bb 68 52 d5 12 5f b2 fb d0 2e 2d 10 11 5b 8d 11 0e ba f6 0e b6 f8 9e b9 14 a7 b4 33 14 12 ed e1 84 33 d2 79 16 79 ae 15 e3 75 1f 38 4c 80 b9 9c 07 56 57 a7 51 38 f8 91 0d eb 04 b5 24 82 9c 19 56 30 a8 01 8d 11 24 74 8f 62 9e d5 c3 80 c2 c7 78 ca d7 b2 b6 1b 38 8a 95 06 61 a9 21 8d 44 0e 2e bf 84 a9 1e 9e 80 02 8b b5 16 d7 93 fb ae cb fd 52 47 a4 32 f4 27 23 f3 27 b8 b4 c7 4c b6 Data Ascii: .142//Porf:OgS{tf)YttS?P!)&!RS1W})TrO!;>`Q-<2hR_.-[33yyu8LVWQ8$V0$tbx8a!D.RG2'#'L
2024-07-10 01:44:39 UTC	16384	IN	Data Raw: 88 6c 05 e4 a1 aa a2 9a 34 f3 82 dc f1 f8 13 8b 26 2a 48 aa 84 5e 0d b6 8c d8 9c 24 db f0 5e 55 05 f0 a5 69 d9 5f 28 8f 9a 34 96 a2 08 bd f8 4b 18 d5 31 40 a4 ec 15 e7 ef d1 33 da fa 9c 35 89 95 84 8f 53 c7 bf b9 44 3c 60 dd bd d8 89 fe 27 8c 6b d0 e1 64 85 6b 98 44 49 4b 15 8e 23 b6 82 f9 26 24 2b a6 cc ff 3a d4 19 4f d4 8d e9 61 3a ed bb 93 fe 1f a2 1c 32 52 23 d3 b4 94 d8 68 2d 42 e9 a0 37 0b 6f d1 cb d2 d7 dd c7 72 24 c9 44 68 73 80 9f 3d ac e2 92 56 95 77 4b 66 ce 57 98 ff 73 18 87 40 ae 10 ca 29 90 de 60 bd 52 49 c9 b6 61 49 0f 4f 90 6f 80 ce 52 76 29 91 93 f9 0e 0b 63 d6 5e da 30 c3 96 38 54 7f a5 2d 81 2c 45 00 0f 44 ad 0a 84 01 42 fe 93 f1 6a c0 7a 2d 4d 63 21 f8 96 71 32 6a 93 6d c2 9a 81 39 56 d5 26 21 4c 26 71 ce 19 92 02 a4 a8 77 46 9e 1a 2e Data Ascii: l4&*H^$^Ui_(4K1@35SD<`'kdkDIK#&$+:Oa:2R#h-B7or$Dhs=VwKfWs@)`RIaIOoRv)c^08T-,EDBjz-Mc!q2jm9V&!L&qwF.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49901	18.185.181.69	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	589	OUT	GET /api2/event/booking_prod HTTP/1.1 Host: bookingdotcomb2b.germany-2.evergage.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBTGCORS=On+xTOYeemMB9shD/iSG2ouVqMJJOx6T5qnMTQ0tr89lwXsVC97GVLw/YbCd/RV17RieuwjRBsJ+T87J1TlgwTf6DUZnkEoVAH6MkjY5KmPkGgd0sd1yOoS6VFxVqAmyPO8YOL9srn0/dpT9ISLu9bqY0WHA1FGbZkqmwDgLWii23TwEADI=
2024-07-10 01:44:39 UTC	783	IN	HTTP/1.1 400 Date: Wed, 10 Jul 2024 01:44:39 GMT Content-Type: text/plain;charset=utf-8 Content-Length: 4 Connection: close Set-Cookie: AWSALBTG=tCLNN48j6+FOCH1/c3dHTUL4sIS7IKj+SE1XZ4hf4kfSLezCn/vBDzZ9lE0Aid83j/5oY20CjukoQz4nhQFLXA8jfaMmEw/n/KSZFAhKDvABGrR2cnaOYXy0LWqdzs08Usr6gcjTbpJ7+k6W+Mjrd1KJblh4RiSbijBkEs2/h3I3WFFv8DE=; Expires=Wed, 17 Jul 2024 01:44:39 GMT; Path=/ Set-Cookie: AWSALBTGCORS=tCLNN48j6+FOCH1/c3dHTUL4sIS7IKj+SE1XZ4hf4kfSLezCn/vBDzZ9lE0Aid83j/5oY20CjukoQz4nhQFLXA8jfaMmEw/n/KSZFAhKDvABGrR2cnaOYXy0LWqdzs08Usr6gcjTbpJ7+k6W+Mjrd1KJblh4RiSbijBkEs2/h3I3WFFv8DE=; Expires=Wed, 17 Jul 2024 01:44:39 GMT; Path=/; SameSite=None; Secure Timing-Allow-Origin: * Cache-Control: no-cache, no-store Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff
2024-07-10 01:44:39 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49910	172.64.155.119	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:39 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 10 Jul 2024 01:44:39 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a0cdeae3acf440c-EWR
2024-07-10 01:44:39 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49909	18.66.147.77	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	2535	OUT	GET /sites/default/files/styles/avatar_default/public/2024-03/alice-piercy.png.webp?itok=dIxqODVk HTTP/1.1 Host: partner.booking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://partner.booking.com/en-us/click-magazine/industry-perspectives/why-being-proud-certified-matters Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _evga_c2e4={%22uuid%22:%222ba526af6f8d14f2%22}; _sfid_2a26={%22anonymousId%22:%222ba526af6f8d14f2%22%2C%22consents%22:[]}; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefDhpaM5euXoafisTGk9AOU3PCk7YrBf8n%2B1w8Hi1Z340aEwixs8QtMoPZtl9kZmv3PHYNScbjheXd613N3aE08ECd6ZAiPBDC6BUMnJpfffyIfsrGufRmeZcD3uONjjzyq6%2B3Il4V3TiRgypTgsu5bUU2%2B3G9Jmm0%3D; bkng_sso_auth=CAIQsOnuTRpmNqDmDI/ry1DkD42jqDN8NKZQQsEAKdIjykpbZmQwSjquIk6K84mybpR876GlwmHUGO/2RhgNsY9ElVLDXvLK9H9t+gcFU1urmtJAoEaaPQEnE/aho28XLGw8vUAT3Tmu7sQr8J+h; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D5d4eaad0-e6c9-471f-bcaa-6ed7e632f7ca%26consentedAt%3D2024-07-10T01%3A44%3A34.928Z%26expiresAt%3D2025-01-06T01%3A44%3A34.928Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Jul+09+2024+21%3A44%3A36+GMT-0400+(Eastern+Daylight+Time)&version=202404.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=bd2084a2-557b-4e33-9c53-629fa0e81b73&intera [TRUNCATED]
2024-07-10 01:44:39 UTC	1023	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 646 Connection: close Server: nginx Date: Wed, 10 Jul 2024 01:44:39 GMT x-content-type-options: nosniff vary: X-Forwarded-Proto last-modified: Fri, 15 Mar 2024 08:37:52 GMT etag: "286-613aeec6e54c5" cache-control: max-age=31536000 expires: Wed, 09 Jul 2025 05:04:28 GMT x-webserver: webserver/1 X-Varnish-Storage: Malloc X-Url: /sites/default/files/styles/avatar_default/public/2024-03/alice-piercy.png.webp?itok=dIxqODVk X-Host: partner.booking.com X-Varnish: 230330909 215942312 Via: 1.1 varnish (Varnish/6.6), 1.1 0c371064bf157d89e4b3520c0b29474c.cloudfront.net (CloudFront) X-Varnish-Cache: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: avEsP72NH9ngoBkaBDBQKapY-3N1azwqHyR8iN-CpKgW2Nwn-CuEUQ== Age: 74410 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin
2024-07-10 01:44:39 UTC	646	IN	Data Raw: 52 49 46 46 7e 02 00 00 57 45 42 50 56 50 38 20 72 02 00 00 90 0c 00 9d 01 2a 20 00 20 00 3e 19 0a 84 41 21 06 03 01 00 04 00 61 2c 60 13 a6 50 8f 4f f5 5f c5 5b a0 ed da 16 ab 4c 97 79 9a cc 13 60 5f 3b f0 07 bf a7 a0 8f ad fc 27 e4 b5 88 3a 18 4d b3 f1 d1 f4 67 b0 67 eb 1e f9 02 da a1 ae 1a d8 c5 7d 0b 12 c2 6b b5 b0 d6 dc 11 d3 4b ae e2 88 4d 74 f1 83 54 fc 48 7f 49 3e c8 62 e3 00 00 fe ff ff 1c 67 da b9 e2 5d b0 3b 4e b7 ee d3 38 44 ca 21 83 b0 72 3b 5a 1b e9 4c 23 a0 e6 a9 84 93 16 f4 e5 e0 5f 02 39 3d 93 6c 01 f5 ed df fc e0 2a 71 34 80 0f 4f ba 63 c7 5f 9a a3 7f fa 54 e0 05 fb 9d 47 c4 c1 c2 3e e5 4b 94 67 be dd c8 5d dc fe 9f fe 77 c7 c5 74 f3 4b 5f fd d1 fc b4 53 d8 ae 5c fe ba 3c 7a 0f 7f f9 23 d3 53 9f c0 73 a5 67 e7 14 a2 89 83 b1 bf fe c3 eb Data Ascii: RIFF~WEBPVP8 r* >A!a,`PO_[Ly`_;':Mgg}kKMtTHI>bg];N8D!r;ZL#_9=l*q4Oc_TG>Kg]wtK_S\<z#Ssg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49923	188.114.97.3	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	803	OUT	GET /socket.io/?EIO=4&transport=websocket HTTP/1.1 Host: ennexhorpps.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://ennexhorpps.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=.eJwdzbsOgjAUANB_6ewgDRF1AwxGHpGARpgMppQ3Vwq1V4z_LnE9y_kQkfUMuvs4iaovyJ5AYKKHRxY5OeNd023adFCXZFfbJ7Q3iK4AkO_cgSykpeJxG1pWYJTQXpX7DKWdIhOuebOLQ8TnZA6lx3lt-iy1StCNauu0GVkRKSu2ZEOA6J9ZF6vFXiD--ABoqK5ra5qNJUyISCnVdPL9AfxFO6o.Zo3nbg.aoobiO6Iirw8AV2lE3_rCPSDFpA Sec-WebSocket-Key: LLTXEcLd+cWVhCUM30taHg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-10 01:44:39 UTC	657	IN	HTTP/1.1 400 BAD REQUEST Date: Wed, 10 Jul 2024 01:44:39 GMT Content-Type: text/plain Content-Length: 27 Connection: close Access-Control-Allow-Origin: https://ennexhorpps.com Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uaQECQCJ0AzSb%2Fr3Mu7khZ%2FUJ1vJAUYh37yVMBon2W6E8rSjsMM8FZxgUG717og9z4V%2Bn4ZPay2Kmxn34ujt4oG3DuBQZoD4MOK%2FKxJipX1QcT1CsOPoADZBDdyYhUZGoeY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a0cdeaf3c817d11-EWR alt-svc: h3=":443"; ma=86400
2024-07-10 01:44:39 UTC	27	IN	Data Raw: 22 49 6e 76 61 6c 69 64 20 77 65 62 73 6f 63 6b 65 74 20 75 70 67 72 61 64 65 22 Data Ascii: "Invalid websocket upgrade"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49924	34.36.178.232	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	605	OUT	POST / HTTP/1.1 Host: ariane.abtasty.com Connection: keep-alive Content-Length: 520 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://partner.booking.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://partner.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:39 UTC	520	OUT	Data Raw: 7b 22 63 22 3a 7b 22 31 32 36 30 36 34 34 22 3a 22 31 35 36 32 33 36 34 22 7d 2c 22 63 69 64 22 3a 22 37 31 63 64 31 32 63 64 66 37 37 65 62 63 62 37 35 30 63 66 66 39 31 61 39 62 62 61 36 66 30 34 22 2c 22 76 69 64 22 3a 22 79 35 66 64 6e 6d 74 74 73 74 36 79 76 34 62 68 22 2c 22 64 72 22 3a 22 22 2c 22 70 74 22 3a 22 57 68 79 25 32 30 62 65 69 6e 67 25 32 30 54 72 61 76 65 6c 25 32 30 50 72 6f 75 64 25 32 30 43 65 72 74 69 66 69 65 64 25 32 30 6d 61 74 74 65 72 73 25 32 30 74 6f 25 32 30 6f 75 72 25 32 30 70 61 72 74 6e 65 72 73 25 32 30 25 37 43 25 32 30 43 6c 69 63 6b 2e 25 32 30 4d 61 67 61 7a 69 6e 65 22 2c 22 64 65 22 3a 22 55 54 46 2d 38 22 2c 22 64 6c 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 61 72 74 6e 65 72 2e 62 6f 6f 6b 69 6e 67 Data Ascii: {"c":{"1260644":"1562364"},"cid":"71cd12cdf77ebcb750cff91a9bba6f04","vid":"y5fdnmttst6yv4bh","dr":"","pt":"Why%20being%20Travel%20Proud%20Certified%20matters%20to%20our%20partners%20%7C%20Click.%20Magazine","de":"UTF-8","dl":"https%3A%2F%2Fpartner.booking
2024-07-10 01:44:39 UTC	618	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: Content-Type,Origin,Accept,Set-Cookie,X-ABTasty-CrossDomain access-control-allow-methods: GET,HEAD,POST access-control-allow-origin: https://partner.booking.com cache-control: must-revalidate, no-cache, private Content-Length: 43 content-type: image/gif strict-transport-security: max-age=31536000; includeSubDomains date: Wed, 10 Jul 2024 01:44:39 GMT x-envoy-decorator-operation: entrypoint.workload.svc.cluster.local:8080/* via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-10 01:44:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49913	13.35.58.6	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	423	OUT	GET /static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:39 UTC	770	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1628 Connection: close Server: nginx Date: Sat, 06 Jul 2024 11:50:39 GMT Last-Modified: Wed, 10 Apr 2019 11:21:55 GMT Expires: Mon, 05 Aug 2024 11:50:39 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "5cadd1d3-65c" X-Cache: Hit from cloudfront Via: 1.1 d6f0ad3267f72bf9b59a5eb61f811fe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 3v1VnNvC8S8tJezaMHTZKU0cZfubcA27Chx1KxOb5JgWKd5oxU98CA== Age: 309240
2024-07-10 01:44:39 UTC	1628	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5b 00 00 00 1a 08 06 00 00 00 d8 32 20 50 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 05 b0 49 44 41 54 68 de ed d9 7d 6c 5f 65 15 07 f0 4f 3b 9c 1a e7 84 a1 88 a6 2a c2 4c e6 f6 53 27 be 47 2f 6e a2 cb 32 32 9d 62 64 be b4 73 fb 8d 28 64 b2 78 8d 98 b8 28 4a 88 e0 1f de d4 21 11 c6 aa bc cf 45 02 9b 0e 25 2c c2 e0 32 03 03 75 63 65 44 7c 19 93 1f 63 c8 d8 98 a8 98 ce 75 fe f1 9c 5f 7b 5b 5b 5c 4c 6d 33 ec 37 b9 f9 9d e7 9c e7 3e 2f df e7 3c e7 9c db b6 1c 3e 7c d8 38 46 07 ad 63 bd 80 ff 27 8c 93 3d 8a 18 Data Ascii: PNGIHDR[2 PgAMAa cHRMz&u0`:pQ<bKGDCIDATh}l_eO;*LS'G/n22bds(dx(J!E%,2uceD\|cu_{[[\Lm37>/<>\|8Fc'=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49911	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	660	OUT	GET /static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:39 UTC	749	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2344 Connection: close Server: nginx Date: Mon, 17 Jun 2024 01:52:46 GMT Last-Modified: Wed, 10 Apr 2019 11:21:55 GMT ETag: "5cadd1d3-928" Expires: Wed, 17 Jul 2024 01:52:46 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} x-xss-protection: 1; mode=block timing-allow-origin: * X-Cache: Hit from cloudfront Via: 1.1 35cfa6fbcb341fd2ae15e24a43e2f57a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: NgFRwmYQi1jkf84IVSB1Aqoz-3U_ZjXQs2pQ4o3n8aevboa7zWwFrA== Age: 1986713
2024-07-10 01:44:39 UTC	2344	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5f 00 00 00 1a 08 06 00 00 00 d1 d9 80 2a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 08 e2 49 44 41 54 68 05 ed 58 0d 6c 14 c7 15 9e 99 dd db bb 60 c7 7f 18 8a 00 e3 bb b3 8d 4b 0f 27 6d dd c4 e0 24 c4 b5 09 a8 54 69 d3 46 95 d3 54 a4 4a 4b aa 34 41 aa 22 51 5a 94 d2 d2 a4 6d 1a aa d2 8a a6 b4 a9 42 d3 94 a8 aa 84 92 42 d2 10 a5 d4 89 15 2c 88 9d 98 56 16 16 f1 0f 77 36 38 14 c2 bf 7f ce ec ed ee 4c bf 77 3e 1f dc fa 0c 3e 47 8a 50 72 23 cd ed cc 7b 6f de cc 7c ef cd 7b 33 c7 58 b6 64 11 c8 22 90 45 e0 43 45 80 7f d0 d9 c2 b5 f5 a5 4a b1 5a a5 44 48 31 39 5b 32 6e 41 69 bf 10 da 3b e6 85 58 5b a8 b3 79 f8 83 ce f1 51 1d 3f 6d f0 df ad 69 b8 c1 10 7c 9d 64 ec 4e 83 f3 02 ce 52 55 c5 14 38 8c 75 e1 Data Ascii: PNGIHDR_*sRGBIDAThXl`K'm$TiFTJK4A"QZmBB,Vw68Lw>>GPr#{o\|{3Xd"ECEJZDH19[2nAi;X[yQ?mi\|dNRU8u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49915	13.35.58.6	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	425	OUT	GET /static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:40 UTC	770	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1591 Connection: close Server: nginx Date: Sat, 06 Jul 2024 11:50:39 GMT Last-Modified: Wed, 10 Apr 2019 11:21:55 GMT Expires: Mon, 05 Aug 2024 11:50:39 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "5cadd1d3-637" X-Cache: Hit from cloudfront Via: 1.1 425709fb5486bea91d36ef6c75d4ffac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: -VUQyZ1vOUipcK_HWBjZi-EalTV6Rytq_SmCNbG0pEqVmNp1vV1FCA== Age: 309241
2024-07-10 01:44:40 UTC	1591	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5b 00 00 00 1a 08 03 00 00 00 ef ec d0 62 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 2e 50 4c 54 45 ff ff ff 00 00 00 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 95 d4 00 Data Ascii: PNGIHDR[bgAMAa cHRMz&u0`:pQ<.PLTE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49916	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	587	OUT	GET /psb/capla/static/js/bui-react-9.1fa6c1cb.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:40 UTC	716	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 269237 Connection: close Date: Wed, 10 Jul 2024 01:44:40 GMT Last-Modified: Thu, 04 Jul 2024 12:27:48 GMT ETag: "e3649a0a661d62862c9ab1c7d9fadd38" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: foo x-amz-version-id: WcjjahwcErGppkvMVSAAtxwCBqQvc7yY Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 aa4673eb0527fb06f7940307fecfc1b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: YEYO0LwNHqQ9gjAuhxLLU75n-PdOIL0Qm9BI7vW8oR2M7ngWzs0ufw== Cache-Control: public, max-age=604800 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-07-10 01:44:40 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 62 2d 70 72 69 76 61 63 79 2d 73 74 61 74 65 6d 65 6e 74 2d 6d 66 65 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 22 5d 3d 73 65 6c 66 5b 22 62 2d 70 72 69 76 61 63 79 2d 73 74 61 74 65 6d 65 6e 74 2d 6d 66 65 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 62 75 69 2d 72 65 61 63 74 2d 39 22 5d 2c 7b 22 38 35 34 62 36 63 61 31 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 61 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 61 29 7b 76 6f 69 Data Ascii: "use strict";(self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]=self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]\|\|[]).push([["bui-react-9"],{"854b6ca1":function(e,t,n){var a=this&&this.__createBinding\|\|(Object.create?function(e,t,n,a){voi
2024-07-10 01:44:40 UTC	16384	IN	Data Raw: 4d 6f 64 65 2c 70 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 22 74 61 62 22 3a 62 2c 67 3d 75 2e 6f 6e 4e 61 76 69 67 61 74 65 4f 75 74 73 69 64 65 2c 68 3d 75 2e 72 65 6c 65 61 73 65 46 6f 63 75 73 54 61 72 67 65 74 54 72 69 67 67 65 72 2c 79 3d 28 30 2c 6c 2e 67 65 74 41 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 28 29 2c 45 3d 22 61 72 72 6f 77 73 22 3d 3d 3d 70 2c 4e 3d 22 74 61 62 2d 61 6e 64 2d 61 72 72 6f 77 73 22 3d 3d 3d 70 2c 77 3d 45 7c 7c 4e 2c 78 3d 22 74 61 62 22 3d 3d 3d 70 7c 7c 4e 2c 4f 3d 28 79 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 79 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 29 26 26 45 2c 5f 3d 21 4f 26 26 75 2e 69 6e 63 6c 75 64 65 54 72 69 67 Data Ascii: Mode,p=void 0===b?"tab":b,g=u.onNavigateOutside,h=u.releaseFocusTargetTrigger,y=(0,l.getActiveElement)(),E="arrows"===p,N="tab-and-arrows"===p,w=E\|\|N,x="tab"===p\|\|N,O=(y instanceof HTMLInputElement\|\|y instanceof HTMLTextAreaElement)&&E,_=!O&&u.includeTrig
2024-07-10 01:44:40 UTC	418	IN	Data Raw: 74 74 6f 6d 2d 65 6e 64 22 5d 2c 6f 3d 5b 22 73 74 61 72 74 22 5d 2c 69 3d 5b 22 65 6e 64 22 5d 2c 6c 3d 7b 74 6f 70 3a 6e 28 6e 28 6e 28 6e 28 5b 5d 2c 61 2c 21 30 29 2c 72 2c 21 30 29 2c 69 2c 21 30 29 2c 6f 2c 21 30 29 2c 62 6f 74 74 6f 6d 3a 6e 28 6e 28 6e 28 6e 28 5b 5d 2c 72 2c 21 30 29 2c 61 2c 21 30 29 2c 69 2c 21 30 29 2c 6f 2c 21 30 29 2c 73 74 61 72 74 3a 6e 28 6e 28 6e 28 6e 28 5b 5d 2c 6f 2c 21 30 29 2c 69 2c 21 30 29 2c 61 2c 21 30 29 2c 72 2c 21 30 29 2c 65 6e 64 3a 6e 28 6e 28 6e 28 6e 28 5b 5d 2c 69 2c 21 30 29 2c 6f 2c 21 30 29 2c 61 2c 21 30 29 2c 72 2c 21 30 29 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 6e 75 6c 6c 21 3d 3d 28 74 3d 5b 22 74 6f 70 22 2c 22 62 6f 74 74 6f 6d 22 2c 22 Data Ascii: ttom-end"],o=["start"],i=["end"],l={top:n(n(n(n([],a,!0),r,!0),i,!0),o,!0),bottom:n(n(n(n([],r,!0),a,!0),i,!0),o,!0),start:n(n(n(n([],o,!0),i,!0),a,!0),r,!0),end:n(n(n(n([],i,!0),o,!0),a,!0),r,!0)};t.default=function(e){var t,n=null!==(t=["top","bottom","
2024-07-10 01:44:40 UTC	16384	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 52 45 53 45 54 5f 53 54 59 4c 45 53 3d 74 2e 44 45 46 41 55 4c 54 5f 53 54 59 4c 45 53 3d 74 2e 67 65 74 50 6f 73 69 74 69 6f 6e 43 6f 6d 70 65 6e 73 61 74 69 6f 6e 3d 74 2e 67 65 74 49 6e 42 6f 75 6e 64 73 50 6f 73 69 74 69 6f 6e 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 6e 28 22 30 65 33 66 65 33 66 63 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 67 65 74 49 6e 42 6f 75 6e 64 73 50 6f 73 69 74 69 6f 6e 22 2c 7b 65 6e 75 6d 65 72 61 62 Data Ascii: on(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.RESET_STYLES=t.DEFAULT_STYLES=t.getPositionCompensation=t.getInBoundsPosition=void 0;var r=n("0e3fe3fc");Object.defineProperty(t,"getInBoundsPosition",{enumerab
2024-07-10 01:44:40 UTC	12824	IN	Data Raw: 20 45 6f 7d 2c 49 6e 70 75 74 43 68 65 63 6b 62 6f 78 47 72 6f 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 6f 7d 2c 49 6e 70 75 74 43 68 65 63 6b 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 6f 7d 2c 49 6e 70 75 74 4d 75 6c 74 69 73 65 6c 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 69 7d 2c 49 6e 70 75 74 50 61 73 73 77 6f 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 69 7d 2c 49 6e 70 75 74 52 61 64 69 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 69 7d 2c 49 6e 70 75 74 52 61 64 69 6f 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 69 7d 2c 49 6e 70 75 74 52 61 64 69 6f 47 72 6f 75 70 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: Eo},InputCheckboxGroup:function(){return ro},InputCheckbutton:function(){return Lo},InputMultiselect:function(){return ai},InputPassword:function(){return vi},InputRadio:function(){return _i},InputRadioCard:function(){return Pi},InputRadioGroup:function(
2024-07-10 01:44:40 UTC	16384	IN	Data Raw: 64 31 32 34 22 2c 22 72 6f 6f 74 2d 2d 76 61 72 69 61 6e 74 2d 74 65 72 74 69 61 72 79 2d 61 63 74 69 6f 6e 22 3a 22 62 36 31 66 34 30 31 33 34 34 22 2c 22 72 6f 6f 74 2d 2d 76 61 72 69 61 6e 74 2d 74 65 72 74 69 61 72 79 2d 64 65 73 74 72 75 63 74 69 76 65 22 3a 22 62 64 66 62 34 63 63 33 30 63 22 2c 22 72 6f 6f 74 2d 2d 76 61 72 69 61 6e 74 2d 74 65 72 74 69 61 72 79 2d 6e 65 75 74 72 61 6c 22 3a 22 66 30 32 39 38 64 37 34 61 38 22 2c 22 72 6f 6f 74 2d 2d 76 61 72 69 61 6e 74 2d 74 65 72 74 69 61 72 79 2d 69 6e 68 65 72 69 74 22 3a 22 62 32 34 64 63 36 63 66 30 66 22 2c 22 72 6f 6f 74 2d 2d 76 61 72 69 61 6e 74 2d 77 68 69 74 65 22 3a 22 64 33 34 31 38 36 38 33 33 36 22 2c 22 72 6f 6f 74 2d 2d 76 61 72 69 61 6e 74 2d 77 68 69 74 65 2d 61 63 74 69 6f 6e Data Ascii: d124","root--variant-tertiary-action":"b61f401344","root--variant-tertiary-destructive":"bdfb4cc30c","root--variant-tertiary-neutral":"f0298d74a8","root--variant-tertiary-inherit":"b24dc6cf0f","root--variant-white":"d341868336","root--variant-white-action
2024-07-10 01:44:40 UTC	6632	IN	Data Raw: 6e 6c 69 6e 65 2d 74 72 75 65 2d 2d 78 6c 22 3a 22 63 65 30 38 63 30 32 34 33 32 22 2c 22 72 6f 6f 74 2d 2d 69 6e 6c 69 6e 65 2d 66 61 6c 73 65 2d 2d 78 6c 22 3a 22 62 63 65 35 61 62 32 66 35 64 22 7d 2c 62 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 61 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 62 65 Data Ascii: nline-true--xl":"ce08c02432","root--inline-false--xl":"bce5ab2f5d"},be=function(){return be=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},be
2024-07-10 01:44:40 UTC	16384	IN	Data Raw: 6f 61 64 3a 7b 6b 65 65 70 4d 6f 75 6e 74 65 64 3a 75 7d 7d 29 7d 29 2c 5b 75 5d 29 2c 77 3d 72 28 29 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 65 2e 63 75 72 72 65 6e 74 26 26 74 2e 63 75 72 72 65 6e 74 29 7b 76 61 72 20 6e 3d 28 30 2c 50 65 2e 67 65 74 49 6e 42 6f 75 6e 64 73 50 6f 73 69 74 69 6f 6e 29 28 65 2e 63 75 72 72 65 6e 74 2c 74 2e 63 75 72 72 65 6e 74 2c 7b 63 6f 6e 74 61 69 6e 65 72 3a 28 6e 75 6c 6c 3d 3d 3d 6d 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 3f 76 6f 69 64 20 30 3a 6d 2e 63 75 72 72 65 6e 74 29 7c 7c 76 6f 69 64 20 30 2c 70 6f 73 69 74 69 6f 6e 3a 69 2c 66 6f 72 63 65 50 6f 73 69 74 69 6f 6e 3a 63 2c 72 74 6c 3a 76 2c 7a 49 6e 64 65 78 3a 73 2c 63 6f 6d 70 65 6e 73 61 74 69 6f 6e 3a 28 6e 75 6c Data Ascii: oad:{keepMounted:u}})}),[u]),w=r().useCallback((function(){if(e.current&&t.current){var n=(0,Pe.getInBoundsPosition)(e.current,t.current,{container:(null===m\|\|void 0===m?void 0:m.current)\|\|void 0,position:i,forcePosition:c,rtl:v,zIndex:s,compensation:(nul
2024-07-10 01:44:40 UTC	16384	IN	Data Raw: 39 63 66 61 31 34 65 22 29 3b 76 61 72 20 6b 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 34 20 32 34 22 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 32 32 2e 35 20 31 32 76 39 2e 37 35 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 37 35 2e 37 35 48 32 2e 32 35 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 37 35 2d 2e 37 35 56 32 2e 32 35 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 2e 37 35 2d 2e 37 35 68 31 39 2e 35 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 2e 37 35 2e 37 35 7a 6d 31 2e Data Ascii: 9cfa14e");var kt=function(){return a.createElement("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24"},a.createElement("path",{d:"M22.5 12v9.75a.75.75 0 0 1-.75.75H2.25a.75.75 0 0 1-.75-.75V2.25a.75.75 0 0 1 .75-.75h19.5a.75.75 0 0 1 .75.75zm1.
2024-07-10 01:44:40 UTC	16384	IN	Data Raw: 70 65 6f 66 20 6c 26 26 28 76 3d 6c 3c 3d 73 3f 6c 3a 22 22 2e 63 6f 6e 63 61 74 28 73 2c 22 2b 22 29 29 2c 72 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6d 65 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 62 6e 28 62 6e 28 7b 7d 2c 64 29 2c 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 74 7d 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 6d 2c 76 61 72 69 61 6e 74 3a 22 73 6d 61 6c 6c 5f 31 22 2c 6d 69 78 69 6e 3a 66 7d 2c 76 29 7d 2c 67 6e 3d 22 61 61 65 64 37 34 37 34 64 64 22 2c 68 6e 3d 22 65 38 35 33 61 65 66 30 35 35 22 2c 79 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 Data Ascii: peof l&&(v=l<=s?l:"".concat(s,"+")),r().createElement(me,{attributes:bn(bn({},d),{"aria-label":t}),className:m,variant:"small_1",mixin:f},v)},gn="aaed7474dd",hn="e853aef055",yn=function(){return yn=Object.assign\|\|function(e){for(var t,n=1,a=arguments.leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49914	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	582	OUT	GET /psb/capla/static/js/client.2cc28297.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:40 UTC	716	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 760717 Connection: close Date: Wed, 10 Jul 2024 01:44:41 GMT Last-Modified: Thu, 04 Jul 2024 12:27:48 GMT ETag: "6f29f5c11ba9ef3448b7989d4aaf79f7" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: foo x-amz-version-id: FsObdMYt7TFRANPklfjvWoyAvGZlMHuz Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 503c2bd0b7e26f747c58a5188346ef54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: gsQu8LwAejMso4f0vg_MMUjo08hsIHXNRnohnt7bNB4N46rvfQ6Pug== Cache-Control: public, max-age=604800 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-07-10 01:44:40 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6c 69 65 6e 74 2e 32 63 63 32 38 32 39 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 22 39 33 36 32 31 35 65 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5a 3d 7b 69 64 3a 22 74 72 61 76 65 6c 6c 65 72 22 2c 6e 61 6d 65 3a 22 54 72 61 76 65 6c 6c 65 72 22 2c 76 65 72 73 69 6f 6e 3a 22 33 2e 30 2e 30 22 2c 6d 6f 64 65 3a 22 64 61 72 6b 22 2c 63 6f 6c 6f 72 73 3a 7b 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 3a 22 23 61 32 61 32 61 32 22 2c 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 61 6c 74 3a 22 23 35 39 35 39 35 39 22 2c 63 6f Data Ascii: /! For license information please see client.2cc28297.js.LICENSE.txt /!function(){var e={"936215e8":function(e,t){"use strict";t.Z={id:"traveller",name:"Traveller",version:"3.0.0",mode:"dark",colors:{color_border:"#a2a2a2",color_border_alt:"#595959",co
2024-07-10 01:44:40 UTC	16384	IN	Data Raw: 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 62 6f 72 64 65 72 3a 22 23 30 30 38 32 33 34 22 2c 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 3a 22 23 31 61 31 61 31 61 22 2c 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 61 6c 74 3a 22 23 35 39 35 39 35 39 22 2c 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 69 6e 76 65 72 74 65 64 3a 22 23 66 35 66 35 66 35 22 2c 63 6f 6c 6f 72 5f 61 63 63 65 6e 74 5f 66 6f 72 65 67 72 6f 75 6e 64 3a 22 23 39 34 36 38 30 30 22 2c 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 66 6f 72 65 67 72 6f 75 6e 64 3a 22 23 30 30 36 63 65 34 22 2c 63 6f 6c 6f 72 5f 63 61 6c 6c 6f 75 74 5f 66 6f 72 65 67 72 6f 75 6e 64 3a 22 23 39 32 33 65 30 31 22 2c 63 6f 6c 6f 72 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 64 69 73 61 62 6c 65 64 Data Ascii: or_constructive_border:"#008234",color_foreground:"#1a1a1a",color_foreground_alt:"#595959",color_foreground_inverted:"#f5f5f5",color_accent_foreground:"#946800",color_action_foreground:"#006ce4",color_callout_foreground:"#923e01",color_foreground_disabled
2024-07-10 01:44:40 UTC	6813	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 4f 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 53 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 59 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 5a 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 5a 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 5f 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 61 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 6b 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 72 3d 22 58 2d 42 6f 6f 6b 69 6e 67 2d 54 61 72 67 65 74 2d Data Ascii: n(){return r},OL:function(){return p},SI:function(){return s},Ys:function(){return u},Z3:function(){return l},Zt:function(){return a},_i:function(){return f},aR:function(){return c},kL:function(){return i},s:function(){return o}});var r="X-Booking-Target-
2024-07-10 01:44:40 UTC	11012	IN	Data Raw: 72 6c 3a 69 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 22 69 6e 63 6c 75 64 65 22 7d 29 5d 7d 29 29 7d 29 29 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 45 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 29 7b 72 65 74 75 72 6e 28 45 3d 28 30 2c 61 2e 5f 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 69 2c 61 2c 75 2c 73 2c 6c 2c 66 2c 70 2c 64 2c 68 2c 76 2c 6d 2c 79 3b 72 65 74 75 72 6e 28 30 2c 63 2e 4a 68 29 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 73 77 69 74 63 68 28 63 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 3d 65 2e 61 67 65 Data Ascii: rl:i,credentials:"include"})]}))}))).apply(this,arguments)}function _(e,t){return E.apply(this,arguments)}function E(){return(E=(0,a._)((function(e,t){var n,r,o,i,a,u,s,l,f,p,d,h,v,m,y;return(0,c.Jh)(this,(function(c){switch(c.label){case 0:return n=e.age
2024-07-10 01:44:40 UTC	12792	IN	Data Raw: 22 29 2c 6c 3d 6e 28 22 31 33 37 61 61 35 34 37 22 29 2c 66 3d 6e 28 22 61 63 35 64 30 38 33 65 22 29 2c 70 3d 28 30 2c 66 2e 6a 29 28 22 63 61 70 6c 61 3a 6a 73 2d 65 72 72 6f 72 3a 63 6c 69 65 6e 74 22 29 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 2c 6f 3d 6e 2e 62 75 69 6c 64 4e 61 6d 65 73 70 61 63 65 2c 69 3d 6e 2e 6d 69 63 72 6f 66 72 6f 6e 74 65 6e 64 2c 61 3d 6e 2e 65 72 72 6f 72 47 72 6f 75 70 2c 66 3d 6e 2e 65 72 72 6f 72 54 72 61 6e 73 66 6f 72 6d 65 72 2c 70 3d 28 30 2c 63 2e 54 29 28 29 2e 67 65 74 45 54 53 65 72 69 61 6c 69 7a 65 64 53 74 61 74 65 28 29 3b 74 68 69 73 2e 72 65 70 6f 72 74 65 72 3d 6e 65 77 20 75 2e 5a 50 28 7b 65 6e Data Ascii: "),l=n("137aa547"),f=n("ac5d083e"),p=(0,f.j)("capla:js-error:client"),d=function(){function e(e){var t,n=void 0===e?{}:e,o=n.buildNamespace,i=n.microfrontend,a=n.errorGroup,f=n.errorTransformer,p=(0,c.T)().getETSerializedState();this.reporter=new u.ZP({en
2024-07-10 01:44:40 UTC	3592	IN	Data Raw: 74 75 72 6e 20 74 3f 22 6f 74 68 65 72 22 3a 31 3d 3d 65 26 26 6f 3f 22 6f 6e 65 22 3a 72 3e 3d 32 26 26 72 3c 3d 34 26 26 6f 3f 22 66 65 77 22 3a 6f 3f 22 6f 74 68 65 72 22 3a 22 6d 61 6e 79 22 7d 2c 64 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 74 72 69 6e 67 28 65 29 2e 73 70 6c 69 74 28 22 2e 22 29 2c 72 3d 6e 5b 30 5d 2c 6f 3d 4e 75 6d 62 65 72 28 6e 5b 30 5d 29 3d 3d 65 3b 72 65 74 75 72 6e 20 74 7c 7c 31 21 3d 65 26 26 28 6f 7c 7c 30 21 3d 72 26 26 31 21 3d 72 29 3f 22 6f 74 68 65 72 22 3a 22 6f 6e 65 22 7d 2c 64 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 53 74 72 69 6e 67 28 65 29 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 3b 72 65 74 75 72 6e 20 74 3f 22 6f 74 68 65 72 22 3a 31 3d 3d 65 26 26 6e Data Ascii: turn t?"other":1==e&&o?"one":r>=2&&r<=4&&o?"few":o?"other":"many"},da:function(e,t){var n=String(e).split("."),r=n[0],o=Number(n[0])==e;return t\|\|1!=e&&(o\|\|0!=r&&1!=r)?"other":"one"},de:function(e,t){var n=!String(e).split(".")[1];return t?"other":1==e&&n
2024-07-10 01:44:40 UTC	12792	IN	Data Raw: 65 77 22 3a 22 6f 74 68 65 72 22 7d 2c 73 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 74 72 69 6e 67 28 65 29 2e 73 70 6c 69 74 28 22 2e 22 29 2c 72 3d 6e 5b 30 5d 2c 6f 3d 6e 5b 31 5d 7c 7c 22 22 2c 69 3d 21 6e 5b 31 5d 2c 61 3d 72 2e 73 6c 69 63 65 28 2d 31 29 2c 75 3d 72 2e 73 6c 69 63 65 28 2d 32 29 2c 73 3d 6f 2e 73 6c 69 63 65 28 2d 31 29 2c 63 3d 6f 2e 73 6c 69 63 65 28 2d 32 29 3b 72 65 74 75 72 6e 20 74 3f 22 6f 74 68 65 72 22 3a 69 26 26 31 3d 3d 61 26 26 31 31 21 3d 75 7c 7c 31 3d 3d 73 26 26 31 31 21 3d 63 3f 22 6f 6e 65 22 3a 69 26 26 61 3e 3d 32 26 26 61 3c 3d 34 26 26 28 75 3c 31 32 7c 7c 75 3e 31 34 29 7c 7c 73 3e 3d 32 26 26 73 3c 3d 34 26 26 28 63 3c 31 32 7c 7c 63 3e 31 34 29 3f 22 66 65 77 22 3a 22 6f 74 68 65 Data Ascii: ew":"other"},sr:function(e,t){var n=String(e).split("."),r=n[0],o=n[1]\|\|"",i=!n[1],a=r.slice(-1),u=r.slice(-2),s=o.slice(-1),c=o.slice(-2);return t?"other":i&&1==a&&11!=u\|\|1==s&&11!=c?"one":i&&a>=2&&a<=4&&(u<12\|\|u>14)\|\|s>=2&&s<=4&&(c<12\|\|c>14)?"few":"othe
2024-07-10 01:44:40 UTC	6396	IN	Data Raw: 73 6f 20 69 74 20 77 69 6c 6c 20 64 69 73 70 6c 61 79 20 61 20 67 65 6e 65 72 69 63 20 65 72 72 6f 72 20 73 63 72 65 65 6e 2e 22 29 2c 70 65 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 2c 6e 75 6c 6c 2c 22 55 73 65 22 2c 22 20 22 2c 70 65 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 2c 7b 68 72 65 66 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 6c 61 62 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 63 6f 72 65 2f 6a 61 76 61 73 63 72 69 70 74 2f 72 65 61 63 74 2d 65 72 72 6f 72 2d 72 65 70 6f 72 74 65 72 22 7d 2c 22 40 62 6f 6f 6b 69 6e 67 63 6f 6d 2f 72 65 61 63 74 2d 65 72 72 6f 72 2d 72 65 70 6f 72 74 65 72 22 29 2c 22 20 22 2c 22 74 6f 20 63 72 65 61 74 65 20 61 6e 22 2c 22 20 22 2c 70 65 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e Data Ascii: so it will display a generic error screen."),pe().createElement("p",null,"Use"," ",pe().createElement("a",{href:"https://gitlab.booking.com/core/javascript/react-error-reporter"},"@bookingcom/react-error-reporter")," ","to create an"," ",pe().createElemen
2024-07-10 01:44:40 UTC	12792	IN	Data Raw: 74 61 53 74 72 61 74 65 67 79 3a 6f 2c 62 75 69 6c 64 4e 61 6d 65 73 70 61 63 65 3a 74 2c 67 65 74 4e 61 6d 65 73 70 61 63 65 53 74 61 74 65 73 4f 6e 6c 79 3a 21 31 7d 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 3d 57 65 3f 65 2e 61 70 6f 6c 6c 6f 3a 65 7d 29 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 2e 5a 2e 43 41 50 4c 41 5f 47 52 41 50 48 51 4c 5f 45 4e 44 50 4f 49 4e 54 5f 44 45 46 41 55 4c 54 7c 7c 22 22 3b 69 66 28 61 2e 5a 2e 43 41 50 4c 41 5f 47 52 41 50 48 51 4c 5f 45 4e 44 50 4f 49 4e 54 5f 43 4c 49 45 4e 54 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 61 2e 5a 2e 43 41 50 4c 41 5f 47 52 41 50 48 51 4c 5f 45 4e 44 50 4f 49 4e 54 5f 43 4c 49 45 4e 54 26 26 28 74 3d 61 2e 5a Data Ascii: taStrategy:o,buildNamespace:t,getNamespaceStatesOnly:!1}).map((function(e){return o===We?e.apollo:e})),u=function(e){var t=a.Z.CAPLA_GRAPHQL_ENDPOINT_DEFAULT\|\|"";if(a.Z.CAPLA_GRAPHQL_ENDPOINT_CLIENT&&"undefined"!==a.Z.CAPLA_GRAPHQL_ENDPOINT_CLIENT&&(t=a.Z
2024-07-10 01:44:40 UTC	6396	IN	Data Raw: 6e 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 65 7c 7c 22 69 6e 74 65 72 61 63 74 69 76 65 22 3d 3d 3d 65 3f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3a 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 28 29 3d 3e 7b 65 28 29 7d 29 2c 7b 6f 6e 63 65 3a 21 30 7d 29 29 29 7d 28 29 2c 61 2e 68 79 64 72 61 74 65 43 6f 6d 70 6f 6e 65 6e 74 73 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 2c 7b 6d 61 6e 61 67 65 72 3a 61 2c 6c 6f 67 67 65 72 73 3a 6e 7d 7d 76 61 72 20 6b 74 3d 70 65 28 29 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 76 6f 69 64 20 30 29 3b 6b 74 2e 64 69 73 70 6c 61 79 4e 61 Data Ascii: n"complete"===e\|\|"interactive"===e?Promise.resolve():new Promise((e=>window.addEventListener("DOMContentLoaded",(()=>{e()}),{once:!0})))}(),a.hydrateComponents(document.documentElement)),{manager:a,loggers:n}}var kt=pe().createContext(void 0);kt.displayNa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49912	13.35.58.25	443	2308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-10 01:44:39 UTC	590	OUT	GET /psb/capla/static/js/034e4287.d0fe97f0.chunk.js HTTP/1.1 Host: cf2.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.booking.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.booking.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-10 01:44:40 UTC	690	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 385 Connection: close Date: Wed, 10 Jul 2024 01:44:41 GMT Last-Modified: Tue, 09 Jul 2024 13:43:48 GMT ETag: "774199271c102ae8b705476863debb43" x-amz-server-side-encryption: AES256 x-amz-meta-x-deployment-hash: foo x-amz-version-id: BnmC3wZYZHXXtnAW6ADSpiqJYEgHPXb5 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7ccd3c44ed70cdb4cd40f0ff29b1254c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: WGHjTCuUk3IdWzLrWgiAYOV2fQAdYmdfjdi8ZC96_ufupH04pBPYsw== Cache-Control: public, max-age=604800 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-07-10 01:44:40 UTC	385	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 62 2d 70 72 69 76 61 63 79 2d 73 74 61 74 65 6d 65 6e 74 2d 6d 66 65 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 22 5d 3d 73 65 6c 66 5b 22 62 2d 70 72 69 76 61 63 79 2d 73 74 61 74 65 6d 65 6e 74 2d 6d 66 65 5f 5f 4c 4f 41 44 41 42 4c 45 5f 4c 4f 41 44 45 44 5f 43 48 55 4e 4b 53 5f 5f 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 30 33 34 65 34 32 38 37 22 5d 2c 7b 66 65 39 30 35 66 37 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 5f 2c 74 29 7b 74 2e 72 28 5f 29 3b 76 61 72 20 61 3d 74 28 22 35 34 30 61 64 63 64 38 22 29 3b 28 30 2c 61 2e 73 65 72 76 65 29 28 28 28 29 3d 3e 74 2e 65 28 22 61 37 32 30 36 33 62 31 22 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 22 Data Ascii: "use strict";(self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]=self["b-privacy-statement-mfe__LOADABLE_LOADED_CHUNKS__"]\|\|[]).push([["034e4287"],{fe905f7b:function(e,_,t){t.r(_);var a=t("540adcd8");(0,a.serve)((()=>t.e("a72063b1").then(t.bind(t,"

Target ID:	0
Start time:	21:44:06
Start date:	09/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:44:10
Start date:	09/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2160,i,7866435718271725811,6030177856115719488,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:44:13
Start date:	09/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ennexhorpps.com/apart/book244102ashotxxx22214"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ennexhorpps.com/apart/book244102ashotxxx22214

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Windows Analysis Report
https://ennexhorpps.com/apart/book244102ashotxxx22214