Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://ramadawynd.com/wakdl

Overview

General Information

Sample URL:https://ramadawynd.com/wakdl
Analysis ID:1521121
Infos:

Detection

Score:64
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

AI detected phishing page
Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Detected non-DNS traffic on DNS port
Found iframes
HTML body contains low number of good links
HTML title does not match URL
Invalid T&C link found

Classification

Process Tree

  • System is w10x64
  • chrome.exe (PID: 5244 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 5088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1992,i,13184340910222023404,7207311649821444817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 6952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4044 --field-trial-handle=1992,i,13184340910222023404,7207311649821444817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • chrome.exe (PID: 6336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ramadawynd.com/wakdl" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Antivirus / Scanner detection for submitted sample
Source: https://ramadawynd.com/wakdlSlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering
Multi AV Scanner detection for submitted file
Source: https://ramadawynd.com/wakdlVirustotal: Detection: 13%Perma Link

Phishing

barindex
AI detected phishing page
Source: https://ramadawynd.com/wakdlLLM: Score: 9 Reasons: The brand 'Booking.com' is a well-known online travel agency., The legitimate domain for Booking.com is 'booking.com'., The provided URL 'ramadawynd.com' does not match the legitimate domain for Booking.com., The URL 'ramadawynd.com' appears to be unrelated to Booking.com and could be a potential phishing attempt., The input fields requested (First name, Last name, Email, Country/region, Telephone) are typical for phishing sites attempting to gather personal information. DOM: 0.0.pages.csv
Source: https://ramadawynd.com/wakdlLLM: Score: 9 Reasons: The brand 'Booking.com' is well-known and has a strong online presence., The URL 'ramadawynd.com' does not match the legitimate domain 'booking.com'., The URL 'ramadawynd.com' appears unrelated to 'Booking.com' and could be a hotel or another entity., The URL contains no direct reference to 'Booking.com', which is suspicious., The input fields requested (First name, Last name, Email, Country/region, Telephone) are typical for phishing attempts to gather personal information. DOM: 0.1.pages.csv
Source: https://ramadawynd.com/wakdlHTTP Parser: Iframe src: /chat/wakdl
Source: https://ramadawynd.com/wakdlHTTP Parser: Iframe src: /chat/wakdl
Source: https://ramadawynd.com/wakdlHTTP Parser: Number of links: 0
Source: https://ramadawynd.com/wakdlHTTP Parser: Title: Booking.com | Official site | The best hotels & accommodation does not match URL
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Customer Service help
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Terms & Conditions
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Terms & Conditions
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Privacy & Cookie Statement
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Terms & Conditions
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Terms & Conditions
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Privacy & Cookies
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Customer Service help
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Terms & Conditions
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Terms & Conditions
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Privacy & Cookie Statement
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Terms & Conditions
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Terms & Conditions
Source: https://ramadawynd.com/wakdlHTTP Parser: Invalid link: Privacy & Cookies
Source: https://ramadawynd.com/wakdlHTTP Parser: No <meta name="author".. found
Source: https://ramadawynd.com/wakdlHTTP Parser: No <meta name="author".. found
Source: https://ramadawynd.com/wakdlHTTP Parser: No <meta name="copyright".. found
Source: https://ramadawynd.com/wakdlHTTP Parser: No <meta name="copyright".. found
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: global trafficTCP traffic: 192.168.2.4:52022 -> 1.1.1.1:53
Source: global trafficTCP traffic: 192.168.2.4:54126 -> 162.159.36.2:53
Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownTCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownTCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownTCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownTCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownTCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknownTCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknownTCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknownTCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknownTCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknownTCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknownTCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global trafficHTTP traffic detected: GET /wakdl HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /css/booking1/styles-new4.css HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ramadawynd.com/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /build/chat.css HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ramadawynd.com/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /xdata/images/hotel/max1024x768/135121263.jpg?k=38cabd877fbf75e56c9877f26de5ef6710991e6f31c035d0bedae304e101e018&o= HTTP/1.1Host: q-xx.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ramadawynd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global trafficHTTP traffic detected: GET /xdata/images/hotel/max1024x768/135121263.jpg?k=38cabd877fbf75e56c9877f26de5ef6710991e6f31c035d0bedae304e101e018&o= HTTP/1.1Host: q-xx.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /js/jquery.min.js HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ramadawynd.com/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /chat/wakdl HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ramadawynd.com/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /js/jquery.min.js HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /css/booking1/submit-new8.js HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ramadawynd.com/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /css/booking1/blur_input.js HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ramadawynd.com/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ramadawynd.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /css/chat.css HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ramadawynd.com/chat/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /img/support-open.png HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ramadawynd.com/chat/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /dist/new_card_design/jquery.min.js HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ramadawynd.com/chat/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /css/booking1/img/flags.png HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ramadawynd.com/css/booking1/styles-new4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /css/booking1/submit-new8.js HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /css/booking1/blur_input.js HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /dist/new_card_design/jquery.min.js HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /img/support-open.png HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /css/booking1/img/flags.png HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /img/support.png HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ramadawynd.com/chat/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /chat/%7Bimage%7D HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ramadawynd.com/chat/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /img/support.png HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /chat/%7Bimage%7D HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecSZUYbFEmzg%2Fcdenn3lqv5nnIlZPsMz4oABQoqkIUxelfYoEcNboRWfXYo2RhFx3Tcmq3QQSE8I6YDLzIzyc%2Bzz%2F8A6shJLZ3uy0HAxZlznCFjHpv6sgygOpan7H%2FiOHjhpksppd4YGVYoGHXW2bIW; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone
Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ramadawynd.com/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /css/chat.mp3 HTTP/1.1Host: ramadawynd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, *;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://ramadawynd.com/chat/wakdlAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3lRange: bytes=0-
Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaIuemHPWXMVLWLXs2kPNTzXc2KQFfBu5If%2Bs%2BHtvWW6%2BAnai3eeNPc2JwHn1piDR4AxZjldatTLFzenofFjZmSn%2B1qDI8fLrGhEvu9lR%2BhqI1W2aH4oEGAQg%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2BKiro%2BD%2Fd%2BbEYg2dIjOTVgZx0n4mX0wsh%2F1Wa2JnJGCWuXkiFjyzpUbkcowxj78F8W00H1zeoiZGL4k9cjuVqd%2Fs9ZKMpRxNrFnRoWRJ3DcmI7tzlb7wXBCAbDCwULsffoiQWOVfHQphMG%2Byjss8XhuthszdPMDWE%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecycdScdyX0Hmhw8xicEW5REeGhbcKfOr%2BfCWXK1lTBknjfiQGLZ6mVrr%2BqWPKxMzC6N55Bddi52xlBHJJFwgyNSGnAf9OP35S8bxQfWk0vJ36kkQ42TCQTVH%2Bzm7LZP0s4Ro%2BuyAabpTvw5UAdsccyxKXiG5RDhI8%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3XHNRMedXrYtRcmsHuVGPx6ydc2GlsSApWlS2ZbgFD6Ti8jMejZNqA%2Bxo398YpelfYbPBRM5BCQ6SmLBRPG742XNcvztv5S41JG7YwJdpOOE0xjzOaOxrrVeWyEUvMVFaC4wSbfCFm%2FX%2FuNMlCygFEs49za%2BlNKPfA%3D
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3XHNRMedXrYtRcmsHuVGPx6ydc2GlsSApWlS2ZbgFD6Ti8jMejZNqA%2Bxo398YpelfYbPBRM5BCQ6SmLBRPG742XNcvztv5S41JG7YwJdpOOE0xjzOaOxrrVeWyEUvMVFaC4wSbfCFm%2FX%2FuNMlCygFEs49za%2BlNKPfA%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3UQPQTAZa%2BlQoKgztFWqO%2FFQT5DTiYE44RtW33rI59xMHRsF0yoZQZNecrkZKefbHEGmnbtSgK5jnLT0HgMJUvh3aSHgDqe00lC4Et%2FUrHABs8wD0K5zcGDRuBqK6997%2FjuhlpqW%2B5WJdZIphhghSgrZ%2BFHbJU4yA4%3D
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3UQPQTAZa%2BlQoKgztFWqO%2FFQT5DTiYE44RtW33rI59xMHRsF0yoZQZNecrkZKefbHEGmnbtSgK5jnLT0HgMJUvh3aSHgDqe00lC4Et%2FUrHABs8wD0K5zcGDRuBqK6997%2FjuhlpqW%2B5WJdZIphhghSgrZ%2BFHbJU4yA4%3D
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3UQPQTAZa%2BlQoKgztFWqO%2FFQT5DTiYE44RtW33rI59xMHRsF0yoZQZNecrkZKefbHEGmnbtSgK5jnLT0HgMJUvh3aSHgDqe00lC4Et%2FUrHABs8wD0K5zcGDRuBqK6997%2FjuhlpqW%2B5WJdZIphhghSgrZ%2BFHbJU4yA4%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5tLlwCxUN8AKuxt7XdvfKtF9rlecg6yBm7ga93hhKw87dIsvMIseqtt06e9JyO6dypO0zEkeUur%2B4XWAaU7v70ngvWKYFrM5TVAh0I8RKK7iTE%2FhWQ3lO%2Bw6p1gvmJPt8uK5Tnsyp%2FHLjW1l4qANcRfvCNJpwBUApI%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT8%2BtDv5f2isrDSqVp%2BtL%2Bpbl9ug7b%2BO3oUOcOfJido%2BBbFSJuj8bWW%2BdRrAtV09KyX3TNoOc%2B%2FTCsdtswkIZIuUtWMN4LV2G5mlceQInj1EIywQxflCWgMiAyFpLWIjA%2B6lC%2BuHSYN7%2FHgulCPjLi408F2%2F6w4iPGg%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzkd2Gc3KUyC4kPxWyFOAE0AMFYLuA6tzyikIWqgywrflvlN6FNq0XKEC7WYyFd0%2BZj7Y5PVIAUCPELr10Ym1udT4d2YMJbQ9MMPhJvw1VIWqnglmBChXp%2FCNzAZDqPp6IsDJny3IQIIkqOUHjKzAb3yq%2BdgyrJY92g%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzkd2Gc3KUyC4kPxWyFOAE0AMFYLuA6tzyikIWqgywrflvlN6FNq0XKEC7WYyFd0%2BZj7Y5PVIAUCPELr10Ym1udT4d2YMJbQ9MMPhJvw1VIWqnglmBChXp%2FCNzAZDqPp6IsDJny3IQIIkqOUHjKzAb3yq%2BdgyrJY92g%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWznNF%2FKpKLEsUjzoVwsFxhzCGchRWzm41bIYtwj6%2BJOHrm5jSKabUUIo7U%2FxfC0UhPOJ1%2BzZDcDB%2BUeWJqRKlebzvZSpUXCXrLDYm6bsuDLKDq5bigDIqVgFXo8I3072QMkrD3U8Bpli2ZZibWFl8bN%2BNn50bWE7J64%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaImcAIvzijSJ%2FvDpaf5LdSbxyCNoj63UU%2BO0z%2BnupLD9cRrVvO4bY4Fapwt00KjfprUOQgUoMRJ%2FL4YMjG7%2FxHIXZZf4dukMX4letpRfz%2FvoBMm6y2znIDbg%3D
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPeeJvfKSKAJ7y79nWSxEdbWZBPtQXXL2a57izjPr0W9T5xQsdcEnIG2XZ4KJKJrS%2FMYI3KTZ0xij%2FVvZiFD5oeocYPNTJFi0T2ZVtywUIG8jKGxear%2Fj963Bki0Ld4Y0GKzFdgrbkAzV01AWJCnbO%2BQsEliSs0btpvg%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzmPXWgz8hIo9NnOlssH%2Brwe7r1IZhloK2Jjcmz69jzEhaDasPo48B%2B3fs9WdQis8Go3%2Fi3Vc%2FvTMgmB5CjogRFWIqtufM7OTt6wN0IAirvSkODiaCX2%2BIsPUPTaw4P259lDhSTegzWRGHpmi3AljRZshhSYATGxKm0%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhC2Bxpad7rBkhZNPRfETCJt%2FgmTrI%2B0JxRKnul6OEl0y1dJ557oF4nyB5%2Fa5i4Qn%2FpCERJ6OAwf4FCDjW1nF4ZdQ02BXlpO7vLWXWodH8NGtzYhktZLZlGcpqWKYWSxNqvh2Skcsc5h0q5J2SsSSWjATobmHqwwQyw%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhC2Bxpad7rBkhZNPRfETCJt%2FgmTrI%2B0JxRKnul6OEl0y1dJ557oF4nyB5%2Fa5i4Qn%2FpCERJ6OAwf4FCDjW1nF4ZdQ02BXlpO7vLWXWodH8NGtzYhktZLZlGcpqWKYWSxNqvh2Skcsc5h0q5J2SsSSWjATobmHqwwQyw%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaIju58pnnq5aMWrhktmGh%2FPre3dvTX1ryWoHCWLCUd17LT0pevvSYN0Qf7PCHzR3yD0MT5FN2zBw9ulVN9Z5eAA7EXBWWQc1tIRQ697%2Fy%2BND8RfcWj3CJsAo%3D
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBK6LEtX6%2Blc%2BRtdHZzU16aCxqewqQu3KkRtC5sHfksh2yaHXG3X9nfVhYGkpu1lsbhny9kuE0uWBXHfhVUcxlR9qPWdfzVmlGkavqMmrMiWAHsHr1TggvWQ28dfYWC8GlYzVlXXXQ2O2uOtihT7g%2B1qj%2BUidJm%2BVA0%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBK6LEtX6%2Blc%2BRtdHZzU16aCxqewqQu3KkRtC5sHfksh2yaHXG3X9nfVhYGkpu1lsbhny9kuE0uWBXHfhVUcxlR9qPWdfzVmlGkavqMmrMiWAHsHr1TggvWQ28dfYWC8GlYzVlXXXQ2O2uOtihT7g%2B1qj%2BUidJm%2BVA0%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzkssVfMmPBJG%2BWaws7xtXQXoRTRDu7eYv8BUrqRj6fgBGNQCsFxXKsI4WLXvoY2MZtM56jBh2qUFsvRqYweILKf9RM%2FPelx3mI1gvZieq7D6tx8r3Lvqv3f%2FJSAkM35C1BGdNaJ0NzuUjlVt5esxP5lS%2FbgdLIS8dU%3D
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPeekx4DW18uO%2FtR8Fl8tPO6gvNdQXMp9ncoZChmk9olvylmHjc8UAby%2FqAcmETTMpZYnsMOH8xtdv5qYiBF1bfaRAnAn3H1NLcB3NCb4jhqqsN82pt3YTPKRB7w5AptG2NYYMkKYvjXRlPigfaxrQncopxUcFUw4vA0%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaIju58pnnq5aMscn9a1KkR5ye4JsuluH4g6kqM7ouCM80ZiJ0OWZ7of2Ea4%2FdXdXyVILD7W1zNyK5VYX3Q8SEBAq5A3DHzzRDu%2F8ozPqjvEry464l0M1Dum0%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefnCYslHtOOqQsVuinKi4OXEwpAboEgzVOyjnWAEzWsP72OzjOt%2BPGp8IE2uhjjBP88ZFgR8yL2TYJaVOXk2esa6JXC7p9N5xexWGQfvFlm44ZNifi6OPRr9bRJT2hYggABzFAOe0dCVmJ7MLPf7V%2F641cOAn%2Bdg%2FU%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaImXzEdh1oXRB42IZPFt1DEGgc6sa5%2FSqInM0F%2FiyU379UhZpA5%2FEHLd65gaBR2FmpKYjYThPoxJDmhcvDJMp0DmO6lQ0dgUZba2Tvnjv%2FzSrH9h0neb%2FtGA%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaImXzEdh1oXRB42IZPFt1DEGgc6sa5%2FSqInM0F%2FiyU379UhZpA5%2FEHLd65gaBR2FmpKYjYThPoxJDmhcvDJMp0DmO6lQ0dgUZba2Tvnjv%2FzSrH9h0neb%2FtGA%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpDaJTBtMfaZtgSZoueRebqei8r3AcFct6QVyMlUJQ%2BLzJVehJ%2FLCYYl0WIJua%2Bz2JIdOre1NSrA1gD%2B23OBnM7R3blG6jIZNLrDWFU9p3UNhsyqPE%2Fh9F2qo2wFaRbf0b5EBTR033CrtESnRQrOvN1FGNXz87f4RU%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzkd%2BwJK4Aig3ONMZt5iVm0Y%2Bys2uoqTQfr7sJDIgT2nxluuMVrQoAxNMF7jQOwNF%2BQzdLdj2PS9b7S9cz4zrgBG%2F2oCVPpsKH1njTN%2FJAQtAtegm01AwSm6ME%2FEDCw1%2Fa%2FEBEwFZYqpnFKFlBv%2FU%2F9%2Fc5d1WmcBC7E%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpKVI3eBZoOVkigdWIvED75kXnCmcRQzxLFz1fFxtZ2R62ufGblaZAI0%2B3UqPXr3%2BxA1l2cJizLKEDuySnZouMp0H7CWIT6GFUHHsjAvfven%2FmpxIe%2Fj7MdDn3QlG6TIvp5cfT3wu5yWsXU8Ih9SfopMEJxyNg8TYk%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpKVI3eBZoOVkigdWIvED75kXnCmcRQzxLFz1fFxtZ2R62ufGblaZAI0%2B3UqPXr3%2BxA1l2cJizLKEDuySnZouMp0H7CWIT6GFUHHsjAvfven%2FmpxIe%2Fj7MdDn3QlG6TIvp5cfT3wu5yWsXU8Ih9SfopMEJxyNg8TYk%3D
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhANX62ShUX%2F50X3LwOoEIP%2BLKyrh%2F2RTuh2Az6fGWrvbAIzj2l4sBwG2Vh%2Bc7vzogq2jRVC1sme10FCy7U%2FtmtGNvtIhExZ8dIZ0Io%2B4XfBHld5QcOAWqrH4iJbwStuPNCvDj9ID7%2BsOXIw5ImCIaPtnoi3KjAWqdc%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhANX62ShUX%2F50X3LwOoEIP%2BLKyrh%2F2RTuh2Az6fGWrvbAIzj2l4sBwG2Vh%2Bc7vzogq2jRVC1sme10FCy7U%2FtmtGNvtIhExZ8dIZ0Io%2B4XfBHld5QcOAWqrH4iJbwStuPNCvDj9ID7%2BsOXIw5ImCIaPtnoi3KjAWqdc%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWznlSlRZNNCt3huDjxvNYw%2FWhRd1tPnc8D7BRLJRaRWeev4CdyoA2%2F9TUw5dj5W%2BnlY7V%2BtWS1VUh%2BbnEVZHno2ypGCr2GZqa6txnneYYOlk2apd98DkoUH5qCpwQFA3uZAWUjdjhYsSEqaq3sGviKrjeLSnJAeCCN8%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWznaWUYYm9KqpBMbLdYx0moyjvgpBRz75nrPz6mDAZDIEJ1dQDykhQ9juZouR8bhC1mSgtdVMv83p4v%2B9PYtyQGgGWZ142FieL1VNhNJzJQGE2AVhNUh%2FxzJaM9FFY7H7BgDhPop4iTKY2U5xYDrHEhHz%2FB%2BsrvFqzA%3D
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBLmZvRm0QRe6X5mHXi3S6FOYEY%2BcYXqpYFbdsZQuc%2BNQo6V%2FrO7ETxVtEjosgXWjy2mnv92crqZ8PN1Yfes3%2FGj8bo4rFbYXR3Lr3USopBLK0ddMs1MrHNkaEqWjXZChW7BlCh0HXr2uTsljO28Efn5VBfxUgW3ZXA%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBLmZvRm0QRe6X5mHXi3S6FOYEY%2BcYXqpYFbdsZQuc%2BNQo6V%2FrO7ETxVtEjosgXWjy2mnv92crqZ8PN1Yfes3%2FGj8bo4rFbYXR3Lr3USopBLK0ddMs1MrHNkaEqWjXZChW7BlCh0HXr2uTsljO28Efn5VBfxUgW3ZXA%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5tLlwCxUN8AKuxt7XdvfKtFXANmTSWdUdWnLzavwEgbUtZM4L0jKU7zlXSm2U1A9%2FShMSpafKe1ekFUUwUGpF89sSwkpN6Ccmy77phqc2qRoDUQLrYj2zl489lRyjQx3tHJKXiqchaGAabpXsUsgPXk8l%2F%2FLiT%2BOnI%3D
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5tLlwCxUN8AKuxt7XdvfKtFXANmTSWdUdWnLzavwEgbUtZM4L0jKU7zlXSm2U1A9%2FShMSpafKe1ekFUUwUGpF89sSwkpN6Ccmy77phqc2qRoDUQLrYj2zl489lRyjQx3tHJKXiqchaGAabpXsUsgPXk8l%2F%2FLiT%2BOnI%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaIlWHok3QGopDzOZ1W588cfBr1RJ2rDsrTtH3jz26VE6CMuNHtJNV9ZMYY383gh0wqqVXm45%2FqBVdb7RQaa2u1Vn56LyDVYhrNFPnCduJ2Ju1K0VG8TBHTKc%3D
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/msg_check.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3W%2BHk8d55u6cviilUiAHZFRnhfAgw7V6NzHb81OX0bM7sytmWhYlpFaW7YnIx3CDwY75c0LQ7bqyv2UpbMcb7Rp%2FdnQQ1TgRHz3%2FdJuOxRbHmGTpVnbv18nDMSuGTvIv6mdXfQ%2Bcs2MQ0fukjxFtYTAt0S2niMIAD0%3D
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET /ajax/payment_card_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.booking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3W%2BHk8d55u6cviilUiAHZFRnhfAgw7V6NzHb81OX0bM7sytmWhYlpFaW7YnIx3CDwY75c0LQ7bqyv2UpbMcb7Rp%2FdnQQ1TgRHz3%2FdJuOxRbHmGTpVnbv18nDMSuGTvIv6mdXfQ%2Bcs2MQ0fukjxFtYTAt0S2niMIAD0%3D
Source: global trafficHTTP traffic detected: GET /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: ramadawynd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: chromecache_136.2.drString found in binary or memory: "https://www.facebook.com/bookingcom/", equals www.facebook.com (Facebook)
Source: global trafficDNS traffic detected: DNS query: ramadawynd.com
Source: global trafficDNS traffic detected: DNS query: www.google.com
Source: global trafficDNS traffic detected: DNS query: q-xx.bstatic.com
Source: global trafficDNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global trafficDNS traffic detected: DNS query: booking.com
Source: global trafficDNS traffic detected: DNS query: www.booking.com
Source: global trafficDNS traffic detected: DNS query: nellie.booking.com
Source: unknownHTTP traffic detected: POST /ajax/user_send_status.php HTTP/1.1Host: ramadawynd.comConnection: keep-aliveContent-Length: 33sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://ramadawynd.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ramadawynd.com/wakdlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
Source: chromecache_136.2.drString found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: chromecache_135.2.drString found in binary or memory: http://fontawesome.io
Source: chromecache_135.2.drString found in binary or memory: http://fontawesome.io/license
Source: chromecache_136.2.drString found in binary or memory: http://ogp.me/ns#
Source: chromecache_136.2.drString found in binary or memory: http://ogp.me/ns/fb#
Source: chromecache_136.2.drString found in binary or memory: http://ogp.me/ns/fb/booking_com#
Source: chromecache_136.2.drString found in binary or memory: http://schema.org
Source: chromecache_136.2.drString found in binary or memory: https://account.booking.com/auth/oauth2?client_id=vO1Kblk7xX9tUn2cpZLS&amp;redirect_uri=https%3A%2F%
Source: chromecache_136.2.drString found in binary or memory: https://account.booking.com/oauth2/authorize?aid=304142;client_id=d1cDdLj40ACItEtxJLTo;redirect_uri=
Source: chromecache_136.2.drString found in binary or memory: https://account.booking.com/sso/logout/v3
Source: chromecache_136.2.drString found in binary or memory: https://careers.booking.com/
Source: chromecache_136.2.drString found in binary or memory: https://carrier.booking.com/google/places/webautocompletesimple
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/images/
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/libs/privacy-consent/releases/2.1.56/customer/cookie-banner.min.js
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/assistant_entrypoint_cloudfront_sd.iq_ltr/611b70b00745fa4412a01012
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/async_tt_quiz_cloudfront_sd.iq_ltr/ac73a1533c9b137d154e412af58b0b6
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/async_wpm_overlay_assets_cloudfront_sd.iq_ltr/abb304bf3600a5cf5f74
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f7
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/searchresults_cloudfront_sd.iq_ltr/633191d164d93a0ad3dd5102b5dba15
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/ski_lp_overview_panel_cloudfront_sd.iq_ltr/2b3350935410fe4e36d74ef
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/img
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/img/apple-touch-icon/5db9fd30d96b1796883ee94be7dddce50b73bb38.png
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/img/booking_logo_knowledge_graph/247454a990efac1952e44dddbf30c58677aa0
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/img/favicon/40749a316c45e239a7149b6711ea4c48d10f8d89.ico
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/img/favicon/4a3b40c4059be39cbf1ebaa5f97dbb7d150926b9.png
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/img/fb/9/0177df691e59d2f4926f0ad7e18a7c867487fe93.jpg
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/img/twitter-image-else/566c7081f1deeaca39957e96365c3908f83b95af.jpg
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/assistant_entrypoint_cloudfront_sd/ef4280b820a27ed734dd50de76d082ea
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/async_atlas_v2_cn_cloudfront_sd/bd7e7adbf9731810a79badc567cd4846b1a
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/async_atlas_v2_non_cn_cloudfront_sd/880672823d34a6cc1366fd38f98c6b4
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/async_flash_deals_countdown_cloudfront_sd/ed6ec8a2950ae6f5f3420107a
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/async_index_postcards_c360_cloudfront_sd/11d2b12d25c970340e0e5c5707
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/async_lists_cloudfront_sd/216b2f573c19eba663f686dd8f7cd4747a4d4cb7.
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/async_tt_quiz_cloudfront_sd/8e3159ed1f490736c8984a2b979c73d5dbf0c86
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/async_wpm_overlay_assets_cloudfront_sd/c6cb9b63eea61102d4e96fe72b7c
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/atlas_cloudfront_sd/ed3c4c1b930b70d5167fcfbf6e3aaa28a793fe5e.js
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/atlas_cst_cloudfront_sd/8a1e83c4336018070ee81eb566910595f1ca81c4.js
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/atlas_places_async_cloudfront_sd/c94b60c4da2dae6b55fd9eabf168f146fc
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/calendar2_cloudfront_sd/06071dd1c4e89fbe99e5ad6e21584a6bf9585e84.js
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/core-deps-inlinedet_cloudfront_sd/f62025e692b596dd53ecd1bd082dfd319
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf0
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/genius_vip_cloudfront_sd/aae975495cc56436f4f59463b9ea4e594bdb102a.j
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/index_cloudfront_sd/693a0892efdf573b00d83496327ad37b653d73d5.js
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/landingpage_cloudfront_sd/f1c8c212c0149249fef02a562a6669d167bc56bc.
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/lazy_load_images_cloudfront_sd/77204d4da4aa41b08b1a4062c8e66e462955
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/main_cloudfront_sd/0f9aa5e6bd51fe081f94c12bc31252328fcf3740.js
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/plugable-access-form_cloudfront_sd/3ae2aaac8c7322f2908109b6a9e74460
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/raf_cloudfront_sd/ed36fcb3b802629d6a22b8ea1307ea68d6bc1f4b.js
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/searchbox_cloudfront_sd/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.js
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/searchresults_cloudfront_sd/cf2a65346f0e3531401565e3c3fb44799051d8a
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/searchresults_slick_cloudfront_sd/528359eb9f21194adf8c26f81e07c6eb2
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/ski_lp_overview_panel_cloudfront_sd/9d8e7cfd33a37ffb15285d98f697002
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/js/sp-on-maps_cloudfront_sd/1b5ab45c2163d623661ae52ed8605d70640c7f2e.j
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/static/opensearch/en-us/e19e3ca297c466eb18e0b783736192a638f6a66e.xml
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/xdata/images/xphoto/540x405/266633264.jpg?k=7f9eb9bcfb7cd9189036fd6b28f51eb23
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/xdata/images/xphoto/540x405/281113733.jpg?k=43768154acdf2261706ad890b1e6196e0
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/xdata/images/xphoto/540x405/288300879.jpg?k=20a291605b4d1cc6c15b1ee3f9598c22d
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/xdata/images/xphoto/540x405/292049346.jpg?k=ad53f89eb6ed386bcdb6100d5c729e6db
Source: chromecache_136.2.drString found in binary or memory: https://cf.bstatic.com/xdata/images/xphoto/540x405/292056369.jpg?k=358d8cd9ede268c8a9660de4debc48b68
Source: chromecache_136.2.drString found in binary or memory: https://community.booking.com/?profile.language=en
Source: chromecache_136.2.drString found in binary or memory: https://d8c14d4960ca.edge.sdk.awswaf.com/d8c14d4960ca/a18a4859af9c/challenge.js
Source: chromecache_136.2.drString found in binary or memory: https://plus.google.com/105443419075154950489
Source: chromecache_136.2.drString found in binary or memory: https://q-xx.bstatic.com/psb/capla/static/media/bh_aw_cpg_main_image.b4347622.png
Source: chromecache_136.2.drString found in binary or memory: https://q-xx.bstatic.com/xdata/images/xphoto/1440x434/385632507.jpeg?k=b60dbd5ac89068565bac4efdfb377
Source: chromecache_136.2.drString found in binary or memory: https://q-xx.bstatic.com/xdata/images/xphoto/500x500/184698944.png?k=6bb1bf3c13db4a7ba3c22a2d1f1051f
Source: chromecache_136.2.drString found in binary or memory: https://q-xx.bstatic.com/xdata/images/xphoto/500x500/295240491.png?k=717ea4eeea32110334bf30c06e2ccda
Source: chromecache_136.2.drString found in binary or memory: https://q-xx.bstatic.com/xdata/images/xphoto/720x217/385632507.jpeg?k=b60dbd5ac89068565bac4efdfb377c
Source: chromecache_136.2.drString found in binary or memory: https://r-xx.bstatic.com/xdata/images/xphoto/2880x868/385632507.jpeg?k=b60dbd5ac89068565bac4efdfb377
Source: chromecache_136.2.drString found in binary or memory: https://r-xx.bstatic.com/xdata/images/xphoto/500x500/240858582.png?k=e46cebd6ecfd667a8ac109141e528f8
Source: chromecache_136.2.drString found in binary or memory: https://r-xx.bstatic.com/xdata/images/xphoto/500x500/295262540.png?k=3448b4913c3e4c983c0679f249dc056
Source: chromecache_136.2.drString found in binary or memory: https://r-xx.bstatic.com/xdata/images/xphoto/500x500/312750432.png?k=9ba070f0a3d9781d739acfb4f8134cd
Source: chromecache_136.2.drString found in binary or memory: https://r-xx.bstatic.com/xdata/images/xphoto/500x500/319580025.png?k=3788ea30f77622c889cc3828a3f6fe0
Source: chromecache_136.2.drString found in binary or memory: https://r-xx.bstatic.com/xdata/images/xphoto/500x500/372051085.jpeg?k=f5182852fa2c998e2b47cfd922da41
Source: chromecache_136.2.drString found in binary or memory: https://r-xx.bstatic.com/xdata/images/xphoto/714x300/350960127.jpeg?k=e2732d40882766c8edd0001d7cca56
Source: chromecache_136.2.drString found in binary or memory: https://schema.org
Source: chromecache_136.2.drString found in binary or memory: https://secure.booking.com
Source: chromecache_136.2.drString found in binary or memory: https://secure.booking.com/company/reservations.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuA
Source: chromecache_136.2.drString found in binary or memory: https://secure.booking.com/company/search.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM
Source: chromecache_136.2.drString found in binary or memory: https://secure.booking.com/help.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-A
Source: chromecache_136.2.drString found in binary or memory: https://secure.booking.com/login.html?op=oauth_return
Source: chromecache_136.2.drString found in binary or memory: https://secure.booking.com/myreservations.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM
Source: chromecache_136.2.drString found in binary or memory: https://secure.booking.com/mysettings.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB
Source: chromecache_136.2.drString found in binary or memory: https://secure.booking.com/reviewtimeline.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM
Source: chromecache_136.2.drString found in binary or memory: https://securepubads.g.doubleclick.net/tag/js/gpt.js
Source: chromecache_136.2.drString found in binary or memory: https://shelves.booking.com/
Source: chromecache_136.2.drString found in binary or memory: https://t-cf.bstatic.com/design-assets/assets/v3.125.0/illustrations-traveller/GeniusGenericGiftBox
Source: chromecache_136.2.drString found in binary or memory: https://t-cf.bstatic.com/design-assets/assets/v3.125.0/illustrations-traveller/GeniusGenericGiftBox.
Source: chromecache_136.2.drString found in binary or memory: https://twitter.com/bookingcom
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/_frdtcr?aid=304142
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/articles.html?aid=304142
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/articles/bangkok-rooftop-bars.xu.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCi
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/articles/best-hotels-los-angeles.xu.html?label=gen173nr-1FCAEoggI46AdIM1gEaK
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/articles/best-orlando-hotels-families.xu.html?label=gen173nr-1FCAEoggI46AdIM
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/articles/best-ski-towns.xu.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAE
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/articles/usa-thanksgiving-holiday-homes.xu.html?label=gen173nr-1FCAEoggI46Ad
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/booking-home/index.en-us.html?aid=304142&amp;label=gen173nr-1FCAEoggI46AdIM1
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/business.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/dealspage.en-us.html?aid=304142&amp;label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAE
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/destinationfinderdeals.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAE
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/flights/index.en-us.html?aid=304142&amp;label=gen173nr-1FCAEoggI46AdIM1gEaKc
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/genius.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AE
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.ar.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.bg.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.ca.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.cs.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.da.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.de.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.el.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.en-gb.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.es-ar.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.es-mx.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.es.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.et.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.fi.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.fr.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.he.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.hi.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.hr.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AEC
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.hu.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.id.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.is.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.it.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.ja.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.ko.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.lt.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.lv.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.ms.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.nl.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.no.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.pl.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.pt-br.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.pt-pt.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.ro.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.ru.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.sk.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.sl.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.sr.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.sv.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.th.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.tl.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.tr.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.uk.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.vi.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.zh-cn.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/index.zh-tw.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/searchresults.html
Source: chromecache_136.2.drString found in binary or memory: https://www.booking.com/searchresults.html?aid=800210&si=ai
Source: chromecache_136.2.drString found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-5Q664QZ
Source: chromecache_136.2.drString found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5Q664QZ
Source: chromecache_136.2.drString found in binary or memory: https://www.instagram.com/bookingcom/
Source: chromecache_136.2.drString found in binary or memory: https://www.tiktok.com/
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49744
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49743
Source: unknownNetwork traffic detected: HTTP traffic on port 49817 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49742
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49741
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49740
Source: unknownNetwork traffic detected: HTTP traffic on port 54150 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49795 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54138 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54218 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52037 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49737
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49736
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49735
Source: unknownNetwork traffic detected: HTTP traffic on port 49772 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49841 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54287 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49850
Source: unknownNetwork traffic detected: HTTP traffic on port 54184 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54206 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52048 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54149 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54241 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49784 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49749 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52083 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54276 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52072 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49849
Source: unknownNetwork traffic detected: HTTP traffic on port 54230 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49848
Source: unknownNetwork traffic detected: HTTP traffic on port 54173 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49847
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49846
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49845
Source: unknownNetwork traffic detected: HTTP traffic on port 54309 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49844
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49843
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49842
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49841
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49840
Source: unknownNetwork traffic detected: HTTP traffic on port 52084 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54185 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54242 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52061 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49748 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49760 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49828 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54298 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54162 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54275 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49805 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49839
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49838
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49837
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49836
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49835
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49834
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49833
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49832
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49831
Source: unknownNetwork traffic detected: HTTP traffic on port 54321 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49830
Source: unknownNetwork traffic detected: HTTP traffic on port 49839 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54151 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54264 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52025 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54310 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49796 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54137 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54253 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49829
Source: unknownNetwork traffic detected: HTTP traffic on port 54196 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49828
Source: unknownNetwork traffic detected: HTTP traffic on port 54219 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49827
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49826
Source: unknownNetwork traffic detected: HTTP traffic on port 52036 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49825
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49824
Source: unknownNetwork traffic detected: HTTP traffic on port 49737 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52095 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49771 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49822
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49788
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49787
Source: unknownNetwork traffic detected: HTTP traffic on port 54286 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49786
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49785
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49784
Source: unknownNetwork traffic detected: HTTP traffic on port 54263 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49781
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49780
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54179
Source: unknownNetwork traffic detected: HTTP traffic on port 54148 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54178
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54299
Source: unknownNetwork traffic detected: HTTP traffic on port 49785 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54240 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52082 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54184
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54183
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54182
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54181
Source: unknownNetwork traffic detected: HTTP traffic on port 49807 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54188
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54187
Source: unknownNetwork traffic detected: HTTP traffic on port 54228 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54186
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54185
Source: unknownNetwork traffic detected: HTTP traffic on port 52050 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54174 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54300 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49736 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54180
Source: unknownNetwork traffic detected: HTTP traffic on port 49759 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49779
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49778
Source: unknownNetwork traffic detected: HTTP traffic on port 54197 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49777
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49776
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49775
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49774
Source: unknownNetwork traffic detected: HTTP traffic on port 52027 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49773
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49772
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49771
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54189
Source: unknownNetwork traffic detected: HTTP traffic on port 54311 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54195
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54194
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54193
Source: unknownNetwork traffic detected: HTTP traffic on port 54251 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54192
Source: unknownNetwork traffic detected: HTTP traffic on port 54297 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54163 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54199
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54198
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54197
Source: unknownNetwork traffic detected: HTTP traffic on port 49830 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54196
Source: unknownNetwork traffic detected: HTTP traffic on port 52059 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54217 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52038 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54191
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49769
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54190
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49768
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49767
Source: unknownNetwork traffic detected: HTTP traffic on port 52093 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49766
Source: unknownNetwork traffic detected: HTTP traffic on port 49758 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49765
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49764
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49763
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49762
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49761
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49760
Source: unknownNetwork traffic detected: HTTP traffic on port 54152 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49840 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54207 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54312 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52049 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49797 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54252 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54136 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52071 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49759
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49758
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49757
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49756
Source: unknownNetwork traffic detected: HTTP traffic on port 52094 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49755
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49754
Source: unknownNetwork traffic detected: HTTP traffic on port 54285 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49752
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49751
Source: unknownNetwork traffic detected: HTTP traffic on port 49818 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49750
Source: unknownNetwork traffic detected: HTTP traffic on port 52060 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54147 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49786 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54186 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49747 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49829 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54229 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54274 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49749
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49748
Source: unknownNetwork traffic detected: HTTP traffic on port 54175 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49747
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49746
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49745
Source: unknownNetwork traffic detected: HTTP traffic on port 54129 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54209 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54244 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54221 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49746 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49769 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49803 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49826 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54170 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54141 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49849 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54193 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52092 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49837 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52023 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54279 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52069 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54255 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52034 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54301 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49735 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54290 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54278 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49787 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52045 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49745 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49850 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54245 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54159 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54302 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54233 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52058 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49799
Source: unknownNetwork traffic detected: HTTP traffic on port 49757 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49797
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49796
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49795
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49794
Source: unknownNetwork traffic detected: HTTP traffic on port 52033 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49793
Source: unknownNetwork traffic detected: HTTP traffic on port 49814 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49792
Source: unknownNetwork traffic detected: HTTP traffic on port 54256 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49791
Source: unknownNetwork traffic detected: HTTP traffic on port 54182 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54222 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52081 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54313 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49768 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49825 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54140 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54267 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54171 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52070 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49789
Source: unknownNetwork traffic detected: HTTP traffic on port 49779 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52047 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54160 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54314 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52024 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54183 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54277 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54254 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54231 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49799 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54289 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52056 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52079 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49816 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54128 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54266 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54220 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49788 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49767 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49827 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54139 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49848 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54194 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49756 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52080 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49838 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54288 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54127 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54265 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52068 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52035 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54172 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49778 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54210 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54195 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49755 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54243 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54161 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52046 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49804 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52091 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54299 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54303 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54232 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52057 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54282 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49789 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49800 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49766 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49743 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54201 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52089 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52100 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54224 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54247 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54304 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52077 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49675 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54178 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54212 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54309
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54308
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54307
Source: unknownNetwork traffic detected: HTTP traffic on port 54258 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49812 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52031 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54132 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54302
Source: unknownNetwork traffic detected: HTTP traffic on port 54293 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54301
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54300
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54306
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54305
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54304
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54303
Source: unknownNetwork traffic detected: HTTP traffic on port 54315 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52066 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54167 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54190 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49777 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52078 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54236 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52055 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54319
Source: unknownNetwork traffic detected: HTTP traffic on port 54156 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54318
Source: unknownNetwork traffic detected: HTTP traffic on port 54259 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54313
Source: unknownNetwork traffic detected: HTTP traffic on port 49834 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54312
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54311
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54310
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54317
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54316
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54315
Source: unknownNetwork traffic detected: HTTP traffic on port 54200 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54314
Source: unknownNetwork traffic detected: HTTP traffic on port 54316 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52042 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52090 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54191 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54320
Source: unknownNetwork traffic detected: HTTP traffic on port 54143 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49847 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54209
Source: unknownNetwork traffic detected: HTTP traffic on port 49822 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54281 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52024
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54203
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52025
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54202
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54201
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52023
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54200
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54321
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52028
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54207
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52029
Source: unknownNetwork traffic detected: HTTP traffic on port 54168 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54206
Source: unknownNetwork traffic detected: HTTP traffic on port 49765 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52067 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54205
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52027
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54204
Source: unknownNetwork traffic detected: HTTP traffic on port 54225 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52031
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54210
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52032
Source: unknownNetwork traffic detected: HTTP traffic on port 54270 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52030
Source: unknownNetwork traffic detected: HTTP traffic on port 49811 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49754 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54179 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54211 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52053 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49813 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54234 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54257 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54292 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49836 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52044 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49776 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49845 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54157 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49791 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54180 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49742 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52087 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54202 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49780 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54223 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54269 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54142 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54305 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52076 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54213 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54181 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52032 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54280 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49741 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52088 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54169 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49764 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52065 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49801 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49824 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54268 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54306 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52054 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54235 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54291 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52101
Source: unknownNetwork traffic detected: HTTP traffic on port 49835 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52102
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52100
Source: unknownNetwork traffic detected: HTTP traffic on port 54317 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52043 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54192 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54246 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49775 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54158 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49846 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52099 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49792 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52028 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54238 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52079
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54137
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54258
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54136
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54257
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52077
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54135
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54256
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52078
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54134
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54255
Source: unknownNetwork traffic detected: HTTP traffic on port 52063 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54187 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52086 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54139
Source: unknownNetwork traffic detected: HTTP traffic on port 54318 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49781 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54138
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54259
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52082
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54140
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54261
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52083
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54260
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52080
Source: unknownNetwork traffic detected: HTTP traffic on port 54164 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54296 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52081
Source: unknownNetwork traffic detected: HTTP traffic on port 54250 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52086
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54144
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54265
Source: unknownNetwork traffic detected: HTTP traffic on port 52040 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52087
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54143
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54264
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52084
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54142
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54263
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52085
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54141
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54262
Source: unknownNetwork traffic detected: HTTP traffic on port 54273 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54153 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 54262 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 52052 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49820 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54148
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54269
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54147
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54268
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52088
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54146
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54267
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52089
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54145
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54266
Source: unknownNetwork traffic detected: HTTP traffic on port 49763 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54149
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52093
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54151
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54272
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 52094
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 54150
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: classification engineClassification label: mal64.phis.win@23/42@20/13
Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1992,i,13184340910222023404,7207311649821444817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ramadawynd.com/wakdl"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4044 --field-trial-handle=1992,i,13184340910222023404,7207311649821444817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1992,i,13184340910222023404,7207311649821444817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4044 --field-trial-handle=1992,i,13184340910222023404,7207311649821444817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: Window RecorderWindow detected: More than 3 window changes detected

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire Infrastructure1
Drive-by Compromise		Windows Management InstrumentationPath Interception1
Process Injection		1
Process Injection		OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local System1
Encrypted Channel		Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media3
Non-Application Layer Protocol		Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive4
Application Layer Protocol		Automated ExfiltrationData Encrypted for Impact
Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture1
Ingress Tool Transfer		Traffic DuplicationData Destruction

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
https://ramadawynd.com/wakdl100%SlashNextCredential Stealing type: Phishing & Social Engineering
https://ramadawynd.com/wakdl14%VirustotalBrowse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

SourceDetectionScannerLabelLink
http://fontawesome.io0%URL Reputationsafe
http://fontawesome.io0%URL Reputationsafe
https://schema.org0%URL Reputationsafe
https://www.tiktok.com/0%URL Reputationsafe
http://ogp.me/ns#0%URL Reputationsafe
https://cf.bstatic.com/static/opensearch/en-us/e19e3ca297c466eb18e0b783736192a638f6a66e.xml0%VirustotalBrowse
https://cf.bstatic.com0%VirustotalBrowse
https://www.booking.com/index.th.html0%VirustotalBrowse
https://nellie.booking.com/report0%VirustotalBrowse
https://www.booking.com/booking-home/index.en-us.html?aid=304142&amp;label=gen173nr-1FCAEoggI46AdIM10%VirustotalBrowse
https://shelves.booking.com/0%VirustotalBrowse
https://www.booking.com/index.ja.html0%VirustotalBrowse
https://cf.bstatic.com/static/js/plugable-access-form_cloudfront_sd/3ae2aaac8c7322f2908109b6a9e744600%VirustotalBrowse
https://www.booking.com/index.fi.html0%VirustotalBrowse
https://www.booking.com/index.he.html0%VirustotalBrowse
https://cf.bstatic.com/static/img/favicon/40749a316c45e239a7149b6711ea4c48d10f8d89.ico0%VirustotalBrowse
https://cf.bstatic.com/static/js/genius_vip_cloudfront_sd/aae975495cc56436f4f59463b9ea4e594bdb102a.j0%VirustotalBrowse
https://q-xx.bstatic.com/psb/capla/static/media/bh_aw_cpg_main_image.b4347622.png0%VirustotalBrowse
https://www.booking.com/articles/usa-thanksgiving-holiday-homes.xu.html?label=gen173nr-1FCAEoggI46Ad0%VirustotalBrowse
https://www.booking.com/index.es-ar.html0%VirustotalBrowse
http://ogp.me/ns/fb#1%VirustotalBrowse
https://www.booking.com/index.uk.html0%VirustotalBrowse
https://carrier.booking.com/google/places/webautocompletesimple0%VirustotalBrowse
https://www.booking.com/index.lv.html0%VirustotalBrowse
https://cf.bstatic.com/static/js/atlas_cloudfront_sd/ed3c4c1b930b70d5167fcfbf6e3aaa28a793fe5e.js0%VirustotalBrowse
https://www.booking.com/index.pt-pt.html0%VirustotalBrowse
https://cf.bstatic.com/static/css/ski_lp_overview_panel_cloudfront_sd.iq_ltr/2b3350935410fe4e36d74ef0%VirustotalBrowse
https://www.booking.com/index.is.html0%VirustotalBrowse
https://cf.bstatic.com/static/js/searchbox_cloudfront_sd/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.js0%VirustotalBrowse
https://www.instagram.com/bookingcom/0%VirustotalBrowse
https://cf.bstatic.com/static/css/async_wpm_overlay_assets_cloudfront_sd.iq_ltr/abb304bf3600a5cf5f740%VirustotalBrowse
https://cf.bstatic.com/static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js0%VirustotalBrowse
https://www.booking.com/articles/best-orlando-hotels-families.xu.html?label=gen173nr-1FCAEoggI46AdIM0%VirustotalBrowse
https://www.booking.com/index.hr.html0%VirustotalBrowse
https://www.booking.com/index.ru.html0%VirustotalBrowse
https://cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf00%VirustotalBrowse
https://www.booking.com/index.cs.html0%VirustotalBrowse
https://cf.bstatic.com/static/js/assistant_entrypoint_cloudfront_sd/ef4280b820a27ed734dd50de76d082ea0%VirustotalBrowse
https://t-cf.bstatic.com/design-assets/assets/v3.125.0/illustrations-traveller/GeniusGenericGiftBox0%VirustotalBrowse
https://www.booking.com/articles/best-hotels-los-angeles.xu.html?label=gen173nr-1FCAEoggI46AdIM1gEaK0%VirustotalBrowse
https://cf.bstatic.com/static/img/apple-touch-icon/5db9fd30d96b1796883ee94be7dddce50b73bb38.png0%VirustotalBrowse
https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f70%VirustotalBrowse
https://www.booking.com/index.ko.html0%VirustotalBrowse
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css0%VirustotalBrowse
https://www.booking.com/index.pt-br.html0%VirustotalBrowse
https://www.booking.com/index.pl.html0%VirustotalBrowse
https://booking.com/0%VirustotalBrowse
https://www.booking.com/articles.html?aid=3041420%VirustotalBrowse
https://www.booking.com/index.bg.html0%VirustotalBrowse
https://cf.bstatic.com/static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png0%VirustotalBrowse
https://www.booking.com/index.et.html0%VirustotalBrowse
https://cf.bstatic.com/static/js/searchresults_slick_cloudfront_sd/528359eb9f21194adf8c26f81e07c6eb20%VirustotalBrowse

Domains and IPs

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
de2trjlt8e8rj.cloudfront.net
52.222.236.42
truefalse
    		unknown
    d2i5gg36g14bzn.cloudfront.net
    		18.245.31.18
    		truefalse
      		unknown
      bg.microsoft.map.fastly.net
      		199.232.210.172
      		truefalse
        		unknown
        ramadawynd.com
        		188.114.96.3
        		truetrue
          		unknown
          cdnjs.cloudflare.com
          		104.17.25.14
          		truefalse
            		unknown
            d1of1hbywxxm65.cloudfront.net
            		18.245.60.7
            		truefalse
              		unknown
              www.google.com
              		216.58.206.68
              		truefalse
                		unknown
                fp2e7a.wpc.phicdn.net
                		192.229.221.95
                		truefalse
                  		unknown
                  booking.com
                  		18.245.60.68
                  		truetrue
                    		unknown
                    nellie.booking.com
                    		unknown
                    		unknownfalse
                      		unknown
                      q-xx.bstatic.com
                      		unknown
                      		unknownfalse
                        		unknown
                        www.booking.com
                        		unknown
                        		unknownfalse
                          		unknown

                          Contacted URLs

                          NameMaliciousAntivirus DetectionReputation
                          https://nellie.booking.com/reportfalseunknown
                          https://ramadawynd.com/chat/%7Bimage%7Dfalse
                            		unknown
                            https://ramadawynd.com/css/booking1/submit-new8.jsfalse
                              		unknown
                              https://ramadawynd.com/ajax/payment_card_status.phpfalse
                                		unknown
                                https://ramadawynd.com/js/jquery.min.jsfalse
                                  		unknown
                                  https://ramadawynd.com/ajax/msg_check.phpfalse
                                    		unknown
                                    https://ramadawynd.com/css/booking1/blur_input.jsfalse
                                      		unknown
                                      https://ramadawynd.com/build/chat.cssfalse
                                        		unknown
                                        https://ramadawynd.com/css/chat.cssfalse
                                          		unknown
                                          https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.cssfalseunknown
                                          https://booking.com/falseunknown
                                          https://ramadawynd.com/ajax/user_send_status.phpfalse
                                            		unknown
                                            https://ramadawynd.com/css/chat.mp3false
                                              		unknown
                                              https://ramadawynd.com/false
                                                		unknown
                                                https://ramadawynd.com/css/booking1/styles-new4.cssfalse
                                                  		unknown

                                                  URLs from Memory and Binaries

                                                  NameSourceMaliciousAntivirus DetectionReputation
                                                  https://cf.bstatic.com/static/opensearch/en-us/e19e3ca297c466eb18e0b783736192a638f6a66e.xmlchromecache_136.2.drfalseunknown
                                                  http://fontawesome.iochromecache_135.2.drfalse
                                                  • URL Reputation: safe
                                                  • URL Reputation: safe
                                                  		unknown
                                                  https://cf.bstatic.comchromecache_136.2.drfalseunknown
                                                  https://www.booking.com/index.th.htmlchromecache_136.2.drfalseunknown
                                                  https://secure.booking.com/mysettings.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEBchromecache_136.2.drfalse
                                                    		unknown
                                                    https://secure.booking.com/reviewtimeline.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEMchromecache_136.2.drfalse
                                                      		unknown
                                                      https://shelves.booking.com/chromecache_136.2.drfalseunknown
                                                      https://www.booking.com/booking-home/index.en-us.html?aid=304142&amp;label=gen173nr-1FCAEoggI46AdIM1chromecache_136.2.drfalseunknown
                                                      https://cf.bstatic.com/static/js/plugable-access-form_cloudfront_sd/3ae2aaac8c7322f2908109b6a9e74460chromecache_136.2.drfalseunknown
                                                      https://www.booking.com/index.ja.htmlchromecache_136.2.drfalseunknown
                                                      https://www.booking.com/articles/usa-thanksgiving-holiday-homes.xu.html?label=gen173nr-1FCAEoggI46Adchromecache_136.2.drfalseunknown
                                                      https://www.booking.com/index.fi.htmlchromecache_136.2.drfalseunknown
                                                      https://www.booking.com/index.he.htmlchromecache_136.2.drfalseunknown
                                                      https://cf.bstatic.com/static/img/favicon/40749a316c45e239a7149b6711ea4c48d10f8d89.icochromecache_136.2.drfalseunknown
                                                      https://cf.bstatic.com/static/js/genius_vip_cloudfront_sd/aae975495cc56436f4f59463b9ea4e594bdb102a.jchromecache_136.2.drfalseunknown
                                                      https://q-xx.bstatic.com/psb/capla/static/media/bh_aw_cpg_main_image.b4347622.pngchromecache_136.2.drfalseunknown
                                                      https://www.booking.com/index.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AECchromecache_136.2.drfalse
                                                        		unknown
                                                        https://www.booking.com/business.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-chromecache_136.2.drfalse
                                                          		unknown
                                                          https://www.booking.com/index.es-ar.htmlchromecache_136.2.drfalseunknown
                                                          https://www.booking.com/index.uk.htmlchromecache_136.2.drfalseunknown
                                                          http://ogp.me/ns/fb#chromecache_136.2.drfalseunknown
                                                          https://carrier.booking.com/google/places/webautocompletesimplechromecache_136.2.drfalseunknown
                                                          https://cf.bstatic.com/static/css/ski_lp_overview_panel_cloudfront_sd.iq_ltr/2b3350935410fe4e36d74efchromecache_136.2.drfalseunknown
                                                          https://cf.bstatic.com/static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.jschromecache_136.2.drfalseunknown
                                                          https://www.booking.com/index.pt-pt.htmlchromecache_136.2.drfalseunknown
                                                          https://www.booking.com/index.lv.htmlchromecache_136.2.drfalseunknown
                                                          https://cf.bstatic.com/static/js/atlas_cloudfront_sd/ed3c4c1b930b70d5167fcfbf6e3aaa28a793fe5e.jschromecache_136.2.drfalseunknown
                                                          https://cf.bstatic.com/static/js/searchbox_cloudfront_sd/8c409b90db8d2ce96d4f48a8b2eca3f43a705428.jschromecache_136.2.drfalseunknown
                                                          https://www.booking.com/dealspage.en-us.html?aid=304142&amp;label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEchromecache_136.2.drfalse
                                                            		unknown
                                                            https://www.instagram.com/bookingcom/chromecache_136.2.drfalseunknown
                                                            https://secure.booking.com/help.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-Achromecache_136.2.drfalse
                                                              		unknown
                                                              https://www.booking.com/index.is.htmlchromecache_136.2.drfalseunknown
                                                              https://t-cf.bstatic.com/design-assets/assets/v3.125.0/illustrations-traveller/GeniusGenericGiftBoxchromecache_136.2.drfalseunknown
                                                              https://cf.bstatic.com/static/css/async_wpm_overlay_assets_cloudfront_sd.iq_ltr/abb304bf3600a5cf5f74chromecache_136.2.drfalseunknown
                                                              https://www.booking.com/articles/best-orlando-hotels-families.xu.html?label=gen173nr-1FCAEoggI46AdIMchromecache_136.2.drfalseunknown
                                                              https://www.booking.com/index.hr.htmlchromecache_136.2.drfalseunknown
                                                              https://cf.bstatic.com/static/js/assistant_entrypoint_cloudfront_sd/ef4280b820a27ed734dd50de76d082eachromecache_136.2.drfalseunknown
                                                              https://www.booking.com/index.ru.htmlchromecache_136.2.drfalseunknown
                                                              https://cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf0chromecache_136.2.drfalseunknown
                                                              https://www.booking.com/index.cs.htmlchromecache_136.2.drfalseunknown
                                                              https://cf.bstatic.com/static/css/searchresults_cloudfront_sd.iq_ltr/633191d164d93a0ad3dd5102b5dba15chromecache_136.2.drfalse
                                                                		unknown
                                                                https://www.booking.com/articles/best-hotels-los-angeles.xu.html?label=gen173nr-1FCAEoggI46AdIM1gEaKchromecache_136.2.drfalseunknown
                                                                https://www.booking.com/index.pl.htmlchromecache_136.2.drfalseunknown
                                                                https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f7chromecache_136.2.drfalseunknown
                                                                https://cf.bstatic.com/static/img/apple-touch-icon/5db9fd30d96b1796883ee94be7dddce50b73bb38.pngchromecache_136.2.drfalseunknown
                                                                https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143chromecache_136.2.drfalse
                                                                  		unknown
                                                                  https://www.booking.com/index.ko.htmlchromecache_136.2.drfalseunknown
                                                                  https://cf.bstatic.com/static/js/searchresults_cloudfront_sd/cf2a65346f0e3531401565e3c3fb44799051d8achromecache_136.2.drfalse
                                                                    		unknown
                                                                    https://www.booking.com/index.pt-br.htmlchromecache_136.2.drfalseunknown
                                                                    https://www.booking.com/index.bg.htmlchromecache_136.2.drfalseunknown
                                                                    https://www.booking.com/articles.html?aid=304142chromecache_136.2.drfalseunknown
                                                                    https://schema.orgchromecache_136.2.drfalse
                                                                    • URL Reputation: safe
                                                                    		unknown
                                                                    https://www.booking.com/index.et.htmlchromecache_136.2.drfalseunknown
                                                                    https://cf.bstatic.com/static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.pngchromecache_136.2.drfalseunknown
                                                                    https://cf.bstatic.com/static/js/searchresults_slick_cloudfront_sd/528359eb9f21194adf8c26f81e07c6eb2chromecache_136.2.drfalseunknown
                                                                    https://www.booking.com/index.vi.htmlchromecache_136.2.drfalse
                                                                      		unknown
                                                                      https://www.tiktok.com/chromecache_136.2.drfalse
                                                                      • URL Reputation: safe
                                                                      		unknown
                                                                      https://www.booking.com/index.lt.htmlchromecache_136.2.drfalse
                                                                        		unknown
                                                                        https://www.booking.com/index.sk.htmlchromecache_136.2.drfalse
                                                                          		unknown
                                                                          https://account.booking.com/sso/logout/v3chromecache_136.2.drfalse
                                                                            		unknown
                                                                            https://community.booking.com/?profile.language=enchromecache_136.2.drfalse
                                                                              		unknown
                                                                              https://t-cf.bstatic.com/design-assets/assets/v3.125.0/illustrations-traveller/GeniusGenericGiftBox.chromecache_136.2.drfalse
                                                                                		unknown
                                                                                https://cf.bstatic.com/static/img/twitter-image-else/566c7081f1deeaca39957e96365c3908f83b95af.jpgchromecache_136.2.drfalse
                                                                                  		unknown
                                                                                  http://ogp.me/ns#chromecache_136.2.drfalse
                                                                                  • URL Reputation: safe
                                                                                  		unknown
                                                                                  https://cf.bstatic.com/static/js/async_flash_deals_countdown_cloudfront_sd/ed6ec8a2950ae6f5f3420107achromecache_136.2.drfalse
                                                                                    		unknown
                                                                                    http://ogp.me/ns/fb/booking_com#chromecache_136.2.drfalse
                                                                                      		unknown
                                                                                      https://cf.bstatic.com/static/js/async_index_postcards_c360_cloudfront_sd/11d2b12d25c970340e0e5c5707chromecache_136.2.drfalse
                                                                                        		unknown
                                                                                        https://secure.booking.com/company/reservations.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAchromecache_136.2.drfalse
                                                                                          		unknown
                                                                                          https://www.booking.com/index.es-mx.htmlchromecache_136.2.drfalse
                                                                                            		unknown
                                                                                            https://cf.bstatic.com/static/js/ski_lp_overview_panel_cloudfront_sd/9d8e7cfd33a37ffb15285d98f697002chromecache_136.2.drfalse
                                                                                              		unknown
                                                                                              https://secure.booking.com/company/search.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEMchromecache_136.2.drfalse
                                                                                                		unknown
                                                                                                https://cf.bstatic.com/static/js/calendar2_cloudfront_sd/06071dd1c4e89fbe99e5ad6e21584a6bf9585e84.jschromecache_136.2.drfalse
                                                                                                  		unknown
                                                                                                  https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2chromecache_136.2.drfalse
                                                                                                    		unknown
                                                                                                    https://cf.bstatic.com/static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.csschromecache_136.2.drfalse
                                                                                                      		unknown
                                                                                                      https://secure.booking.comchromecache_136.2.drfalse
                                                                                                        		unknown
                                                                                                        https://www.booking.com/genius.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AEchromecache_136.2.drfalse
                                                                                                          		unknown
                                                                                                          https://cf.bstatic.com/static/img/favicon/4a3b40c4059be39cbf1ebaa5f97dbb7d150926b9.pngchromecache_136.2.drfalse
                                                                                                            		unknown
                                                                                                            https://www.booking.com/searchresults.html?aid=800210&si=aichromecache_136.2.drfalse
                                                                                                              		unknown
                                                                                                              https://www.booking.com/_frdtcr?aid=304142chromecache_136.2.drfalse
                                                                                                                		unknown
                                                                                                                https://securepubads.g.doubleclick.net/tag/js/gpt.jschromecache_136.2.drfalse
                                                                                                                  		unknown
                                                                                                                  https://www.booking.com/index.nl.htmlchromecache_136.2.drfalse
                                                                                                                    		unknown
                                                                                                                    https://cf.bstatic.com/static/css/async_tt_quiz_cloudfront_sd.iq_ltr/ac73a1533c9b137d154e412af58b0b6chromecache_136.2.drfalse
                                                                                                                      		unknown
                                                                                                                      https://www.booking.com/articles/best-ski-towns.xu.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAEchromecache_136.2.drfalse
                                                                                                                        		unknown
                                                                                                                        https://www.booking.comchromecache_136.2.drfalse
                                                                                                                          		unknown
                                                                                                                          https://www.booking.com/index.sv.htmlchromecache_136.2.drfalse
                                                                                                                            		unknown

                                                                                                                            World Map of Contacted IPs

                                                                                                                            • No. of IPs < 25%
                                                                                                                            • 25% < No. of IPs < 50%
                                                                                                                            • 50% < No. of IPs < 75%
                                                                                                                            • 75% < No. of IPs

                                                                                                                            Public IPs

                                                                                                                            IPDomainCountryFlagASNASN NameMalicious
                                                                                                                            216.58.206.68
                                                                                                                            		www.google.comUnited States
                                                                                                                            		15169GOOGLEUSfalse
                                                                                                                            18.245.31.49
                                                                                                                            		unknownUnited States
                                                                                                                            		16509AMAZON-02USfalse
                                                                                                                            52.222.236.42
                                                                                                                            		de2trjlt8e8rj.cloudfront.netUnited States
                                                                                                                            		16509AMAZON-02USfalse
                                                                                                                            18.245.60.7
                                                                                                                            		d1of1hbywxxm65.cloudfront.netUnited States
                                                                                                                            		16509AMAZON-02USfalse
                                                                                                                            239.255.255.250
                                                                                                                            		unknownReserved
                                                                                                                            		unknownunknownfalse
                                                                                                                            188.114.97.3
                                                                                                                            		unknownEuropean Union
                                                                                                                            		13335CLOUDFLARENETUSfalse
                                                                                                                            18.245.60.2
                                                                                                                            		unknownUnited States
                                                                                                                            		16509AMAZON-02USfalse
                                                                                                                            18.245.31.18
                                                                                                                            		d2i5gg36g14bzn.cloudfront.netUnited States
                                                                                                                            		16509AMAZON-02USfalse
                                                                                                                            188.114.96.3
                                                                                                                            		ramadawynd.comEuropean Union
                                                                                                                            		13335CLOUDFLARENETUStrue
                                                                                                                            18.245.60.68
                                                                                                                            		booking.comUnited States
                                                                                                                            		16509AMAZON-02UStrue
                                                                                                                            104.17.25.14
                                                                                                                            		cdnjs.cloudflare.comUnited States
                                                                                                                            		13335CLOUDFLARENETUSfalse

                                                                                                                            Private

                                                                                                                            IP
                                                                                                                            192.168.2.4
                                                                                                                            192.168.2.5

                                                                                                                            General Information

                                                                                                                            Joe Sandbox version:41.0.0 Charoite
                                                                                                                            Analysis ID:1521121
                                                                                                                            Start date and time:2024-09-28 04:36:44 +02:00
                                                                                                                            Joe Sandbox product:CloudBasic
                                                                                                                            Overall analysis duration:0h 4m 2s
                                                                                                                            Hypervisor based Inspection enabled:false
                                                                                                                            Report type:full
                                                                                                                            Cookbook file name:browseurl.jbs
                                                                                                                            Sample URL:https://ramadawynd.com/wakdl
                                                                                                                            Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                                                                                                            Number of analysed new started processes analysed:9
                                                                                                                            Number of new started drivers analysed:0
                                                                                                                            Number of existing processes analysed:0
                                                                                                                            Number of existing drivers analysed:0
                                                                                                                            Number of injected processes analysed:0
                                                                                                                            Technologies:
                                                                                                                            • HCA enabled
                                                                                                                            • EGA enabled
                                                                                                                            • AMSI enabled
                                                                                                                            Analysis Mode:default
                                                                                                                            Analysis stop reason:Timeout
                                                                                                                            Detection:MAL
                                                                                                                            Classification:mal64.phis.win@23/42@20/13
                                                                                                                            EGA Information:Failed
                                                                                                                            HCA Information:
                                                                                                                            • Successful, ratio: 100%
                                                                                                                            • Number of executed functions: 0
                                                                                                                            • Number of non-executed functions: 0

                                                                                                                            Warnings

                                                                                                                            • Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
                                                                                                                            • Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.181.238, 64.233.167.84, 34.104.35.123, 142.250.186.42, 142.250.185.202, 142.250.185.74, 216.58.212.170, 142.250.185.170, 142.250.185.234, 172.217.16.138, 142.250.184.202, 142.250.185.106, 216.58.206.74, 142.250.184.234, 216.58.206.42, 142.250.185.138, 172.217.18.10, 142.250.181.234, 142.250.186.170, 4.175.87.197, 199.232.210.172, 20.242.39.171, 192.229.221.95, 142.250.186.163, 131.107.255.255
                                                                                                                            • Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, 6.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.0.0.0.0.3.0.1.3.0.6.2.ip6.arpa, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
                                                                                                                            • HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
                                                                                                                            • Not all processes where analyzed, report is missing behavior information
                                                                                                                            • Report size exceeded maximum capacity and may have missing network information.
                                                                                                                            • Report size getting too big, too many NtSetInformationFile calls found.
                                                                                                                            • Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

                                                                                                                            Simulations

                                                                                                                            Behavior and APIs

                                                                                                                            ⊘No simulations

                                                                                                                            LLM Input / Output

                                                                                                                            Joe Sandbox View / Context

                                                                                                                            IPs

                                                                                                                            ⊘No context

                                                                                                                            Domains

                                                                                                                            ⊘No context

                                                                                                                            ASNs

                                                                                                                            ⊘No context

                                                                                                                            JA3 Fingerprints

                                                                                                                            ⊘No context

                                                                                                                            Dropped Files

                                                                                                                            ⊘No context

                                                                                                                            Created / dropped Files

                                                                                                                            Chrome Cache Entry: 128

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:PNG image data, 513 x 513, 8-bit/color RGBA, non-interlaced
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):21504
                                                                                                                            Entropy (8bit):7.954291353883254
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:384:AUTp+RAHWNwp4w7ayjs8p9K/5s4FF8fhh6QWIDJnKoU:PKAHZ4O1NK/GSIrW6FXU
                                                                                                                            MD5:BAC81F8C9FFAE1589F8407DB3336604B
                                                                                                                            SHA1:2EB459F0E987E78015A75DE8ED80C18D73A09C0C
                                                                                                                            SHA-256:560B6B311920854BB28122C60E1262F34723ED8BFF0B6970300BD04D9369ADEB
                                                                                                                            SHA-512:6BBD887AFF4E84CF6B26F10DF5CB5BBD8F39EE01C46EB337B0873DA4FFDB22CE5037B8EF15CF91FCEDD322D2B8A0C0377990D8C40CBF2EA1B1014B8BB2323674
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/img/support-open.png
                                                                                                                            Preview:.PNG........IHDR...............la..R.IDATx...........M5.W.{.b..KT.i.^b.1..1Qc.t5....1..M1..{g).. ...J.PQ......&e...z........33......}...3g...s.RQ..B.!...S=....G.+..M.W.......D.).6.L...V..T2m.K...U).9..~.......+....Nd..Ndw..-..g.?S.l.;.+e.s....)...Y.....i..D:.E.Y+z..yr.!...t..+S.'T....L.?w....C..wx.1.va..A.......1.ws~..}.84.F.A....B.U..K..[.W.}K"e.#...8.q...Z._>.50.....wg}n......V.R....B..B......._9..J[/;...o7...T...d..r...-....!.P .;z1F..uu2e>...7c.}#.^....q.:..)..._v&B......L..c..s.cx.......X;rI..LY......T.....B..I.{.O9_..JY.9.d.C..6..;LI...j.....O...B.} 1.-.......Y.gd...i......B(fJ>..G2.....9.u.B...[.....4......1.........4...H........IUi.7.....B!.|.!....s...A.0..ru ... ..._.}.>.|._.L.OQ.....).Ig.]..P.Y.8...X......q$...-I......x..B.'u..t.s...1./.$va. .......g2..7.!..,.....!.....HO....z...)...:.A;.B...5<a..0..!.JTe?.H..CV?D.un.J..q...!..$t..........D..]).?....o>B(._.F.(i.....1..m_..~...!....U..$....0..{.ik.$.J.,'.B(..z....6q....3..z. .".NF

                                                                                                                            Chrome Cache Entry: 129

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:PNG image data, 600 x 600, 8-bit colormap, non-interlaced
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):15634
                                                                                                                            Entropy (8bit):7.900578307129166
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:384:it0d9ty5S3I7tmRmcp35ooRQL95ubXMmZUa2ftI:iIOpZctaLKbXMI
                                                                                                                            MD5:B1C1B20DD4C2E6422A5F6F70ACB4D093
                                                                                                                            SHA1:76AA56070C989DCA9D0D241360582EF0800F8800
                                                                                                                            SHA-256:F38DF22B91417E6C60A0C086F7997C1BA6C5B844B3C947D07ED7E88650442973
                                                                                                                            SHA-512:8750B2A94A5099461D2DB620B1005CBE0AD268DDBB2FBF379F5D65FABDEBC94423042DE1BA2FD9ED66801A114FD4C1AB84E082A5DB810DD3D5EDBDFC2820477D
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/img/support.png
                                                                                                                            Preview:.PNG........IHDR...X...X.......h.....PLTELiq....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................tRNS......v.................................'.....#.....=..O.......!. ..s.....l<....9.(.2.+.$?G...D,....:.*....UI03...MLEg.).4.._o..pQ-.S.....\....>/.[.]t..Wbf.{Y..k.;u.w@.B.NH.6.

                                                                                                                            Chrome Cache Entry: 130

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):180744
                                                                                                                            Entropy (8bit):4.679562137073049
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:3072:LBnPFbnRgmmmmmIZbbbbB3X9mmm+0e4nj:dndbn6mmmmmIZbbbbB3X9mmmlnj
                                                                                                                            MD5:5C507CAFE61B88AAD9CF341B0C01A648
                                                                                                                            SHA1:2CEF2163F7BBCA9566FA8DA5BE3B33953EB1EE54
                                                                                                                            SHA-256:63F125A6025A5CAEA38F91B98FFD8D560CDF532329F12E4FE143453161CE7DEA
                                                                                                                            SHA-512:766102438D248F19FEEAE8DD5F73A1536142CE8CB080BBD27CF48948C97EEC391AB4EDA319C17B3CA94F8785098852D3647033B85C8653440AE2F6FB9CEE682D
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/favicon.ico
                                                                                                                            Preview:............ .h............. ......... .... .........00.... ..%......@@.... .(B...D..HH.... ..T......``.... ............... .(....p........ ..I..Vx..(....... ..... .........................|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;.z|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..{:..{:..{:..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;...B...I...I...G..~=..{:..}<...A..}<..|;..|;..|;..|;..|;..|;..{:....h.................S+..]......X..{:..|;..|;..|;..|;..|;..{:........................j......_..{:..|;..|;..|;..|;..|;..{:...........R(..B.........H...I...>..|;..|;..|;..|;..|;..|;..{:......................{.}<..{:..|;..|;..|;..|;..|;..|;..|;..{:......................gB.{9..|;..|;..|;..|;..|;..|;..|;..|;..{:...........W/..b<.......}.{9..|;..|;..|;..|;..|;..|;..|;..|;..{:......................i.{9..|;..|;..|;..|;..|;..|;..|;..|;..{:...rQ............}..H..{:..|;..|;..|;..|;..|;..|;..|;..|;..|;..}=...E...F...D..|<..{:..|;

                                                                                                                            Chrome Cache Entry: 131

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:Algol 68 source, Unicode text, UTF-8 text, with CRLF line terminators
                                                                                                                            Category:dropped
                                                                                                                            Size (bytes):23021
                                                                                                                            Entropy (8bit):4.347880661405543
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:192:HjSGROS7vGun5c2sVYotAA4eSdyhE2EcOS7cHm/6Pw+0J6iqHWc6kh:+2OS7Oun5Ds6oaA3qyVOS79+022Oh
                                                                                                                            MD5:D2F720E4AD9C490F71F8733AB983DB58
                                                                                                                            SHA1:5F41C754B15388607108DAF7D7C8198217CDD951
                                                                                                                            SHA-256:570C2591DF16ABA69639A2982BE580A11662193C30F66AE6099387C47491A9CF
                                                                                                                            SHA-512:505280CC127F4CFBDAA949DDF215AE1CDF6662C41BF88F049FE544285D4E196AA7F0930D8158164E6F0801B6A4F41AEEBBCAFAAF246091C8DA3C764760E9339E
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            Preview:if (window.innerWidth < 1024 && document.querySelector('.phone-inputs-wrapper')) {.. let firstLoad = true,.. input = document.querySelector('.input-transparent');.... if (firstLoad) {.. input.value = '';.. firstLoad = false;.. }.. input.addEventListener("input", function () {.. // ........ ....... ........ . .... ....... var inputValue = input.value;.... // .......... .......... ......... ... ........ .... ........, ..... ...... var numericValue = inputValue.replace(/[^0-9]/g, "");.... // ......... ........ . .... ..... ...... ......... input.value = numericValue;.. });..}....function scrollToErrorInput() {.. let errorInputs = document.querySelectorAll('.error');.. if (errorInputs.length > 0) {.. let firstErrorInput = errorInputs[0];.... firstErrorInput.scro

                                                                                                                            Chrome Cache Entry: 132

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:ASCII text, with no line terminators
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):120
                                                                                                                            Entropy (8bit):4.978445938236832
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:3:M8NebnagVKYPKEnkcSLv9inuSb9inuevi3xqOOQDYkmCGHgg7k:M8N8nagYYnab99Sb99evihqGDJ1GAg7k
                                                                                                                            MD5:1EAF75DE58CA142444542108A81FA9E0
                                                                                                                            SHA1:7CF350F3179118AE8D626BBC032A535FCEF6D1B0
                                                                                                                            SHA-256:9644F245DCA5832C9F8388B63DB78417DCD1B73422A18C0EB9955BB6FA9B6535
                                                                                                                            SHA-512:93EDFBD45C003E481F05D48F3858BB1EABED3BE4003E5BAFDC13C8E193FDF330F1B62EACB9FD6716A67B50D725A57E0DA672951217CE806F50ABE12C48EC9E27
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISQQnnqw9AEfUeLRIFDXrhT-ASBQ2cTkrQEgUNg6hbPRIFDZSQkvoSBQ2UkJL6EgUNU_J1YRIFDZJOaS4SBQ3oQR7N?alt=proto
                                                                                                                            Preview:ClgKCw164U/gGgQIAxgBCgsNnE5K0BoECAUYAQoLDYOoWz0aBAgJGAEKBw2UkJL6GgAKBw2UkJL6GgAKCw1T8nVhGgQIDRgBCgcNkk5pLhoACgcN6EEezRoA

                                                                                                                            Chrome Cache Entry: 133

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:ASCII text, with very long lines (65451)
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):89476
                                                                                                                            Entropy (8bit):5.2896589255084425
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
                                                                                                                            MD5:DC5E7F18C8D36AC1D3D4753A87C98D0A
                                                                                                                            SHA1:C8E1C8B386DC5B7A9184C763C88D19A346EB3342
                                                                                                                            SHA-256:F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
                                                                                                                            SHA-512:6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/js/jquery.min.js
                                                                                                                            Preview:/*! jQuery v3.5.1 | (c) JS Foundation and other contributors | jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

                                                                                                                            Chrome Cache Entry: 134

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:PNG image data, 18 x 6243, 8-bit colormap, non-interlaced
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):30680
                                                                                                                            Entropy (8bit):7.980364920005041
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:768:+u/kdoLtfqovOH/rceeugVi292Hvzd6lnri5HVoI3zk6suob+HHO:+uRtqHDc/ukuIlCzNsuo2O
                                                                                                                            MD5:7E2C6009CFE0DB90435C9E506E718913
                                                                                                                            SHA1:AA5B9747F1FD934F465A2EB1A6119DF78CD8147E
                                                                                                                            SHA-256:FC78E1550450AB81964EF660B05CB14FB17E0B895B261925AD7E6E073502DFC4
                                                                                                                            SHA-512:ED75A82D511D2D28B6077ED626D054944C9C9005B0282CFD3C63365DA415186DBF1913651B1B3CAB153B35254449AAFF15EED7AED1E00101D22BC39A4F76324C
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/css/booking1/img/flags.png
                                                                                                                            Preview:.PNG........IHDR.......c......_r.....PLTE.....N..................n....7.{...c..%...p.S..........&(.3Y....1Z_.(.......~x..&..h.ki.....>|..}....r..2.....h..8s..//(..l+L...H.11.......7...??...!..z#z..v+.EKC#3.....3TOk\Y.....-..$.ek.1G\.|~.U...[.%mnx.>=.vz-@E.@r.A.....E..FC.K........G......OD.Q5....S-)3.O[..W*..vb[..5=.\.._d....ev.dt.i..ps..jc.a...|..'9a.!b...ql_...s.....&.Sw..x{jz.........kh.......~j..4....~;..G../.5.d .w......v.....H....c....S.kp.r...........k.p...H.....v..f.......O.V\k..b.u.9.d..d....._e...X.....o...........1.J.............U.)!..Dq................q....S..h..=......K..+o..(w....Sm...........v.........$.Y).......ov..X....V.~.|..\g.[[.OZ.."................j@.>....q.7@......V.R....."<....h2.T.}.. ..+.......3....tRNS....&....:...........:......:!(:....:I...:..:................:........L..9..:...<&.:..:.@..dh...g...H..g.......>...H...........7.g.....g.7......l.....E.....h...h.....d........z....f..........c....J..s.IDATx..SSg....u...c.`l...M

                                                                                                                            Chrome Cache Entry: 135

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:ASCII text, with very long lines (30837)
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):31000
                                                                                                                            Entropy (8bit):4.746143404849733
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
                                                                                                                            MD5:269550530CC127B6AA5A35925A7DE6CE
                                                                                                                            SHA1:512C7D79033E3028A9BE61B540CF1A6870C896F8
                                                                                                                            SHA-256:799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
                                                                                                                            SHA-512:49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
                                                                                                                            Preview:/*!. * Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

                                                                                                                            Chrome Cache Entry: 136

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:HTML document, Unicode text, UTF-8 text, with very long lines (5978)
                                                                                                                            Category:dropped
                                                                                                                            Size (bytes):687460
                                                                                                                            Entropy (8bit):5.943535782314351
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:6144:Z6GsvoSIeOqKPicfCqWBrvj3ZH3HRmtpIIU+aXCXLv1ZmpEGx/38A9ZqM6vrUuaL:cpDjphQKKM3hquqw
                                                                                                                            MD5:38F88628E55925B1BBD4368569C1C894
                                                                                                                            SHA1:FE32E9D5F3D00AA0124529B0803E5F16B09A997C
                                                                                                                            SHA-256:901540D850763751A7985928832F74BB68BAEC953C04D51B90240C159EC31620
                                                                                                                            SHA-512:74F1F8285ED5E28D50B2018E92E12923F0BD15152E0B744026A407F928B9BB98B5A245BC7CE73DA76668E689A0D291602FD9E7200B29416D9D9A864FABEAD74D
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            Preview:<!DOCTYPE html>. .You know you could be getting paid to poke around in our code?.We're hiring designers and developers to work in Amsterdam:.https://careers.booking.com/.-->. wdot-802 -->.<script type="text/javascript" nonce="gt13O7Or58LKsiB">.document.addEventListener('DOMContentLoaded', function () {./**.* provides the current user's cookie consent.* in order to use it:.* 1. inline privacy/cookieConsent.js in the page you need to use it..* please note that this library relies on window.PCM.isCountryNeedCookieBanner to be initialised.* before using (calling getValue function) it.* 2. in your js file:.*.* var privacyCookieConsent = B.require('privacyCookieConsent');.* var consent = privacyCookieConsent.getValue();.*/.B.define('privacyCookieConsent', function () {.var consentGroupIsAllowed = {.analytical: 'C0002%3A1',.marketing: 'C0004%3A1'.};.var optanonConsentCookieName = 'OptanonConsent';.var optanonBoxClosedCookieName = 'OptanonAlertBoxClosed';.var halfOfYearMillis = 180 * 24

                                                                                                                            Chrome Cache Entry: 137

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
                                                                                                                            Category:dropped
                                                                                                                            Size (bytes):180744
                                                                                                                            Entropy (8bit):4.679562137073049
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:3072:LBnPFbnRgmmmmmIZbbbbB3X9mmm+0e4nj:dndbn6mmmmmIZbbbbB3X9mmmlnj
                                                                                                                            MD5:5C507CAFE61B88AAD9CF341B0C01A648
                                                                                                                            SHA1:2CEF2163F7BBCA9566FA8DA5BE3B33953EB1EE54
                                                                                                                            SHA-256:63F125A6025A5CAEA38F91B98FFD8D560CDF532329F12E4FE143453161CE7DEA
                                                                                                                            SHA-512:766102438D248F19FEEAE8DD5F73A1536142CE8CB080BBD27CF48948C97EEC391AB4EDA319C17B3CA94F8785098852D3647033B85C8653440AE2F6FB9CEE682D
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            Preview:............ .h............. ......... .... .........00.... ..%......@@.... .(B...D..HH.... ..T......``.... ............... .(....p........ ..I..Vx..(....... ..... .........................|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;.z|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..{:..{:..{:..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;..|;...B...I...I...G..~=..{:..}<...A..}<..|;..|;..|;..|;..|;..|;..{:....h.................S+..]......X..{:..|;..|;..|;..|;..|;..{:........................j......_..{:..|;..|;..|;..|;..|;..{:...........R(..B.........H...I...>..|;..|;..|;..|;..|;..|;..{:......................{.}<..{:..|;..|;..|;..|;..|;..|;..|;..{:......................gB.{9..|;..|;..|;..|;..|;..|;..|;..|;..{:...........W/..b<.......}.{9..|;..|;..|;..|;..|;..|;..|;..|;..{:......................i.{9..|;..|;..|;..|;..|;..|;..|;..|;..{:...rQ............}..H..{:..|;..|;..|;..|;..|;..|;..|;..|;..|;..}=...E...F...D..|<..{:..|;

                                                                                                                            Chrome Cache Entry: 138

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:Algol 68 source, Unicode text, UTF-8 text, with CRLF line terminators
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):23021
                                                                                                                            Entropy (8bit):4.347880661405543
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:192:HjSGROS7vGun5c2sVYotAA4eSdyhE2EcOS7cHm/6Pw+0J6iqHWc6kh:+2OS7Oun5Ds6oaA3qyVOS79+022Oh
                                                                                                                            MD5:D2F720E4AD9C490F71F8733AB983DB58
                                                                                                                            SHA1:5F41C754B15388607108DAF7D7C8198217CDD951
                                                                                                                            SHA-256:570C2591DF16ABA69639A2982BE580A11662193C30F66AE6099387C47491A9CF
                                                                                                                            SHA-512:505280CC127F4CFBDAA949DDF215AE1CDF6662C41BF88F049FE544285D4E196AA7F0930D8158164E6F0801B6A4F41AEEBBCAFAAF246091C8DA3C764760E9339E
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/css/booking1/submit-new8.js
                                                                                                                            Preview:if (window.innerWidth < 1024 && document.querySelector('.phone-inputs-wrapper')) {.. let firstLoad = true,.. input = document.querySelector('.input-transparent');.... if (firstLoad) {.. input.value = '';.. firstLoad = false;.. }.. input.addEventListener("input", function () {.. // ........ ....... ........ . .... ....... var inputValue = input.value;.... // .......... .......... ......... ... ........ .... ........, ..... ...... var numericValue = inputValue.replace(/[^0-9]/g, "");.... // ......... ........ . .... ..... ...... ......... input.value = numericValue;.. });..}....function scrollToErrorInput() {.. let errorInputs = document.querySelectorAll('.error');.. if (errorInputs.length > 0) {.. let firstErrorInput = errorInputs[0];.... firstErrorInput.scro

                                                                                                                            Chrome Cache Entry: 139

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x683, components 3
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):129962
                                                                                                                            Entropy (8bit):7.973674334515844
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:3072:C4x9i6PdnMv05dHQ6qgcwaXxs4z4k+431NLL9rfVkClyVtVUEa:x9tMvWwwOxGL43PH96Clu7Uf
                                                                                                                            MD5:28CF193441B88790C17224CF67017E72
                                                                                                                            SHA1:B8E3D3DC530320B81330D28DB0BCFAF2DD8E9307
                                                                                                                            SHA-256:5E014B5F38F733F66AEE525DB702F594FE2756800CBABCDD1FA11DD662E0ED1A
                                                                                                                            SHA-512:AA427E06F9A9FCF5306869FD36AD991C039A09A3BE33ACC9246A27C3E25D8FA3A3E840C4360A6D161B73476C56183D1F55E390AC8D4D684DFBE854F701A101D2
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://q-xx.bstatic.com/xdata/images/hotel/max1024x768/135121263.jpg?k=38cabd877fbf75e56c9877f26de5ef6710991e6f31c035d0bedae304e101e018&o=
                                                                                                                            Preview:......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....G"....._...RH.f!ES..Np3I9.[I%YWr. m...C|. ......B.[.*.#.<dW.T.g..o......I.....qc.:zqT4...v..dd ...+f'.==...G...c>..T,bX..%.. .{ds..|^...}.z1.0^1x..UV...9>..I...&B.....n... c..R.`7..[j.c.@....Q.TQZG........8...\kUb.w."...[C..........Olu.sV....=..$.....?Z..ZD.L`l>d.n.......`......m..3.....;..S\..J%...,M...d...V......8.{..+{..8.4..|........6.R..m.0..0..d..?..

                                                                                                                            Chrome Cache Entry: 140

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:ASCII text, with very long lines (65451)
                                                                                                                            Category:dropped
                                                                                                                            Size (bytes):89476
                                                                                                                            Entropy (8bit):5.2896589255084425
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
                                                                                                                            MD5:DC5E7F18C8D36AC1D3D4753A87C98D0A
                                                                                                                            SHA1:C8E1C8B386DC5B7A9184C763C88D19A346EB3342
                                                                                                                            SHA-256:F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
                                                                                                                            SHA-512:6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            Preview:/*! jQuery v3.5.1 | (c) JS Foundation and other contributors | jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

                                                                                                                            Chrome Cache Entry: 141

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x683, components 3
                                                                                                                            Category:dropped
                                                                                                                            Size (bytes):129962
                                                                                                                            Entropy (8bit):7.973674334515844
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:3072:C4x9i6PdnMv05dHQ6qgcwaXxs4z4k+431NLL9rfVkClyVtVUEa:x9tMvWwwOxGL43PH96Clu7Uf
                                                                                                                            MD5:28CF193441B88790C17224CF67017E72
                                                                                                                            SHA1:B8E3D3DC530320B81330D28DB0BCFAF2DD8E9307
                                                                                                                            SHA-256:5E014B5F38F733F66AEE525DB702F594FE2756800CBABCDD1FA11DD662E0ED1A
                                                                                                                            SHA-512:AA427E06F9A9FCF5306869FD36AD991C039A09A3BE33ACC9246A27C3E25D8FA3A3E840C4360A6D161B73476C56183D1F55E390AC8D4D684DFBE854F701A101D2
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            Preview:......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....G"....._...RH.f!ES..Np3I9.[I%YWr. m...C|. ......B.[.*.#.<dW.T.g..o......I.....qc.:zqT4...v..dd ...+f'.==...G...c>..T,bX..%.. .{ds..|^...}.z1.0^1x..UV...9>..I...&B.....n... c..R.`7..[j.c.@....Q.TQZG........8...\kUb.w."...[C..........Olu.sV....=..$.....?Z..ZD.L`l>d.n.......`......m..3.....;..S\..J%...,M...d...V......8.{..+{..8.4..|........6.R..m.0..0..d..?..

                                                                                                                            Chrome Cache Entry: 142

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:ASCII text, with very long lines (65451)
                                                                                                                            Category:dropped
                                                                                                                            Size (bytes):89476
                                                                                                                            Entropy (8bit):5.2896589255084425
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
                                                                                                                            MD5:DC5E7F18C8D36AC1D3D4753A87C98D0A
                                                                                                                            SHA1:C8E1C8B386DC5B7A9184C763C88D19A346EB3342
                                                                                                                            SHA-256:F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
                                                                                                                            SHA-512:6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            Preview:/*! jQuery v3.5.1 | (c) JS Foundation and other contributors | jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

                                                                                                                            Chrome Cache Entry: 143

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:ASCII text, with CRLF line terminators
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):108836
                                                                                                                            Entropy (8bit):4.867070022791587
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:768:DIIWgw65aTN5Iv5S50555OCO4EziBlcuXADpoLpzavj3OXJLUDPLA7s5ta+8BQuj:DxO4Ez0cuTavj3OXJLUDP07s5ta+u
                                                                                                                            MD5:8EA46EBF0BBD72F68D118929AAF2867E
                                                                                                                            SHA1:8FEAAA92BCF2354C9464E49897DDB00E9DAD3B92
                                                                                                                            SHA-256:B1C9AD009F4D6ED374FE5404E3276BBBC345396E772CD72491A88C1173582EC3
                                                                                                                            SHA-512:2B149D738ED86A22E7249DE467850B705951E2DC829FF1147F81D1A39F4D935A53DD72C467976576220A7391955AE6BAA4496DAA1508D731FCD4ADF653EB1012
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/css/chat.css
                                                                                                                            Preview:/*! normalize.css v3.0.2 | MIT License | git.io/normalize */..html {.. font-family: sans-serif;.. -ms-text-size-adjust: 100%;.. -webkit-text-size-adjust: 100%..}....body {.. margin: 0..}....article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {.. display: block..}....audio, canvas, progress, video {.. display: inline-block;.. vertical-align: baseline..}....audio:not([controls]) {.. display: none;.. height: 0..}....[hidden], template {.. display: none..}....a {.. background-color: transparent..}....a:active, a:hover {.. outline: 0..}....abbr[title] {.. border-bottom: 1px dotted..}....b, strong {.. font-weight: 700..}....dfn {.. font-style: italic..}....mark {.. background: #ff0;.. color: #000..}....small {.. font-size: 80%..}....sub, sup {.. font-size: 75%;.. line-height: 0;.. position: relative;.. vertical-align: baseline..}....sup {.. top: -.5em..}....sub {.. botto

                                                                                                                            Chrome Cache Entry: 144

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:PNG image data, 18 x 6243, 8-bit colormap, non-interlaced
                                                                                                                            Category:dropped
                                                                                                                            Size (bytes):30680
                                                                                                                            Entropy (8bit):7.980364920005041
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:768:+u/kdoLtfqovOH/rceeugVi292Hvzd6lnri5HVoI3zk6suob+HHO:+uRtqHDc/ukuIlCzNsuo2O
                                                                                                                            MD5:7E2C6009CFE0DB90435C9E506E718913
                                                                                                                            SHA1:AA5B9747F1FD934F465A2EB1A6119DF78CD8147E
                                                                                                                            SHA-256:FC78E1550450AB81964EF660B05CB14FB17E0B895B261925AD7E6E073502DFC4
                                                                                                                            SHA-512:ED75A82D511D2D28B6077ED626D054944C9C9005B0282CFD3C63365DA415186DBF1913651B1B3CAB153B35254449AAFF15EED7AED1E00101D22BC39A4F76324C
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            Preview:.PNG........IHDR.......c......_r.....PLTE.....N..................n....7.{...c..%...p.S..........&(.3Y....1Z_.(.......~x..&..h.ki.....>|..}....r..2.....h..8s..//(..l+L...H.11.......7...??...!..z#z..v+.EKC#3.....3TOk\Y.....-..$.ek.1G\.|~.U...[.%mnx.>=.vz-@E.@r.A.....E..FC.K........G......OD.Q5....S-)3.O[..W*..vb[..5=.\.._d....ev.dt.i..ps..jc.a...|..'9a.!b...ql_...s.....&.Sw..x{jz.........kh.......~j..4....~;..G../.5.d .w......v.....H....c....S.kp.r...........k.p...H.....v..f.......O.V\k..b.u.9.d..d....._e...X.....o...........1.J.............U.)!..Dq................q....S..h..=......K..+o..(w....Sm...........v.........$.Y).......ov..X....V.~.|..\g.[[.OZ.."................j@.>....q.7@......V.R....."<....h2.T.}.. ..+.......3....tRNS....&....:...........:......:!(:....:I...:..:................:........L..9..:...<&.:..:.@..dh...g...H..g.......>...H...........7.g.....g.7......l.....E.....h...h.....d........z....f..........c....J..s.IDATx..SSg....u...c.`l...M

                                                                                                                            Chrome Cache Entry: 145

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:ASCII text, with very long lines (65451)
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):89476
                                                                                                                            Entropy (8bit):5.2896589255084425
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
                                                                                                                            MD5:DC5E7F18C8D36AC1D3D4753A87C98D0A
                                                                                                                            SHA1:C8E1C8B386DC5B7A9184C763C88D19A346EB3342
                                                                                                                            SHA-256:F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
                                                                                                                            SHA-512:6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/dist/new_card_design/jquery.min.js
                                                                                                                            Preview:/*! jQuery v3.5.1 | (c) JS Foundation and other contributors | jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

                                                                                                                            Chrome Cache Entry: 146

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):12709
                                                                                                                            Entropy (8bit):7.31527012632901
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:192:iwZFdmCxTVHiC5AZ+PhBRT6yEyt0Cq7+CDvaKbhXAGv/3ZpKjW3kjYBo:bFDHXA853uyEFXJiQ/3ZwjKkcO
                                                                                                                            MD5:362113E61D0589050FC29165A88ADDFD
                                                                                                                            SHA1:275615302C6A8135CA782E8D6C684D58DDC04CB2
                                                                                                                            SHA-256:3C56DE2B13C86AF5740564A85422CEC47F56EA992E26374EBCE0A024FC918E3A
                                                                                                                            SHA-512:1C09699FBEA4C20DB8BFD3139CBD5CB805177B199F732D90E52B6F131D1A8E0AC660D4AB02A387A58A98410322E952ADC619E729DC162699B23F641893B3979B
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/css/chat.mp3:2f81bb248305b5:0
                                                                                                                            Preview:.....................Xing.......>..1........................ "$$'')++<CCJJR[[`ddjjotty~~...................................................PLAME3.100........... $..A.....1.p.M............................................................................................................................................................................................................................................................. ..4....LAME3.100UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUULAME3.100UUUU....)........ ..4....UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUULAME3.100UUUU....S........ ..4....UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUULAME3.100UUUU....|........ ..4....UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUULAME3.100UUUU............ ..4....UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUULAME3.100UUUU............ ..4....UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU

                                                                                                                            Chrome Cache Entry: 147

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:ASCII text, with no line terminators
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):16
                                                                                                                            Entropy (8bit):3.75
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:3:HU9R:MR
                                                                                                                            MD5:FD266515BACE2A86A19C31FF1AC9C219
                                                                                                                            SHA1:CAB279F0B3A4328120035C66DA82B9D756BD20A9
                                                                                                                            SHA-256:DAE2F073C0BC431A2A2B1979E3515F455781320A5A2CD2B61486F50D445C6D30
                                                                                                                            SHA-512:0839B82D36BFE5AC154E3A41DD284C9BF56DA8FEB9AAC9CEFAA426017C114A8CD8D3C75E6DE85AEFA051EC349109595132D471AA28265ED63CE0DDC2BA47CFF2
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm8xfmxV-M5OBIFDUV_g58=?alt=proto
                                                                                                                            Preview:CgkKBw1Ff4OfGgA=

                                                                                                                            Chrome Cache Entry: 148

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:Algol 68 source, ASCII text, with CRLF line terminators
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):21605
                                                                                                                            Entropy (8bit):4.578982832300232
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:192:oE4u7Imf19APLxmOH58WMV4oNggY+y9yBk2UexbROYAIexb6OR78zpDNXVZ:r9TOH5jMaoagXKyWexbROkexb6OR7i9L
                                                                                                                            MD5:EB8DEC5B40A84485ABC09D9E193430F8
                                                                                                                            SHA1:A782B2C0D22822BE0F724644D3405D6FDA570752
                                                                                                                            SHA-256:5EAAE12A5B85C3A24EFD4D581E61EF3773BEFD9F64B1421C678038BF17C559BA
                                                                                                                            SHA-512:FEB501E627654C0BF55797880B27BCFD3A26BA4C8431265515C56E1E103682B5E10F0E9CC502BC2825298B61AD6611F5F5A72534EA2DD3619831CA22C4D9479B
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/css/booking1/blur_input.js
                                                                                                                            Preview:..const checkFields = (element, index, lengthOfInput, checkErr) => {.. const inputWrappers = document.querySelectorAll('.input-controlled');.... if (element.value.length > lengthOfInput) {.. if (element.type !== 'email') {.. inputWrappers[index].classList.add('confirm');.. inputWrappers[index].classList.remove('error');.. }.. else {.. const emailPattern = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;.. if (emailPattern.test(element.value)) {.. inputWrappers[index].classList.add('confirm');.. inputWrappers[index].classList.remove('error');.. .. }.. else {.. if(checkErr) {.. inputWrappers[index].classList.add('error').. }.. .. inputWrappers[index].classList.remove('confirm');.. }.. }.. }.. else {.. if(checkErr) {.. inputWrappers[index].classList.add

                                                                                                                            Chrome Cache Entry: 149

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:ASCII text, with very long lines (329), with CRLF line terminators
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):35287
                                                                                                                            Entropy (8bit):5.053758550543472
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:192:Dmd8y23A0/opzKhlB+QY42PaKKK0k4YR5+QsFEfi3HOmHVhxevCpmDYPdtYFK8Vb:Dfy2zB+QKwYQxhlTyKiJSt/60hesIf5
                                                                                                                            MD5:BEA9E1E3EE299D7B7E6E04F876D37B31
                                                                                                                            SHA1:0C121B1A96463F440D76A6BD45C2FBED7F80C8CD
                                                                                                                            SHA-256:794075538B19A75DF8737BF2C563B3E46741007B3277AD98FCED0622D9FB84D9
                                                                                                                            SHA-512:8D25370466C780E9D0F5BAE9265CD9AB3DF117D8C63B8CE3D496CAE1EF5030AB4890C0773BA8C03910D0830B77479109397DFD0C1486AD406F403F5881570E88
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/css/booking1/styles-new4.css
                                                                                                                            Preview:/*! normalize.css v7.0.0 | MIT License | github.com/necolas/normalize.css */..../* Document.. ========================================================================== */..../**.. * 1. Correct the line height in all browsers... * 2. Prevent adjustments of font size after orientation changes in.. * IE on Windows Phone and in iOS... */....html {.. line-height: 1.15; /* 1 */.. -ms-text-size-adjust: 100%; /* 2 */.. -webkit-text-size-adjust: 100%; /* 2 */..}..../* Sections.. ========================================================================== */..../**.. * Remove the margin in all browsers (opinionated)... */....body {.. margin: 0;..}..../**.. * Add the correct display in IE 9-... */....article,..aside,..footer,..header,..nav,..section {.. display: block;..}..../**.. * Correct the font size and margin on `h1` elements within `section` and.. * `article` contexts in Chrome, Firefox, and Safari... */....h1 {.. font-size: 2em;.. margin: 0.67em 0;..}..../* Gr

                                                                                                                            Chrome Cache Entry: 150

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:PNG image data, 513 x 513, 8-bit/color RGBA, non-interlaced
                                                                                                                            Category:dropped
                                                                                                                            Size (bytes):21504
                                                                                                                            Entropy (8bit):7.954291353883254
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:384:AUTp+RAHWNwp4w7ayjs8p9K/5s4FF8fhh6QWIDJnKoU:PKAHZ4O1NK/GSIrW6FXU
                                                                                                                            MD5:BAC81F8C9FFAE1589F8407DB3336604B
                                                                                                                            SHA1:2EB459F0E987E78015A75DE8ED80C18D73A09C0C
                                                                                                                            SHA-256:560B6B311920854BB28122C60E1262F34723ED8BFF0B6970300BD04D9369ADEB
                                                                                                                            SHA-512:6BBD887AFF4E84CF6B26F10DF5CB5BBD8F39EE01C46EB337B0873DA4FFDB22CE5037B8EF15CF91FCEDD322D2B8A0C0377990D8C40CBF2EA1B1014B8BB2323674
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            Preview:.PNG........IHDR...............la..R.IDATx...........M5.W.{.b..KT.i.^b.1..1Qc.t5....1..M1..{g).. ...J.PQ......&e...z........33......}...3g...s.RQ..B.!...S=....G.+..M.W.......D.).6.L...V..T2m.K...U).9..~.......+....Nd..Ndw..-..g.?S.l.;.+e.s....)...Y.....i..D:.E.Y+z..yr.!...t..+S.'T....L.?w....C..wx.1.va..A.......1.ws~..}.84.F.A....B.U..K..[.W.}K"e.#...8.q...Z._>.50.....wg}n......V.R....B..B......._9..J[/;...o7...T...d..r...-....!.P .;z1F..uu2e>...7c.}#.^....q.:..)..._v&B......L..c..s.cx.......X;rI..LY......T.....B..I.{.O9_..JY.9.d.C..6..;LI...j.....O...B.} 1.-.......Y.gd...i......B(fJ>..G2.....9.u.B...[.....4......1.........4...H........IUi.7.....B!.|.!....s...A.0..ru ... ..._.}.>.|._.L.OQ.....).Ig.]..P.Y.8...X......q$...-I......x..B.'u..t.s...1./.$va. .......g2..7.!..,.....!.....HO....z...)...:.A;.B...5<a..0..!.JTe?.H..CV?D.un.J..q...!..$t..........D..]).?....o>B(._.F.(i.....1..m_..~...!....U..$....0..{.ik.$.J.,'.B(..z....6q....3..z. .".NF

                                                                                                                            Chrome Cache Entry: 151

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:Algol 68 source, ASCII text, with CRLF line terminators
                                                                                                                            Category:dropped
                                                                                                                            Size (bytes):21605
                                                                                                                            Entropy (8bit):4.578982832300232
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:192:oE4u7Imf19APLxmOH58WMV4oNggY+y9yBk2UexbROYAIexb6OR78zpDNXVZ:r9TOH5jMaoagXKyWexbROkexb6OR7i9L
                                                                                                                            MD5:EB8DEC5B40A84485ABC09D9E193430F8
                                                                                                                            SHA1:A782B2C0D22822BE0F724644D3405D6FDA570752
                                                                                                                            SHA-256:5EAAE12A5B85C3A24EFD4D581E61EF3773BEFD9F64B1421C678038BF17C559BA
                                                                                                                            SHA-512:FEB501E627654C0BF55797880B27BCFD3A26BA4C8431265515C56E1E103682B5E10F0E9CC502BC2825298B61AD6611F5F5A72534EA2DD3619831CA22C4D9479B
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            Preview:..const checkFields = (element, index, lengthOfInput, checkErr) => {.. const inputWrappers = document.querySelectorAll('.input-controlled');.... if (element.value.length > lengthOfInput) {.. if (element.type !== 'email') {.. inputWrappers[index].classList.add('confirm');.. inputWrappers[index].classList.remove('error');.. }.. else {.. const emailPattern = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;.. if (emailPattern.test(element.value)) {.. inputWrappers[index].classList.add('confirm');.. inputWrappers[index].classList.remove('error');.. .. }.. else {.. if(checkErr) {.. inputWrappers[index].classList.add('error').. }.. .. inputWrappers[index].classList.remove('confirm');.. }.. }.. }.. else {.. if(checkErr) {.. inputWrappers[index].classList.add

                                                                                                                            Chrome Cache Entry: 152

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:PNG image data, 600 x 600, 8-bit colormap, non-interlaced
                                                                                                                            Category:dropped
                                                                                                                            Size (bytes):15634
                                                                                                                            Entropy (8bit):7.900578307129166
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:384:it0d9ty5S3I7tmRmcp35ooRQL95ubXMmZUa2ftI:iIOpZctaLKbXMI
                                                                                                                            MD5:B1C1B20DD4C2E6422A5F6F70ACB4D093
                                                                                                                            SHA1:76AA56070C989DCA9D0D241360582EF0800F8800
                                                                                                                            SHA-256:F38DF22B91417E6C60A0C086F7997C1BA6C5B844B3C947D07ED7E88650442973
                                                                                                                            SHA-512:8750B2A94A5099461D2DB620B1005CBE0AD268DDBB2FBF379F5D65FABDEBC94423042DE1BA2FD9ED66801A114FD4C1AB84E082A5DB810DD3D5EDBDFC2820477D
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            Preview:.PNG........IHDR...X...X.......h.....PLTELiq....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................tRNS......v.................................'.....#.....=..O.......!. ..s.....l<....9.(.2.+.$?G...D,....:.*....UI03...MLEg.).4.._o..pQ-.S.....\....>/.[.]t..Wbf.{Y..k.;u.w@.B.NH.6.

                                                                                                                            Chrome Cache Entry: 153

                                                                                                                            Download File
                                                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            File Type:ASCII text
                                                                                                                            Category:downloaded
                                                                                                                            Size (bytes):2574
                                                                                                                            Entropy (8bit):4.770307734597163
                                                                                                                            Encrypted:false
                                                                                                                            SSDEEP:48:CFkDbfdPElzyIA4FkqS+RnSnQMsFkFkqd+RnSnQwub6:CFefdclzyIBF/znSQXkF/CnSQ3O
                                                                                                                            MD5:2E377EAC4A39CA576A5C05533F8DC62D
                                                                                                                            SHA1:5937268393B2FC35F2FE3BED57A20288E05DD279
                                                                                                                            SHA-256:1FC1E7AD40E4AE54F2DBD4B1F8B0B09482BBCAE9524A3A1743F0F5DA062740D8
                                                                                                                            SHA-512:ED8B3E572CF68B780D8EF090324FEB741571324A0B37B2F6F6884A69460FF3DB82DBA020305D28A8A6CCE5B780C55374F295D44C4B30CFD22D3DEB7E1689301C
                                                                                                                            Malicious:false
                                                                                                                            Reputation:low
                                                                                                                            URL:https://ramadawynd.com/build/chat.css
                                                                                                                            Preview:.chat-div{. -webkit-text-size-adjust: 100%;. -webkit-tap-highlight-color: rgba(0,0,0,0);. line-height: 1.42857143;. font-size: 15px;. color: rgba(17,17,17,.85);. font-family: PT Sans,sans-serif;. position: fixed;. max-height: calc(100% - 40px);. max-width: calc(100% - 40px);. transition: .2s linear;. transition-property: visibility,opacity;. backface-visibility: hidden;. min-height: 0;. min-width: 0;. display: block;. box-sizing: content-box;. padding: 0;. margin: 0;. visibility: visible;. opacity: 1;. bottom: 10px;. right: 10px;. transform: none;. z-index: 2147483647;.}.#chatra__iframe-wrapper{. box-shadow: 0 0 3px rgba(0,0,0,0.1), 0 5px 50px rgba(0,0,0,0.2);. -webkit-text-size-adjust: 100%;. -webkit-tap-highlight-color: rgba(0,0,0,0);. line-height: 1.42857143;. font-size: 15px;. color: rgba(17,17,17,.85);. font-family: PT Sans,sans-serif;. visibility: visible;. box-sizing: border-box;.

                                                                                                                            Static File Info

                                                                                                                            ⊘No static file info

                                                                                                                            Network Behavior

                                                                                                                            Network Port Distribution

                                                                                                                            TCP Packets

                                                                                                                            TimestampSource PortDest PortSource IPDest IP
                                                                                                                            Sep 28, 2024 04:37:29.062448025 CEST49675443192.168.2.4173.222.162.32
                                                                                                                            Sep 28, 2024 04:37:38.671785116 CEST49675443192.168.2.4173.222.162.32
                                                                                                                            Sep 28, 2024 04:37:41.506294966 CEST49735443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:41.506371975 CEST44349735188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:41.506463051 CEST49735443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:41.506732941 CEST49736443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:41.506778955 CEST44349736188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:41.506834030 CEST49736443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:41.507066011 CEST49735443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:41.507091045 CEST44349735188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:41.507251024 CEST49736443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:41.507261992 CEST44349736188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.000962973 CEST44349735188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.001549006 CEST49735443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.001579046 CEST44349735188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.003181934 CEST44349735188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.003247023 CEST49735443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.114383936 CEST49735443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.114423990 CEST49735443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.114490032 CEST49735443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.114655018 CEST44349735188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.114716053 CEST49735443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.115377903 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.115473032 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.115537882 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.115955114 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.115984917 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.587579966 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.602133036 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.602164984 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.604573965 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.604669094 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.608712912 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.608890057 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.608995914 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:42.609004974 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:42.655644894 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.174175978 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.174307108 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.174379110 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.174388885 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.174441099 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.174489021 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.174505949 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.174619913 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.174689054 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.174730062 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.174757957 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.174806118 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.174930096 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.178786993 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.178847075 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.178860903 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.218784094 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.218797922 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.262274981 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.262343884 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.262356997 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.262506962 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.262550116 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.262557983 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.262850046 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.262898922 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.262906075 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.263127089 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.263179064 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.263185024 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.263272047 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.263317108 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.263323069 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.263865948 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.263921976 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.263928890 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.264005899 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.264053106 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.264060020 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.264159918 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.264203072 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.264209986 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.264738083 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.264796972 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.264802933 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.264902115 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.264947891 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.264954090 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.265053988 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.265100956 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.265106916 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.265608072 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.265656948 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.265664101 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.306308031 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.323960066 CEST49740443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.324012041 CEST44349740188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.324071884 CEST49740443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.325109959 CEST49740443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.325123072 CEST44349740188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.326459885 CEST49741443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.326554060 CEST44349741188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.326617956 CEST49741443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.330214024 CEST49741443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.330245972 CEST44349741188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351016045 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351182938 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351243973 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.351262093 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351381063 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351448059 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.351460934 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351634979 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351731062 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351787090 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.351787090 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.351805925 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351851940 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.351861954 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351917028 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.351973057 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.351984978 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352036953 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.352080107 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352135897 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.352165937 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352230072 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.352258921 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352361917 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352416992 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.352428913 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352458000 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352478027 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.352489948 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352519035 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.352569103 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352643967 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.352654934 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352699995 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.352813005 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352878094 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.352920055 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.352977037 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.353005886 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.353231907 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.353286982 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.383014917 CEST49737443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.383050919 CEST44349737188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.810774088 CEST44349740188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.811054945 CEST49740443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.811067104 CEST44349740188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.811192036 CEST44349741188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.811377048 CEST49741443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.811434031 CEST44349741188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.812114954 CEST44349740188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.812165976 CEST49740443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.812664986 CEST49740443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.812675953 CEST49740443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.812724113 CEST44349740188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.812740088 CEST49740443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.812781096 CEST49740443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.813083887 CEST49742443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.813148022 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.813220978 CEST49742443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.813296080 CEST44349741188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.813383102 CEST49741443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.813492060 CEST49742443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.813519955 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.813810110 CEST49741443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.813810110 CEST49741443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.813908100 CEST49741443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.813925028 CEST44349741188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.814076900 CEST49741443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.814187050 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.814215899 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.814333916 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.814515114 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:43.814526081 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.921696901 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:43.921722889 CEST44349744216.58.206.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:43.921875000 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:43.922904968 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:43.922918081 CEST44349744216.58.206.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.272605896 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.273211956 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.273231983 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.274418116 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.274590969 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.275407076 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.275469065 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.275964975 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.275974989 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.276281118 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.276684999 CEST49742443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.276715040 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.280519009 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.280618906 CEST49742443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.284709930 CEST49742443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.284801006 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.285060883 CEST49742443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.285074949 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.329199076 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.330117941 CEST49742443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.564737082 CEST44349744216.58.206.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.594672918 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.594758987 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.594871998 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.594932079 CEST49742443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.601650953 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.601696014 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.601723909 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.601752043 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.601782084 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.601798058 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.601816893 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.601838112 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.601980925 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.601986885 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.602705956 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.602758884 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.602782965 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.602822065 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.602822065 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.602828026 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.605151892 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:44.606789112 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.606920004 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.606925011 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.650638103 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.688385010 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.688446045 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.688513994 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.688519955 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.688536882 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.688591003 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.688596964 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.689095020 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.689126968 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.689155102 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.689182997 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.689196110 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.689196110 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.689202070 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.690053940 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.690084934 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.690108061 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.690115929 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.690135002 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.690619946 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.690706015 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.690756083 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.821044922 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:44.821103096 CEST44349744216.58.206.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.822473049 CEST44349744216.58.206.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.822540998 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:44.864443064 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:44.864563942 CEST44349744216.58.206.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.873581886 CEST49742443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.873663902 CEST44349742188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.882801056 CEST49743443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:44.882833004 CEST44349743188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.893699884 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:44.893743992 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.893830061 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:44.894349098 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:44.894361019 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.906447887 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:44.906460047 CEST44349744216.58.206.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:44.953859091 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:45.171921968 CEST49746443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:45.172049046 CEST44349746184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:45.172619104 CEST49746443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:45.177556038 CEST49746443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:45.177587032 CEST44349746184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:45.620870113 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:45.621186018 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:45.621212959 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:45.622769117 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:45.622837067 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:45.816627026 CEST44349746184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:45.816716909 CEST49746443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:45.820594072 CEST49746443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:45.820625067 CEST44349746184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:45.820904970 CEST44349746184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:45.861870050 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:45.862006903 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:45.862138033 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:45.862159014 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:45.875834942 CEST49746443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:45.900679111 CEST49746443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:45.905251980 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:45.947397947 CEST44349746184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.090384007 CEST44349746184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.090446949 CEST44349746184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.091059923 CEST49746443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:46.118937016 CEST49746443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:46.118974924 CEST44349746184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.143126965 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.143182993 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.143234015 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.143248081 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.143263102 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.143295050 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.152590990 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.152626991 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.152683973 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.165888071 CEST49747443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:46.165986061 CEST44349747184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.166096926 CEST49747443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:46.166742086 CEST49747443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:46.166776896 CEST44349747184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.202516079 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.239485025 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.239507914 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.239523888 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.239564896 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.239568949 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.239589930 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.239598036 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.239617109 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.239623070 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.239641905 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.239654064 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.239707947 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.239758015 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.253595114 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.253642082 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.253674984 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.253686905 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.253712893 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.296283960 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.313010931 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.313031912 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.313071012 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.313090086 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.313097000 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.313112020 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.313143015 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.313158989 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.313860893 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.313936949 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.318239927 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.318286896 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.318310022 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.318315029 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.318360090 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.320028067 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.320070982 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.320097923 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.320105076 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.320147038 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.320199013 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.361186028 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.398649931 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.398669004 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.398715973 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.398715973 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.398745060 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.398755074 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.398776054 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.398794889 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.399102926 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.399142027 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.399167061 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.399173021 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.399193048 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.399430037 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.399478912 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.400777102 CEST49745443192.168.2.418.245.31.18
                                                                                                                            Sep 28, 2024 04:37:46.400794029 CEST4434974518.245.31.18192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.409377098 CEST49748443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.409403086 CEST44349748188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.409488916 CEST49748443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.409982920 CEST49748443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.409993887 CEST44349748188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.444505930 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:46.444575071 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.444726944 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:46.445024967 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:46.445059061 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.825336933 CEST44349747184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.825431108 CEST49747443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:46.827543020 CEST49747443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:46.827570915 CEST44349747184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.827897072 CEST44349747184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.830657005 CEST49747443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:46.871411085 CEST44349747184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.873516083 CEST44349748188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.874197960 CEST49748443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.874226093 CEST44349748188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.875701904 CEST44349748188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.875760078 CEST49748443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.878423929 CEST49748443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.878482103 CEST49748443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.878505945 CEST44349748188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.878629923 CEST49748443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.878643990 CEST44349748188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.878674984 CEST49748443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.878706932 CEST49748443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.879362106 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.879405975 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:46.879616976 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.880012035 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:46.880028963 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.104384899 CEST44349747184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.104449034 CEST44349747184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.104527950 CEST49747443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:47.105315924 CEST49747443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:47.105315924 CEST49747443192.168.2.4184.28.90.27
                                                                                                                            Sep 28, 2024 04:37:47.105362892 CEST44349747184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.105387926 CEST44349747184.28.90.27192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.174242973 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.174499989 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.174529076 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.175659895 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.175734043 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.176289082 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.176362991 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.176436901 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.223398924 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.223912001 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.223932028 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.272062063 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.381714106 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.382003069 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.382025003 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.383183956 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.383537054 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.383693933 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.383698940 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.383718014 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.432322979 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.445751905 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.453032970 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.453042984 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.453100920 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.453102112 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.453156948 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.453182936 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.453231096 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.453269005 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.453269005 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.453269005 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.453294039 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.453331947 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.500977039 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.533138037 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.533149004 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.533178091 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.533190966 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.533210039 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.533232927 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.533265114 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.533288002 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.536979914 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.536988020 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.537023067 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.537053108 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.537069082 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.537096977 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.576766968 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.618850946 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.618875980 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.618918896 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.618932009 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.618959904 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.618999958 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.618999958 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.619021893 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.619080067 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.620208979 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.620223999 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.620249987 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.620281935 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.620311975 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.620340109 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.620368004 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.621965885 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.621979952 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.622044086 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.622057915 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.622140884 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.623003960 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.623056889 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.626912117 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.626928091 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.626991987 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.627007008 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.627114058 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.677316904 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.677392960 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.677982092 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.705038071 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.705113888 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.705127954 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.705180883 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.705207109 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.705214024 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.705252886 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.707334995 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.707583904 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.707647085 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.707665920 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.707787991 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.707842112 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.707848072 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.707942963 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.708030939 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.708034992 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.708060026 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.708107948 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.708148003 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.708458900 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.708507061 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.708513975 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.709806919 CEST49749443192.168.2.418.245.31.49
                                                                                                                            Sep 28, 2024 04:37:47.709842920 CEST4434974918.245.31.49192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.750775099 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.750792980 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.790584087 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.798053980 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.798208952 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.798276901 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.798305988 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.798331976 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.798382044 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.798413038 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.798557043 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.798635006 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.798681021 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.798688889 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.799046993 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.799103022 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.799108982 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.799186945 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.799240112 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.799245119 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.799283981 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.799590111 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.799752951 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.799807072 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.799812078 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.799895048 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.799942970 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.799947977 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.800637960 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.800719976 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.800781012 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.800786018 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.800865889 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.800920010 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.800925016 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.800965071 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.800970078 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.801331043 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.801387072 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.801393032 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.842571020 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.889108896 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.889288902 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.889353037 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.889373064 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.889456987 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.889511108 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.889518023 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.889550924 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.889611006 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.889616966 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.889657974 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.889712095 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.889717102 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.890064955 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.890115976 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.890122890 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.890160084 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.890230894 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.890237093 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.890250921 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.890290976 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.890296936 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.891014099 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.891086102 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.891091108 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.891110897 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.891165018 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.891170979 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.891202927 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.891251087 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.891258955 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.891292095 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.891357899 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:47.891407967 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.895533085 CEST49750443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:47.895550013 CEST44349750188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.129934072 CEST49751443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.129993916 CEST44349751188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.130059004 CEST49751443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.130662918 CEST49752443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.130731106 CEST44349752188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.130815029 CEST49752443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.131072044 CEST49751443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.131083965 CEST44349751188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.131352901 CEST49752443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.131370068 CEST44349752188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.340651035 CEST49754443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.340775967 CEST44349754188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.340866089 CEST49754443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.341557980 CEST49754443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.341609955 CEST44349754188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.466034889 CEST49755443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.466079950 CEST44349755188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.466232061 CEST49755443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.466728926 CEST49755443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.466743946 CEST44349755188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.469822884 CEST49756443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.469862938 CEST44349756188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.469954967 CEST49756443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.470743895 CEST49756443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.470772028 CEST44349756188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.598820925 CEST44349751188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.599309921 CEST49751443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.599338055 CEST44349751188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.603599072 CEST44349751188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.603627920 CEST44349752188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.603682041 CEST49751443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.604142904 CEST49751443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.604176044 CEST49751443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.604247093 CEST49751443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.604334116 CEST44349751188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.604396105 CEST49751443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.604707956 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.604743004 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.604799032 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.604939938 CEST49752443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.604976892 CEST44349752188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.605426073 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.605437994 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.606092930 CEST44349752188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.606148005 CEST49752443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.606589079 CEST49752443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.606605053 CEST49752443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.606636047 CEST49752443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.606679916 CEST44349752188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.606733084 CEST49752443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.607207060 CEST49758443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.607220888 CEST44349758188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.607275009 CEST49758443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.607681990 CEST49758443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.607697964 CEST44349758188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.804864883 CEST44349754188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.807621002 CEST49754443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.807693005 CEST44349754188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.809171915 CEST44349754188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.809247971 CEST49754443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.809804916 CEST49754443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.809919119 CEST49754443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.809951067 CEST44349754188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.809969902 CEST49754443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.810077906 CEST49754443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.810411930 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.810453892 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.810522079 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.810728073 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:48.810746908 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.920510054 CEST44349755188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.921066999 CEST49755443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.921137094 CEST44349755188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.922600031 CEST44349755188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.922661066 CEST49755443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.924457073 CEST49755443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.924531937 CEST49755443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.924531937 CEST49755443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.924627066 CEST44349755188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.924690008 CEST49755443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.925108910 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.925194979 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.925276041 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.925566912 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.925601006 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.930536985 CEST44349756188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.930744886 CEST49756443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.930778027 CEST44349756188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.934048891 CEST44349756188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.934284925 CEST49756443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.935143948 CEST49756443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.935184956 CEST49756443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.935205936 CEST49756443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.935236931 CEST44349756188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.935298920 CEST49756443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.935585976 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.935625076 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:48.935681105 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.935875893 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:48.935889959 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.061691999 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.063077927 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.063086987 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.064167023 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.064234018 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.064801931 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.064857006 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.065202951 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.065207958 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.090034962 CEST44349758188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.090601921 CEST49758443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.090615034 CEST44349758188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.093888998 CEST44349758188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.093983889 CEST49758443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.095176935 CEST49758443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.095262051 CEST44349758188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.095489979 CEST49758443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.095501900 CEST44349758188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.108479023 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.140420914 CEST49758443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.265161037 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.272653103 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.272676945 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.273765087 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.273828030 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.276133060 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.276196003 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.279597044 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.279603958 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.328799963 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.380916119 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397269011 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397306919 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397332907 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397377014 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397380114 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.397401094 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397425890 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.397458076 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397484064 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397490978 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.397497892 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397741079 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397768021 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397778034 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.397782087 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.397798061 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.402226925 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.404407978 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.404426098 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.416553974 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.436667919 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.446829081 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.446871042 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.447274923 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.447299957 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.448154926 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.448169947 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.448254108 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.448586941 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.448674917 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.448756933 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.448780060 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.451442003 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.451512098 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.452007055 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.452121019 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.452126980 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.452223063 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.455945969 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.475908041 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.475951910 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.475990057 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.476026058 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.476033926 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.476078987 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.476083994 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.476123095 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.476217031 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.476221085 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.476546049 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.476581097 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.476617098 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.476654053 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.476654053 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.476659060 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.480612040 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.480684996 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.480689049 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.483587027 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.483769894 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.483798981 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.483834982 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.483835936 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.483844995 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.483882904 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.483890057 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.483920097 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.484591007 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.484709978 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.484735966 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.484778881 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.484786034 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.484838963 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.485241890 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.485289097 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.485327959 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.485333920 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.485440969 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.485481024 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.485482931 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.485491037 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.485516071 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.486524105 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.486710072 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.486736059 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.486749887 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.486754894 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.486790895 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.486795902 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.492844105 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.492851019 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.494863987 CEST49762443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.494898081 CEST44349762188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.495167017 CEST49762443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.495476961 CEST49762443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.495488882 CEST44349762188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.503515005 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.504154921 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:49.504165888 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.504395008 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:49.504548073 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:49.504558086 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.529598951 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.529632092 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.529643059 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.529655933 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.529818058 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.531050920 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.546231985 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.550813913 CEST44349758188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.550986052 CEST44349758188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.551259995 CEST49758443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.551479101 CEST49758443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.551487923 CEST44349758188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.554868937 CEST49764443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.554887056 CEST44349764188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.555017948 CEST49764443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.555325031 CEST49764443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.555335999 CEST44349764188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.562336922 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.562428951 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.562465906 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.562515020 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.562534094 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.562736988 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.562777996 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.562802076 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.562813997 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.562813997 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.562819958 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.563405991 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.563462973 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.563523054 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.563644886 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.563644886 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.563770056 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.564268112 CEST49757443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.564274073 CEST44349757188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.568702936 CEST49765443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.568738937 CEST44349765188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.568871975 CEST49765443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.569281101 CEST49765443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.569289923 CEST44349765188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.569860935 CEST49766443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.569876909 CEST44349766188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.569931984 CEST49766443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.570369005 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.570420027 CEST49766443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.570430040 CEST44349766188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.570514917 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.570549011 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.570552111 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.570559025 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.570590973 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.570769072 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.570835114 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.570877075 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.570882082 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.570897102 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.570910931 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.570914984 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.570939064 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.571849108 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.571894884 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.571896076 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.571904898 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.571938992 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.571958065 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.572630882 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.572704077 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.572731018 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.572791100 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.572798967 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.572838068 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.573606968 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.573654890 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.573661089 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.573673964 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.573726892 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.573868036 CEST49759443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.573877096 CEST44349759188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.734071970 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.734111071 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.734132051 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.734168053 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.734167099 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.734203100 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.734222889 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.734635115 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.734675884 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.734687090 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.734698057 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.734774113 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.734782934 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.738749981 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.738780022 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.738799095 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.738816023 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.738863945 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.739520073 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.739659071 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.739748001 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.739761114 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.739867926 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.739974022 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.739984989 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.740003109 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.740070105 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.740084887 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.740241051 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.740294933 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.740302086 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.740401983 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.740461111 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.740468025 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.744024992 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.744543076 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.744551897 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.796283007 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.820722103 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.820797920 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.820832014 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.820859909 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.820877075 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.820900917 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.820919037 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.820947886 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.820983887 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.820992947 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.821038961 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.821345091 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.821600914 CEST49760443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.821624041 CEST44349760188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.822038889 CEST49767443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.822082996 CEST44349767188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.822135925 CEST49767443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.822864056 CEST49767443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.822884083 CEST44349767188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.826221943 CEST49768443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.826308966 CEST44349768188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.826384068 CEST49768443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.826662064 CEST49768443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.826698065 CEST44349768188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.829535961 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.829834938 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.829905033 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.829941034 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.830032110 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.830125093 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.830133915 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.830188990 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.830284119 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.830374956 CEST49761443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.830393076 CEST44349761188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.841382980 CEST49769443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.841478109 CEST44349769188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.841650009 CEST49769443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.841882944 CEST49769443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:49.841916084 CEST44349769188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.958317041 CEST44349762188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.958617926 CEST49762443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.958628893 CEST44349762188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.960088015 CEST44349762188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.960406065 CEST49762443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.960604906 CEST49762443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.960644960 CEST49762443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.960676908 CEST44349762188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.960711956 CEST49762443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.960802078 CEST49762443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.961014032 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.961050987 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.961189985 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.961642027 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:49.961653948 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.981015921 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.981220961 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:49.981230021 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.982249022 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.982362032 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:49.984280109 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:49.984338999 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:49.984431028 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.023160934 CEST44349764188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.023483992 CEST49764443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.023497105 CEST44349764188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.024980068 CEST44349764188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.025064945 CEST49764443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.025497913 CEST49764443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.025526047 CEST49764443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.025557995 CEST49764443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.025579929 CEST44349764188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.025679111 CEST49764443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.025813103 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.025851965 CEST44349772188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.025912046 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.026091099 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.026103973 CEST44349772188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.027404070 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.037075043 CEST44349766188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.037313938 CEST49766443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.037326097 CEST44349766188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.037997007 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.038003922 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.038372993 CEST44349766188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.038433075 CEST49766443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.038805962 CEST49766443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.038850069 CEST49766443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.038893938 CEST44349766188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.038902998 CEST49766443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.038950920 CEST49766443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.039356947 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.039463997 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.039788961 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.040080070 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.040117025 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.041256905 CEST44349765188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.041449070 CEST49765443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.041456938 CEST44349765188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.042467117 CEST44349765188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.042541027 CEST49765443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.042838097 CEST49765443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.042855024 CEST49765443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.042892933 CEST44349765188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.042896986 CEST49765443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.042953014 CEST49765443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.043159962 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.043184996 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.043246031 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.043656111 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.043682098 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.078855038 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.115955114 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.116003990 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.116039038 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.116086006 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.116090059 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.116102934 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.116173029 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.116178989 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.116261959 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.116564989 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.116610050 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.116785049 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.116791010 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.118299007 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.118360996 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.118367910 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.172162056 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.172173977 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.206470013 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.206511974 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.206525087 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.206540108 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.206579924 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.206614971 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.206624985 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.206629992 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.206666946 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.207283974 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.207319975 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.207329035 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.207534075 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.207577944 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.207583904 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.208161116 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.208192110 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.208255053 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.208261013 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.208307981 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.208375931 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.208736897 CEST49763443192.168.2.4104.17.25.14
                                                                                                                            Sep 28, 2024 04:37:50.208750010 CEST44349763104.17.25.14192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.276597977 CEST44349767188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.276994944 CEST49767443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.277019024 CEST44349767188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.278065920 CEST44349767188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.278131008 CEST49767443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.278642893 CEST49767443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.278666019 CEST49767443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.278711081 CEST49767443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.278719902 CEST44349767188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.278768063 CEST49767443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.279043913 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.279139042 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.279210091 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.279431105 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.279465914 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.280885935 CEST44349768188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.281091928 CEST49768443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.281119108 CEST44349768188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.282151937 CEST44349768188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.282210112 CEST49768443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.282550097 CEST49768443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.282550097 CEST49768443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.282618046 CEST44349768188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.282638073 CEST49768443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.282680035 CEST49768443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.282891989 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.282939911 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.283044100 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.283217907 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.283237934 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.319128990 CEST44349769188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.319515944 CEST49769443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.319551945 CEST44349769188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.323082924 CEST44349769188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.323154926 CEST49769443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.323534966 CEST49769443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.323534966 CEST49769443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.323577881 CEST49769443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.323632002 CEST44349769188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.323693991 CEST49769443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.323838949 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.323872089 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.323959112 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.324136019 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.324147940 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.418257952 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.418523073 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.418550968 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.420409918 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.420468092 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.420892000 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.420967102 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.421438932 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.421446085 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.469058990 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.487221003 CEST44349772188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.487508059 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.487540007 CEST44349772188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.491086006 CEST44349772188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.491158962 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.491558075 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.491697073 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.491729975 CEST44349772188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.495091915 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.495343924 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.495368004 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.496432066 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.496489048 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.496776104 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.496836901 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.497082949 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.497091055 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.519332886 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.519551992 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.519577026 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.521095037 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.521155119 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.521524906 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.521610022 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.521655083 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.532020092 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.532028913 CEST44349772188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.547346115 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.562479019 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.562488079 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.577728987 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.608778954 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.726305962 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.726433039 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.726485014 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.726516962 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.726741076 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.726802111 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.726809025 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.726883888 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.726963043 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.726990938 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.726996899 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.727032900 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.727042913 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.727195024 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.727427006 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.727432013 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.730807066 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.730875969 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.730880976 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.733877897 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.734105110 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.734162092 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.735219002 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.735285044 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.735788107 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.735858917 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.735932112 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.739077091 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.739325047 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.739365101 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.740430117 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.740489006 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.740817070 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.740888119 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.740942955 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.740961075 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.780100107 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.780122995 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.780174971 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.781518936 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.781811953 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.781830072 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.784281969 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.784342051 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.784678936 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.784758091 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.784822941 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.784831047 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.790242910 CEST44349772188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.790344954 CEST44349772188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.790504932 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.790765047 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.790791035 CEST44349772188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.790805101 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.790839911 CEST49772443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.792753935 CEST49778443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.792790890 CEST44349778188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.792921066 CEST49778443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.793205976 CEST49778443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.793217897 CEST44349778188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.795454025 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.804900885 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.804961920 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.805005074 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.805036068 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.805054903 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.805072069 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.805111885 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.805124044 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.805131912 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.805170059 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.805201054 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.805386066 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.805625916 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.805682898 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.805732965 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.805747986 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.810848951 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.810939074 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.810952902 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.812581062 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.812685966 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.812730074 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.812766075 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.812783003 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.812820911 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.812825918 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.813204050 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.813237906 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.813242912 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.813275099 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.813340902 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.813347101 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.813999891 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.814043045 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.814059019 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.814064980 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.814127922 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.814166069 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.814168930 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.814182043 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.814204931 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.814874887 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.814917088 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.814928055 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.814933062 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.814976931 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.814981937 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.815687895 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.815731049 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.815773964 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.815781116 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.815814972 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.815838099 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.827847004 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.827907085 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.827950001 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.827992916 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.828006983 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.828037024 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.828062057 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.828093052 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.828131914 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.828176975 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.828191996 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.828255892 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.828268051 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.828479052 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.828577042 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.828591108 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.830888033 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.830895901 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.832789898 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.832851887 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.832865953 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.861406088 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.861494064 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.861504078 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.876748085 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.885437965 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.885487080 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.885528088 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.885567904 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.885605097 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.885663986 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.885674000 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.885863066 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.885896921 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.885927916 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.885941982 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.885953903 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.885967970 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.886658907 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.886694908 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.886722088 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.886743069 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.886785984 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.890013933 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.891413927 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.891624928 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.891660929 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.891686916 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.891705990 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.891776085 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.891782045 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.891830921 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.892472029 CEST49773443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.892504930 CEST44349773188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.896137953 CEST49779443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.896192074 CEST44349779188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.896311045 CEST49779443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.896598101 CEST49779443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.896624088 CEST44349779188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.899558067 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.899612904 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.899624109 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.899709940 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.899759054 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.899804115 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.899810076 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.899820089 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.899848938 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.899854898 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.899873972 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.899878979 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.899921894 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.899926901 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.899962902 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.899967909 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.900588989 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.900635958 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.900641918 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.900684118 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.901051998 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.901108027 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.901113987 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.901125908 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.901160955 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.901173115 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.901200056 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.901204109 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.901216030 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.901988983 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.902035952 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.902040958 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.902048111 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.902095079 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.902779102 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.902832031 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.902848959 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.902893066 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.902894974 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.902904987 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.902937889 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.903719902 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.903770924 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.903774977 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.903781891 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.903810978 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.903868914 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.903918982 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.904055119 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.904069901 CEST44349771188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.904081106 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.904123068 CEST49771443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.918195009 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.918292999 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.918334961 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.918338060 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.918353081 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.918401003 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.918407917 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.919116974 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.919174910 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.919181108 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.919399977 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.919437885 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.919445992 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.919452906 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.919507027 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.919555902 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.919563055 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.919601917 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.920273066 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.920387983 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.920432091 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.920440912 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.920450926 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.920501947 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.920509100 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.921360016 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.921400070 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.921432018 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.921442032 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.921480894 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.921487093 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.921538115 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.921698093 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.921705008 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.926565886 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.926692963 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.926744938 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.926762104 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.926879883 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.926923990 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.926933050 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.927022934 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.927105904 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.927149057 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.927156925 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.927294970 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.927339077 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.927345991 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.927393913 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.927431107 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.931087017 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.931137085 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.931143999 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.937047005 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.967432976 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:50.967448950 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.972173929 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.972239971 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.972271919 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.972318888 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.972352982 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.972397089 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.972539902 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.972629070 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.972764015 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.972898006 CEST49776443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:50.972917080 CEST44349776188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:50.984174013 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.008878946 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.008932114 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.008939981 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.008960962 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009020090 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009069920 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.009103060 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009124041 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009156942 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.009170055 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009197950 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.009341955 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009391069 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009392023 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.009423971 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009469986 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009473085 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.009490013 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009517908 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009521961 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.009545088 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.009562016 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.009586096 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.009953976 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.010004997 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.010040045 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.010059118 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.010078907 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.010082960 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.010134935 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.010153055 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.010164976 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.010215998 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.010230064 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.010257959 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.010284901 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.010319948 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.011251926 CEST49774443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.011269093 CEST44349774188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.012243032 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.012439013 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.012494087 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.012511015 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.012593985 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.012638092 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.012649059 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.012801886 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.012845039 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.016053915 CEST49777443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.016074896 CEST44349777188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.023106098 CEST49780443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.023150921 CEST44349780188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.023236036 CEST49780443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.023966074 CEST49780443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.023987055 CEST44349780188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.028753042 CEST49781443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.028796911 CEST44349781188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.028851032 CEST49781443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.030947924 CEST49781443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.030987024 CEST44349781188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.038000107 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.038058043 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.038093090 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.038126945 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.038130045 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.038152933 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.038192987 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.038260937 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.038289070 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.038307905 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.038320065 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.038382053 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.038412094 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.042818069 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.042864084 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.042871952 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.042886019 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.042956114 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.042965889 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.095164061 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.124689102 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.124768019 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.124821901 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.124856949 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.124878883 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.124890089 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.124902010 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.124954939 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.124974966 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.125310898 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.125348091 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.125356913 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.125369072 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.125426054 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.125463963 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.125483990 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.125535011 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.125765085 CEST49775443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.125792980 CEST44349775188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.138854980 CEST49784443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.138901949 CEST44349784188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.139039040 CEST49784443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.139377117 CEST49784443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.139389992 CEST44349784188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.269439936 CEST44349778188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.269696951 CEST49778443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.269721031 CEST44349778188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.271157980 CEST44349778188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.271234035 CEST49778443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.271687984 CEST49778443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.271720886 CEST49778443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.271770000 CEST44349778188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.271778107 CEST49778443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.271820068 CEST49778443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.272161007 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.272221088 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.272285938 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.272505999 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.272524118 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.354464054 CEST44349779188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.354727030 CEST49779443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.354767084 CEST44349779188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.355815887 CEST44349779188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.355880976 CEST49779443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.356401920 CEST49779443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.356436014 CEST49779443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.356483936 CEST44349779188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.356513977 CEST49779443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.356539011 CEST49779443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.356745958 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.356786966 CEST44349786188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.356848955 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.357095957 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.357112885 CEST44349786188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.483846903 CEST44349780188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.484234095 CEST49780443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.484303951 CEST44349780188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.485392094 CEST44349780188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.485470057 CEST49780443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.488806963 CEST44349781188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.497278929 CEST49781443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.497313976 CEST44349781188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.497919083 CEST49780443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.497941017 CEST49780443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.497992992 CEST49780443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.498034000 CEST44349780188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.498095036 CEST49780443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.498755932 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.498805046 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.498872042 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.499289989 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.499300957 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.501202106 CEST44349781188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.501275063 CEST49781443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.503623009 CEST49781443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.503813028 CEST49781443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.503863096 CEST49781443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.503954887 CEST44349781188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.504005909 CEST49781443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.504249096 CEST49788443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.504283905 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.504348040 CEST49788443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.504873037 CEST49788443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.504890919 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.594029903 CEST44349784188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.595674992 CEST49784443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.595705032 CEST44349784188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.596709967 CEST44349784188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.596782923 CEST49784443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.597712040 CEST49784443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.597727060 CEST49784443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.597769976 CEST44349784188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.597769976 CEST49784443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.597927094 CEST44349784188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.597973108 CEST49784443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.597987890 CEST49784443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.598114014 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.598217964 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.598301888 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.598670006 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.598706961 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.758480072 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.818039894 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.820960045 CEST44349786188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.866631985 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.956707954 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.960220098 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.965275049 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.965282917 CEST44349786188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.965409994 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.965420961 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.965512037 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.965519905 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.965622902 CEST49788443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.965631008 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.965976954 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.966495037 CEST44349786188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.966552973 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.966981888 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.967060089 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.967334032 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.967355013 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.967413902 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.968031883 CEST49788443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.968096972 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.968441010 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.968523026 CEST44349786188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.968952894 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.969155073 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.969284058 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.969362974 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.969875097 CEST49788443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:51.969914913 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.969923019 CEST44349786188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.969975948 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.969981909 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:51.970046043 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:51.970060110 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.015011072 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.015412092 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.018971920 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.018971920 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.051362991 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.082444906 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.082516909 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.082551956 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.082576036 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.082597971 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.082667112 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.082673073 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.083101988 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.083117008 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.084194899 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.084254026 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.084264994 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.084273100 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.084299088 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.084311962 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.084317923 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.084356070 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.085946083 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.086018085 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.086210012 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.086220026 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.087292910 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.087336063 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.087367058 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.087378025 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.087434053 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.090986013 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.091119051 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.091183901 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.091212034 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.091298103 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.091348886 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.091356039 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.091483116 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.091531992 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.091538906 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.091638088 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.091686964 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.091694117 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.095566034 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.095626116 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.095633030 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.095721960 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.095784903 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.095792055 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.141463995 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.141484976 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.169334888 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.169423103 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.169457912 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.169464111 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.169488907 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.169526100 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.169528008 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.169544935 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.169579029 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.169586897 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.169646025 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.169712067 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.169718981 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.170454025 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.170489073 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.170506001 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.170512915 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.170548916 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.170586109 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.170598030 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.170629978 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.171031952 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.171116114 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.171149015 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.171181917 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.171206951 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.171206951 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.171216011 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.171221018 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.171258926 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.171942949 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.172049046 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.172075033 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.172092915 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.172101021 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.172153950 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.182981014 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.183166027 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.183252096 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.183252096 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.183281898 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.183339119 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.183382034 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.183597088 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.183653116 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.193149090 CEST49785443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.193180084 CEST44349785188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.193386078 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.193437099 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.193475008 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.193491936 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.193511009 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.193521023 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.193553925 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.193792105 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.193850994 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.193902016 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.193918943 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.194067955 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.194459915 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.194513083 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.194598913 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.194611073 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.198240995 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.198318958 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.198329926 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.244049072 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.256127119 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.256258011 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.256305933 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.256309032 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.256335020 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.256395102 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.256409883 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.256416082 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.256453037 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.257035017 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.257087946 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.257138968 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.257188082 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.257194042 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.257951021 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.258004904 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.258004904 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.258021116 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.258048058 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.258064032 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.258105993 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.258115053 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.258207083 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.258898020 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.258961916 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.258971930 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.258979082 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.259012938 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.259728909 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.259784937 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.259790897 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.259838104 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.259881020 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.272726059 CEST49787443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.272747993 CEST44349787188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.279443979 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.279541969 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.279577017 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.279619932 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.279634953 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.279732943 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.279859066 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.279925108 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.279961109 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.279970884 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.280437946 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.280469894 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.280478001 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.280486107 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.280585051 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.280627966 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.280864000 CEST49789443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.280880928 CEST44349789188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.355865955 CEST44349786188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.355951071 CEST44349786188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.356004000 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.381853104 CEST49786443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.381881952 CEST44349786188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.390403032 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.390446901 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.390489101 CEST49788443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.390507936 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.390579939 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.390806913 CEST49791443192.168.2.418.245.60.68
                                                                                                                            Sep 28, 2024 04:37:52.390814066 CEST49788443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.390893936 CEST4434979118.245.60.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.390976906 CEST49791443192.168.2.418.245.60.68
                                                                                                                            Sep 28, 2024 04:37:52.392122030 CEST49791443192.168.2.418.245.60.68
                                                                                                                            Sep 28, 2024 04:37:52.392153025 CEST4434979118.245.60.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.393546104 CEST49788443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.393553972 CEST44349788188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.447433949 CEST49792443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.447496891 CEST44349792188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.447554111 CEST49792443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.447839022 CEST49792443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.447855949 CEST44349792188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.448200941 CEST49793443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.448247910 CEST44349793188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.448442936 CEST49793443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.448679924 CEST49793443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.448694944 CEST44349793188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.461286068 CEST49794443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.461333036 CEST44349794188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.461411953 CEST49794443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.461678028 CEST49794443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.461698055 CEST44349794188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.902024984 CEST44349792188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.902322054 CEST49792443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.902350903 CEST44349792188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.902755976 CEST44349793188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.903184891 CEST49793443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.903198957 CEST44349793188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.903414965 CEST44349792188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.903469086 CEST49792443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.904268026 CEST49792443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.904289961 CEST49792443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.904333115 CEST49792443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.904347897 CEST44349792188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.904386044 CEST49792443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.904675007 CEST44349793188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.904736042 CEST49793443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.905524969 CEST49795443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.905559063 CEST44349795188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.905611992 CEST49795443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.906248093 CEST49793443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.906266928 CEST49793443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.906301975 CEST49793443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.906332016 CEST44349793188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.906387091 CEST49793443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.906845093 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.906866074 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.906944990 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.907207966 CEST49795443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.907231092 CEST44349795188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.907568932 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:52.907584906 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.918834925 CEST44349794188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.919039011 CEST49794443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.919050932 CEST44349794188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.920075893 CEST44349794188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.920145035 CEST49794443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.920561075 CEST49794443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.920582056 CEST49794443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.920608044 CEST49794443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.920625925 CEST44349794188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.920674086 CEST49794443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.921374083 CEST49797443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.921394110 CEST44349797188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:52.921439886 CEST49797443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.921844959 CEST49797443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:52.921860933 CEST44349797188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.123333931 CEST4434979118.245.60.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.129561901 CEST49791443192.168.2.418.245.60.68
                                                                                                                            Sep 28, 2024 04:37:53.129599094 CEST4434979118.245.60.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.131032944 CEST4434979118.245.60.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.131092072 CEST49791443192.168.2.418.245.60.68
                                                                                                                            Sep 28, 2024 04:37:53.132848024 CEST49791443192.168.2.418.245.60.68
                                                                                                                            Sep 28, 2024 04:37:53.132932901 CEST4434979118.245.60.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.133246899 CEST49791443192.168.2.418.245.60.68
                                                                                                                            Sep 28, 2024 04:37:53.133255959 CEST4434979118.245.60.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.184241056 CEST49791443192.168.2.418.245.60.68
                                                                                                                            Sep 28, 2024 04:37:53.373756886 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.374397039 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.374412060 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.375901937 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.375962019 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.376415014 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.376452923 CEST44349797188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.376497030 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.376961946 CEST49797443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.376991987 CEST44349797188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.377178907 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.377191067 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.377337933 CEST44349797188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.377918959 CEST49797443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.378001928 CEST44349797188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.378245115 CEST49797443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.390614033 CEST44349795188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.391916037 CEST49795443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.391937971 CEST44349795188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.392949104 CEST44349795188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.393003941 CEST49795443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.393579006 CEST49795443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.393642902 CEST44349795188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.394016027 CEST49795443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.394027948 CEST44349795188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.419446945 CEST44349797188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.429395914 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.437257051 CEST49795443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.457674026 CEST49799443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.457717896 CEST44349799188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.457787991 CEST49799443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.458717108 CEST49799443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.458739042 CEST44349799188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.460827112 CEST49800443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.460869074 CEST44349800188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.460927010 CEST49800443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.461819887 CEST49800443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.461831093 CEST44349800188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.500519991 CEST4434979118.245.60.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.500787020 CEST4434979118.245.60.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.500839949 CEST49791443192.168.2.418.245.60.68
                                                                                                                            Sep 28, 2024 04:37:53.502346039 CEST49791443192.168.2.418.245.60.68
                                                                                                                            Sep 28, 2024 04:37:53.502381086 CEST4434979118.245.60.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.512820005 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:53.512837887 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.512913942 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:53.513102055 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:53.513115883 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.686146975 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.686283112 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.686381102 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.686433077 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.686453104 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.686496973 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.686502934 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.686609030 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.686656952 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.686664104 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.686748028 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.686791897 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.686799049 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.690684080 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.690773964 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.690831900 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.690845013 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.690896034 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.690907955 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.690980911 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.691029072 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.701838970 CEST44349797188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.701920033 CEST44349797188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.702037096 CEST49797443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.726463079 CEST49796443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.726480961 CEST44349796188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.727861881 CEST49797443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.727890968 CEST44349797188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.757327080 CEST49803443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.757366896 CEST44349803188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.757442951 CEST49803443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.758013964 CEST49803443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.758032084 CEST44349803188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.763154030 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.763199091 CEST44349804188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.763252974 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.763544083 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.763561010 CEST44349804188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.804666042 CEST44349795188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.804846048 CEST44349795188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.804955959 CEST49795443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.806422949 CEST49795443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.806442976 CEST44349795188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.837574959 CEST49805443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.837609053 CEST44349805188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.837672949 CEST49805443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.838068962 CEST49805443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:53.838080883 CEST44349805188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.914742947 CEST44349800188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.915347099 CEST49800443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.915363073 CEST44349800188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.916362047 CEST44349800188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.916419983 CEST49800443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.917118073 CEST49800443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.917130947 CEST49800443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.917174101 CEST49800443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.917180061 CEST44349800188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.917278051 CEST49800443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.917505980 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.917566061 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.917635918 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.917901993 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.917920113 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.921040058 CEST44349799188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.921283007 CEST49799443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.921313047 CEST44349799188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.922388077 CEST44349799188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.922457933 CEST49799443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.922949076 CEST49799443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.922990084 CEST49799443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.923033953 CEST44349799188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.923047066 CEST49799443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.923075914 CEST49799443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.923357964 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.923377037 CEST44349808188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:53.923589945 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.923764944 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:53.923772097 CEST44349808188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.249440908 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.257710934 CEST44349803188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.267992973 CEST44349804188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.299674988 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:54.299679995 CEST49803443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.314523935 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.342044115 CEST44349805188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.383059978 CEST49805443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.418699980 CEST44349808188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.427068949 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.459402084 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.467552900 CEST44349744216.58.206.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.467618942 CEST44349744216.58.206.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.467695951 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:54.482520103 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.666188002 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.666204929 CEST44349804188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.666361094 CEST49803443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.666378021 CEST44349803188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.666448116 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:54.666465998 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.666546106 CEST49805443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.666562080 CEST44349805188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.666635036 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.666650057 CEST44349808188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.666790009 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.666865110 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.667458057 CEST44349804188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.667526960 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.667767048 CEST44349805188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.667778969 CEST44349808188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.667881966 CEST49805443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.667885065 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.668044090 CEST44349803188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.668112040 CEST49803443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.670480013 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.670558929 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:54.670625925 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.670661926 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.670703888 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.682077885 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.682307005 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.683634996 CEST49803443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.683687925 CEST49803443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.683708906 CEST49803443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.683800936 CEST44349803188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.683867931 CEST49803443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.684021950 CEST49810443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.684052944 CEST44349810188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.684133053 CEST49810443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.684669018 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:54.684906006 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.685729980 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.685801029 CEST44349808188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.686600924 CEST49805443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.686616898 CEST49805443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.686650991 CEST49805443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.686685085 CEST44349805188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.686755896 CEST49805443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.686877012 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.686914921 CEST44349811188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.686988115 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.687999964 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.688028097 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.688095093 CEST44349804188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.688297987 CEST44349804188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.688335896 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.688349009 CEST44349804188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.688361883 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.688390017 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.688390017 CEST49804443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.690217972 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.690242052 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.690367937 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.690625906 CEST49810443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.690639019 CEST44349810188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.691355944 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.691395998 CEST44349811188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.691662073 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.691706896 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.691948891 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:54.691965103 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.692123890 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:54.692131996 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.693253994 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.693259954 CEST44349808188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:54.734092951 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:54.734108925 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:54.734117985 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:55.068226099 CEST44349808188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.068286896 CEST44349808188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.068389893 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:55.069634914 CEST49808443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:55.069645882 CEST44349808188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.073236942 CEST49744443192.168.2.4216.58.206.68
                                                                                                                            Sep 28, 2024 04:37:55.073261023 CEST44349744216.58.206.68192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.073538065 CEST49813443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.073570013 CEST44349813188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.073628902 CEST49813443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.073875904 CEST49813443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.073889017 CEST44349813188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.096649885 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.096898079 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.097038984 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:55.097367048 CEST49807443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:55.097382069 CEST44349807188.114.96.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.101017952 CEST49814443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.101033926 CEST44349814188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.101109028 CEST49814443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.101427078 CEST49814443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.101438999 CEST44349814188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.137121916 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.137152910 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.137176037 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.137186050 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.137197971 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.137207985 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.137212038 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.137229919 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.137262106 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.137285948 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.137285948 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.137314081 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.148231030 CEST44349811188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.148458004 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.148484945 CEST44349811188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.149789095 CEST44349811188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.149847984 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.150175095 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.150238037 CEST44349811188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.150331974 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.150341034 CEST44349811188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.152296066 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.152493000 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.152503967 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.153516054 CEST44349810188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.153733015 CEST49810443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.153745890 CEST44349810188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.153976917 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.154046059 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.154401064 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.154479980 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.154522896 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.154769897 CEST44349810188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.154834032 CEST49810443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.155144930 CEST49810443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.155208111 CEST44349810188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.155642986 CEST49810443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.155651093 CEST44349810188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.195446014 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.201092005 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.201107979 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.201117039 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.201138020 CEST49810443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.246942997 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.316021919 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.316081047 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.316121101 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.316123962 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.316138029 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.316178083 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.316188097 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.316229105 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.316268921 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.316276073 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.316615105 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.316653967 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.316662073 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.316668034 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.316703081 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.316709042 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.320708990 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.320769072 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.320770025 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.320810080 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.321213961 CEST49812443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.321224928 CEST44349812188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.380810976 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.380834103 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.380875111 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.380892038 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.380937099 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.380944967 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.380985022 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.395653009 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.395715952 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.395719051 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.395742893 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.395771980 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.395791054 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.395827055 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.437072039 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.437089920 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.462618113 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.462660074 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.462677002 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.462696075 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.462709904 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.462724924 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.462735891 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.471168995 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.471218109 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.471230984 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.471246958 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.471259117 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.471288919 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.479804039 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.479845047 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.479868889 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.479881048 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.479913950 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.531325102 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.531342030 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.537530899 CEST44349813188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.537780046 CEST49813443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.537789106 CEST44349813188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.538805962 CEST44349811188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.538837910 CEST44349813188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.538868904 CEST44349811188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.538887978 CEST49813443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.538929939 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.539628983 CEST49813443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.539653063 CEST49813443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.539680958 CEST44349813188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.539701939 CEST49813443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.539727926 CEST49813443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.540036917 CEST49816443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.540054083 CEST44349816188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.540159941 CEST49816443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.540400982 CEST49816443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.540407896 CEST44349816188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.540461063 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.540465117 CEST44349811188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.540473938 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.540503025 CEST49811443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.542129993 CEST49817443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.542143106 CEST4434981718.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.542207003 CEST49817443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.542418003 CEST49817443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.542426109 CEST4434981718.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.547400951 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.547429085 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.547439098 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.547449112 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.547472954 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.547487020 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.547529936 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.548839092 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.548856974 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.548882961 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.548908949 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.548918009 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.548943996 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.551974058 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.551997900 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.552028894 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.552036047 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.552068949 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.558075905 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.558115959 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.558136940 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.558146000 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.558185101 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.559335947 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.559401989 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.559412003 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.559436083 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.559468031 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.566592932 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.566641092 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.566658020 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.566669941 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.566694021 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.571765900 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.571805000 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.571856976 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.571866989 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.571899891 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.588126898 CEST44349814188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.588447094 CEST49814443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.588457108 CEST44349814188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.589860916 CEST44349814188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.589929104 CEST49814443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.590898991 CEST49814443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.590926886 CEST49814443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.590979099 CEST44349814188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.591065884 CEST49814443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.591074944 CEST44349814188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.591165066 CEST49814443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.591877937 CEST49818443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.591897011 CEST44349818188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.591957092 CEST49818443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.592153072 CEST44349810188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.592206001 CEST44349810188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.592596054 CEST49810443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.593812943 CEST49810443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.593821049 CEST44349810188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.595366001 CEST49818443192.168.2.4188.114.97.3
                                                                                                                            Sep 28, 2024 04:37:55.595376015 CEST44349818188.114.97.3192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.625560999 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.634505033 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.634514093 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.634531021 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.634582996 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.634598970 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.634637117 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.634990931 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.635010958 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.635067940 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.635077000 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.635117054 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.635309935 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.635329962 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.635392904 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.635400057 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.635421038 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.635442019 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.638902903 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.638922930 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.639003992 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.639012098 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.639060020 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.644877911 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.644896984 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.644934893 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.644944906 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.644982100 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.644996881 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.645001888 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.646157980 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.646181107 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.646210909 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.646215916 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.646266937 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.653712988 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.653750896 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.653794050 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.653805971 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.653831959 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.660592079 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.660639048 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.660674095 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.660685062 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.660708904 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.703811884 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.703828096 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.721554041 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.721594095 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.721616030 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.721635103 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.721659899 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.721841097 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.721899986 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.721904993 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.721931934 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.721963882 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.723222971 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.723287106 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.723295927 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.723314047 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.723365068 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.723371983 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.725964069 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.726010084 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.726030111 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.726037979 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.726073980 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.731758118 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.731777906 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.731817007 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.731826067 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.731854916 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.733091116 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.733117104 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.733156919 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.733169079 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.733192921 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.740448952 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.740467072 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.740520000 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.740530014 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.740560055 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.747390032 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.747414112 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.747457981 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.747467995 CEST4434980118.245.60.7192.168.2.4
                                                                                                                            Sep 28, 2024 04:37:55.747493029 CEST49801443192.168.2.418.245.60.7
                                                                                                                            Sep 28, 2024 04:37:55.788393021 CEST49819443192.168.2.4188.114.96.3
                                                                                                                            Sep 28, 2024 04:37:55.788431883 CEST44349819188.114.96.3192.168.2.4

                                                                                                                            DNS Queries

                                                                                                                            TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                                                                                            Sep 28, 2024 04:37:41.339359999 CEST192.168.2.41.1.1.10x4c69Standard query (0)ramadawynd.comA (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:41.339651108 CEST192.168.2.41.1.1.10x3656Standard query (0)ramadawynd.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:43.912878036 CEST192.168.2.41.1.1.10x774aStandard query (0)www.google.comA (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:43.913578987 CEST192.168.2.41.1.1.10x9693Standard query (0)www.google.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.881769896 CEST192.168.2.41.1.1.10x5e9dStandard query (0)q-xx.bstatic.comA (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.882067919 CEST192.168.2.41.1.1.10x7a07Standard query (0)q-xx.bstatic.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.415095091 CEST192.168.2.41.1.1.10x4fc8Standard query (0)q-xx.bstatic.comA (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.415468931 CEST192.168.2.41.1.1.10x3297Standard query (0)q-xx.bstatic.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:48.151297092 CEST192.168.2.41.1.1.10x7580Standard query (0)ramadawynd.comA (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:48.151465893 CEST192.168.2.41.1.1.10xca32Standard query (0)ramadawynd.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:49.496176004 CEST192.168.2.41.1.1.10x8c2fStandard query (0)cdnjs.cloudflare.comA (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:49.496335030 CEST192.168.2.41.1.1.10x935cStandard query (0)cdnjs.cloudflare.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:52.382616997 CEST192.168.2.41.1.1.10xed44Standard query (0)booking.comA (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:52.382802963 CEST192.168.2.41.1.1.10xd1fdStandard query (0)booking.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:53.505378008 CEST192.168.2.41.1.1.10xab8aStandard query (0)www.booking.comA (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:53.505536079 CEST192.168.2.41.1.1.10xa3f5Standard query (0)www.booking.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:06.153714895 CEST192.168.2.41.1.1.10x2a0eStandard query (0)nellie.booking.comA (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:06.153835058 CEST192.168.2.41.1.1.10xe954Standard query (0)nellie.booking.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:53.755870104 CEST192.168.2.41.1.1.10xa0c1Standard query (0)www.booking.comA (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:53.756038904 CEST192.168.2.41.1.1.10x4dc3Standard query (0)www.booking.com65IN (0x0001)false

                                                                                                                            DNS Answers

                                                                                                                            TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                                                                                            Sep 28, 2024 04:37:41.382247925 CEST1.1.1.1192.168.2.40x3656No error (0)ramadawynd.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:41.505503893 CEST1.1.1.1192.168.2.40x4c69No error (0)ramadawynd.com188.114.96.3A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:41.505503893 CEST1.1.1.1192.168.2.40x4c69No error (0)ramadawynd.com188.114.97.3A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:43.919568062 CEST1.1.1.1192.168.2.40x774aNo error (0)www.google.com216.58.206.68A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:43.920027018 CEST1.1.1.1192.168.2.40x9693No error (0)www.google.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.888925076 CEST1.1.1.1192.168.2.40x5e9dNo error (0)q-xx.bstatic.comxx.bstatic.comCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.888925076 CEST1.1.1.1192.168.2.40x5e9dNo error (0)xx.bstatic.comcf.bstatic.comCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.888925076 CEST1.1.1.1192.168.2.40x5e9dNo error (0)cf.bstatic.comd2i5gg36g14bzn.cloudfront.netCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.888925076 CEST1.1.1.1192.168.2.40x5e9dNo error (0)d2i5gg36g14bzn.cloudfront.net18.245.31.18A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.888925076 CEST1.1.1.1192.168.2.40x5e9dNo error (0)d2i5gg36g14bzn.cloudfront.net18.245.31.129A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.888925076 CEST1.1.1.1192.168.2.40x5e9dNo error (0)d2i5gg36g14bzn.cloudfront.net18.245.31.49A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.888925076 CEST1.1.1.1192.168.2.40x5e9dNo error (0)d2i5gg36g14bzn.cloudfront.net18.245.31.53A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.888962030 CEST1.1.1.1192.168.2.40x7a07No error (0)q-xx.bstatic.comxx.bstatic.comCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.888962030 CEST1.1.1.1192.168.2.40x7a07No error (0)xx.bstatic.comcf.bstatic.comCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:44.888962030 CEST1.1.1.1192.168.2.40x7a07No error (0)cf.bstatic.comd2i5gg36g14bzn.cloudfront.netCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.424098969 CEST1.1.1.1192.168.2.40x3297No error (0)q-xx.bstatic.comxx.bstatic.comCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.424098969 CEST1.1.1.1192.168.2.40x3297No error (0)xx.bstatic.comcf.bstatic.comCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.424098969 CEST1.1.1.1192.168.2.40x3297No error (0)cf.bstatic.comd2i5gg36g14bzn.cloudfront.netCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.443924904 CEST1.1.1.1192.168.2.40x4fc8No error (0)q-xx.bstatic.comxx.bstatic.comCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.443924904 CEST1.1.1.1192.168.2.40x4fc8No error (0)xx.bstatic.comcf.bstatic.comCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.443924904 CEST1.1.1.1192.168.2.40x4fc8No error (0)cf.bstatic.comd2i5gg36g14bzn.cloudfront.netCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.443924904 CEST1.1.1.1192.168.2.40x4fc8No error (0)d2i5gg36g14bzn.cloudfront.net18.245.31.49A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.443924904 CEST1.1.1.1192.168.2.40x4fc8No error (0)d2i5gg36g14bzn.cloudfront.net18.245.31.18A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.443924904 CEST1.1.1.1192.168.2.40x4fc8No error (0)d2i5gg36g14bzn.cloudfront.net18.245.31.53A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:46.443924904 CEST1.1.1.1192.168.2.40x4fc8No error (0)d2i5gg36g14bzn.cloudfront.net18.245.31.129A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:48.206696033 CEST1.1.1.1192.168.2.40xca32No error (0)ramadawynd.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:48.339334011 CEST1.1.1.1192.168.2.40x7580No error (0)ramadawynd.com188.114.97.3A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:48.339334011 CEST1.1.1.1192.168.2.40x7580No error (0)ramadawynd.com188.114.96.3A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:49.503042936 CEST1.1.1.1192.168.2.40x8c2fNo error (0)cdnjs.cloudflare.com104.17.25.14A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:49.503042936 CEST1.1.1.1192.168.2.40x8c2fNo error (0)cdnjs.cloudflare.com104.17.24.14A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:49.503213882 CEST1.1.1.1192.168.2.40x935cNo error (0)cdnjs.cloudflare.com65IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:52.389391899 CEST1.1.1.1192.168.2.40xed44No error (0)booking.com18.245.60.68A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:52.389391899 CEST1.1.1.1192.168.2.40xed44No error (0)booking.com18.245.60.2A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:52.389391899 CEST1.1.1.1192.168.2.40xed44No error (0)booking.com18.245.60.7A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:52.389391899 CEST1.1.1.1192.168.2.40xed44No error (0)booking.com18.245.60.76A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:53.064038038 CEST1.1.1.1192.168.2.40x478bNo error (0)bg.microsoft.map.fastly.net199.232.210.172A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:53.064038038 CEST1.1.1.1192.168.2.40x478bNo error (0)bg.microsoft.map.fastly.net199.232.214.172A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:53.512020111 CEST1.1.1.1192.168.2.40xab8aNo error (0)www.booking.comd1of1hbywxxm65.cloudfront.netCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:53.512020111 CEST1.1.1.1192.168.2.40xab8aNo error (0)d1of1hbywxxm65.cloudfront.net18.245.60.7A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:53.512020111 CEST1.1.1.1192.168.2.40xab8aNo error (0)d1of1hbywxxm65.cloudfront.net18.245.60.2A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:53.512020111 CEST1.1.1.1192.168.2.40xab8aNo error (0)d1of1hbywxxm65.cloudfront.net18.245.60.76A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:53.512020111 CEST1.1.1.1192.168.2.40xab8aNo error (0)d1of1hbywxxm65.cloudfront.net18.245.60.68A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:53.512442112 CEST1.1.1.1192.168.2.40xa3f5No error (0)www.booking.comd1of1hbywxxm65.cloudfront.netCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:55.457161903 CEST1.1.1.1192.168.2.40x6d5fNo error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:37:55.457161903 CEST1.1.1.1192.168.2.40x6d5fNo error (0)fp2e7a.wpc.phicdn.net192.229.221.95A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:06.182811975 CEST1.1.1.1192.168.2.40xe954No error (0)nellie.booking.combksweb-external-w.booking.comCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:06.182811975 CEST1.1.1.1192.168.2.40xe954No error (0)bksweb-external-w.booking.comde2trjlt8e8rj.cloudfront.netCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:06.183752060 CEST1.1.1.1192.168.2.40x2a0eNo error (0)nellie.booking.combksweb-external-w.booking.comCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:06.183752060 CEST1.1.1.1192.168.2.40x2a0eNo error (0)bksweb-external-w.booking.comde2trjlt8e8rj.cloudfront.netCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:06.183752060 CEST1.1.1.1192.168.2.40x2a0eNo error (0)de2trjlt8e8rj.cloudfront.net52.222.236.42A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:06.183752060 CEST1.1.1.1192.168.2.40x2a0eNo error (0)de2trjlt8e8rj.cloudfront.net52.222.236.82A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:06.183752060 CEST1.1.1.1192.168.2.40x2a0eNo error (0)de2trjlt8e8rj.cloudfront.net52.222.236.65A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:06.183752060 CEST1.1.1.1192.168.2.40x2a0eNo error (0)de2trjlt8e8rj.cloudfront.net52.222.236.77A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:53.762553930 CEST1.1.1.1192.168.2.40xa0c1No error (0)www.booking.comd1of1hbywxxm65.cloudfront.netCNAME (Canonical name)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:53.762553930 CEST1.1.1.1192.168.2.40xa0c1No error (0)d1of1hbywxxm65.cloudfront.net18.245.60.2A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:53.762553930 CEST1.1.1.1192.168.2.40xa0c1No error (0)d1of1hbywxxm65.cloudfront.net18.245.60.7A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:53.762553930 CEST1.1.1.1192.168.2.40xa0c1No error (0)d1of1hbywxxm65.cloudfront.net18.245.60.76A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:53.762553930 CEST1.1.1.1192.168.2.40xa0c1No error (0)d1of1hbywxxm65.cloudfront.net18.245.60.68A (IP address)IN (0x0001)false
                                                                                                                            Sep 28, 2024 04:38:53.763086081 CEST1.1.1.1192.168.2.40x4dc3No error (0)www.booking.comd1of1hbywxxm65.cloudfront.netCNAME (Canonical name)IN (0x0001)false

                                                                                                                            HTTPS Proxied Packets

                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            0192.168.2.449737188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:42 UTC662OUTGET /wakdl HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Upgrade-Insecure-Requests: 1
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: navigate
                                                                                                                            Sec-Fetch-User: ?1
                                                                                                                            Sec-Fetch-Dest: document
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            2024-09-28 02:37:43 UTC778INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:43 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Set-Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l; path=/
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Vary: Accept-Encoding
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=onNhpHdNSz%2BwYKDkALh4vRmvKMAaF8hKMbHz6OyRXm%2FqBFtcjTbAYmBdPsPkNRirEOsmHfngyX5frochX5TchQ9DTKdgt9tspDBviHZYRXzSGv6EmJN1cpgz04Fp8NPuHg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a65ad5a43f4-EWR
                                                                                                                            2024-09-28 02:37:43 UTC591INData Raw: 37 63 39 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 63 6f 6d 70 61 6e 79 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 42 6f 6f 6b 69 6e 67 3a 20 52 61 6d 61 64 61 20 62 79 20 57 79 6e 64 68 61 6d 20 53 75 6e 6e 79 76 61 6c 65 2f 53 69 6c 69 63 6f 6e 20 56 61 6c 6c 65 79 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 71 2d 78 78 2e 62 73 74 61 74 69 63
                                                                                                                            Data Ascii: 7c93<!DOCTYPE html><html lang="en"><head> <meta property="og:type" content="company"/> <meta property="og:title" content="Booking: Ramada by Wyndham Sunnyvale/Silicon Valley"/> <meta property="og:image" content="https://q-xx.bstatic
                                                                                                                            2024-09-28 02:37:43 UTC1369INData Raw: 3d 22 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 0d 0a 20 20
                                                                                                                            Data Ascii: ="Booking.com"/> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title> Booking.com | Official site | The best hotels & accommodation
                                                                                                                            2024-09-28 02:37:43 UTC1369INData Raw: 20 20 20 20 20 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 33 38 30 70 78 3b 20 68 65 69 67 68 74 3a 20 36 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 22 3e 3c 2f 69 66 72 61 6d 65 3e 0d 20 20 20 20 3c 2f 64 69 76 3e 0d 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 62 6f 64 79 20 64 61 74 61 2d 62 75 69 2d 74 68 65 6d 65 3d 22 74 72 61 76 65 6c 6c 65 72 2d 6c 69 67 68 74 22 20 69 64 3d 22 62 32 62 6f 6f 6b 50 61 67 65 22 0d 0a 20 20 20 20 20 20 63 6c 61 73 73 3d 22 62 6f 6f 6b 69 6e 67 73 32 20 62 32 20 62 6f 6f 6b 20 65 6e 20 6c 61 6e 67 5f 69 73 5f 6c 74 72 20 68 65 61 64 65 72 5f 72 65 73 68 75 66 66 6c 65 20 75 73 65 72 5f 63 65 6e 74 65 72 20
                                                                                                                            Data Ascii: style="width: 380px; height: 600px; position: absolute;border-radius: 0px !important;"></iframe> </div></div><body data-bui-theme="traveller-light" id="b2bookPage" class="bookings2 b2 book en lang_is_ltr header_reshuffle user_center
                                                                                                                            2024-09-28 02:37:43 UTC1369INData Raw: 30 34 37 20 33 2e 37 38 39 33 31 43 37 30 2e 36 36 38 33 20 33 2e 34 35 36 33 37 20 37 30 2e 35 39 38 37 20 33 2e 30 39 39 38 32 20 37 30 2e 36 20 32 2e 37 33 39 39 39 56 32 2e 37 33 39 39 39 5a 4d 31 31 36 2e 35 20 32 33 2e 37 37 43 31 31 37 2e 30 34 34 20 32 33 2e 37 37 32 20 31 31 37 2e 35 37 37 20 32 33 2e 36 31 32 34 20 31 31 38 2e 30 33 31 20 32 33 2e 33 31 31 34 43 31 31 38 2e 34 38 34 20 32 33 2e 30 31 30 34 20 31 31 38 2e 38 33 38 20 32 32 2e 35 38 31 36 20 31 31 39 2e 30 34 38 20 32 32 2e 30 37 39 33 43 31 31 39 2e 32 35 37 20 32 31 2e 35 37 37 20 31 31 39 2e 33 31 33 20 32 31 2e 30 32 33 38 20 31 31 39 2e 32 30 38 20 32 30 2e 34 38 39 37 43 31 31 39 2e 31 30 33 20 31 39 2e 39 35 35 35 20 31 31 38 2e 38 34 32 20 31 39 2e 34 36 34 36 20 31 31 38
                                                                                                                            Data Ascii: 047 3.78931C70.6683 3.45637 70.5987 3.09982 70.6 2.73999V2.73999ZM116.5 23.77C117.044 23.772 117.577 23.6124 118.031 23.3114C118.484 23.0104 118.838 22.5816 119.048 22.0793C119.257 21.577 119.313 21.0238 119.208 20.4897C119.103 19.9555 118.842 19.4646 118
                                                                                                                            2024-09-28 02:37:43 UTC1369INData Raw: 34 2e 32 30 37 38 20 36 35 2e 31 34 32 33 20 31 33 2e 39 31 37 20 36 35 2e 33 35 20 31 33 2e 36 31 4c 36 39 2e 37 34 20 37 2e 30 35 39 39 39 48 36 34 2e 34 31 4c 36 31 2e 31 20 31 32 2e 31 39 43 36 30 2e 39 35 38 36 20 31 32 2e 33 34 34 32 20 36 30 2e 37 38 32 20 31 32 2e 34 36 32 31 20 36 30 2e 35 38 35 32 20 31 32 2e 35 33 33 34 43 36 30 2e 33 38 38 35 20 31 32 2e 36 30 34 38 20 36 30 2e 31 37 37 34 20 31 32 2e 36 32 37 37 20 35 39 2e 39 37 20 31 32 2e 36 48 35 39 2e 32 32 56 32 2e 39 30 39 39 39 43 35 39 2e 32 32 20 30 2e 39 37 39 39 39 33 20 35 38 2e 30 31 20 30 2e 37 30 39 39 39 33 20 35 36 2e 37 31 20 30 2e 37 30 39 39 39 33 48 35 34 2e 34 38 56 32 33 2e 35 38 48 35 39 2e 32 31 56 31 36 2e 37 32 48 35 39 2e 36 35 43 36 30 2e 31 39 20 31 36 2e 37 32
                                                                                                                            Data Ascii: 4.2078 65.1423 13.917 65.35 13.61L69.74 7.05999H64.41L61.1 12.19C60.9586 12.3442 60.782 12.4621 60.5852 12.5334C60.3885 12.6048 60.1774 12.6277 59.97 12.6H59.22V2.90999C59.22 0.979993 58.01 0.709993 56.71 0.709993H54.48V23.58H59.21V16.72H59.65C60.19 16.72
                                                                                                                            2024-09-28 02:37:43 UTC1369INData Raw: 20 33 39 2e 34 33 34 36 20 38 2e 32 31 34 34 37 43 33 38 2e 30 34 30 35 20 39 2e 31 36 34 36 39 20 33 36 2e 39 35 38 36 20 31 30 2e 35 30 36 31 20 33 36 2e 33 32 35 33 20 31 32 2e 30 36 39 39 43 33 35 2e 36 39 31 39 20 31 33 2e 36 33 33 37 20 33 35 2e 35 33 35 34 20 31 35 2e 33 34 39 39 20 33 35 2e 38 37 35 34 20 31 37 2e 30 30 32 35 43 33 36 2e 32 31 35 34 20 31 38 2e 36 35 35 31 20 33 37 2e 30 33 36 37 20 32 30 2e 31 37 30 31 20 33 38 2e 32 33 36 20 32 31 2e 33 35 36 39 43 33 39 2e 34 33 35 32 20 32 32 2e 35 34 33 36 20 34 30 2e 39 35 38 38 20 32 33 2e 33 34 39 20 34 32 2e 36 31 34 38 20 32 33 2e 36 37 31 37 43 34 34 2e 32 37 30 38 20 32 33 2e 39 39 34 34 20 34 35 2e 39 38 35 33 20 32 33 2e 38 31 39 39 20 34 37 2e 35 34 32 34 20 32 33 2e 31 37 30 32 43
                                                                                                                            Data Ascii: 39.4346 8.21447C38.0405 9.16469 36.9586 10.5061 36.3253 12.0699C35.6919 13.6337 35.5354 15.3499 35.8754 17.0025C36.2154 18.6551 37.0367 20.1701 38.236 21.3569C39.4352 22.5436 40.9588 23.349 42.6148 23.6717C44.2708 23.9944 45.9853 23.8199 47.5424 23.1702C
                                                                                                                            2024-09-28 02:37:43 UTC1369INData Raw: 31 30 2e 37 33 43 31 34 37 2e 32 35 20 31 30 2e 37 33 20 31 34 38 2e 38 39 20 31 32 2e 36 20 31 34 38 2e 38 39 20 31 35 2e 32 38 43 31 34 38 2e 38 39 20 31 37 2e 39 36 20 31 34 37 2e 33 20 31 39 2e 38 33 20 31 34 34 2e 38 39 20 31 39 2e 38 33 5a 4d 31 30 39 2e 37 34 20 37 2e 30 31 39 39 39 43 31 30 39 2e 33 35 36 20 36 2e 39 38 32 38 35 20 31 30 38 2e 39 37 20 37 2e 30 35 37 34 39 20 31 30 38 2e 36 32 37 20 37 2e 32 33 34 39 31 43 31 30 38 2e 32 38 35 20 37 2e 34 31 32 33 33 20 31 30 38 2e 30 30 31 20 37 2e 36 38 34 39 37 20 31 30 37 2e 38 31 20 38 2e 30 31 39 39 39 4c 31 30 37 2e 36 39 20 38 2e 32 36 39 39 39 4c 31 30 37 2e 34 37 20 38 2e 30 37 39 39 39 43 31 30 36 2e 32 35 33 20 37 2e 30 38 33 34 34 20 31 30 34 2e 37 31 31 20 36 2e 35 37 30 37 32 20 31
                                                                                                                            Data Ascii: 10.73C147.25 10.73 148.89 12.6 148.89 15.28C148.89 17.96 147.3 19.83 144.89 19.83ZM109.74 7.01999C109.356 6.98285 108.97 7.05749 108.627 7.23491C108.285 7.41233 108.001 7.68497 107.81 8.01999L107.69 8.26999L107.47 8.07999C106.253 7.08344 104.711 6.57072 1
                                                                                                                            2024-09-28 02:37:43 UTC1369INData Raw: 31 2e 38 35 56 31 31 2e 38 35 5a 4d 34 2e 33 37 20 36 2e 30 37 39 39 39 43 34 2e 33 37 20 35 2e 30 31 39 39 39 20 34 2e 38 32 20 34 2e 35 31 39 39 39 20 35 2e 38 20 34 2e 34 35 39 39 39 48 37 2e 38 43 38 2e 31 36 30 39 33 20 34 2e 34 32 37 36 31 20 38 2e 35 32 34 35 36 20 34 2e 34 37 35 30 34 20 38 2e 38 36 35 31 20 34 2e 35 39 38 39 32 43 39 2e 32 30 35 36 35 20 34 2e 37 32 32 38 20 39 2e 35 31 34 37 36 20 34 2e 39 32 30 31 20 39 2e 37 37 30 35 32 20 35 2e 31 37 36 38 31 43 31 30 2e 30 32 36 33 20 35 2e 34 33 33 35 33 20 31 30 2e 32 32 32 34 20 35 2e 37 34 33 33 38 20 31 30 2e 33 34 35 20 36 2e 30 38 34 33 38 43 31 30 2e 34 36 37 36 20 36 2e 34 32 35 33 38 20 31 30 2e 35 31 33 37 20 36 2e 37 38 39 31 39 20 31 30 2e 34 38 20 37 2e 31 34 39 39 39 43 31 30
                                                                                                                            Data Ascii: 1.85V11.85ZM4.37 6.07999C4.37 5.01999 4.82 4.51999 5.8 4.45999H7.8C8.16093 4.42761 8.52456 4.47504 8.8651 4.59892C9.20565 4.7228 9.51476 4.9201 9.77052 5.17681C10.0263 5.43353 10.2224 5.74338 10.345 6.08438C10.4676 6.42538 10.5137 6.78919 10.48 7.14999C10
                                                                                                                            2024-09-28 02:37:43 UTC1369INData Raw: 37 31 2e 36 35 20 31 30 2e 39 32 20 31 37 33 2e 35 36 20 31 30 2e 39 32 43 31 37 34 2e 39 34 20 31 30 2e 39 32 20 31 37 35 2e 34 35 20 31 31 2e 37 20 31 37 35 2e 34 35 20 31 33 2e 38 31 56 32 31 2e 31 37 43 31 37 35 2e 34 35 20 32 32 2e 38 33 20 31 37 36 2e 31 39 20 32 33 2e 35 37 20 31 37 37 2e 38 35 20 32 33 2e 35 37 48 31 38 30 56 31 33 2e 30 37 43 31 38 30 20 38 2e 38 36 39 39 39 20 31 37 38 2e 31 35 20 36 2e 37 33 39 39 39 20 31 37 34 2e 35 33 20 36 2e 37 33 39 39 39 5a 4d 31 33 33 2e 36 39 20 31 37 2e 38 36 43 31 33 32 2e 35 31 20 31 39 2e 30 39 35 20 31 33 30 2e 39 31 33 20 31 39 2e 38 34 37 31 20 31 32 39 2e 32 31 20 31 39 2e 39 37 43 31 32 38 2e 35 39 33 20 32 30 2e 30 30 37 33 20 31 32 37 2e 39 37 34 20 31 39 2e 39 31 34 20 31 32 37 2e 33 39 35
                                                                                                                            Data Ascii: 71.65 10.92 173.56 10.92C174.94 10.92 175.45 11.7 175.45 13.81V21.17C175.45 22.83 176.19 23.57 177.85 23.57H180V13.07C180 8.86999 178.15 6.73999 174.53 6.73999ZM133.69 17.86C132.51 19.095 130.913 19.8471 129.21 19.97C128.593 20.0073 127.974 19.914 127.395
                                                                                                                            2024-09-28 02:37:43 UTC1369INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 65 70 5f 5f 69 6d 67 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 38 20 31 32 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 35 36 2e 33 33 20 31 30 32 61 36 20 36 20 30 20 30 20 31 2d 34 2e 32 34 2d 31 2e 37 35 4c 31 39 2e 32 37 20 36 37 2e 35 34 41 36 2e 30 31 34 20 36 2e 30 31 34 20
                                                                                                                            Data Ascii: <span class="step__img"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128"> <path d="M56.33 102a6 6 0 0 1-4.24-1.75L19.27 67.54A6.014 6.014


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            1192.168.2.449743188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:44 UTC606OUTGET /css/booking1/styles-new4.css HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: text/css,*/*;q=0.1
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: style
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:44 UTC650INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:44 GMT
                                                                                                                            Content-Type: text/css
                                                                                                                            Content-Length: 35287
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:25 GMT
                                                                                                                            ETag: "66f56ed5-89d7"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JyukQeKt6qBpTFsSjvY%2Bw7O2ICyy7LIugNRi4g5zTH8P%2Fa9eAfvtTmWjrRdA1IQyOQcgyQs1fh4sHOsHjxLvWcdGz5zN6Dcok6AC02DN7I%2BY3lpeSBwQqQrCdISv1yU3JQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a704b188c36-EWR
                                                                                                                            2024-09-28 02:37:44 UTC719INData Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 37 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0d 0a 0d 0a 2f 2a 20 44 6f 63 75 6d 65 6e 74 0d 0a 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 2a 20 31 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 6c 69 6e 65 20 68 65 69 67 68 74 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0d 0a 20 2a 20 32 2e 20 50 72 65 76 65 6e 74 20 61 64 6a 75 73 74 6d 65 6e 74 73
                                                                                                                            Data Ascii: /*! normalize.css v7.0.0 | MIT License | github.com/necolas/normalize.css *//* Document ========================================================================== *//** * 1. Correct the line height in all browsers. * 2. Prevent adjustments
                                                                                                                            2024-09-28 02:37:44 UTC1369INData Raw: 61 72 74 69 63 6c 65 2c 0d 0a 61 73 69 64 65 2c 0d 0a 66 6f 6f 74 65 72 2c 0d 0a 68 65 61 64 65 72 2c 0d 0a 6e 61 76 2c 0d 0a 73 65 63 74 69 6f 6e 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 20 20 2a 20 43 6f 72 72 65 63 74 20 74 68 65 20 66 6f 6e 74 20 73 69 7a 65 20 61 6e 64 20 6d 61 72 67 69 6e 20 6f 6e 20 60 68 31 60 20 65 6c 65 6d 65 6e 74 73 20 77 69 74 68 69 6e 20 60 73 65 63 74 69 6f 6e 60 20 61 6e 64 0d 0a 20 20 20 2a 20 60 61 72 74 69 63 6c 65 60 20 63 6f 6e 74 65 78 74 73 20 69 6e 20 43 68 72 6f 6d 65 2c 20 46 69 72 65 66 6f 78 2c 20 61 6e 64 20 53 61 66 61 72 69 2e 0d 0a 20 20 20 2a 2f 0d 0a 0d 0a 68 31 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0d 0a 20 20 6d 61 72
                                                                                                                            Data Ascii: article,aside,footer,header,nav,section { display: block;}/** * Correct the font size and margin on `h1` elements within `section` and * `article` contexts in Chrome, Firefox, and Safari. */h1 { font-size: 2em; mar
                                                                                                                            2024-09-28 02:37:44 UTC1369INData Raw: 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 3a 20 6f 62 6a 65 63 74 73 3b 20 2f 2a 20 32 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 20 20 2a 20 31 2e 20 52 65 6d 6f 76 65 20 74 68 65 20 62 6f 74 74 6f 6d 20 62 6f 72 64 65 72 20 69 6e 20 43 68 72 6f 6d 65 20 35 37 2d 20 61 6e 64 20 46 69 72 65 66 6f 78 20 33 39 2d 2e 0d 0a 20 20 20 2a 20 32 2e 20 41 64 64 20 74 68 65 20 63 6f 72 72 65 63 74 20 74 65 78 74 20 64 65 63 6f 72 61 74 69 6f 6e 20 69 6e 20 43 68 72 6f 6d 65 2c 20 45 64 67 65 2c 20 49 45 2c 20 4f 70 65 72 61 2c 20 61 6e 64 20 53 61 66 61 72 69 2e 0d 0a 20 20 20 2a 2f 0d 0a 0d 0a 61 62 62 72 5b 74 69 74 6c 65 5d 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 20 2f 2a 20 31 20
                                                                                                                            Data Ascii: webkit-text-decoration-skip: objects; /* 2 */}/** * 1. Remove the bottom border in Chrome 57- and Firefox 39-. * 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari. */abbr[title] { border-bottom: none; /* 1
                                                                                                                            2024-09-28 02:37:44 UTC1369INData Raw: 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 73 75 62 20 7b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 30 2e 32 35 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 73 75 70 20 7b 0d 0a 20 20 74 6f 70 3a 20 2d 30 2e 35 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 45 6d 62 65 64 64 65 64 20 63 6f 6e 74 65 6e 74 0d 0a 20 20 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 20 20 2a 20 41 64 64 20 74 68 65 20 63 6f 72 72 65 63 74 20 64 69 73 70 6c 61 79 20 69 6e 20 49 45 20 39 2d 2e 0d 0a 20 20 20 2a 2f 0d 0a 0d 0a 61 75 64 69 6f 2c 0d 0a 76 69 64 65 6f 20
                                                                                                                            Data Ascii: gn: baseline;}sub { bottom: -0.25em;}sup { top: -0.5em;}/* Embedded content ========================================================================== *//** * Add the correct display in IE 9-. */audio,video
                                                                                                                            2024-09-28 02:37:44 UTC1369INData Raw: 69 74 20 62 75 67 20 77 68 65 72 65 20 28 32 29 20 64 65 73 74 72 6f 79 73 20 6e 61 74 69 76 65 20 60 61 75 64 69 6f 60 20 61 6e 64 20 60 76 69 64 65 6f 60 0d 0a 20 20 20 2a 20 20 20 20 63 6f 6e 74 72 6f 6c 73 20 69 6e 20 41 6e 64 72 6f 69 64 20 34 2e 0d 0a 20 20 20 2a 20 32 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 69 6e 61 62 69 6c 69 74 79 20 74 6f 20 73 74 79 6c 65 20 63 6c 69 63 6b 61 62 6c 65 20 74 79 70 65 73 20 69 6e 20 69 4f 53 20 61 6e 64 20 53 61 66 61 72 69 2e 0d 0a 20 20 20 2a 2f 0d 0a 0d 0a 62 75 74 74 6f 6e 2c 0d 0a 20 20 68 74 6d 6c 20 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 20 2f 2a 20 31 20 2a 2f 0d 0a 20 20 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 0d 0a 20 20 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0d 0a 20 20 2d
                                                                                                                            Data Ascii: it bug where (2) destroys native `audio` and `video` * controls in Android 4. * 2. Correct the inability to style clickable types in iOS and Safari. */button, html [type="button"], /* 1 */ [type="reset"], [type="submit"] { -
                                                                                                                            2024-09-28 02:37:44 UTC1369INData Raw: 6e 20 49 45 20 39 2d 2e 0d 0a 20 20 20 2a 20 32 2e 20 41 64 64 20 74 68 65 20 63 6f 72 72 65 63 74 20 76 65 72 74 69 63 61 6c 20 61 6c 69 67 6e 6d 65 6e 74 20 69 6e 20 43 68 72 6f 6d 65 2c 20 46 69 72 65 66 6f 78 2c 20 61 6e 64 20 4f 70 65 72 61 2e 0d 0a 20 20 20 2a 2f 0d 0a 0d 0a 70 72 6f 67 72 65 73 73 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 2f 2a 20 31 20 2a 2f 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 20 2f 2a 20 32 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 20 20 2a 20 52 65 6d 6f 76 65 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 65 72 74 69 63 61 6c 20 73 63 72 6f 6c 6c 62 61 72 20 69 6e 20 49 45 2e 0d 0a 20 20 20 2a 2f 0d 0a 0d 0a 74 65 78 74 61 72 65 61
                                                                                                                            Data Ascii: n IE 9-. * 2. Add the correct vertical alignment in Chrome, Firefox, and Opera. */progress { display: inline-block; /* 1 */ vertical-align: baseline; /* 2 */}/** * Remove the default vertical scrollbar in IE. */textarea
                                                                                                                            2024-09-28 02:37:44 UTC1369INData Raw: 0a 7d 0d 0a 0d 0a 2f 2a 20 49 6e 74 65 72 61 63 74 69 76 65 0d 0a 20 20 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0d 0a 0d 0a 2f 2a 0d 0a 20 20 20 2a 20 41 64 64 20 74 68 65 20 63 6f 72 72 65 63 74 20 64 69 73 70 6c 61 79 20 69 6e 20 49 45 20 39 2d 2e 0d 0a 20 20 20 2a 20 31 2e 20 41 64 64 20 74 68 65 20 63 6f 72 72 65 63 74 20 64 69 73 70 6c 61 79 20 69 6e 20 45 64 67 65 2c 20 49 45 2c 20 61 6e 64 20 46 69 72 65 66 6f 78 2e 0d 0a 20 20 20 2a 2f 0d 0a 0d 0a 64 65 74 61 69 6c 73 2c 20 2f 2a 20 31 20 2a 2f 0d 0a 20 20 6d 65 6e 75 20 7b 0d 0a 20 20 64 69 73 70 6c
                                                                                                                            Data Ascii: }/* Interactive ========================================================================== *//* * Add the correct display in IE 9-. * 1. Add the correct display in Edge, IE, and Firefox. */details, /* 1 */ menu { displ
                                                                                                                            2024-09-28 02:37:44 UTC1369INData Raw: 72 6f 75 6e 64 3a 20 23 30 30 33 62 39 35 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 2e 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 34 30 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 36 70 78 20 32 34 70 78 20 31 33 70 78 3b 0d 0a 7d 0d 0a 2e 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 66 6c 65 78 2d 64 69 72 65 63
                                                                                                                            Data Ascii: round: #003b95; color: #fff; position: relative;}.navigation { display: flex; align-items: center; max-width: 1140px; margin: 0 auto; padding: 16px 24px 13px;}.navigation__logo-container { align-items: center; flex-direc
                                                                                                                            2024-09-28 02:37:44 UTC1369INData Raw: 20 20 66 6c 65 78 3a 20 31 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 2f 2a 20 43 4f 4e 54 45 4e 54 20 2a 2f 0d 0a 2e 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 7d 0d 0a 2e 64 65 74 61 69 6c 73 20 7b 0d 0a 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 33 33 2e 33 33 33 33 33 25 3b 0d 0a 20 20 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 25 3b 0d 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 25 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 32 70 78 20 30 20 30 3b 0d 0a 7d 0d 0a 2e 62 6f 72 64 65 72 2d 67 72 65 79 20 7b 0d 0a 20 20 62 6f 72 64 65 72
                                                                                                                            Data Ascii: flex: 1; margin: 0px 8px; padding: 0px; min-width: 16px;}/* CONTENT */.content { display: flex;}.details { flex-basis: 33.33333%; width: 33.33333%; max-width: 33.33333%; padding: 0 12px 0 0;}.border-grey { border
                                                                                                                            2024-09-28 02:37:44 UTC1369INData Raw: 3b 0d 0a 7d 0d 0a 2e 62 6c 6f 63 6b 5f 5f 72 61 6e 67 65 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 2e 62 6c 6f 63 6b 5f 5f 72 61 6e 67 65 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 2e 62 6c 6f 63 6b 5f 5f 6c 65 6e 67 74 68 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 2e 62 6c 6f 63 6b 5f 5f 6c 65 6e 67 74 68 2d 74 69 74 6c 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 61 31 61 31 61 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0d 0a 20 20 6d
                                                                                                                            Data Ascii: ;}.block__range-item:first-child { padding-right: 16px;}.block__range-item:last-child { padding-left: 16px;}.block__length { margin-top: 16px;}.block__length-title { font-size: 14px; color: #1a1a1a; font-weight: 500; m


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            2192.168.2.449742188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:44 UTC592OUTGET /build/chat.css HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: text/css,*/*;q=0.1
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: style
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:44 UTC650INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:44 GMT
                                                                                                                            Content-Type: text/css
                                                                                                                            Content-Length: 2574
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:24:42 GMT
                                                                                                                            ETag: "66f56eaa-a0e"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2Bws3gTnkpGGdpn1u8jW%2BgGsRb4hEuw3uG0Zb%2BRr4Ik7i3I8IucK238GRCwhpWOgYda%2FZVSGSGGpLc4ExxV2ubDRSaBoZNC7SsWJgZAE7vQUqwb4RmRE8E0bl7orDG0muA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a704b23180d-EWR
                                                                                                                            2024-09-28 02:37:44 UTC719INData Raw: 2e 63 68 61 74 2d 64 69 76 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 33 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 31 37 2c 31 37 2c 31 37 2c 2e 38 35 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 50 54 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 63 61 6c 63 28
                                                                                                                            Data Ascii: .chat-div{ -webkit-text-size-adjust: 100%; -webkit-tap-highlight-color: rgba(0,0,0,0); line-height: 1.42857143; font-size: 15px; color: rgba(17,17,17,.85); font-family: PT Sans,sans-serif; position: fixed; max-height: calc(
                                                                                                                            2024-09-28 02:37:44 UTC1369INData Raw: 70 78 20 35 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 33 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 31 37 2c 31 37 2c 31 37 2c 2e 38 35 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 50 54 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 20
                                                                                                                            Data Ascii: px 50px rgba(0,0,0,0.2); -webkit-text-size-adjust: 100%; -webkit-tap-highlight-color: rgba(0,0,0,0); line-height: 1.42857143; font-size: 15px; color: rgba(17,17,17,.85); font-family: PT Sans,sans-serif; visibility: visible;
                                                                                                                            2024-09-28 02:37:44 UTC486INData Raw: 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31
                                                                                                                            Data Ascii: : 100% !important; max-width: 100% !important; min-height: 100% !important; max-height: 100% !important; margin: 0 !important; padding: 0 !important; display: block !important; background: transparent !important; opacity: 1


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            3192.168.2.44974518.245.31.184435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:45 UTC688OUTGET /xdata/images/hotel/max1024x768/135121263.jpg?k=38cabd877fbf75e56c9877f26de5ef6710991e6f31c035d0bedae304e101e018&o= HTTP/1.1
                                                                                                                            Host: q-xx.bstatic.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                                                                                                                            Sec-Fetch-Site: cross-site
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: image
                                                                                                                            Referer: https://ramadawynd.com/
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            2024-09-28 02:37:46 UTC538INHTTP/1.1 200 OK
                                                                                                                            Content-Type: image/jpeg
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Server: nginx
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:46 GMT
                                                                                                                            ETag: "794feed41889ffdf8e973578537b67e9b44c81bb"
                                                                                                                            Content-Language: 129962
                                                                                                                            Cache-Control: max-age=2592000
                                                                                                                            access-control-allow-origin: *
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            timing-allow-origin: *
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 90d4d7d1a3cebe66392e229fd5792ae0.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA56-P8
                                                                                                                            X-Amz-Cf-Id: TPh59F8KbQA5kf6yzf5uAWoZ5t0tMH7aa8_PcTN1KD_dyHnkxcCEWA==
                                                                                                                            2024-09-28 02:37:46 UTC6992INData Raw: 31 62 34 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 02 ab 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71
                                                                                                                            Data Ascii: 1b48JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q
                                                                                                                            2024-09-28 02:37:46 UTC7248INData Raw: 31 63 34 38 0d 0a 02 71 49 cd 3f 8c d2 13 e8 01 a4 32 29 55 5e 26 42 38 61 8a e3 35 fb 4b ed 32 1f b4 d9 5d 49 1c 69 84 78 c3 10 bd 39 39 e8 3b 57 65 73 28 8a 16 73 fc 20 9e 2b 9b d5 f5 54 4d 32 4b 79 26 f3 2e a5 89 99 51 17 39 1d 33 8f 4f 7f 6a ca bd 25 52 0d 32 a1 7b e8 72 27 5e bc 9a 29 23 bc ba 96 48 08 05 91 9b 38 00 e3 8c f4 fc 2a 19 ae 22 bb b9 12 5d 0d eb c9 0c 92 60 8c e7 91 e9 82 49 1f 4a c3 ba d4 88 9a 4d b6 e5 23 3f 29 ce 7e 56 23 d7 f3 a6 d9 6a 50 db 1d b3 c6 cd ce 54 47 d0 1f 70 7f 0a f9 9a 8a ac 1b 57 b9 d0 d4 8b d2 e9 51 4b 67 2d f4 46 54 9a 19 03 30 db f7 97 8c 92 7b 1e 7f 11 f4 aa c8 1e e9 6e 91 13 7b b1 5d b8 03 e6 24 80 7f 9d 5f 9e f4 49 64 ad 6e ee e2 46 0b 9f ba ca 79 c0 e3 f9 56 74 71 3c e8 8a d3 c8 8a a3 e7 91 4e 31 d4 73 eb d7 15
                                                                                                                            Data Ascii: 1c48qI?2)U^&B8a5K2]Iix99;Wes(s +TM2Ky&.Q93Oj%R2{r'^)#H8*"]`IJM#?)~V#jPTGpWQKg-FT0{n{]$_IdnFyVtq<N1s
                                                                                                                            2024-09-28 02:37:46 UTC16384INData Raw: 34 66 33 30 0d 0a f1 ae 07 55 d5 9a 1b c9 0a 06 49 e5 f9 dc 30 c2 9f a7 eb c5 5e d4 75 a1 77 6c 96 d7 46 62 d6 e4 f9 4e 8a 06 57 1f c4 3b 9e 3a d5 18 f5 36 b9 fd e4 32 e4 85 c1 0e a1 b0 07 62 08 ff 00 39 35 f3 d8 ea fc ed 35 a2 7f 99 bc 63 65 a9 01 d4 ed e6 b9 48 cc d9 47 c3 31 24 fd e0 39 eb d0 7d 2b 62 ca e7 c8 0c 96 e7 21 c8 20 e7 a1 ce 72 2b 9d bb bd 82 f2 17 56 58 bc d8 98 37 9a 10 06 7f 5e 9f ca b5 3c 2f 3c b2 dd 2a 82 87 00 95 c9 03 6f e7 df a5 79 95 61 55 c9 4a 96 e3 71 6b 63 d2 2c 6f 08 b4 0f 78 e9 1e d0 09 77 6c 2e 0f 4e 49 fc 3e b5 6a 3b cb 69 71 e5 5c 45 27 b2 38 6f e5 5e 7d ae 5c 4d ab dc 28 81 ce d2 d8 8d 8f 1b 17 3b 79 c1 f6 1f 9d 5c b3 82 2f 0c c5 6f 7c c1 a4 de db 1c 03 f2 ab 15 dd 82 7b 1c 11 80 7a d7 d2 51 c5 ce d6 6b 45 bb 22 54 b5 3b
                                                                                                                            Data Ascii: 4f30UI0^uwlFbNW;:62b955ceHG1$9}+b! r+VX7^</<*oyaUJqkc,oxwl.NI>j;iq\E'8o^}\M(;y\/o|{zQkE"T;
                                                                                                                            2024-09-28 02:37:46 UTC3896INData Raw: 9f 73 fe 1f 9d 69 1a b5 bb 98 ce 14 5a d1 1a 57 37 f0 ab 85 85 4b 13 db bf e5 54 f3 3c c7 2e db 00 3d 07 52 3e bd bf 0f ce a5 8e 24 45 c2 2e 3f ad 2e dc b5 5c aa ce 7f 13 33 50 8c 76 43 52 35 8c 10 a3 00 9c 9f ad 48 01 22 9d b3 e5 a7 28 e3 15 98 c6 a8 e2 9c 05 04 60 f1 4b fc a8 10 73 b8 73 4a 05 27 71 4e ed 40 cc bd 78 8f b3 40 7c a3 21 12 e4 7c b9 c7 07 9f 6a e3 af 26 bd 49 22 31 07 95 94 ed 68 22 19 dd e9 96 f4 ae af c4 93 34 16 f6 ee a4 0f de 1c e7 ae 30 47 15 ce 4d 73 6d 65 70 ac f3 7e f9 a3 32 2a 0e 49 18 39 18 f5 e3 15 2f 73 78 7c 24 8b 75 b6 e5 ad 4d bb 79 e8 81 f2 17 76 38 ce 3f 10 7f 4a 8b ed 73 7d a5 8c 8c 06 3a 0e 01 fa 55 ab 49 ee a6 b6 92 44 8d c1 94 97 09 22 e0 af b1 e7 d2 b1 2e ca 6f 91 04 a8 b3 f0 01 c9 23 34 8a 44 57 f6 73 5e dd cb 72 97
                                                                                                                            Data Ascii: siZW7KT<.=R>$E.?.\3PvCR5H"(`KssJ'qN@x@|!|j&I"1h"40GMsmep~2*I9/sx|$uMyv8?Js}:UID".o#4DWs^r
                                                                                                                            2024-09-28 02:37:46 UTC16384INData Raw: 33 66 66 61 0d 0a 70 64 05 b6 42 d8 66 18 f5 ec 3e 82 99 b5 ee a2 68 ac a0 36 f0 29 dc 4b 12 5b 07 03 93 f5 e6 ba 6d 3f 47 8e c6 c6 5b 8b d5 3f 6c b8 40 b0 ac 83 80 a7 82 47 f8 7a 67 d6 b5 2c b4 68 a2 d2 04 f0 a2 e2 30 c0 11 83 82 3e 6c 9e bc 80 31 ff 00 eb ab 8e 16 75 25 79 3d 77 66 2e 49 6c 70 37 0d 71 69 20 db 2e c9 50 9c 15 6c 8c fa 7b d5 81 24 97 f6 0e 4e 7c c1 80 4f e3 8c 53 75 49 21 4b 9f 93 e6 3f 75 89 1f 91 a9 f4 84 23 84 21 b7 38 74 50 32 49 00 ff 00 22 3f 5a e2 e6 d3 c8 d1 6a 33 4f b6 fb 15 cc ab 22 83 2a fc a1 5b 8c 70 73 9f 4e 95 a9 62 23 b9 b2 09 02 92 66 c9 f2 d0 02 1b 01 8e 40 f5 e0 e2 9d 3d ad b9 b0 6b a4 65 37 3c 99 d8 b9 06 31 d3 90 7a ff 00 f5 eb 1a d1 ee 74 c3 6d 77 13 90 52 32 b1 32 b0 1d 33 9f d0 d4 c2 50 93 bc b6 2f 97 4d 0d 8b b6
                                                                                                                            Data Ascii: 3ffapdBf>h6)K[m?G[?l@Gzg,h0>l1u%y=wf.Ilp7qi .Pl{$N|OSuI!K?u#!8tP2I"?Zj3O"*[psNb#f@=ke7<1ztmwR223P/M
                                                                                                                            2024-09-28 02:37:46 UTC16384INData Raw: 0d 0a 35 65 36 36 0d 0a b6 08 f5 af 72 da 7d 69 a6 35 66 cb 01 9a c5 53 48 bb 9e 19 ab a5 d5 c4 50 17 12 3a a6 54 65 70 7a 0c d7 5f e1 8d 5a ea d3 c3 76 f6 39 95 47 9a ed 85 6d b8 1c fa 7b e3 f2 fa 57 a0 34 11 3f 58 d0 e0 ff 00 74 52 fd 8e d8 f5 b7 8b fe f8 15 71 4e 2a c9 8d bb 9e 43 e2 0b 96 9f 5a 91 e3 22 43 2a 20 12 31 6f 94 90 aa 4e 0f e3 93 ed 59 96 6c c9 6a 11 63 6c 06 50 ce c3 ae 39 e7 8e 87 fa d7 4f e2 68 3e cb ae 5e 23 6e 8e d5 d8 16 74 5f b9 94 18 03 1d 8d 68 f8 22 d9 65 7b b8 af 6d 16 59 11 10 f9 af c8 20 f4 03 af b7 3f e1 53 35 cd 71 bd 8c d1 aa 24 96 2f 08 dc 5b 71 f9 84 67 6e 33 d1 87 e0 7a 54 9a 96 a4 21 d3 a6 0d 24 40 98 94 20 8d 33 ce 4f 03 8c 0f fe b5 77 8b a4 e9 e0 6c 16 50 ed 3d 46 d1 cd 0d a2 e9 fb 36 ad a4 6a bd 30 a3 03 1e 95 c8 f0
                                                                                                                            Data Ascii: 5e66r}i5fSHP:Tepz_Zv9Gm{W4?XtRqN*CZ"C* 1oNYljclP9Oh>^#nt_h"e{mY ?S5q$/[qgn3zT!$@ 3OwlP=F6j0
                                                                                                                            2024-09-28 02:37:46 UTC7792INData Raw: ff 00 eb 75 ad 24 b5 d9 a5 ac 82 24 0c f9 0d b5 db 24 0e 9e dd 8f 1f 4e 2a de a5 0d e4 d6 26 ea de 0b 76 b6 46 e5 ad 54 02 07 5c 95 ea 2a 7d 32 35 be f0 ad cd e0 76 13 c5 bd 36 f9 29 c8 1c f2 c5 77 77 3d 0f f3 aa a3 56 32 6e fd 8a 73 65 69 1b 7f 86 21 80 95 f3 d2 e8 b8 8c 1c 10 a4 1a cb 48 19 7c c7 f2 d8 16 e9 86 27 b7 7a 58 f5 05 41 bd e2 47 4c 60 f7 07 f1 ed 56 e0 d5 12 19 84 f1 aa b6 08 f9 59 7f 4c d6 0e ac bb 02 a8 d1 46 ee 4b b8 b4 a7 b6 36 ca 23 32 ae 18 2e 4b 60 13 d7 af a7 e4 2b 3a db 7a 4c 9f 68 1e 5b 23 82 77 0e 5b f3 c7 15 b9 7f aa 24 b7 c1 fe cf 1a 89 0e 43 a7 73 e9 e9 9a b1 6f ac cb 14 45 19 92 58 87 02 29 a3 0e a0 67 d0 f4 e6 97 b5 7d 85 ed 0e f2 de 7f 36 ca 19 46 30 e8 18 7d 08 ac 4d 6b c3 b7 ba d6 a1 6d 24 11 01 0a ae 1e 67 e0 28 cf 6f 53
                                                                                                                            Data Ascii: u$$$N*&vFT\*}25v6)ww=V2nsei!H|'zXAGL`VYLFK6#2.K`+:zLh[#w[$CsoEX)g}6F0}Mkm$g(oS
                                                                                                                            2024-09-28 02:37:46 UTC10144INData Raw: 32 37 39 38 0d 0a ab 77 c4 76 32 b6 a6 82 58 0f 98 e0 ed dd d4 f6 e3 df 38 ac 3f ec d9 a0 9d 1a 70 ca 8d 9c 13 dc 8e a0 1e fe 9f 8d 64 d5 ce 77 14 b5 23 bb 61 24 85 11 99 61 8f 3b 40 ed e8 71 5a ba 5c 91 c5 a4 49 34 ec c4 ac a5 4e 39 c6 40 ac 77 f3 e6 bf 2a 17 20 0e 30 3b 7a 56 c6 97 a8 c9 63 1c b6 b0 c9 12 ae 4b 33 4a 40 03 20 7c a3 be 7a d1 15 66 5c 64 3f ec 76 97 81 ae dd a5 2a e3 00 86 c6 7b 1e 3e 94 d8 12 1b 19 59 63 76 f2 0b e4 17 20 9c 54 32 5c ff 00 68 a7 95 1b e1 90 ee 3e 5b 6d 23 b7 a5 11 5d 16 81 6c a4 85 19 d7 0a 37 7c ce 79 f5 ae 84 5d ba 93 5c 5a c6 2d 65 92 49 5e 28 db 92 e3 1f 28 27 3f e1 5b da 5d c6 91 63 78 b7 27 56 9e 76 88 6e 0b 2b 31 5c 63 b8 02 b9 77 86 e6 79 96 1f 2a 68 e3 39 05 81 07 23 dc 57 a0 69 3a 7d ae 9b 62 d1 cb 74 8f 23 90
                                                                                                                            Data Ascii: 2798wv2X8?pdw#a$a;@qZ\I4N9@w* 0;zVcK3J@ |zf\d?v*{>Ycv T2\h>[m#]l7|y]\Z-eI^(('?[]cx'Vvn+1\cwy*h9#Wi:}bt#
                                                                                                                            2024-09-28 02:37:46 UTC16384INData Raw: 34 30 30 30 0d 0a a5 b8 7b 9b 7b a6 fb 44 32 42 19 fe 6c 92 08 38 c8 20 9c 1c 7a 7e 7d 5c 7e 14 f1 0b 65 c5 e6 93 6e c7 af 91 6c aa 7f f1 d8 ff 00 ad 5d 8b c2 5a c4 df 2d df 89 67 0a 3a 05 0c 73 fa 8a 9a 78 38 c1 ef 74 35 08 ad e4 71 b6 b6 ed aa 24 c7 53 d0 ee 5a e2 36 8d d2 e2 d2 de 54 79 4f 4c 91 8c 1c 64 67 8e df 9e 9d c5 85 fc 37 12 5d ea 2e d7 89 e7 1f 2e de 4b bf 29 d3 d0 ee 62 01 18 1c 8c 8e 71 d6 ba 5f f8 41 6c 48 22 5d 47 50 9b d4 e4 0f e7 9a 7a f8 03 44 52 a7 c9 b9 93 03 93 24 bd 4f e0 2a d6 1a 3d d8 9c 69 ae a7 99 5f 6a 5a d5 96 b4 24 b7 91 63 b7 46 cc 51 a5 c2 cc 02 e7 9e 77 1e b8 e9 91 df a5 74 87 58 82 38 ed 2e ac 6f ac ac 2e d9 40 ba 46 56 70 e0 f5 e8 0f 39 19 fc 7a d7 5e be 07 d1 15 83 1b 15 27 d1 a5 72 0f e1 9a d0 8b c3 da 6c 38 f2 ec 2d
                                                                                                                            Data Ascii: 4000{{D2Bl8 z~}\~enl]Z-g:sx8t5q$SZ6TyOLdg7]..K)bq_AlH"]GPzDR$O*=i_jZ$cFQwtX8.o.@FVp9z^'rl8-
                                                                                                                            2024-09-28 02:37:46 UTC8INData Raw: 82 d9 e4 f3 59 61 0d 0a
                                                                                                                            Data Ascii: Ya


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            4192.168.2.449746184.28.90.27443
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:45 UTC161OUTHEAD /fs/windows/config.json HTTP/1.1
                                                                                                                            Connection: Keep-Alive
                                                                                                                            Accept: */*
                                                                                                                            Accept-Encoding: identity
                                                                                                                            User-Agent: Microsoft BITS/7.8
                                                                                                                            Host: fs.microsoft.com
                                                                                                                            2024-09-28 02:37:46 UTC467INHTTP/1.1 200 OK
                                                                                                                            Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json
                                                                                                                            Content-Type: application/octet-stream
                                                                                                                            ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"
                                                                                                                            Last-Modified: Tue, 16 May 2017 22:58:00 GMT
                                                                                                                            Server: ECAcc (lpl/EF67)
                                                                                                                            X-CID: 11
                                                                                                                            X-Ms-ApiVersion: Distribute 1.2
                                                                                                                            X-Ms-Region: prod-neu-z1
                                                                                                                            Cache-Control: public, max-age=223637
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:45 GMT
                                                                                                                            Connection: close
                                                                                                                            X-CID: 2


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            5192.168.2.449747184.28.90.27443
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:46 UTC239OUTGET /fs/windows/config.json HTTP/1.1
                                                                                                                            Connection: Keep-Alive
                                                                                                                            Accept: */*
                                                                                                                            Accept-Encoding: identity
                                                                                                                            If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT
                                                                                                                            Range: bytes=0-2147483646
                                                                                                                            User-Agent: Microsoft BITS/7.8
                                                                                                                            Host: fs.microsoft.com
                                                                                                                            2024-09-28 02:37:47 UTC515INHTTP/1.1 200 OK
                                                                                                                            ApiVersion: Distribute 1.1
                                                                                                                            Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json
                                                                                                                            Content-Type: application/octet-stream
                                                                                                                            ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"
                                                                                                                            Last-Modified: Tue, 16 May 2017 22:58:00 GMT
                                                                                                                            Server: ECAcc (lpl/EF06)
                                                                                                                            X-CID: 11
                                                                                                                            X-Ms-ApiVersion: Distribute 1.2
                                                                                                                            X-Ms-Region: prod-weu-z1
                                                                                                                            Cache-Control: public, max-age=223665
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:47 GMT
                                                                                                                            Content-Length: 55
                                                                                                                            Connection: close
                                                                                                                            X-CID: 2
                                                                                                                            2024-09-28 02:37:47 UTC55INData Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d
                                                                                                                            Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            6192.168.2.44974918.245.31.494435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:47 UTC454OUTGET /xdata/images/hotel/max1024x768/135121263.jpg?k=38cabd877fbf75e56c9877f26de5ef6710991e6f31c035d0bedae304e101e018&o= HTTP/1.1
                                                                                                                            Host: q-xx.bstatic.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            2024-09-28 02:37:47 UTC545INHTTP/1.1 200 OK
                                                                                                                            Content-Type: image/jpeg
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Server: nginx
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:46 GMT
                                                                                                                            ETag: "794feed41889ffdf8e973578537b67e9b44c81bb"
                                                                                                                            Content-Language: 129962
                                                                                                                            Cache-Control: max-age=2592000
                                                                                                                            access-control-allow-origin: *
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            timing-allow-origin: *
                                                                                                                            X-Cache: Hit from cloudfront
                                                                                                                            Via: 1.1 2146d75cb402f16f98928cb19acf5ff6.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA56-P8
                                                                                                                            X-Amz-Cf-Id: SdKUQYa8I5E29i7-Z0bONMMrC_Bek63CF4jLhTRNmPrxmwn_iZLcQA==
                                                                                                                            Age: 1
                                                                                                                            2024-09-28 02:37:47 UTC16384INData Raw: 61 65 61 62 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 02 ab 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71
                                                                                                                            Data Ascii: aeabJFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q
                                                                                                                            2024-09-28 02:37:47 UTC16384INData Raw: 75 7d 00 4b ef 22 ee 62 fe 67 0c e0 96 f5 fe ee 41 ef d3 3d 79 ef 58 22 34 fb 60 09 95 18 c0 15 29 95 65 98 80 8f d3 a8 24 e3 bf e9 49 20 09 b1 d4 61 9c e0 31 f4 aa 0b 09 0c a5 66 72 49 2a 38 db 9c 7a d6 dd a5 f1 42 2d 9e 46 11 1c 37 20 11 dc 7b f3 cd 54 8e 78 e1 82 40 ee 87 cd 01 5d 8e 3a 75 aa 57 5e 72 b0 09 b4 84 6c 80 0e 73 9f d3 b5 16 4c 12 d4 f5 71 9a 70 14 01 4e 1c 57 e8 37 3c 60 1f a5 38 0c 51 4a 38 23 3d 2a 24 ed a8 d1 c3 eb 72 89 75 ab 82 32 42 b8 5f c8 01 fd 2b a7 d0 63 f2 f4 98 7f db cb fe 66 b8 e9 64 17 57 92 ce 31 f3 b1 6f ae 4d 77 b6 90 0b 7b 48 21 03 01 10 2f e9 5e 2e 5b ef d7 a9 50 ef c4 69 4a 31 27 a0 d1 4a 7a 57 b4 70 89 4b 82 29 29 dd 68 00 a5 a3 a5 28 1c d4 b0 0a 70 eb 49 4a 05 20 b8 bd f3 4b 40 a2 a4 05 e6 9c 33 4d 14 e1 9a 06 85 e7
                                                                                                                            Data Ascii: u}K"bgA=yX"4`)e$I a1frI*8zB-F7 {Tx@]:uW^rlsLqpNW7<`8QJ8#=*$ru2B_+cfdW1oMw{H!/^.[PiJ1'JzWpK))h(pIJ K@3M
                                                                                                                            2024-09-28 02:37:47 UTC11955INData Raw: 48 92 b2 42 72 8a ab 18 39 c7 1e bc fe 42 b7 bc 42 21 96 e9 8b 1c 32 c5 82 c1 b1 b5 4e 73 8a c4 bc 81 64 81 1a d4 24 71 04 c0 50 72 3e bd fa d7 87 5d de ab 3d 5a 3a 41 23 39 45 bd bb 7d 9a 59 36 5c 0c ee 77 72 99 1d 40 db db a5 75 ba 32 c9 36 99 00 90 ec c2 ed 21 4f 27 1c 67 3e f5 c0 dc db 5c 43 24 b2 6c 49 17 e5 18 92 42 58 74 ea 30 7d 2b d0 34 06 2f a4 db b6 73 95 ce 7d 6b 32 e4 f4 b1 a2 88 a8 e7 68 03 8a 71 18 fc e9 c0 72 4d 29 e9 41 90 a1 73 cd 28 1d 7d 68 ce 07 4a 40 3e 62 4d 02 1e 7a 50 3b 50 4d 28 e9 40 08 70 29 7b 52 1c 71 4e 1d 28 01 0f 51 f4 34 a3 39 f6 a0 8e 45 38 74 a0 0c 9d 76 09 26 8a dc c4 ec bb 24 c9 01 73 bb 8e 95 cc 5f 49 13 6a 10 2f d9 dd ee 0a 7f ae 45 18 50 33 c6 7e b5 d3 78 89 2e 5f 4c 22 ce 51 1d c9 38 46 61 c7 f9 eb 5c 76 aa 26 d3
                                                                                                                            Data Ascii: HBr9BB!2Nsd$qPr>]=Z:A#9E}Y6\wr@u26!O'g>\C$lIBXt0}+4/s}k2hqrM)As(}hJ@>bMzP;PM(@p){RqN(Q49E8tv&$s_Ij/EP3~x._L"Q8Fa\v&
                                                                                                                            2024-09-28 02:37:47 UTC16384INData Raw: 38 62 63 34 0d 0a ac dc a4 1c a7 a2 4b e3 ad cd b6 d6 d1 40 fe f4 84 93 f9 0f f1 ac ab af 12 ea b7 4c 71 72 f1 2f f7 11 36 ff 00 2e 7f 5a e3 8e bd 71 1c ad 1f ee ce d3 82 72 46 3f 5a 74 3a b1 67 2f e4 20 63 dc 1c 66 a1 f3 b1 f2 9b f2 b3 cc de 64 b7 0c 24 3d 59 81 c9 fc 4d 44 63 8d 9b 1b 44 87 fd a5 c8 fd 4e 2b 14 f8 81 15 82 c6 bb b3 dd 64 ce 2a c4 7a d6 e3 92 b7 27 fd c5 18 fe 75 3c ac 76 35 42 48 c7 e6 48 00 f5 3c 9a 43 14 40 65 8c 7f 45 00 56 78 d5 e1 91 f6 6c 9f 76 33 87 5c 0a 7f f6 92 a1 00 ce 14 1e c5 33 fe 14 ac c7 62 ee c8 76 e0 42 87 ea df e3 41 1c 73 b1 17 fd ec d6 7a 6a d0 3b ed 32 b3 1f 4e 9f d0 55 81 75 6f b4 30 11 ae 4e 32 41 34 f5 ea 2b 1a 9a 6c ed 6e 2e 24 b4 fd f5 c6 17 cb 89 9b 1b c9 38 c0 3f 8d 6c 5a 5d ea 96 46 7f ed 4b 65 8a 26 5f 34
                                                                                                                            Data Ascii: 8bc4K@Lqr/6.ZqrF?Zt:g/ cfd$=YMDcDN+d*z'u<v5BHH<C@eEVxlv3\3bvBAszj;2NUuo0N2A4+ln.$8?lZ]FKe&_4
                                                                                                                            2024-09-28 02:37:47 UTC16384INData Raw: 71 4a ec 8b 21 67 9a 3e 46 79 ac e9 86 ec b0 ce 3e 95 35 ec c2 47 56 54 20 6d c1 c1 eb 4d 4f f5 0e 0f a7 4a 2e 06 dd ac 09 35 b4 05 10 2e d5 00 f1 f7 b8 fa 7e 35 d9 f8 70 5e dc 69 c6 09 2d 2d e6 85 5c 90 cd 3f 39 e3 a8 fc 73 5c a5 a4 ab f6 3b 75 89 c2 11 1a 97 00 67 3c 0a e9 3c 35 a7 25 cd 9c c6 4d 0e 3b 84 62 c3 cf 33 81 cf 07 a7 eb 59 9a a2 5b eb 26 b2 44 ba 92 55 8b 0e 16 39 55 43 10 79 3c 60 56 9c 17 17 b3 69 8a e6 21 3a 14 67 f3 58 80 48 e7 9c 63 b7 f4 aa 56 b0 32 18 d2 de 20 62 18 6c 92 06 d3 9f f1 a7 df 45 a8 8b b5 b8 40 1a 0e 0b c0 a0 0f 94 03 9f 9b 3e d4 23 47 dc aa 35 59 09 46 6d 58 c6 03 81 e6 18 43 60 63 d3 15 dc 41 6a b2 db 44 de 67 9a 19 01 de 57 1b b2 3a e3 b5 72 d0 cb 7d aa ab 0d 34 84 31 e0 b9 da ac 40 ec 39 c5 77 90 23 25 b4 4b 2b 87 90
                                                                                                                            Data Ascii: qJ!g>Fy>5GVT mMOJ.5.~5p^i--\?9s\;ug<<5%M;b3Y[&DU9UCy<`Vi!:gXHcV2 blE@>#G5YFmXC`cAjDgW:r}41@9w#%K+
                                                                                                                            2024-09-28 02:37:47 UTC3020INData Raw: 31 8a bf 6f 45 2b 39 0d 58 e5 6c b6 cd 2d c4 d7 13 ba 02 84 86 45 07 2e 78 c1 39 18 1c 93 f8 55 6b a9 94 c4 91 a2 8d db 8e 58 63 04 76 ae da df e1 c6 af 14 9b 9a ef 4f 61 9c b6 f8 8c 83 af a3 2e 3a d2 3f c2 fb cc 99 0e a1 6e 5c 9c 00 14 81 8e d5 9f d6 28 a7 7e 60 76 b1 81 a4 46 c3 cb 78 e4 0c bf 33 08 c4 65 8f 03 bf a0 eb d3 bf 35 d4 d8 6b 2e fa 7a c7 7c 84 de 31 31 40 c2 30 43 37 51 db af 40 7a fd 6a 0f f8 56 17 63 0a da ca 81 8c 36 d8 8f 23 3f 5a de d2 bc 13 6b a7 44 51 ae 3c c5 dd bb 95 19 ce 08 cf 39 c1 c1 fe 5e 83 18 d4 ab 46 5d 46 a4 8b d6 69 a2 49 a2 c6 ba bc e6 49 a6 d8 0c 4a 85 9c 73 c1 3b 41 c7 7e 9e 95 6a fb c0 9e 1b b7 ce db 11 e5 ce 37 29 12 39 c0 cf 3d f8 fc 29 6d ac 12 d7 59 6b f3 97 40 a5 52 12 0b 05 fc 4e 7d cd 6a cb 79 24 8f 91 b9 57 00
                                                                                                                            Data Ascii: 1oE+9Xl-E.x9UkXcvOa.:?n\(~`vFx3e5k.z|11@0C7Q@zjVc6#?ZkDQ<9^F]FiIIJs;A~j7)9=)mYk@RN}jy$W
                                                                                                                            2024-09-28 02:37:47 UTC16384INData Raw: 34 35 65 32 0d 0a 65 b4 41 36 b6 fb 13 a3 c7 1a 70 31 d3 2d bb 3d 05 71 7a 46 93 16 c1 3a c6 97 91 46 c5 55 5b 7b a8 eb d1 57 8f cc 75 fa 57 4f 0e a9 6e e1 6c ee d2 08 d8 fd d8 89 c6 fc 7a 0e bc 7b 57 99 88 c5 d2 a6 ed c9 76 39 24 c7 2f 87 ec 43 1b 58 2e ae ae a3 20 02 f2 b8 da 30 3b 60 0f 7e 79 a9 bf e1 1a d2 56 04 8d d2 46 2a 02 12 26 23 3c fe 5d cd 59 99 e5 10 ff 00 a2 ae 4a 82 02 6e c0 fc f9 e2 b2 ee af 09 4f b0 ea 76 b3 c0 b2 ae 33 9c a3 9e 3e 5d de bd 47 38 ae 0a 58 aa b3 9b 74 d3 4b c8 12 b1 2e a3 e1 7d 06 e6 e1 65 b9 d2 be 55 1c c6 af 22 a8 27 d0 29 00 66 88 3c 2f e1 35 4c 47 a0 5b bb 01 90 5a 56 3c 60 f5 24 9f 43 54 a5 f2 19 63 30 6a 0e b0 21 3e 6d bb 6e 24 86 19 c6 06 70 46 7d 32 39 f4 a8 98 cd a7 5a 89 2d 25 9e 76 42 c1 a1 da 17 3c 74 5e 06 ec
                                                                                                                            Data Ascii: 45e2eA6p1-=qzF:FU[{WuWOnlz{Wv9$/CX. 0;`~yVF*&#<]YJnOv3>]G8XtK.}eU"')f</5LG[ZV<`$CTc0j!>mn$pF}29Z-%vB<t^
                                                                                                                            2024-09-28 02:37:47 UTC1514INData Raw: cc 0c cd a9 5c 31 ff 00 61 02 ff 00 3c d7 73 b8 13 ca 8f ca 97 7a e3 a7 d6 97 3c 82 c7 21 17 c3 cd 15 7e f3 dd c9 ee 64 50 3f 45 a7 4f f0 fb 47 96 02 b0 09 a2 90 0e 1c c9 9a eb 77 02 3a 52 6e 1e 94 73 48 2c 79 55 f7 c3 fd 5e d8 b3 5b ac 57 49 db 63 61 bf 23 5c e5 d5 8d c5 94 be 5d d5 bb c4 e3 a8 75 22 bd e4 1c fb 7b d3 1d 63 63 97 0a c7 b1 60 0e 29 aa 8c 1c 4f 05 4b 79 a7 c7 93 13 39 f4 45 26 ae c5 e1 fd 5a 50 76 69 97 6c 3d 7c 86 1f cc 57 b7 6e 0a 38 20 7d 05 02 52 7b 13 f5 a7 ed 18 b9 4f 1a 4f 08 eb 92 63 fe 25 97 1f 8e 07 f3 ab 51 f8 0b 5d 93 ad 90 4f f7 e6 4e 3f 23 5e b3 e7 1f 5f d6 94 4e 4f 63 4b da 31 f2 9e 65 1f c3 6d 55 fe fc d6 49 ea 0b b1 3f fa 0d 5a 4f 86 77 58 f9 f5 0b 75 c7 60 84 ff 00 85 7a 37 98 3e 9e d4 06 a5 ce c2 c7 03 1f c3 18 89 fd ee
                                                                                                                            Data Ascii: \1a<sz<!~dP?EOGw:RnsH,yU^[WIca#\]u"{cc`)OKy9E&ZPvil=|Wn8 }R{OOc%Q]ON?#^_NOcK1emUI?ZOwXu`z7>
                                                                                                                            2024-09-28 02:37:47 UTC16384INData Raw: 34 61 66 34 0d 0a ed d9 22 8e 2b 75 db 8d c8 98 c8 e3 bf 5c f1 4d f9 15 be e5 f1 79 2b 63 cc 8a 22 1a 3d 81 36 e4 03 c7 3c f4 3c 0a c5 bd 54 8e f1 5e 7e 55 87 03 9f d4 75 a9 ad a5 13 a6 e5 2c 0a 01 c6 49 e9 f8 d4 73 66 7f de 73 21 c9 18 ee 4f a5 46 cc 72 77 44 78 22 dd 1f 68 65 dc 48 50 9d bd 69 62 56 68 d0 89 e2 8e 37 70 18 b6 7e 5f 5e 80 9f d0 d1 34 d2 c4 bb 2e 0a 6f 23 05 12 a1 58 20 92 22 c5 e4 f3 24 3f 75 14 ed f6 a6 8c 87 bc 4d 70 23 52 c0 23 26 09 f4 03 a1 fa d4 21 56 2d a2 45 c4 6d c2 82 b9 ef d6 a7 c4 91 db b2 ac 7b 70 7c b2 e7 a6 3f c6 92 d8 f9 51 3b 21 f3 11 7f 8d 9b 23 34 2d 80 81 88 8f 70 cb 18 c6 40 ce 70 3e 95 12 6a cb 24 70 a0 1b 9e 23 d5 b3 cd 4c 23 98 92 d2 46 8b 03 ae 70 4f 5f 7f d6 a1 7b 4b 68 e4 fd c3 04 70 73 f7 b8 3f 43 54 b9 6d a8
                                                                                                                            Data Ascii: 4af4"+u\My+c"=6<<T^~Uu,Isfs!OFrwDx"heHPibVh7p~_^4.o#X "$?uMp#R#&!V-Em{p|?Q;!#4-p@p>j$p#L#FpO_{Khps?CTm
                                                                                                                            2024-09-28 02:37:47 UTC2812INData Raw: 7d 68 0b 92 ae 41 24 05 18 1d a9 5a 42 dd b6 83 51 6e e7 b7 1e b4 a3 24 e7 3d 28 43 1c 18 ed c0 eb 4e 46 c0 c1 1c 91 de 99 80 70 72 71 eb e9 41 60 4f 19 a6 81 93 e3 70 18 6f e9 cd 27 1b b8 24 e0 fa f1 51 60 9c 0c d2 a7 cb d8 e7 b5 02 b9 2f 25 ba 64 7d 68 24 33 01 eb 4d 00 b7 3c 52 a8 1c 1d df 88 a6 17 17 70 04 63 3f e4 d4 80 b6 30 54 e4 fa 0a 8c 8c 9c f5 1e 94 a1 be 6c 93 c6 31 cf 6a 07 d0 90 1c 03 95 04 9e 0f 34 28 70 c7 38 04 fa 52 2b 95 04 6e e0 9c f4 a3 cd 39 c1 ce 4f 7a 09 44 99 3f 36 09 04 7b d1 51 17 51 db 34 e0 fc 0c 0c fd 7b 50 3b 93 2b 94 21 d4 90 41 e0 f4 ae a3 49 d5 d6 e5 44 33 36 26 1c 02 7f 8b ff 00 af 5c 8e fc 03 d3 e9 4a b3 30 60 c0 ed c7 43 e9 46 c1 b9 da ea 3a 64 77 cb bb ee ca 3a 37 af b1 ae 4e 78 5a de 53 1c a0 ab 8e c6 b7 f4 8d 67 ed
                                                                                                                            Data Ascii: }hA$ZBQn$=(CNFprqA`Opo'$Q`/%d}h$3M<Rpc?0Tl1j4(p8R+n9OzD?6{QQ4{P;+!AID36&\J0`CF:dw:7NxZSg


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            7192.168.2.449750188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:47 UTC580OUTGET /js/jquery.min.js HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: script
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:47 UTC665INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:47 GMT
                                                                                                                            Content-Type: application/javascript
                                                                                                                            Content-Length: 89476
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:24:15 GMT
                                                                                                                            ETag: "66f56e8f-15d84"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vgwxHJiuKYkMPfaNfrd%2F%2FkOMebcWbeY31vpeo9W0jjmJef0luNsc1Siw94BRYsRrQjyPMwFXjrsLgQT%2B65AfA1PbtlZTOZh2QtG2SndRIztfMVB9pAq6LmtlxHGIawSwBA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a83bb225e76-EWR
                                                                                                                            2024-09-28 02:37:47 UTC704INData Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20
                                                                                                                            Data Ascii: /*! jQuery v3.5.1 | (c) JS Foundation and other contributors | jquery.org/license */!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
                                                                                                                            2024-09-28 02:37:47 UTC1369INData Raw: 77 69 6e 64 6f 77 7d 2c 45 3d 43 2e 64 6f 63 75 6d 65 6e 74 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 63 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c
                                                                                                                            Data Ascii: window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChil
                                                                                                                            2024-09-28 02:37:47 UTC1369INData Raw: 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 53 2e 65 78 74 65 6e 64 3d 53 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 6d 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29
                                                                                                                            Data Ascii: is.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]||{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]||{},s++),"object"==typeof a||m(a)||(a={}),s===u&&(a=this,s--)
                                                                                                                            2024-09-28 02:37:47 UTC1369INData Raw: 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 70 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 72 65 74 75 72 6e 20 67 28 61 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 79 7d 29
                                                                                                                            Data Ascii: r r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y})
                                                                                                                            2024-09-28 02:37:47 UTC1369INData Raw: 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 46 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 49 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 57 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 46 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69
                                                                                                                            Data Ascii: +"*([>+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(only|fi
                                                                                                                            2024-09-28 02:37:47 UTC1369INData Raw: 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 72 26 26 28 54 28 65 29 2c 65 3d 65 7c 7c 43 2c 45 29 29 7b 69 66 28 31 31 21 3d 3d 70 26 26 28 75 3d 5a 2e 65 78 65 63 28 74 29 29 29 69 66 28 69 3d 75 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d 65 2e 67 65
                                                                                                                            Data Ascii: e(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.ge
                                                                                                                            2024-09-28 02:37:47 UTC1369INData Raw: 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65
                                                                                                                            Data Ascii: trHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase
                                                                                                                            2024-09-28 02:37:47 UTC1369INData Raw: 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 26 26 21 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 20 66 69 65 6c 64 73 65 74 20 64 69 76 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d
                                                                                                                            Data Ascii: d"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElem
                                                                                                                            2024-09-28 02:37:47 UTC1369INData Raw: 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6f 7d 2c 62 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e
                                                                                                                            Data Ascii: push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.appendChild(e).inn
                                                                                                                            2024-09-28 02:37:47 UTC1369INData Raw: 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 76 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 4b 2e 74 65 73 74 28 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 61 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 63 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 2c 63 2e 63 61 6c 6c 28 65 2c 22 5b 73 21 3d 27 27 5d 3a 78 22 29 2c 73 2e 70 75 73 68 28 22 21
                                                                                                                            Data Ascii: ,e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.push("!


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            8192.168.2.449757188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:49 UTC737OUTGET /chat/wakdl HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Upgrade-Insecure-Requests: 1
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: navigate
                                                                                                                            Sec-Fetch-Dest: iframe
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:49 UTC728INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:49 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Vary: Accept-Encoding
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s97GnBAXVla7X%2FTNypH9hAzaAA2X5mLEpF4AlpF35%2BjhvQM1ce09VT8ZeVdKKGLDZcbnpP%2BvoKOk0Cxdk3U6xIKx%2FO%2FFvyyGx%2FTPjKfyTnzigJFTJ9Vi4BiJtmDCe6pdEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a8e3c314213-EWR
                                                                                                                            2024-09-28 02:37:49 UTC641INData Raw: 37 36 65 31 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 66 69 6c 65 72 65 61 64 65 72 20 62 6c 6f 62 75 72 6c 73 20 63 61 6e 76 61 73 20 74 6f 64 61 74 61 75 72 6c 6a 70 65 67 20 74 6f 64 61 74 61 75 72 6c 70 6e 67 20 74 6f 64 61 74 61 75 72 6c 77 65 62 70 20 6e 6f 2d 68 69 64 64 65 6e 73 63 72 6f 6c 6c 20 63 68 72 6f 6d 65 20 77 65 62 6b 69 74 20 77 69 6e 20 77 65 62 70 20 77 65 62 70 2d 61 6c 70 68 61 20 77 65 62 70 2d 61 6e 69 6d 61 74 69 6f 6e 20 77 65 62 70 2d 6c 6f 73 73 6c 65 73 73 22 3e 0d 3c 68 65 61 64 3e 0d 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 63 6c 61 73 73 3d 22 5f 5f 6d 65 74 65 6f 72 2d 63 73 73 5f 5f 22 0d 20 20 20 20 20 20 20 20 20 20 68 72 65 66
                                                                                                                            Data Ascii: 76e1<html class="filereader bloburls canvas todataurljpeg todataurlpng todataurlwebp no-hiddenscroll chrome webkit win webp webp-alpha webp-animation webp-lossless"><head> <link rel="stylesheet" type="text/css" class="__meteor-css__" href
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 6e 74 3d 22 79 65 73 22 3e 0d 0d 20 20 20 20 3c 21 2d 2d 20 66 61 76 69 63 6f 6e 20 2d 2d 3e 0d 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0d 0d 20 20 20 20 3c 62 61 73 65 20 74 61 72 67 65 74 3d 22 5f 70 61 72 65 6e 74 22 3e 0d 0d 20 20 20 20 3c 74 69 74 6c 65 3e 53 75 70 70 6f 72 74 3c 2f 74 69 74 6c 65 3e 0d 0d 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 34 2e 37 2e 30 2f 63 73 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2e 6d 69 6e 2e 63 73
                                                                                                                            Data Ascii: nt="yes"> ... favicon --> <link rel="shortcut icon" href="/favicon.ico"> <base target="_parent"> <title>Support</title> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.cs
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 37 20 39 2e 37 20 39 2e 37 7a 22 3e 3c 2f 70 61 74 68 3e 0d 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 20 31 37 68 32 76 31 37 68 2d 32 7a 22 3e 3c 2f 70 61 74 68 3e 0d 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0d 0d 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 65 69 2d 70 61 70 65 72 63 6c 69 70 2d 69 63 6f 6e 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 3e 0d 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 38 20 33 39 2e 36 63 2d 31 2e 35 20 30 2d 33 2e 31 2d 2e 36 2d 34 2e 32 2d 31 2e 38 2d 32 2e 33 2d 32 2e 33 2d 32 2e 33 2d 36 2e 31 20 30 2d 38 2e 35 6c 31 37 2d 31 37 63 33 2e 31 2d 33 2e 31 20 38 2e 32 2d 33 2e 31 20 31 31 2e 33 20 30 20 33 2e 31 20 33
                                                                                                                            Data Ascii: 7 9.7 9.7z"></path> <path d="M24 17h2v17h-2z"></path> </symbol> <symbol id="ei-paperclip-icon" viewBox="0 0 50 50"> <path d="M13.8 39.6c-1.5 0-3.1-.6-4.2-1.8-2.3-2.3-2.3-6.1 0-8.5l17-17c3.1-3.1 8.2-3.1 11.3 0 3.1 3
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 31 39 38 31 20 31 36 39 2e 39 36 38 37 35 2c 33 38 32 2e 37 32 36 34 34 39 20 31 33 39 2e 33 31 32 35 2c 33 37 31 2e 32 31 33 37 36 38 20 43 38 37 2e 31 30 39 33 37 35 2c 34 30 30 2e 30 30 33 39 35 39 20 34 32 2e 34 32 31 38 37 35 2c 34 30 30 2e 30 30 33 39 35 39 20 31 34 2e 30 38 31 34 30 31 32 2c 34 30 30 2e 30 30 33 39 35 39 20 43 31 31 2e 30 38 31 34 30 31 32 2c 34 30 30 2e 30 30 33 39 35 39 20 34 32 2e 34 32 31 38 37 35 2c 33 36 31 2e 33 36 33 34 30 36 20 35 33 2e 34 33 37 35 2c 33 31 37 2e 30 31 39 39 32 38 20 43 32 30 2e 30 36 32 35 2c 32 38 33 2e 36 30 35 30 37 32 20 2d 32 2e 38 34 32 31 37 30 39 34 65 2d 31 34 2c 32 34 31 2e 31 31 31 31 31 31 20 2d 32 2e 38 34 32 31 37 30 39 34 65 2d 31 34 2c 31 39 34 2e 36 38 35 39 39 20 43 2d 32 2e 38 34 32 31
                                                                                                                            Data Ascii: 1981 169.96875,382.726449 139.3125,371.213768 C87.109375,400.003959 42.421875,400.003959 14.0814012,400.003959 C11.0814012,400.003959 42.421875,361.363406 53.4375,317.019928 C20.0625,283.605072 -2.84217094e-14,241.111111 -2.84217094e-14,194.68599 C-2.8421
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 3e 3c 2f 70 61 74 68 3e 0d 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 34 22 0d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 35 37 36 20 33 32 30 63 30 20 33 34 2e 33 2d 31 34 2e 31 20 36 36 2d 33 38 20 39 32 20 31 33 2e 34 20 33 30 2e 33 20 33 35 2e 35 20 35 34 2e 32 20 33 35 2e 38 20 35 34 2e 35 61 38 20 38 20 30 20 30 20 31 20 31 2e 35 20 38 2e 37 20 37 2e 38 38 20 37 2e 38 38 20 30 20 30 20 31 2d 37 2e 33 20 34 2e 38 63 2d 33 36 2e 36 20 30 2d 36 36 2e 39 2d 31 32 2e 33 2d 38 38 2e 37 2d 32 35 2d 33 32 2e 32 20 31 35 2e 38 2d 37 30 2e 33 20 32 35 2d 31 31 31 2e 33 20 32 35 2d 38 36 2e 32 20 30 2d 31 36 30 2e 32 2d 34 30 2e 34 2d 31 39 31 2e 37 2d 39 37 2e 39 41 32 39 39 2e 38 32 20 32 39
                                                                                                                            Data Ascii: ></path> <path opacity="0.4" d="M576 320c0 34.3-14.1 66-38 92 13.4 30.3 35.5 54.2 35.8 54.5a8 8 0 0 1 1.5 8.7 7.88 7.88 0 0 1-7.3 4.8c-36.6 0-66.9-12.3-88.7-25-32.2 15.8-70.3 25-111.3 25-86.2 0-160.2-40.4-191.7-97.9A299.82 29
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 32 2c 33 39 37 2e 39 30 36 31 39 35 20 32 35 32 2e 33 35 31 39 38 38 2c 33 39 36 2e 31 35 33 34 32 31 20 4c 31 37 34 2e 39 39 33 34 39 39 2c 33 35 30 2e 34 30 39 39 37 31 20 43 31 36 34 2e 34 34 37 39 31 35 2c 33 34 34 2e 31 37 34 31 38 31 20 31 35 31 2e 31 32 30 36 35 35 2c 33 34 35 2e 33 34 34 31 37 39 20 31 34 31 2e 38 32 37 36 33 39 2c 33 35 33 2e 32 37 37 35 38 20 4c 31 34 30 2e 37 31 30 31 35 35 2c 33 35 34 2e 32 35 32 38 33 39 20 43 31 32 33 2e 31 37 30 31 34 36 2c 33 36 39 2e 35 30 39 34 37 38 20 31 30 32 2e 36 31 36 39 39 35 2c 33 38 31 2e 31 32 36 39 39 32 20 37 38 2e 39 33 35 34 32 32 33 2c 33 38 39 2e 31 30 33 38 33 34 20 4c 37 38 2e 30 39 33 2c 33 38 39 2e 33 38 34 20 4c 37 38 2e 32 36 30 39 32 36 34 2c 33 38 39 2e 31 31 36 33 36 36 20 43 39
                                                                                                                            Data Ascii: 2,397.906195 252.351988,396.153421 L174.993499,350.409971 C164.447915,344.174181 151.120655,345.344179 141.827639,353.27758 L140.710155,354.252839 C123.170146,369.509478 102.616995,381.126992 78.9354223,389.103834 L78.093,389.384 L78.2609264,389.116366 C9
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 61 74 68 20 64 3d 22 4d 31 34 20 31 31 6c 38 2d 38 56 32 63 30 2d 31 20 30 20 30 20 30 20 30 6c 2d 32 2d 32 68 2d 31 6c 2d 38 20 38 2d 38 2d 38 48 32 43 31 20 30 20 32 20 30 20 32 20 30 4c 30 20 32 76 31 6c 38 20 38 2d 38 20 38 76 31 63 30 20 31 20 30 20 30 20 30 20 30 6c 32 20 32 68 31 6c 38 2d 38 20 38 20 38 68 31 6c 32 2d 32 76 2d 31 6c 2d 38 2d 38 7a 22 3e 3c 2f 70 61 74 68 3e 0d 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0d 0d 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 69 63 6f 6e 2d 73 6d 69 6c 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 3e 0d 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 35 20 38 43 31 35 2e 36 20 38 20 38 20 31 35 2e 36 20 38 20 32 35 73 37 2e 36 20 31 37 20 31 37 20 31
                                                                                                                            Data Ascii: ath d="M14 11l8-8V2c0-1 0 0 0 0l-2-2h-1l-8 8-8-8H2C1 0 2 0 2 0L0 2v1l8 8-8 8v1c0 1 0 0 0 0l2 2h1l8-8 8 8h1l2-2v-1l-8-8z"></path> </svg> <symbol id="icon-smile" viewBox="0 0 50 50"> <path d="M25 8C15.6 8 8 15.6 8 25s7.6 17 17 1
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 20 73 74 72 6f 6b 65 3d 22 23 43 43 43 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 0d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 39 20 31 63 31 2e 39 35 38 20 31 2e 36 32 20 33 2e 39 35 38 20 31 2e 36 32 20 36 20 30 22 20 73 74 72 6f 6b 65 3d 22 23 43 43 43 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 3e 3c 2f 70 61 74 68 3e 0d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 66 69 6c 6c 3d 22 23 32 33 43 37 34 39 22 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 33 22 20 72 3d 22 32 22 3e 3c 2f 63 69 72 63 6c 65 3e 0d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 63 69
                                                                                                                            Data Ascii: stroke="#CCC" stroke-width="2" stroke-linecap="round"></path> <path d="M9 1c1.958 1.62 3.958 1.62 6 0" stroke="#CCC" stroke-linecap="round"></path> <circle fill="#23C749" cx="18" cy="13" r="2"></circle> <ci
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 63 2d 2e 30 30 31 2d 33 37 2e 36 37 34 2d 33 32 2e 30 37 33 2d 37 32 2e 35 37 31 2d 37 32 2e 37 32 37 2d 37 32 2e 35 37 31 68 2d 37 30 2e 31 35 63 38 2e 37 32 2d 31 37 2e 33 36 38 20 32 30 2e 36 39 35 2d 33 38 2e 39 31 31 20 32 30 2e 36 39 35 2d 36 39 2e 38 31 37 43 33 38 39 2e 38 31 39 20 33 34 2e 36 37 32 20 33 36 36 2e 35 31 38 20 30 20 33 30 36 2e 39 31 20 30 63 2d 32 39 2e 39 39 35 20 30 2d 34 31 2e 31 32 36 20 33 37 2e 39 31 38 2d 34 36 2e 38 32 39 20 36 37 2e 32 32 38 2d 33 2e 34 30 37 20 31 37 2e 35 31 31 2d 36 2e 36 32 36 20 33 34 2e 30 35 32 2d 31 36 2e 35 32 35 20 34 33 2e 39 35 31 43 32 31 39 2e 39 38 36 20 31 33 34 2e 37 35 20 31 38 34 20 31 39 32 20 31 36 32 2e 33 38 32 20 32 30 33 2e 36 32 35 63 2d 32 2e 31 38 39 2e 39 32 32 2d 34 2e 39 38
                                                                                                                            Data Ascii: c-.001-37.674-32.073-72.571-72.727-72.571h-70.15c8.72-17.368 20.695-38.911 20.695-69.817C389.819 34.672 366.518 0 306.91 0c-29.995 0-41.126 37.918-46.829 67.228-3.407 17.511-6.626 34.052-16.525 43.951C219.986 134.75 184 192 162.382 203.625c-2.189.922-4.98
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 36 38 2e 30 31 34 63 2d 33 2e 33 36 33 2d 2e 30 33 2d 33 35 2e 35 30 38 2d 2e 30 30 33 2d 34 31 2e 30 31 33 20 30 43 32 36 30 2e 35 39 33 2d 2e 30 30 37 20 31 39 35 2e 39 31 37 20 34 30 20 31 36 30 20 34 30 68 2d 31 30 2e 38 34 35 63 2d 35 2e 36 34 2d 34 2e 39 37 35 2d 31 33 2e 30 34 32 2d 38 2d 32 31 2e 31 35 35 2d 38 48 33 32 43 31 34 2e 33 32 37 20 33 32 20 30 20 34 36 2e 33 32 37 20 30 20 36 34 76 32 35 36 63 30 20 31 37 2e 36 37 33 20 31 34 2e 33 32 37 20 33 32 20 33 32 20 33 32 68 39 36 63 31 37 2e 36 37 33 20 30 20 33 32 2d 31 34 2e 33 32 37 20 33 32 2d 33 32 76 2d 31 32 2e 34 38 31 63 2e 38 35 2e 32 36 36 20 31 2e 36 35 33 2e 35 34 39 20 32 2e 33 38 32 2e 38 35 36 43 31 38 34 20 33 32 30 20 32 31 39 2e 39 38 36 20 33 37 37 2e 32 35 20 32 34 33 2e
                                                                                                                            Data Ascii: 68.014c-3.363-.03-35.508-.003-41.013 0C260.593-.007 195.917 40 160 40h-10.845c-5.64-4.975-13.042-8-21.155-8H32C14.327 32 0 46.327 0 64v256c0 17.673 14.327 32 32 32h96c17.673 0 32-14.327 32-32v-12.481c.85.266 1.653.549 2.382.856C184 320 219.986 377.25 243.


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            9192.168.2.449758188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:49 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:49 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:37:49 UTC652INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:49 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HtEr0e02e1d3uY2cB9rJ8ZSVH791Uwg0Ca55ITLWdeARlihMDBfJ1jfevnIAJxCPjn8mYpqflne%2B4TVTtlDUK33Ud26edaEQZpjBTP3Ui4K44OgOfNvprRWtonktM3hLpA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a8e69877291-EWR
                                                                                                                            2024-09-28 02:37:49 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            10192.168.2.449759188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:49 UTC400OUTGET /js/jquery.min.js HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:49 UTC667INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:49 GMT
                                                                                                                            Content-Type: application/javascript
                                                                                                                            Content-Length: 89476
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:24:15 GMT
                                                                                                                            ETag: "66f56e8f-15d84"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: HIT
                                                                                                                            Age: 2
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TADZfV68l0grKtuuimJ5BgGVApnD6q1I%2B%2FiZmpFrC6GNtqbRCW3bYp4iXU672YfAQogslIhsHVJxBQfWDvLj8SH4G3L7gzsW2oP9%2BI7DRcC3eC3s%2BMfPKETL8pXlfrXACA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a8f6ea241de-EWR
                                                                                                                            2024-09-28 02:37:49 UTC702INData Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20
                                                                                                                            Data Ascii: /*! jQuery v3.5.1 | (c) JS Foundation and other contributors | jquery.org/license */!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 65 2e 77 69 6e 64 6f 77 7d 2c 45 3d 43 2e 64 6f 63 75 6d 65 6e 74 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 63 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68
                                                                                                                            Data Ascii: e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeCh
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 53 2e 65 78 74 65 6e 64 3d 53 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 6d 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26 28 61 3d 74 68 69 73 2c 73 2d
                                                                                                                            Data Ascii: this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]||{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]||{},s++),"object"==typeof a||m(a)||(a={}),s===u&&(a=this,s-
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 70 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 72 65 74 75 72 6e 20 67 28 61 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 79
                                                                                                                            Data Ascii: var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 46 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 49 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 57 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 46 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c
                                                                                                                            Data Ascii: +M+"*([>+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(only|
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 72 26 26 28 54 28 65 29 2c 65 3d 65 7c 7c 43 2c 45 29 29 7b 69 66 28 31 31 21 3d 3d 70 26 26 28 75 3d 5a 2e 65 78 65 63 28 74 29 29 29 69 66 28 69 3d 75 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d 65 2e
                                                                                                                            Data Ascii: ile(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61
                                                                                                                            Data Ascii: attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCa
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 26 26 21 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 20 66 69 65 6c 64 73 65 74 20 64 69 76 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c
                                                                                                                            Data Ascii: ned"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getEl
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6f 7d 2c 62 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69
                                                                                                                            Data Ascii: r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.appendChild(e).i
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 76 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 4b 2e 74 65 73 74 28 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 61 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 63 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 2c 63 2e 63 61 6c 6c 28 65 2c 22 5b 73 21 3d 27 27 5d 3a 78 22 29 2c 73 2e 70 75 73 68 28
                                                                                                                            Data Ascii: "),e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.push(


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            11192.168.2.449760188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:49 UTC591OUTGET /css/booking1/submit-new8.js HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: script
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:49 UTC664INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:49 GMT
                                                                                                                            Content-Type: application/javascript
                                                                                                                            Content-Length: 23021
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:26 GMT
                                                                                                                            ETag: "66f56ed6-59ed"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YYvyLYUILbJY%2BEQYTpUQSbIGBZsxOeR5NvSEPo5905k7VC7iz7ThjhCSUu16Ifjq3h%2FDAmAi83P3YRf79cYVsx%2FmpQYhw6q63AzStlDqSQB2WERMxfltc0jx6ffQQtxLPg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a906ee642bf-EWR
                                                                                                                            2024-09-28 02:37:49 UTC705INData Raw: 69 66 20 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 3c 20 31 30 32 34 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 70 68 6f 6e 65 2d 69 6e 70 75 74 73 2d 77 72 61 70 70 65 72 27 29 29 20 7b 0d 0a 20 20 20 20 6c 65 74 20 66 69 72 73 74 4c 6f 61 64 20 3d 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 69 6e 70 75 74 2d 74 72 61 6e 73 70 61 72 65 6e 74 27 29 3b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 66 69 72 73 74 4c 6f 61 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 2e 76 61 6c 75 65 20 3d 20 27 27 3b 0d 0a 20 20 20 20 20 20 20 20 66 69 72 73 74 4c 6f 61 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20
                                                                                                                            Data Ascii: if (window.innerWidth < 1024 && document.querySelector('.phone-inputs-wrapper')) { let firstLoad = true, input = document.querySelector('.input-transparent'); if (firstLoad) { input.value = ''; firstLoad = false;
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: b2 d0 b2 d0 be d0 b4 d0 b0 20 d1 82 d0 be d0 bb d1 8c d0 ba d0 be 20 d1 86 d0 b8 d1 84 d1 80 d0 b0 d0 bc d0 b8 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 2e 76 61 6c 75 65 20 3d 20 6e 75 6d 65 72 69 63 56 61 6c 75 65 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 63 72 6f 6c 6c 54 6f 45 72 72 6f 72 49 6e 70 75 74 28 29 20 7b 0d 0a 20 20 20 20 6c 65 74 20 65 72 72 6f 72 49 6e 70 75 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 69 66 20 28 65 72 72 6f 72 49 6e 70 75 74 73 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 65 74 20 66 69 72 73 74 45 72 72 6f 72 49 6e 70 75 74 20 3d 20 65 72 72 6f 72 49 6e
                                                                                                                            Data Ascii: input.value = numericValue; });}function scrollToErrorInput() { let errorInputs = document.querySelectorAll('.error'); if (errorInputs.length > 0) { let firstErrorInput = errorIn
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 65 72 72 6f 72 27 29 29 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20
                                                                                                                            Data Ascii: } else { if (inputWrappers[index].classList.add('error')) inputWrappers[index].classList.add('error'); inputWrappers[index].classList.remove('confirm'); }
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 20 20 20 20 6c 61 62 65 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 62 65 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0d 0a
                                                                                                                            Data Ascii: label.style.display = 'block'; error.style.display = 'none'; } else { wrapper.classList.remove('confirm'); wrapper.classList.add('error'); label.style.display = 'none';
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 42 48 3a 20 27 2d 35 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 44 3a 20 27 2d 34 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 42 3a 20 27 2d 34 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 59 3a 20 27 2d 39 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 45 3a 20 27 2d 35 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 5a 3a 20 27 2d 39 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 4a 3a 20 27 2d 36 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
                                                                                                                            Data Ascii: BH: '-575px', BD: '-475px', BB: '-450px', BY: '-900px', BE: '-500px', BZ: '-925px', BJ: '-625px',
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 59 3a 20 27 2d 31 33 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 5a 3a 20 27 2d 31 34 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 49 3a 20 27 2d 31 31 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 44 3a 20 27 2d 31 30 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 4b 3a 20 27 2d 31 34 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 4a 3a 20 27 2d 31 34 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 4d 3a 20 27 2d 31 35 30 30 70 78 27
                                                                                                                            Data Ascii: px', CY: '-1375px', CZ: '-1400px', CI: '-1100px', CD: '-1000px', DK: '-1475px', DJ: '-1450px', DM: '-1500px'
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 47 4e 3a 20 27 2d 32 31 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 47 57 3a 20 27 2d 32 33 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 47 59 3a 20 27 2d 32 33 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 48 54 3a 20 27 2d 32 34 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 48 4d 3a 20 27 2d 32 34 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 48 4e 3a 20 27 2d 32 34 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 48 4b 3a 20 27 2d 32 33 37 35 70 78 27 2c
                                                                                                                            Data Ascii: x', GN: '-2150px', GW: '-2325px', GY: '-2350px', HT: '-2475px', HM: '-2400px', HN: '-2425px', HK: '-2375px',
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 57 3a 20 27 2d 33 39 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 59 3a 20 27 2d 33 39 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 56 3a 20 27 2d 33 38 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 4c 3a 20 27 2d 33 36 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 54 3a 20 27 2d 33 38 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 48 3a 20 27 2d 33 35 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 51 3a 20 27 2d 33 37 35 30 70 78 27 2c 0d
                                                                                                                            Data Ascii: ', MW: '-3900px', MY: '-3950px', MV: '-3875px', ML: '-3625px', MT: '-3825px', MH: '-3575px', MQ: '-3750px',
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 53 3a 20 27 2d 34 35 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 41 3a 20 27 2d 34 33 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 47 3a 20 27 2d 34 34 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 59 3a 20 27 2d 34 36 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 45 3a 20 27 2d 34 33 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 48 3a 20 27 2d 34 34 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 4e 3a 20 27 2d 34 35 32 35 70 78 27 2c 0d 0a
                                                                                                                            Data Ascii: , PS: '-4575px', PA: '-4325px', PG: '-4400px', PY: '-4650px', PE: '-4350px', PH: '-4425px', PN: '-4525px',
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4c 4b 3a 20 27 2d 33 32 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 48 3a 20 27 2d 34 39 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 4d 3a 20 27 2d 34 35 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 44 3a 20 27 2d 34 39 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 52 3a 20 27 2d 35 31 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 4a 3a 20 27 2d 35 30 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 45 3a 20 27 2d 34 39 32 35 70 78 27 2c 0d 0a 20 20 20 20
                                                                                                                            Data Ascii: LK: '-3250px', SH: '-4975px', PM: '-4500px', SD: '-4900px', SR: '-5175px', SJ: '-5025px', SE: '-4925px',


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            12192.168.2.449761188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:49 UTC590OUTGET /css/booking1/blur_input.js HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: script
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:49 UTC666INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:49 GMT
                                                                                                                            Content-Type: application/javascript
                                                                                                                            Content-Length: 21605
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:24 GMT
                                                                                                                            ETag: "66f56ed4-5465"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ZxCv8u1a1%2BG6XcvnwCfy9sclSIEpo5H%2FBwd%2Fc16rNj03GoMtOBvaTDUAekEQGOLflyXeTYXZFFKzUjWuM1YhXyS7pWGN3tosKL1NNfXs4P%2BFTLP1NIaQEjILDprp2qPhA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a906a4d0c9c-EWR
                                                                                                                            2024-09-28 02:37:49 UTC703INData Raw: 0d 0a 63 6f 6e 73 74 20 63 68 65 63 6b 46 69 65 6c 64 73 20 3d 20 28 65 6c 65 6d 65 6e 74 2c 20 69 6e 64 65 78 2c 20 6c 65 6e 67 74 68 4f 66 49 6e 70 75 74 2c 20 63 68 65 63 6b 45 72 72 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 63 6f 6e 73 74 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 69 6e 70 75 74 2d 63 6f 6e 74 72 6f 6c 6c 65 64 27 29 3b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 20 3e 20 6c 65 6e 67 74 68 4f 66 49 6e 70 75 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 2e 74 79 70 65 20 21 3d 3d 20 27 65 6d 61 69 6c 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 57
                                                                                                                            Data Ascii: const checkFields = (element, index, lengthOfInput, checkErr) => { const inputWrappers = document.querySelectorAll('.input-controlled'); if (element.value.length > lengthOfInput) { if (element.type !== 'email') { inputW
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 63 68 65 63 6b 45 72 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 65 72 72 6f 72 27 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 28 63 68 65 63 6b 45 72 72 29 20 7b 0d 0a 20 20 20 20
                                                                                                                            Data Ascii: checkErr) { inputWrappers[index].classList.add('error') } inputWrappers[index].classList.remove('confirm'); } } } else { if(checkErr) {
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 6d 61 69 6c 50 61 74 74 65 72 6e 20 3d 20 2f 5e 5b 5e 5c 73 40 5d 2b 40 5b 5e 5c 73 40 5d 2b 5c 2e 5b 5e 5c 73 40 5d 2b 24 2f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 6d 61 69 6c 50 61 74 74 65 72 6e 2e 74 65 73
                                                                                                                            Data Ascii: ex].classList.add('confirm'); inputWrappers[index].classList.remove('error'); } else { const emailPattern = /^[^\s@]+@[^\s@]+\.[^\s@]+$/; if (emailPattern.tes
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 65 28 2f 5b 5e 30 2d 39 5d 2f 67 2c 20 27 27 29 3b 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 63 76 76 49 6e 70 75 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 62 6c 75 72 27 2c 20 28 65 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 33 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63
                                                                                                                            Data Ascii: e(/[^0-9]/g, '');; }); cvvInput.addEventListener('blur', (e) => { if (e.target.value.length === 3) { wrapper.classList.add('confirm'); wrapper.classList.remove('error'); } else { wrapper.c
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 0d 0a 20 20 20 20 65 78 70 69 72 79 49 6e 70 75 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 69 6e 70 75 74 27
                                                                                                                            Data Ascii: wrapper.classList.add('error'); wrapper.classList.remove('confirm'); } else { wrapper.classList.remove('error'); wrapper.classList.add('confirm'); } }) expiryInput.addEventListener('input'
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 5d 7b 31 31 7d 28 3f 3a 5b 30 2d 39 5d 7b 32 2c 33 7d 29 3f 24 2f 2c 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 63 61 72 64 49 6d 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 69 6e 70 75 74 27 2c 20 28 65 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 72 65 6d 6f 76 65 20 73 79 6d 62 6f 6c 20 69 66 20 69 74 20 69 73 20 6e 6f 20 61 20 6e 75 6d 62 65 72 20 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 6b 65 79 2e 6d 61 74 63 68 28 2f 5b 30 2d 39 5d 2f 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 5d 2f 67 2c 20 27 27 29 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 0d 0a 20 20 20 20 63 61 72 64 4e 75 6d 62 65 72 2e 61 64 64 45 76 65 6e 74 4c
                                                                                                                            Data Ascii: ]{11}(?:[0-9]{2,3})?$/, }; cardImg.addEventListener('input', (e) => { //remove symbol if it is no a number if (!e.key.match(/[0-9]/)) { input.replace(/[^0-9]/g, '') } }) cardNumber.addEventL
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 20 20 20 20 20 20 20 73 79 73 74 65 6d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 20 2f 2f 20 72 65 74 75 72 6e 20 70 61 79 6d 65 6e 74 20 6e 61 6d 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 72 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 61 63 74 69 76 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 72 64 49 6d 67 2e 73 72 63 20 3d 20 60 2f 63 73 73 2f 62 6f 6f 6b 69 6e 67 31 2f 69 6d 67 2f 63 61 72 64 73 2f 24 7b 73 79 73 74 65 6d 7d 2e 73 76 67 60 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 72 64 50 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 69 6e 61 63 74 69 76 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70
                                                                                                                            Data Ascii: system.toUpperCase(); // return payment name cardImg.classList.add('active'); cardImg.src = `/css/booking1/img/cards/${system}.svg`; cardPlaceholder.classList.add('inactive'); wrap
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 4f 70 74 69 6f 6e 2e 64 61 74 61 73 65 74 2e 63 61 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 6c 65 74 20 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 3d 20 73 65 6c 65 63 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 6c 65 74 20 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 4e 75 6d 62 65 72 20 3d 20 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 2b 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 62 61 63 6b 67 72 6f 75 6e 64 50 6f 73 69 74 69 6f 6e 73 20 3d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 46 3a 20 27 2d 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 4c 3a 20 27 2d 31 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 44 5a 3a 20 27 2d 31 35 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20
                                                                                                                            Data Ascii: Option.dataset.call; let selectedIndex = select.selectedIndex; let selectedOptionNumber = selectedIndex + 1; const backgroundPositions = { AF: '-50px', AL: '-125px', DZ: '-1550px',
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 20 20 43 4e 3a 20 27 2d 31 32 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 58 3a 20 27 2d 31 33 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 43 3a 20 27 2d 39 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 4f 3a 20 27 2d 31 32 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 4b 4d 3a 20 27 2d 32 39 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 47 3a 20 27 2d 31 30 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 4b 3a 20 27 2d 31 31 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 52 3a 20 27 2d 31 32 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 52 3a 20 27 2d 32 34 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 55
                                                                                                                            Data Ascii: CN: '-1200px', CX: '-1350px', CC: '-975px', CO: '-1225px', KM: '-2975px', CG: '-1050px', CK: '-1125px', CR: '-1250px', HR: '-2450px', CU
                                                                                                                            2024-09-28 02:37:49 UTC1369INData Raw: 20 20 20 20 47 4e 3a 20 27 2d 32 31 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 47 57 3a 20 27 2d 32 33 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 47 59 3a 20 27 2d 32 33 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 54 3a 20 27 2d 32 34 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 4d 3a 20 27 2d 32 34 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 4e 3a 20 27 2d 32 34 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 4b 3a 20 27 2d 32 33 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 55 3a 20 27 2d 32 35 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 49 53 3a 20 27 2d 32 37 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20
                                                                                                                            Data Ascii: GN: '-2150px', GW: '-2325px', GY: '-2350px', HT: '-2475px', HM: '-2400px', HN: '-2425px', HK: '-2375px', HU: '-2500px', IS: '-2725px',


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            13192.168.2.449763104.17.25.144435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:49 UTC585OUTGET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
                                                                                                                            Host: cdnjs.cloudflare.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: text/css,*/*;q=0.1
                                                                                                                            Sec-Fetch-Site: cross-site
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: style
                                                                                                                            Referer: https://ramadawynd.com/
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            2024-09-28 02:37:50 UTC918INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:50 GMT
                                                                                                                            Content-Type: text/css; charset=utf-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Access-Control-Allow-Origin: *
                                                                                                                            Cache-Control: public, max-age=30672000
                                                                                                                            ETag: W/"5eb03e5f-7918"
                                                                                                                            Last-Modified: Mon, 04 May 2020 16:10:07 GMT
                                                                                                                            cf-cdnjs-via: cfworker/kv
                                                                                                                            Cross-Origin-Resource-Policy: cross-origin
                                                                                                                            Timing-Allow-Origin: *
                                                                                                                            X-Content-Type-Options: nosniff
                                                                                                                            CF-Cache-Status: HIT
                                                                                                                            Age: 639642
                                                                                                                            Expires: Thu, 18 Sep 2025 02:37:50 GMT
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s1PCttu%2FE%2FZApFvqagXnZB33EHv7DBzQmBnLCGVOfa9aa8r2medbWVYszwUKm3U7%2FnKF%2F%2BIAOa9XgV6BQEqLXGTba4xF4Ax4SJ06soJJhI3xVPp3ccNAkuIAOCRcMsYPErb4mF1r"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Strict-Transport-Security: max-age=15780000
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a93ef1c0f77-EWR
                                                                                                                            2024-09-28 02:37:50 UTC451INData Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37
                                                                                                                            Data Ascii: 7918/*! * Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20
                                                                                                                            Data Ascii: ?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f
                                                                                                                            Data Ascii: ransform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{-ms-filter:"pro
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22
                                                                                                                            Data Ascii: lute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{content:"
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63
                                                                                                                            Data Ascii: e{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:before{c
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65
                                                                                                                            Data Ascii: ward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forward:be
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d
                                                                                                                            Data Ascii: 70"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b
                                                                                                                            Data Ascii: square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:before{
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65
                                                                                                                            Data Ascii: y-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-underline
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66
                                                                                                                            Data Ascii: before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscope:bef


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            14192.168.2.449771188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:50 UTC595OUTGET /css/chat.css HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: text/css,*/*;q=0.1
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: style
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:50 UTC650INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:50 GMT
                                                                                                                            Content-Type: text/css
                                                                                                                            Content-Length: 108836
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:08 GMT
                                                                                                                            ETag: "66f56ec4-1a924"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ckXFrreFWI0fRfEf3sn3D5BqGUNYdVdiAsSsSry6gklPp7Noe3bxI0Oaq0ZxorIVffJkNFS9%2BmKq6a5Y1dyy9HD53grYJenFD%2FdRa9bPRPyYfK0XCMbHWtk7JAVnGrzcTg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a9698d6c3f3-EWR
                                                                                                                            2024-09-28 02:37:50 UTC719INData Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0d 0a 68 74 6d 6c 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 0d 0a 7d 0d 0a 0d 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20
                                                                                                                            Data Ascii: /*! normalize.css v3.0.2 | MIT License | git.io/normalize */html { font-family: sans-serif; -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%}body { margin: 0}article, aside, details, figcaption, figure, footer,
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 64 66 6e 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 0d 0a 7d 0d 0a 0d 0a 6d 61 72 6b 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 30 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 0d 0a 7d 0d 0a 0d 0a 73 6d 61 6c 6c 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 30 25 0d 0a 7d 0d 0a 0d 0a 73 75 62 2c 20 73 75 70 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 0d 0a 7d 0d 0a 0d 0a 73 75 70 20 7b 0d 0a 20 20 20 20 74 6f 70 3a 20 2d 2e
                                                                                                                            Data Ascii: dfn { font-style: italic}mark { background: #ff0; color: #000}small { font-size: 80%}sub, sup { font-size: 75%; line-height: 0; position: relative; vertical-align: baseline}sup { top: -.
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 6c 64 3b 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 0d 0a 7d 0d 0a 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 0d 0a 7d 0d 0a 0d 0a 66 69 65 6c 64 73 65 74 20
                                                                                                                            Data Ascii: ld; -moz-box-sizing: content-box; -webkit-box-sizing: content-box; box-sizing: content-box}input[type=search]::-webkit-search-cancel-button, input[type=search]::-webkit-search-decoration { -webkit-appearance: none}fieldset
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 20 2e 37 35 65 6d 0d 0a 7d 0d 0a 0d 0a 2e 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 2e 66 61 2d 77 2d 31 33 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 2e 38 31 32 35 65 6d 0d 0a 7d 0d 0a 0d 0a 2e 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 2e 66 61 2d 77 2d 31 34 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 2e 38 37 35 65 6d 0d 0a 7d 0d 0a 0d 0a 2e 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 2e 66 61 2d 77 2d 31 35 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 2e 39 33 37 35 65 6d 0d 0a 7d 0d 0a 0d 0a 2e 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 2e 66 61 2d 77 2d 31 36 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 65 6d 0d 0a 7d 0d 0a 0d 0a 2e 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 2e 66 61 2d 77 2d 31 37 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31
                                                                                                                            Data Ascii: .75em}.svg-inline--fa.fa-w-13 { width: .8125em}.svg-inline--fa.fa-w-14 { width: .875em}.svg-inline--fa.fa-w-15 { width: .9375em}.svg-inline--fa.fa-w-16 { width: 1em}.svg-inline--fa.fa-w-17 { width: 1
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 76 65 74 69 63 61 20 4e 65 75 65 2c 20 73 61 6e 73 2d 73 65 72 69 66 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 0d 0a 7d 0d 0a 0d 0a 3a 3a 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 62 65 62 65 63 33 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 0d 0a 7d 0d 0a 0d 0a 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 62 65 62 65 63 33 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 0d 0a 7d 0d 0a 0d 0a 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 62 65 62 65 63 33 3b 0d 0a 20 20 20 20 6f 70 61 63 69
                                                                                                                            Data Ascii: vetica Neue, sans-serif}body { line-height: 1.5}::input-placeholder { color: #bebec3; opacity: 1}::-webkit-input-placeholder { color: #bebec3; opacity: 1}::-moz-placeholder { color: #bebec3; opaci
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 6f 6a 69 6f 6e 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 2e 35 65 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 2e 35 65 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 2d 2e 34 65 78 20 2e 30 35 65 6d 20 30 3b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 69 6f 6e 2d 73 68 61 6b 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 73 68 61 6b 65 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 73 68 61 6b 65 3b 0d 0a 20 20 20 20 2d 77 65 62
                                                                                                                            Data Ascii: ojione { font-size: inherit; height: 2.5ex; width: 2.5ex; display: inline-block; margin: -.4ex .05em 0; vertical-align: middle}.animation-shake { -webkit-animation-name: shake; animation-name: shake; -web
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 61 74 65 58 28 2d 32 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 70 78 29 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61
                                                                                                                            Data Ascii: ateX(-2px); transform: translateX(-2px) } to { -webkit-transform: translateX(0); transform: translateX(0) }}@keyframes shake { 0% { -webkit-transform: translateX(0); transform: transla
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 31 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 61 70 70 65 61 72 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 68 69 64 65 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 30 70 78 29 3b
                                                                                                                            Data Ascii: 1 }}@keyframes appear { 0% { opacity: 0 } to { opacity: 1 }}@-webkit-keyframes hide { 0% { opacity: 1 } to { opacity: 0; -webkit-transform: translateY(-20px);
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 65 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 74 75 72 6e 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 74 75 72 6e 29 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 68 6f 77 2d 73 6d 61 6c 6c 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a
                                                                                                                            Data Ascii: e { 0% { -webkit-transform: rotate(0deg); transform: rotate(0deg) } to { -webkit-transform: rotate(1turn); transform: rotate(1turn) }}@-webkit-keyframes show-small { 0% { opacity:
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 61 6d 65 73 20 73 68 6f 77 2d 66 72 6f 6d 2d 72 69 67 68 74 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 31 30 70 78 29 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 29 0d 0a 20 20 20 20 7d 0d
                                                                                                                            Data Ascii: ames show-from-right { 0% { opacity: 0; -webkit-transform: translate(10px); transform: translate(10px) } to { opacity: 1; -webkit-transform: translate(0); transform: translate(0) }


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            15192.168.2.449772188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:50 UTC409OUTGET /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:50 UTC603INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:50 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rItUmhpylsLwgkEshd2G5kHfkMvXd0yPMCHcBbVSbuX5FD96AKwnKWsHyeG9R2DTvgIHrXJd7wMz3Ou9odZCJB8gYqhounGVvMqDaL%2FvDF7OA4tvYcd9JGFCaew0fIHE%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a970d19428f-EWR
                                                                                                                            2024-09-28 02:37:50 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            16192.168.2.449773188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:50 UTC649OUTGET /img/support-open.png HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: image
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:50 UTC651INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:50 GMT
                                                                                                                            Content-Type: image/png
                                                                                                                            Content-Length: 21504
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:24:07 GMT
                                                                                                                            ETag: "66f56e87-5400"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Uaqlp126WT2eH723Rps3mDPHMkV0GioLRJBfC%2F2As0%2F3tyz74KPMsUoG4ZNBPIZ2zIVesdOBwIu5op%2Fs9fLl8wCsjOyOedzQQSj9rTlBCHODZGgORb8vEo9kC4R0HAyEA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a971adc42fb-EWR
                                                                                                                            2024-09-28 02:37:50 UTC718INData Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 01 00 00 02 01 08 06 00 00 00 d0 e6 6c 61 00 00 52 84 49 44 41 54 78 da ed 9d 07 9c 15 d5 d9 ff d7 92 98 f7 4d 35 d1 57 d9 7b 97 62 b0 04 4b 54 a2 69 c6 5e 62 8c 31 1a 8d 31 51 63 d7 74 35 89 c6 e4 1f 31 89 1a 4d 31 11 81 7b 67 29 8b 88 20 0b 88 02 4a 11 50 51 14 11 a9 0a 82 d2 91 26 65 eb cc dc 7a fe f3 cc b2 06 09 e5 ee ee 9d 99 33 33 df df e7 f3 fd e4 7d a3 81 dd 33 67 ce f3 cc 73 9e 52 51 81 10 42 08 21 84 10 d2 53 3d 0d f5 91 aa 47 9a 2b 13 d5 4d c7 57 19 f6 b9 89 94 f9 fd 44 da ba 29 99 36 ef 4c a6 ac bf 56 a5 ad 54 32 6d 0d 4b 18 e6 d3 55 29 eb 39 e7 ff 7e c5 f9 e7 b3 93 86 f5 8e f3 9f 2b 9c ff 7f eb 4e 64 1d d4 4e 64 77 f1 ef 2d df fe 67 cc 96 3f 53 fe 6c f9 3b dc bf 2b 65 f6 73 fe de fb 93
                                                                                                                            Data Ascii: PNGIHDRlaRIDATxM5W{bKTi^b11Qct51M1{g) JPQ&ez33}3gsRQB!S=G+MWD)6LVT2mKU)9~+NdNdw-g?Sl;+es
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 7d 1a 3e e7 7c e9 5f 97 4c 9b 4f 51 9b 0f 1e e0 ec 29 fb 49 67 8f 5d 93 1c 50 ff 59 de 38 84 10 0a 58 92 d8 e5 d6 ea a7 cd 71 24 f4 81 9f 09 86 2d 49 a4 f6 af ba 18 cd 9d 78 13 11 42 c8 27 75 eb df 74 88 73 f8 fe c2 31 fe 2f b5 24 76 61 94 20 f0 8a 83 17 ab 0c fb 67 32 07 82 37 14 21 84 ca 2c c9 e8 97 92 2e be f8 21 0c 11 02 99 aa 48 4f 02 84 10 ea 88 7a a9 fd 13 29 fb db ce a1 3a 82 41 3b 10 42 9a 13 86 35 3c 61 d8 17 30 eb 00 21 84 4a 54 65 3f fb 48 19 16 43 56 3f 44 88 75 6e a5 4a bf cc 71 bc e1 08 21 b4 93 24 74 ea 18 fe 1b 9d c3 f2 15 0c 06 44 99 ed 5d 29 af 3f b8 af fa 04 6f 3e 42 28 de 5f fd 46 e6 28 69 d7 eb b0 15 03 01 31 a3 c1 6d 5f 9c ce 7e 91 93 00 21 14 1b f5 a8 55 1f 95 24 bf ed dd fb 30 06 10 7b 12 69 6b b6 24 13 4a 02 2c 27 04 42 28 92 aa
                                                                                                                            Data Ascii: }>|_LOQ)Ig]PY8Xq$-IxB'uts1/$va g27!,.!HOz):A;B5<a0!JTe?HCV?DunJq!$tD])?o>B(_F(i1m_~!U$0{ik$J,'B(
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 1c a4 95 2a d3 f6 85 ce e6 b4 78 41 01 00 3c a7 b9 ca b0 cf c5 f2 20 3d 22 00 69 eb 4a a9 6b e5 c5 04 00 f0 8d 4c 32 65 5e 8c 05 42 81 2a 91 32 6f 73 36 63 91 17 12 00 c0 77 b2 55 69 f3 72 2c 11 0a 26 02 60 98 bf e5 25 04 00 08 94 bc c3 f5 58 24 e4 f3 15 80 79 27 2f 1f 00 80 16 14 13 86 79 2b 96 09 f9 55 05 40 1b 60 00 00 fd 7a 09 f4 c2 42 21 6f 73 00 d2 d6 5f 78 d9 00 00 b4 e5 01 2c 15 f2 44 55 29 eb 3e 5e 30 00 00 cd 9b 0a a5 ac 3f 63 b1 10 11 00 00 80 d8 5e 0d 98 bf c3 72 a1 32 25 01 5a 77 f3 52 01 00 84 8b aa b4 79 3b 16 0c 75 ec 0a c0 30 7f cd cb 04 00 10 ce aa 81 64 ca ba 11 4b 86 da 77 05 60 98 b7 f2 12 01 00 84 bb 8f 00 0d 85 50 db 1d 80 94 75 15 9d 00 01 00 a2 d1 59 50 e6 bb 60 d9 50 69 57 00 e9 cc 45 49 66 01 00 00 44 89 4c b2 da 3e 1f 0b 87 f6
                                                                                                                            Data Ascii: *xA< ="iJkL2e^B*2os6cwUir,&`%X$y'/y+U@`zB!os_x,DU)>^0?c^r2%ZwRy;u0dKw`PuYP`PiWEIfDL>
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: dc e5 6d 0a 34 98 8d 05 a5 f2 95 c7 6d d5 fb 8d 9c db 4f 1f c5 53 f2 e4 a5 15 b3 94 1d d2 d6 18 02 68 2b fc 14 96 bb 4c 4a 18 d6 19 ce a2 16 d9 54 b0 d7 ec fe d1 19 35 6a 49 5e e5 f8 ea 47 3b 68 b3 55 74 67 34 d0 83 00 fc 44 06 db 61 c1 3b a8 4a 43 fd af b3 98 ef b2 a1 60 77 48 1d b9 d4 f3 4b 59 1f 42 7b cb 1d 90 ab a1 ef 8c c9 f0 ee 80 0f 4e 80 b5 a1 73 bf ba 03 b1 e4 1d 89 02 a4 ed 7f b2 99 60 57 f4 18 64 b9 93 ec 68 e4 83 da 23 b9 2a b8 76 62 46 9a bc f0 3e 01 4d 84 b4 cc 03 a8 6e 3e c9 59 c4 3c 1b 09 76 ee e4 27 e5 7d 75 36 c6 1f 75 5c 32 c7 40 f2 06 a4 35 34 ef 17 78 40 a1 b2 da fc 1a 16 bd ad ea a5 f6 4f a6 ed 39 6c 20 68 e5 b8 ed c6 bf 21 83 e1 42 e5 d7 92 ad 38 03 e0 19 0b 7b 1a ea 23 18 f6 b6 25 03 fe 9e 8d 03 ad f5 fd c6 fc 9c 6a ce 61 a8 90 f7
                                                                                                                            Data Ascii: m4mOSh+LJT5jI^G;hUtg4Da;JC`wHKYB{Ns`Wdh#*vbF>Mn>Y<v'}u6u\2@54x@O9l h!B8{#%ja
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 54 d8 f0 fc 20 99 b2 ee 89 de 35 c0 80 fa cf 12 05 08 37 52 27 1f 96 04 c0 d5 0d 45 b7 2b dd 61 fd 79 6e 71 2f 33 7c f4 cd f0 38 03 cb ea 8a ea ab b4 9b 86 28 e6 06 24 0c eb 5e 1e 6c 78 91 04 ac 30 44 58 b7 5a 2d 5f fe 18 7f d8 91 93 1e b3 dd 99 0e f9 10 6c 62 29 b5 3d 7f 14 8d 85 e8 1b 60 f5 8a 8c 03 d0 bd b7 fa 94 e3 d9 6c e3 c1 86 b3 03 a0 8c bc 0d 43 73 1f 49 b0 fa 02 ed 59 61 0f 9c 3e c2 76 ef df c3 50 39 70 e5 33 38 02 31 67 eb c1 7d d5 27 a2 71 15 60 98 bf e3 81 86 b3 04 50 92 ac 74 96 7c d9 49 b8 97 bb 54 68 0b df 7b 3a e3 de c1 eb ac ac f3 e3 dd 3c 99 12 c2 78 63 ff 22 0a 51 80 03 9c 5f 66 1d 0f 33 7c 0e 80 ee 13 00 e5 10 bf 60 34 5f 4b d0 fe 28 97 e4 b9 48 f2 a8 ce 4e ee 2f a7 e2 08 c4 98 e5 32 6d 37 dc b9 00 29 fb 66 1e 64 b8 e8 e6 38 00 32 e6
                                                                                                                            Data Ascii: T 57R'E+aynq/3|8($^lx0DXZ-_lb)=`lCsIYa>vP9p381g}'q`Pt|ITh{:<xc"Q_f3|`4_K(HN/2m7)fd82
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 83 1f 3d 93 09 e4 20 91 76 c4 5f 18 c4 fa 03 b4 97 1f 8e cf b8 09 b5 7e eb bd c6 a2 db 52 9c 67 10 29 a6 fa e6 00 74 ed db 74 a8 f3 17 16 58 74 3d ee 17 83 08 2b 4a 33 a0 af 3c ce dd 22 40 47 e9 35 23 98 ce 9e d2 c4 88 f5 8f 14 79 b9 a6 f7 ab 37 c0 4f 59 70 3d f8 fb 2c ff 13 01 c4 e5 b8 6e 22 a5 80 00 e5 e2 c9 a5 fe 57 0c 64 0b 4a 9d 4a 92 60 b4 30 ac 1b fc aa 0a 98 ca 82 07 cf 49 8f d9 6e 73 1e bf d5 7b 0e 5f 10 00 e5 e4 a8 41 96 5a 16 40 44 4f 72 89 58 ff 48 31 c1 fb de 00 7d 1a 3e 47 55 80 1e 0c 0b a0 f1 c8 8c f7 98 53 0e e0 05 67 d5 06 53 e1 43 87 cf 68 55 09 74 ee 57 77 a0 d7 09 81 d7 b2 d0 c1 23 61 3c bf 13 8a 64 22 d9 f1 8f 12 3e 04 f0 8a 20 26 7f be b6 8e 68 40 a4 aa 04 52 d6 55 1e 77 09 34 9f 66 a1 83 67 ec bb fe 47 01 6e a4 ac 08 c0 73 82 e8 28
                                                                                                                            Data Ascii: = v_~Rg)ttXt=+J3<"@G5#y7OYp=,n"WdJJ`0Ins{_AZ@DOrXH1}>GUSgSChUtWw#a<d"> &h@RUw4fgGns(
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 48 72 db 34 7f 3e 22 be 31 9c 7c a2 10 d3 b8 d7 ce 81 89 6a fb 08 16 2a 18 24 d4 46 99 0f 00 b4 87 13 86 f8 53 5e 4c ab f1 70 d3 a5 bf d5 6d 6f 95 01 17 b3 50 c1 94 f9 f8 31 1a b4 d7 0c 5e 60 80 a8 e2 47 a3 b1 01 0b 98 23 10 66 12 29 fb db 7b 4e 0a 4c 59 7f 60 a1 fc e7 d4 e1 fe 24 05 9e 3f 8a 7c 00 80 a8 22 83 7e bc d6 eb 1b 88 26 86 3b 2f c0 bc 63 6f 49 81 8f b3 50 fe 73 d3 64 ef ef f3 6c e7 7c 90 09 85 ac 37 40 34 b9 d5 87 bc 80 c6 2c c9 81 a1 8e 3a a7 ac c1 7b 69 17 6c cf 65 a1 fc e7 81 d7 bc 4f 0a 9c b5 1e 0f 1e 20 ca 9c f6 84 3f 11 45 29 67 66 bd 43 5b 21 30 6b f7 1e 40 2f b5 2f 95 01 c1 e0 47 a7 c0 6a a6 06 02 90 5b 44 e7 40 2a 04 94 da 67 97 3e 80 64 0d b2 40 c1 20 5f e9 5e 4b 66 8f b3 d6 00 11 af 32 5a e3 fd 59 72 c7 8b 9c 25 a1 4e 0e ec 6f 26 77
                                                                                                                            Data Ascii: Hr4>"1|j*$FS^LpmoP1^`G#f){NLY`$?|"~&;/coIPsdl|7@4,:{ileO ?E)gfC[!0k@//Gj[D@*g>d@ _^Kf2ZYr%No&w
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 3f 70 00 7a 1a ea 23 ce 7f 51 64 51 82 c1 eb b0 a7 54 1f 84 65 2d ae 18 9f 51 3a 6a 5d 93 7f 8e 94 5c 3f e8 28 69 6f ed c7 ef ff a3 67 f4 dc 03 6b 1b c3 e3 4c 4b 77 49 af 25 dd 25 39 bf 43 4d a1 a2 97 da 7f 7b 52 a0 99 60 41 82 c3 eb d0 ef 5b 9b c3 73 78 f9 51 df dc 5e 9d f6 84 f7 5f c2 d2 a0 27 a7 a7 0f a0 c6 f8 94 25 df 4f e3 3d 10 96 7e 1b df 1c e5 83 13 f0 36 4e 40 d8 e9 d6 bf e9 10 d7 09 a8 4c 35 9f c0 82 04 47 33 d7 01 1f f0 e2 9a 82 b6 06 c0 8f 0e 72 df 1d 93 d1 f6 f7 f7 6b 1f 95 63 3a a2 57 fa c9 73 e1 68 90 e3 c7 3e 1a c2 75 40 74 ba 06 56 19 f6 b9 2c 48 70 6c f5 f8 0e 7c 4d 88 12 03 d7 34 14 b5 35 00 ff 7c dd fb 6c e8 a0 9b e3 ec 2d 2f a0 ab 0f 93 e3 24 ec ae ab fe 3e 2b 1c 19 f1 df f7 21 31 70 c0 02 9c 80 d0 77 0d 4c 5b 67 6d 6f 19 6c 5e ce 82
                                                                                                                            Data Ascii: ?pz#QdQTe-Q:j]\?(iogkLKwI%%9CM{R`A[sxQ^_'%O=~6N@L5G3rkc:Wsh>u@tV,Hpl|M45|l-/$>+!1pwL[gmol^
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: ff ed 27 33 6a 75 83 77 7b e0 c9 a5 7a ef 81 bd f1 c4 62 ef 3d 65 c9 95 e1 cc 8e 0c d9 56 27 a0 c8 62 04 8f 84 a1 bd d6 df 66 85 3b ab f7 a8 41 2d 86 30 57 c6 2f 42 09 fd de 3c 39 3c 89 4e 97 8f cb a8 a5 65 9c b4 27 7f 52 ed 92 7c 68 9a e1 c8 1e 18 b0 20 5f d6 3d 20 55 10 37 4d 0e 7f b2 db ca 7a ef cf 90 3e 73 a9 0c 88 10 05 9c 00 8d 98 b0 dc 7b 2f 5e 42 ca 51 58 ab 53 87 db 6a c4 db f9 0e 85 87 c5 e9 92 56 b0 87 0f 08 df ef 2f 09 60 b7 3f 9f 75 93 d7 da 2b 49 b6 7b d6 d9 73 e7 8f 0a 67 74 e8 b4 27 6c 55 db c1 3d 20 0e a0 94 81 86 71 0f ec cc d7 87 f9 13 4d 94 44 4d ce eb e8 39 01 5c 07 68 c0 03 af 79 9f 1c 28 07 e6 91 03 a3 b3 66 c7 d4 d8 ea ae e9 59 35 75 55 c1 6d ec b3 37 49 28 79 d8 e2 bc 3b 06 b5 8b 11 fe df 5f fa c4 5f fc 54 c6 ad 0d 2f 25 3a 60 39
                                                                                                                            Data Ascii: '3juw{zb=eV'bf;A-0W/B<9<Ne'R|h _= U7Mz>s{/^BQXSjV/`?u+I{sgt'lU= qMDM9\hy(fY5uUm7I(y;__T/%:`9
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 9c 85 d1 9b 2f 0e f6 af 5f b8 a8 31 ab 54 4f 1a 08 01 c4 a2 31 90 5b 16 b8 a2 f4 b0 7d 5b 7b 98 d4 67 8a ea 88 01 3c 53 7d 22 01 d6 90 9d 23 01 0f b0 30 fa 53 6a f8 ad 5c 7a 86 24 41 80 c0 92 01 4d 7f 7d 00 75 f1 53 a5 e5 02 75 31 2c b5 a6 a1 ed 11 8a 9f 4e 61 c2 a0 36 39 01 86 75 ef 87 9c 80 2a c3 fe 19 0b a3 3f 72 af b6 a7 9a 5c 2f c4 8b 0b e0 73 a8 d6 61 fa 5a 7f 5f f4 d7 37 94 1e 05 b8 79 72 fb 12 95 27 ad 20 41 50 1b 27 20 65 df fc 61 27 a0 9f fd 1d 16 26 1c 0c 5d e4 6f 34 40 c2 78 5f 7a 8c 6b 01 00 bf b8 fb 65 7f ab 81 44 97 b7 a1 c5 ef ec 0d ed 73 50 64 d4 f0 31 35 9c 25 7a 60 7f eb 43 4e 40 65 aa f9 04 16 25 1c 88 41 b6 7c 0e 13 4e c6 83 07 f0 85 d3 9e f0 ff 1a 60 fa 9a d2 df ef 6f 3f d9 b1 e6 65 b7 3f 4f 64 51 8f c4 c0 ed dd 02 5b 95 e8 d3 f0 39
                                                                                                                            Data Ascii: /_1TO1[}[{g<S}"#0Sj\z$AM}uSu1,Na69u*?r\/saZ_7yr' AP' ea'&]o4@x_zkeDsPd15%z`CN@e%A|N`o?e?OdQ[9


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            17192.168.2.449774188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:50 UTC603OUTGET /dist/new_card_design/jquery.min.js HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: script
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:50 UTC677INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:50 GMT
                                                                                                                            Content-Type: application/javascript
                                                                                                                            Content-Length: 89476
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:41 GMT
                                                                                                                            ETag: "66f56ee5-15d84"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hqKxQ%2Bagn6Iq36Km%2FMko%2FgDom742ZwZCmp%2F64QTI0g1TkoVoF%2B6OJn3zhHt2KM9zP4hE2kZeCTRHd%2B%2FAjLdBX2poR%2FKVVUA8LvpJaglD2nRjQ%2BZ8j7ed7Uh9RRkyOaZV4g%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a973eb80cae-EWR
                                                                                                                            2024-09-28 02:37:50 UTC692INData Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20
                                                                                                                            Data Ascii: /*! jQuery v3.5.1 | (c) JS Foundation and other contributors | jquery.org/license */!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 45 3d 43 2e 64 6f 63 75 6d 65 6e 74 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 63 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64
                                                                                                                            Data Ascii: l!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNod
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 53 2e 65 78 74 65 6e 64 3d 53 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 6d 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26
                                                                                                                            Data Ascii: evObject||this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]||{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]||{},s++),"object"==typeof a||m(a)||(a={}),s===u&&
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 70 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 72 65 74 75 72 6e 20 67 28 61 29 7d 2c 67 75 69 64 3a 31
                                                                                                                            Data Ascii: ,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 46 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 49 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 57 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 46 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70
                                                                                                                            Data Ascii: RegExp("^"+M+"*([>+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 72 26 26 28 54 28 65 29 2c 65 3d 65 7c 7c 43 2c 45 29 29 7b 69 66 28 31 31 21 3d 3d 70 26 26 28 75 3d 5a 2e 65 78 65 63 28 74 29 29 29 69 66 28 69 3d 75 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 70 29
                                                                                                                            Data Ascii: gth,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p)
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65
                                                                                                                            Data Ascii: ile(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 26 26 21 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 20 66 69 65 6c 64 73 65 74 20 64 69 76 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29
                                                                                                                            Data Ascii: )),"undefined"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 6e 6f 64 65 54 79 70 65 26 26 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6f 7d 2c 62 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 61 2e 61 70 70 65 6e 64
                                                                                                                            Data Ascii: nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.append
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 76 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 4b 2e 74 65 73 74 28 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 61 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 63 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 2c 63 2e 63 61 6c 6c 28 65 2c 22 5b 73 21 3d 27 27 5d 3a 78
                                                                                                                            Data Ascii: ":disabled"),e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            18192.168.2.449775188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:50 UTC673OUTGET /css/booking1/img/flags.png HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: image
                                                                                                                            Referer: https://ramadawynd.com/css/booking1/styles-new4.css
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:51 UTC651INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:50 GMT
                                                                                                                            Content-Type: image/png
                                                                                                                            Content-Length: 30680
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:29 GMT
                                                                                                                            ETag: "66f56ed9-77d8"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNn7W0m%2F9yoPn25PQnSnonnC%2BSPYWFA33VlaQqlYThrhmzhkmcSGxbkI7AlwqxcZlW3GEHL9pAgxTeQ42%2BVRMz0Le6Rca6hh815CL4LrcPFM285A711oE5eGjPgzSBwA0g%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a988c4842d7-EWR
                                                                                                                            2024-09-28 02:37:51 UTC718INData Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 18 63 08 03 00 00 00 f5 5f 72 a8 00 00 02 c7 50 4c 54 45 00 00 00 00 00 4e 9b 00 00 9e 00 00 00 00 00 08 00 05 09 00 06 00 02 00 6e 00 14 06 0e 37 02 7b ab 00 00 63 00 00 25 00 00 05 70 b6 53 c8 11 11 d0 00 01 d0 00 00 da 26 28 04 33 59 fc fc fb 04 31 5a 5f 00 28 03 04 04 d4 04 13 00 7e 78 00 81 26 05 06 68 e8 6b 69 80 13 11 00 06 3e 7c 07 0a 7d 08 0c 18 19 72 c2 08 32 f5 f5 f4 0d 0b 68 01 01 38 73 0f 13 2f 2f 28 0e 08 6c 2b 4c 87 04 16 48 da 31 31 ed 9f 00 81 00 00 d0 16 37 cb 11 1d 3f 3f 81 d7 1b 21 06 1d 7a 23 7a 10 03 76 2b e7 45 4b 43 23 33 d9 cf d4 cf 00 33 54 4f 6b 5c 59 91 12 09 08 0b 2d 7f d1 24 2e 65 6b a6 31 47 5c ea 7c 7e 1d 55 a4 00 01 5b d5 be 25 6d 6e 78 d3 3e 3d ee 76 7a 2d
                                                                                                                            Data Ascii: PNGIHDRc_rPLTENn7{c%pS&(3Y1Z_(~x&hki>|}r2h8s//(l+LH117??!z#zv+EKC#33TOk\Y-$.ek1G\|~U[%mnx>=vz-
                                                                                                                            2024-09-28 02:37:51 UTC1369INData Raw: ee 56 89 52 fd f6 80 8d ca a9 22 3c 91 a7 ac ad 68 32 7f 54 ac 7d f8 e7 20 f2 db 2b df 03 1f b7 d0 91 c9 a4 1b 33 00 00 00 c5 74 52 4e 53 00 19 02 02 26 1c 1d 09 17 3a fd f4 f7 e1 fe fd ec d7 fe 02 e2 3a 09 ea a8 fb fc e5 fe 3a 21 28 3a fd ec f8 ce 3a 49 fe fd aa 3a fe fb 3a c9 aa fd f9 f9 f2 fa fe 7f ab fd fe fe f8 ab ab fe 3a fe fd 02 ac fe f6 fd a4 4c fa fe 39 e0 ed 3a fe ed aa fe 3c 26 03 3a fd ac 3a fe 40 ac f7 64 68 0d 04 08 67 fe 05 fe 48 fe fc 67 b0 04 fd fa fd fd d2 3e f2 fd fe 48 fc fb 04 ee fc fc ab fe ef fe ab 37 fb 67 fe fa 05 ad f7 67 04 37 fe fe 05 fe fe fe 6c 04 04 fe fb ac 45 ad fe fe 04 fc 68 fe d7 fe 68 fe fe ac fe d9 64 fc 04 fe ab 92 04 fe 85 7a fe 0e fe 9c 66 fe fe ac fe fc f8 c0 03 ac 05 63 e2 fd a1 d6 bc 4a 00 00 73 fb 49 44 41 54
                                                                                                                            Data Ascii: VR"<h2T} +3tRNS&:::!(::I:::L9:<&::@dhgHg>H7gg7lEhhdzfcJsIDAT
                                                                                                                            2024-09-28 02:37:51 UTC1369INData Raw: 47 47 52 18 23 68 b2 ac 05 59 29 71 20 05 39 4b b3 36 5d 01 a4 71 aa aa 2a 55 1c 72 36 98 b5 2a 97 6a c5 8a aa d4 15 2b d0 a0 59 bb 1d 3b 15 54 2a af 90 b5 48 c1 31 a4 e9 8a 15 46 34 42 59 0b f0 ca 1a 7c d6 2e 22 c8 5a 86 4a c5 67 ad 88 25 b2 56 44 d4 4c a3 4e 86 b1 54 68 77 85 41 43 6b 43 68 17 b1 db c2 42 ab 13 84 56 00 42 0b 35 1c 06 54 c2 56 11 09 98 0e 8b 48 20 69 15 22 d2 48 a1 e6 49 18 9a 42 72 ee 23 11 e7 c8 ef c4 aa 38 d2 59 c5 cf 9f f5 fe 73 90 08 1c 7b 8e 1f 62 68 75 61 20 b4 c5 48 51 21 c3 c5 e8 a3 6d 61 e4 b5 93 af 30 dd 15 80 b9 ef 77 54 77 7c fe 30 7c 77 22 fe 4d 14 89 48 c3 c5 8f 08 a8 3f 8b 48 c3 c5 8f 88 57 fe 6d 3a 64 01 7c 87 ac cb 46 4c fb 9f cf da a1 fe e1 50 87 4c bb e1 91 d1 91 a1 01 19 76 7c 87 0c d4 53 43 43 53 b3 7c 87 2c 05 aa
                                                                                                                            Data Ascii: GGR#hY)q 9K6]q*Ur6*j+Y;T*H1F4BY|."ZJg%VDLNThwACkChBVB5TVH i"HIBr#8Ys{bhua HQ!ma0wTw|0|w"MH?HWm:d|FLPLv|SCCS|,
                                                                                                                            2024-09-28 02:37:51 UTC1369INData Raw: ad 40 5e 50 50 ed 34 57 4c 06 c0 d3 40 26 54 52 52 92 bc 5a 89 35 86 a1 d6 a7 4f 4f 9d e2 14 5c 91 c4 62 a9 1e 6a 3d 15 54 45 49 d8 b0 86 60 ae b8 f2 94 57 14 3a 2e e7 6a a6 5a a9 da c0 54 52 11 ff 59 a6 18 58 17 28 90 68 2c ca 49 28 7e 86 bc 7c e3 f2 65 19 0d 7b 37 2e ff bb 63 6d 69 0b 3a e4 28 19 6b e9 b5 0f 1f dc 9b 6c 1e b5 e4 a2 de d1 60 58 69 7b 2f bb f8 b1 76 05 63 c8 a6 51 c1 5b 2a 38 95 8b a6 15 0a 3b 8d 56 3f 00 f4 68 68 b5 50 dc 2d 15 e8 4a a1 1e e1 a0 10 a1 2d 50 56 64 4e 31 32 2b 70 90 80 d0 b2 7b 1e ea ae 5c a9 0b a4 54 e3 00 95 40 16 d9 c0 eb b5 b5 af 07 94 d5 f2 a4 a4 a0 4a 09 dc aa ad bd 85 b3 98 42 d0 a8 6a ad ab 6b a5 aa 28 69 03 af 10 fb 6f 57 98 46 a5 e0 af 08 5b 8a 44 be 1a ea 15 44 95 bf cb 22 03 cd 8d af 7c cb 5d 16 1f 80 63 a5 51
                                                                                                                            Data Ascii: @^PP4WL@&TRRZ5OO\bj=TEI`W:.jZTRYX(h,I(~|e{7.cmi:(kl`Xi{/vcQ[*8;V?hhP-J-PVdN12+p{\T@JBjk(ioWF[DD"|]cQ
                                                                                                                            2024-09-28 02:37:51 UTC1369INData Raw: 77 18 94 df 0d ab a3 e3 3a bc f0 8e 48 c4 2d f4 9a e4 c1 4d 4c 38 dd 23 ee 88 db cd 09 54 a4 20 62 1e d9 3e 32 72 7e c2 ec 2c e0 84 a9 9c e3 7c 93 8e d2 aa aa 52 0e 4d 50 f4 f6 c5 70 9d bc de dd 7d 6d d2 67 a6 09 9f bd 90 57 fb cc f4 57 f1 fb 45 0a f0 ba cc 3e 9f 37 e0 43 93 28 7a 21 73 e1 d5 40 d8 86 83 9f 46 ad 1a 8b bd 90 65 c0 45 82 79 7e de d8 a3 5e 21 c7 f3 fc bc fe 2a c3 af 24 cf 8f 0d b1 33 62 44 a3 e4 f9 e9 1f 1e 1d c6 a7 f0 34 3c 3f 83 cc f3 33 3c 68 35 f6 5a 8d c3 a0 bc 66 a3 e0 f9 29 b3 62 e6 9c f4 85 76 c7 82 55 ed 56 ae 7f 94 b7 85 b6 68 36 4e ac 75 eb f5 f0 fc 78 bc de 21 78 7f 43 2b 35 bb ed b9 65 69 21 bb bd ec cb 7e 6f 64 7c a2 ef c8 4a cd ca a2 22 bb fd a1 83 45 1e fb 78 30 12 09 0e 81 7a b1 e8 4b 2c 95 be fc f0 a0 bd fe 78 6a ea f1 6a
                                                                                                                            Data Ascii: w:H-ML8#T b>2r~,|RMPp}mgWWE>7C(z!s@FeEy~^!*$3bD4<?3<h5Zf)bvUVh6Nux!xC+5ei!~od|J"Ex0zK,xjj
                                                                                                                            2024-09-28 02:37:51 UTC1369INData Raw: 1d f3 f3 c8 b0 9f 77 e4 e3 a2 84 02 13 f3 f3 23 9c cd 3b c4 73 91 fc 7c 0a 1d a5 54 cd 46 98 36 22 c1 30 17 69 c4 85 48 19 e8 c6 e0 bc 21 4a 01 d3 ce 79 c0 39 1d 8d 55 dc 89 08 c5 9d 4d ce eb 4d 3b a9 55 2a 66 6f d2 2f 20 34 4b f0 42 26 1c 5c 5f 51 b1 fe 20 b5 e0 fa 7b 62 01 96 57 7e ed 1b 98 6b 45 a0 79 97 b9 f6 0b 11 ef bd ca f6 b5 90 94 98 14 61 ec 1b 64 fb da f4 de ab 22 60 5f 64 ae f8 d1 5e 74 b0 d9 70 e8 1d 65 ae f8 e1 50 1f 98 f4 61 70 7d a1 61 96 a9 37 a6 f7 f9 cc a1 10 8c ba fa 31 16 d1 18 f2 f4 19 3d 85 39 39 85 1e 63 9f 07 de 79 36 65 9a 3d 9e cc 4c 8f c7 aa c7 bc b9 45 a0 0a 27 cd 1e c0 3c 59 08 8a cd a2 fd f0 d7 79 c9 8d d4 ef c9 14 52 a7 d1 0b 7f 25 9f 0f 87 42 89 22 c9 13 bf 1f 07 7d 94 3a df bf 5a 44 ff 79 a2 68 ae dd fa 96 88 ad 98 70 17
                                                                                                                            Data Ascii: w#;s|TF6"0iH!Jy9UMM;U*fo/ 4KB&\_Q {bW~kEyad"`_d^tpePap}a71=99cy6e=LE'<YyR%B"}:ZDyhp
                                                                                                                            2024-09-28 02:37:51 UTC1369INData Raw: 89 2c 8f 68 9c 19 42 4a c8 70 61 2c a2 11 d0 e7 8c 8c e4 a4 4b 11 8d c0 8d f1 b2 11 57 d9 88 14 d1 08 b4 8f 97 cf cd 96 d7 0b e9 21 2c a2 f1 46 fb 38 16 b0 e5 f5 27 01 46 9d 05 55 51 0f 88 41 2f 94 2a 40 bd 00 39 75 16 54 5a 45 8c 62 37 62 15 15 a3 c8 5f 0b 6a 7d ac 17 fc b5 c8 bd c4 02 19 59 21 8b af 90 3f 13 20 04 22 27 5e 00 0d 9e eb 3d 96 51 af 2f 8c b2 20 87 0f 16 4c f2 28 8b c1 96 16 c4 56 20 8c 26 96 18 d2 37 60 4a 1f 56 26 86 20 70 66 14 76 65 59 88 f9 ee 1c 24 84 e0 51 03 f2 fc da b2 ed 99 65 31 1b 32 1b a2 5f de 94 8f 47 50 44 ae 97 51 34 6a 65 c0 0a 39 f1 47 ed f2 f2 d7 4a d4 80 02 44 0d a8 80 40 a8 ce 39 05 3a b7 69 3e 32 a9 f0 91 e6 8a 45 05 4c ac 8d 2a 50 ae ae 0a eb a0 ad 7c 44 81 32 7a 47 17 29 70 33 01 1e 6d c2 64 c5 97 c0 07 10 03 2e 4a
                                                                                                                            Data Ascii: ,hBJpa,KW!,F8'FUQA/*@9uTZEb7b_j}Y!? "'^=Q/ L(V &7`JV& pfveY$Qe12_GPDQ4je9GJD@9:i>2EL*P|D2zG)p3md.J
                                                                                                                            2024-09-28 02:37:51 UTC1369INData Raw: 87 4f b5 3d 1d c8 72 87 0f af 42 bb 0d 91 37 24 fb 45 94 d3 2f 08 87 1d 8e 4a 82 09 bd 40 c5 24 c1 5e 7e e1 95 57 b6 be f5 f2 3d 25 c1 20 f5 d6 f0 d9 b7 98 24 58 22 19 1a 1b 84 48 55 d5 a8 55 19 1a 51 30 91 22 55 c5 51 0b f9 4d 03 cc 51 0e 8a 54 15 47 2d 93 df ac 72 0a 91 aa 85 62 b9 44 46 21 52 75 b8 3f 5d 18 b5 9b f3 09 95 06 0a 9e c8 61 a3 f6 04 d3 42 77 a0 97 30 6e 07 f7 2d 71 5f bb 4f 8f b7 82 3e 1d e1 b0 4e 9d 1b 30 9c 10 07 32 45 59 e8 24 3b 53 26 80 12 7d 57 af ba 2d d9 6c ab 2b c4 62 50 a0 eb a4 db 32 cd 0a cb d0 a8 85 3e 49 fa ea d5 f0 10 57 d2 be 96 d9 90 85 78 d5 ad 8f ab f7 b5 ea 51 4b f1 aa af c1 c8 98 68 49 98 98 62 d5 2b e4 f8 b1 51 5f 44 11 8b 8d 92 56 c8 52 6c d4 6d 69 85 2c c5 46 0d 31 65 79 46 cd 00 c1 d1 7e b3 cd cf 28 51 a6 64 74 fb
                                                                                                                            Data Ascii: O=rB7$E/J@$^~W=% $X"HUUQ0"UQMQTG-rbDF!Ru?]aBw0n-q_O>N02EY$;S&}W-l+bP2>IWxQKhIb+Q_DVRlmi,F1eyF~(Qdt
                                                                                                                            2024-09-28 02:37:51 UTC1369INData Raw: 85 d7 b8 38 85 d7 1c 02 38 3e 56 78 cd c1 10 e6 ae c7 0a af 31 38 ae 8b 88 6f eb c0 a9 89 e3 9a 3a 9a ae 87 1d 38 76 10 05 6b b4 c3 51 85 f5 2c 7f 1d 47 46 81 ab 12 3f 8c 12 63 2a 1d d4 85 20 aa 67 80 0e f3 dd 68 a1 29 de 08 74 d0 59 ba 51 0e f4 5a de 85 d7 d8 5c db b0 e7 dd 25 cc b5 6f bf fa 73 f5 5c 1b e9 9b f0 ab e6 da 48 fa 44 58 35 d7 3a 47 dc 61 a5 95 3f ec 0e 49 14 7a b5 22 80 d9 e0 ce ec 37 38 19 10 4d ba d2 03 40 51 fc 21 8f 88 95 9a 1f e5 02 65 15 65 b9 51 fc 48 08 5f 74 68 3d 77 1c 52 94 2b fb fa 02 cf 9d b0 6a ae 05 c5 29 e6 5a d6 4b 35 d7 52 2f d5 5c bb f5 89 ff b2 7f 09 73 ed 37 bf df 90 60 73 2d a2 2c a4 45 14 24 91 ef 56 0c e6 17 5f 10 20 55 4f f9 b5 42 b0 aa 4e 5c 1e f5 ea 29 bf 96 05 ab b2 74 2e 3f 65 d8 ea 4f b3 60 55 1d 4b 89 d4 8f b2
                                                                                                                            Data Ascii: 88>Vx18o:8vkQ,GF?c* gh)tYQZ\%os\HDX5:Ga?Iz"78M@Q!eeQH_th=wR+j)ZK5R/\s7`s-,E$V_ UOBN\)t.?eO`UK
                                                                                                                            2024-09-28 02:37:51 UTC1369INData Raw: 96 34 4e be cb 04 0f 8a 3e 5c 51 df 65 2f 3a 38 46 89 21 ac ce cf 0a 7b 17 a8 15 68 51 9d 9f 27 1e 05 9e 78 14 ce 3c 1c 09 77 75 ea fd fa be ae ce 45 8f d6 66 f3 2b d3 b9 ac 90 05 d3 9b e5 d6 28 6b 2e 95 78 0a d9 62 d4 ea 9c 5c 24 85 e4 d8 fb 63 16 24 db c8 b0 80 74 9f 9f 2d 90 4e 8f ea fd 0c be f4 51 56 1d 75 a5 27 d7 27 4e 0c e7 45 77 dd 96 d0 79 bd 9f 18 df b0 5d cc b0 47 d8 db f9 7e 1b 94 5b 47 ce 97 3d 06 c0 d6 f1 24 64 0f b0 b3 3a 72 1e 0c e2 e0 1e 3b f2 24 7a 81 2b 83 bd 4b 94 47 40 2f 41 0b ec 91 ad 74 10 11 f7 d1 7e 5f 85 ff f4 d5 88 8d a2 62 d2 12 70 81 d8 28 ab 51 01 2b 4b 77 96 83 8b ab 48 10 27 0d 1b 4a 8e 0a 84 37 22 f0 55 85 33 f1 5e c8 a8 73 ad 40 ed d1 fb ef 85 8c 47 2b c9 0a 2d ae f6 f6 2b 99 ac 90 14 40 d3 c7 64 85 80 db 00 0b a0 61 b2
                                                                                                                            Data Ascii: 4N>\Qe/:8F!{hQ'x<wuEf+(k.xb\$c$t-NQVu''NEwy]G~[G=$d:r;$z+KG@/At~_bp(Q+KwH'J7"U3^s@G+-+@da


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            19192.168.2.449776188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:50 UTC411OUTGET /css/booking1/submit-new8.js HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:50 UTC666INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:50 GMT
                                                                                                                            Content-Type: application/javascript
                                                                                                                            Content-Length: 23021
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:26 GMT
                                                                                                                            ETag: "66f56ed6-59ed"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: HIT
                                                                                                                            Age: 1
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sl81rCQAg6xbmP%2FojP0W3Bp%2FqF2dZb1QehTGPoyQwecTaKsciCCeC1j3otJrW8x1lb0PeW1Pqr5FIP%2Fo3Cj0%2BZIv9BygKjRsTZR2z5128nPdJCt4zTB5MrszJm3zZ7xqrw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a98bc155e74-EWR
                                                                                                                            2024-09-28 02:37:50 UTC703INData Raw: 69 66 20 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 3c 20 31 30 32 34 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 70 68 6f 6e 65 2d 69 6e 70 75 74 73 2d 77 72 61 70 70 65 72 27 29 29 20 7b 0d 0a 20 20 20 20 6c 65 74 20 66 69 72 73 74 4c 6f 61 64 20 3d 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 69 6e 70 75 74 2d 74 72 61 6e 73 70 61 72 65 6e 74 27 29 3b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 66 69 72 73 74 4c 6f 61 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 2e 76 61 6c 75 65 20 3d 20 27 27 3b 0d 0a 20 20 20 20 20 20 20 20 66 69 72 73 74 4c 6f 61 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20
                                                                                                                            Data Ascii: if (window.innerWidth < 1024 && document.querySelector('.phone-inputs-wrapper')) { let firstLoad = true, input = document.querySelector('.input-transparent'); if (firstLoad) { input.value = ''; firstLoad = false;
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 20 d0 b2 d0 b2 d0 be d0 b4 d0 b0 20 d1 82 d0 be d0 bb d1 8c d0 ba d0 be 20 d1 86 d0 b8 d1 84 d1 80 d0 b0 d0 bc d0 b8 0d 0a 20 20 20 20 20 20 20 20 69 6e 70 75 74 2e 76 61 6c 75 65 20 3d 20 6e 75 6d 65 72 69 63 56 61 6c 75 65 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 63 72 6f 6c 6c 54 6f 45 72 72 6f 72 49 6e 70 75 74 28 29 20 7b 0d 0a 20 20 20 20 6c 65 74 20 65 72 72 6f 72 49 6e 70 75 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 69 66 20 28 65 72 72 6f 72 49 6e 70 75 74 73 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 65 74 20 66 69 72 73 74 45 72 72 6f 72 49 6e 70 75 74 20 3d 20 65 72 72 6f 72
                                                                                                                            Data Ascii: input.value = numericValue; });}function scrollToErrorInput() { let errorInputs = document.querySelectorAll('.error'); if (errorInputs.length > 0) { let firstErrorInput = error
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 65 72 72 6f 72 27 29 29 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20
                                                                                                                            Data Ascii: } else { if (inputWrappers[index].classList.add('error')) inputWrappers[index].classList.add('error'); inputWrappers[index].classList.remove('confirm'); }
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 20 20 20 20 20 20 6c 61 62 65 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 62 65 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b
                                                                                                                            Data Ascii: label.style.display = 'block'; error.style.display = 'none'; } else { wrapper.classList.remove('confirm'); wrapper.classList.add('error'); label.style.display = 'none';
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 48 3a 20 27 2d 35 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 44 3a 20 27 2d 34 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 42 3a 20 27 2d 34 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 59 3a 20 27 2d 39 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 45 3a 20 27 2d 35 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 5a 3a 20 27 2d 39 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 4a 3a 20 27 2d 36 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
                                                                                                                            Data Ascii: BH: '-575px', BD: '-475px', BB: '-450px', BY: '-900px', BE: '-500px', BZ: '-925px', BJ: '-625px',
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 59 3a 20 27 2d 31 33 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 5a 3a 20 27 2d 31 34 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 49 3a 20 27 2d 31 31 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 44 3a 20 27 2d 31 30 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 4b 3a 20 27 2d 31 34 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 4a 3a 20 27 2d 31 34 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 4d 3a 20 27 2d 31 35 30 30 70
                                                                                                                            Data Ascii: 25px', CY: '-1375px', CZ: '-1400px', CI: '-1100px', CD: '-1000px', DK: '-1475px', DJ: '-1450px', DM: '-1500p
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 47 4e 3a 20 27 2d 32 31 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 47 57 3a 20 27 2d 32 33 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 47 59 3a 20 27 2d 32 33 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 48 54 3a 20 27 2d 32 34 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 48 4d 3a 20 27 2d 32 34 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 48 4e 3a 20 27 2d 32 34 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 48 4b 3a 20 27 2d 32 33 37 35 70 78
                                                                                                                            Data Ascii: 5px', GN: '-2150px', GW: '-2325px', GY: '-2350px', HT: '-2475px', HM: '-2400px', HN: '-2425px', HK: '-2375px
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 57 3a 20 27 2d 33 39 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 59 3a 20 27 2d 33 39 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 56 3a 20 27 2d 33 38 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 4c 3a 20 27 2d 33 36 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 54 3a 20 27 2d 33 38 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 48 3a 20 27 2d 33 35 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 51 3a 20 27 2d 33 37 35 30 70 78 27
                                                                                                                            Data Ascii: px', MW: '-3900px', MY: '-3950px', MV: '-3875px', ML: '-3625px', MT: '-3825px', MH: '-3575px', MQ: '-3750px'
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 53 3a 20 27 2d 34 35 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 41 3a 20 27 2d 34 33 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 47 3a 20 27 2d 34 34 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 59 3a 20 27 2d 34 36 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 45 3a 20 27 2d 34 33 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 48 3a 20 27 2d 34 34 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 4e 3a 20 27 2d 34 35 32 35 70 78 27 2c
                                                                                                                            Data Ascii: x', PS: '-4575px', PA: '-4325px', PG: '-4400px', PY: '-4650px', PE: '-4350px', PH: '-4425px', PN: '-4525px',
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4c 4b 3a 20 27 2d 33 32 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 48 3a 20 27 2d 34 39 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 4d 3a 20 27 2d 34 35 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 44 3a 20 27 2d 34 39 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 52 3a 20 27 2d 35 31 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 4a 3a 20 27 2d 35 30 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 45 3a 20 27 2d 34 39 32 35 70 78 27 2c 0d 0a 20 20
                                                                                                                            Data Ascii: LK: '-3250px', SH: '-4975px', PM: '-4500px', SD: '-4900px', SR: '-5175px', SJ: '-5025px', SE: '-4925px',


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            20192.168.2.449777188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:50 UTC410OUTGET /css/booking1/blur_input.js HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:50 UTC672INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:50 GMT
                                                                                                                            Content-Type: application/javascript
                                                                                                                            Content-Length: 21605
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:24 GMT
                                                                                                                            ETag: "66f56ed4-5465"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: HIT
                                                                                                                            Age: 1
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kjFOi2bMh%2FtQTVbDVOpJW%2BplKUeBXE5%2B0%2B9pEgNCHwlvMIsRbjIBYpQiLw0BlkdDcJz7k66wHFop3nI2XCT%2BAcbtG%2FvcG7IxHtn0NFpmlO6MxTTKs7B%2FIlLxnX3yrkZ5dQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05a98f8d75e86-EWR
                                                                                                                            2024-09-28 02:37:50 UTC697INData Raw: 0d 0a 63 6f 6e 73 74 20 63 68 65 63 6b 46 69 65 6c 64 73 20 3d 20 28 65 6c 65 6d 65 6e 74 2c 20 69 6e 64 65 78 2c 20 6c 65 6e 67 74 68 4f 66 49 6e 70 75 74 2c 20 63 68 65 63 6b 45 72 72 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 63 6f 6e 73 74 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 69 6e 70 75 74 2d 63 6f 6e 74 72 6f 6c 6c 65 64 27 29 3b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 20 3e 20 6c 65 6e 67 74 68 4f 66 49 6e 70 75 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 2e 74 79 70 65 20 21 3d 3d 20 27 65 6d 61 69 6c 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 57
                                                                                                                            Data Ascii: const checkFields = (element, index, lengthOfInput, checkErr) => { const inputWrappers = document.querySelectorAll('.input-controlled'); if (element.value.length > lengthOfInput) { if (element.type !== 'email') { inputW
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 20 20 20 69 66 28 63 68 65 63 6b 45 72 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 65 72 72 6f 72 27 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 28 63 68 65 63 6b 45 72 72 29 20 7b
                                                                                                                            Data Ascii: if(checkErr) { inputWrappers[index].classList.add('error') } inputWrappers[index].classList.remove('confirm'); } } } else { if(checkErr) {
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 57 72 61 70 70 65 72 73 5b 69 6e 64 65 78 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 6d 61 69 6c 50 61 74 74 65 72 6e 20 3d 20 2f 5e 5b 5e 5c 73 40 5d 2b 40 5b 5e 5c 73 40 5d 2b 5c 2e 5b 5e 5c 73 40 5d 2b 24 2f 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 6d 61 69 6c 50 61 74 74 65
                                                                                                                            Data Ascii: rs[index].classList.add('confirm'); inputWrappers[index].classList.remove('error'); } else { const emailPattern = /^[^\s@]+@[^\s@]+\.[^\s@]+$/; if (emailPatte
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 5d 2f 67 2c 20 27 27 29 3b 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 63 76 76 49 6e 70 75 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 62 6c 75 72 27 2c 20 28 65 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 33 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61
                                                                                                                            Data Ascii: replace(/[^0-9]/g, '');; }); cvvInput.addEventListener('blur', (e) => { if (e.target.value.length === 3) { wrapper.classList.add('confirm'); wrapper.classList.remove('error'); } else { wra
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 65 72 72 6f 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 72 61 70 70 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 6f 6e 66 69 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 0d 0a 20 20 20 20 65 78 70 69 72 79 49 6e 70 75 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27
                                                                                                                            Data Ascii: wrapper.classList.add('error'); wrapper.classList.remove('confirm'); } else { wrapper.classList.remove('error'); wrapper.classList.add('confirm'); } }) expiryInput.addEventListener('
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 5e 34 5b 30 2d 39 5d 7b 31 31 7d 28 3f 3a 5b 30 2d 39 5d 7b 32 2c 33 7d 29 3f 24 2f 2c 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 63 61 72 64 49 6d 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 69 6e 70 75 74 27 2c 20 28 65 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 72 65 6d 6f 76 65 20 73 79 6d 62 6f 6c 20 69 66 20 69 74 20 69 73 20 6e 6f 20 61 20 6e 75 6d 62 65 72 20 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 6b 65 79 2e 6d 61 74 63 68 28 2f 5b 30 2d 39 5d 2f 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 5d 2f 67 2c 20 27 27 29 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 0d 0a 20 20 20 20 63 61 72 64 4e 75 6d 62 65 72 2e 61 64 64
                                                                                                                            Data Ascii: ^4[0-9]{11}(?:[0-9]{2,3})?$/, }; cardImg.addEventListener('input', (e) => { //remove symbol if it is no a number if (!e.key.match(/[0-9]/)) { input.replace(/[^0-9]/g, '') } }) cardNumber.add
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 73 79 73 74 65 6d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 20 2f 2f 20 72 65 74 75 72 6e 20 70 61 79 6d 65 6e 74 20 6e 61 6d 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 72 64 49 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 61 63 74 69 76 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 72 64 49 6d 67 2e 73 72 63 20 3d 20 60 2f 63 73 73 2f 62 6f 6f 6b 69 6e 67 31 2f 69 6d 67 2f 63 61 72 64 73 2f 24 7b 73 79 73 74 65 6d 7d 2e 73 76 67 60 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 72 64 50 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 69 6e 61 63 74 69 76 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20
                                                                                                                            Data Ascii: system.toUpperCase(); // return payment name cardImg.classList.add('active'); cardImg.src = `/css/booking1/img/cards/${system}.svg`; cardPlaceholder.classList.add('inactive');
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 6c 65 63 74 65 64 4f 70 74 69 6f 6e 2e 64 61 74 61 73 65 74 2e 63 61 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 6c 65 74 20 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 3d 20 73 65 6c 65 63 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 6c 65 74 20 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 4e 75 6d 62 65 72 20 3d 20 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 2b 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 62 61 63 6b 67 72 6f 75 6e 64 50 6f 73 69 74 69 6f 6e 73 20 3d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 46 3a 20 27 2d 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 4c 3a 20 27 2d 31 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 44 5a 3a 20 27 2d 31 35 35 30 70 78 27 2c 0d 0a 20
                                                                                                                            Data Ascii: lectedOption.dataset.call; let selectedIndex = select.selectedIndex; let selectedOptionNumber = selectedIndex + 1; const backgroundPositions = { AF: '-50px', AL: '-125px', DZ: '-1550px',
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 20 20 20 20 20 20 20 20 43 4e 3a 20 27 2d 31 32 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 58 3a 20 27 2d 31 33 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 43 3a 20 27 2d 39 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 4f 3a 20 27 2d 31 32 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 4b 4d 3a 20 27 2d 32 39 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 47 3a 20 27 2d 31 30 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 4b 3a 20 27 2d 31 31 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 43 52 3a 20 27 2d 31 32 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 52 3a 20 27 2d 32 34 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20
                                                                                                                            Data Ascii: CN: '-1200px', CX: '-1350px', CC: '-975px', CO: '-1225px', KM: '-2975px', CG: '-1050px', CK: '-1125px', CR: '-1250px', HR: '-2450px',
                                                                                                                            2024-09-28 02:37:50 UTC1369INData Raw: 20 20 20 20 20 20 20 20 20 20 47 4e 3a 20 27 2d 32 31 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 47 57 3a 20 27 2d 32 33 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 47 59 3a 20 27 2d 32 33 35 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 54 3a 20 27 2d 32 34 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 4d 3a 20 27 2d 32 34 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 4e 3a 20 27 2d 32 34 32 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 4b 3a 20 27 2d 32 33 37 35 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 55 3a 20 27 2d 32 35 30 30 70 78 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 49 53 3a 20 27 2d 32 37 32 35 70 78 27 2c 0d 0a 20 20 20 20 20
                                                                                                                            Data Ascii: GN: '-2150px', GW: '-2325px', GY: '-2350px', HT: '-2475px', HM: '-2400px', HN: '-2425px', HK: '-2375px', HU: '-2500px', IS: '-2725px',


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            21192.168.2.449788188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:51 UTC777OUTPOST /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 24
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:51 UTC24OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 6c 61 73 74 5f 6d 73 67 5f 69 64 3d 30
                                                                                                                            Data Ascii: code=wakdl&last_msg_id=0
                                                                                                                            2024-09-28 02:37:52 UTC679INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:52 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Vary: Accept-Encoding
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FE1lxTLMGfqzqltDPx3djHYeeTY%2FT6KowiN%2Fm811K2UJXG58YYjgjLvdBH1zYNVsnJT5P8BgppgxZklPEHUdrxXciPZTySldOOfzDlJl6Uk83Wp5mo6%2Bb0lZCCLVhPFjIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05aa04fc34295-EWR
                                                                                                                            2024-09-28 02:37:52 UTC690INData Raw: 61 34 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 68 74 6d 6c 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 68 61 74 2d 6d 65 73 73 61 67 65 20 69 73 2d 6f 70 65 72 61 74 6f 72 5c 22 3e 5c 72 20 20 20 20 3c 21 2d 2d 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 68 61 74 2d 6d 65 73 73 61 67 65 5f 5f 75 73 65 72 70 69 63 20 6a 73 2d 6f 70 65 6e 2d 63 68 61 74 5c 22 3e 5c 72 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 75 73 65 72 70 69 63 20 69 73 2d 6c 6f 61 64 65 64 20 75 73 65 72 70 69 63 2d 2d 6d 65 73 73 61 67 65 5c 22 3e 5c 72 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 75 73 65 72 70 69 63 5f 5f 69 6e 6e 65 72 5c 22 3e 5c 72 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63
                                                                                                                            Data Ascii: a44{"status":true,"html":"<div class=\"chat-message is-operator\">\r ...div class=\"chat-message__userpic js-open-chat\">\r <div class=\"userpic is-loaded userpic--message\">\r <div class=\"userpic__inner\">\r <div c
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 73 73 3d 5c 22 63 68 61 74 2d 62 75 62 62 6c 65 5f 5f 69 6e 6e 65 72 5c 22 20 73 74 79 6c 65 3d 5c 22 70 61 64 64 69 6e 67 3a 20 34 70 78 3b 5c 22 3e 5c 72 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 68 61 74 2d 62 75 62 62 6c 65 5f 5f 6d 65 73 73 61 67 65 5c 22 3e 5c 72 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 63 68 61 74 2d 62 75 62 62 6c 65 5f 5f 6d 65 73 73 61 67 65 2d 74 65 78 74 20 70 61 72 73 65 64 2d 74 65 78 74 20 70 61 72 73 65 64 2d 74 65 78 74 2d 2d 6d 65 73 73 61 67 65 20 70 61 72 73 65 64 2d 74 65 78 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 62 67 5c 22 5c 72 20 20
                                                                                                                            Data Ascii: ss=\"chat-bubble__inner\" style=\"padding: 4px;\">\r <div class=\"chat-bubble__message\">\r <span class=\"chat-bubble__message-text parsed-text parsed-text--message parsed-text--very-light-bg\"\r
                                                                                                                            2024-09-28 02:37:52 UTC576INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 63 6c 61 73 73 3d 5c 22 61 74 74 61 63 68 6d 65 6e 74 2d 69 6d 61 67 65 5f 5f 74 68 75 6d 62 5c 22 20 73 72 63 3d 5c 22 7b 69 6d 61 67 65 7d 5c 22 20 73 74 79 6c 65 3d 5c 22 6d 61 78 2d 77 69 64 74 68 3a 20 32 31 30 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 34 30 70 78 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 5c 22 3e 5c 72 5c 72 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 5c 2f 64 69 76 3e 5c 72 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
                                                                                                                            Data Ascii: <img class=\"attachment-image__thumb\" src=\"{image}\" style=\"max-width: 210px;max-height:140px;width: 100%;height: 100%;\">\r\r <\/div>\r
                                                                                                                            2024-09-28 02:37:52 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            22192.168.2.449786188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:51 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:52 UTC729INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:52 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=STIvgkffq3N4vACUpPx8FgiEuDB0AnUmzMsXZiJTkwsT2VnjKlmDCvpuvOS7IGrTuBZf%2FE8ezOSDbtMXmadhivcSPZcZer1o5GotVxDpoLdzWf7huxrbZGldJSttHOfoBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05aa02ceb43bc-EWR
                                                                                                                            2024-09-28 02:37:52 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            23192.168.2.449787188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:51 UTC418OUTGET /dist/new_card_design/jquery.min.js HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:52 UTC669INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:52 GMT
                                                                                                                            Content-Type: application/javascript
                                                                                                                            Content-Length: 89476
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:41 GMT
                                                                                                                            ETag: "66f56ee5-15d84"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: HIT
                                                                                                                            Age: 2
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zc3wneU65Q6YmIoBuvBO2K19a7ZJAc6ZKfeI%2BPg6aiNC%2FA4jCoCXnr2ifaw2t2DALU1efBh2hNVF4zlPyYI3%2F%2F5F%2BzDnwHynaRPjJzoNiBeRnGQIUepwZw66mGi78xeG4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05aa02bfc7cf6-EWR
                                                                                                                            2024-09-28 02:37:52 UTC700INData Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20
                                                                                                                            Data Ascii: /*! jQuery v3.5.1 | (c) JS Foundation and other contributors | jquery.org/license */!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 45 3d 43 2e 64 6f 63 75 6d 65 6e 74 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 63 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65
                                                                                                                            Data Ascii: ==e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 53 2e 65 78 74 65 6e 64 3d 53 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 6d 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26 28 61 3d 74 68 69 73 2c
                                                                                                                            Data Ascii: ||this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]||{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]||{},s++),"object"==typeof a||m(a)||(a={}),s===u&&(a=this,
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 70 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 72 65 74 75 72 6e 20 67 28 61 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74
                                                                                                                            Data Ascii: r(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 46 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 49 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 57 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 46 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c
                                                                                                                            Data Ascii: ^"+M+"*([>+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(onl
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 72 26 26 28 54 28 65 29 2c 65 3d 65 7c 7c 43 2c 45 29 29 7b 69 66 28 31 31 21 3d 3d 70 26 26 28 75 3d 5a 2e 65 78 65 63 28 74 29 29 29 69 66 28 69 3d 75 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d
                                                                                                                            Data Ascii: while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72
                                                                                                                            Data Ascii: b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLower
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 26 26 21 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 20 66 69 65 6c 64 73 65 74 20 64 69 76 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74
                                                                                                                            Data Ascii: fined"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.get
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 26 26 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6f 7d 2c 62 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29
                                                                                                                            Data Ascii: &&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.appendChild(e)
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 76 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 4b 2e 74 65 73 74 28 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 61 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 63 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 2c 63 2e 63 61 6c 6c 28 65 2c 22 5b 73 21 3d 27 27 5d 3a 78 22 29 2c 73 2e 70 75 73
                                                                                                                            Data Ascii: ed"),e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.pus


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            24192.168.2.449785188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:51 UTC404OUTGET /img/support-open.png HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:52 UTC649INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:52 GMT
                                                                                                                            Content-Type: image/png
                                                                                                                            Content-Length: 21504
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:24:07 GMT
                                                                                                                            ETag: "66f56e87-5400"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: HIT
                                                                                                                            Age: 2
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QbJExX1xBaxabydQWPVBDuvkWumQWl7k2DSa9Y1CXffUFDcRF10mTreKaq5BCOnQUQy0iR5TaKctgM2OHf%2FgGkIrXS3BmieRmntJOsqrLGtCXuvOSI2wxKyNWKztZrca%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05aa02a563350-EWR
                                                                                                                            2024-09-28 02:37:52 UTC720INData Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 01 00 00 02 01 08 06 00 00 00 d0 e6 6c 61 00 00 52 84 49 44 41 54 78 da ed 9d 07 9c 15 d5 d9 ff d7 92 98 f7 4d 35 d1 57 d9 7b 97 62 b0 04 4b 54 a2 69 c6 5e 62 8c 31 1a 8d 31 51 63 d7 74 35 89 c6 e4 1f 31 89 1a 4d 31 11 81 7b 67 29 8b 88 20 0b 88 02 4a 11 50 51 14 11 a9 0a 82 d2 91 26 65 eb cc dc 7a fe f3 cc b2 06 09 e5 ee ee 9d 99 33 33 df df e7 f3 fd e4 7d a3 81 dd 33 67 ce f3 cc 73 9e 52 51 81 10 42 08 21 84 10 d2 53 3d 0d f5 91 aa 47 9a 2b 13 d5 4d c7 57 19 f6 b9 89 94 f9 fd 44 da ba 29 99 36 ef 4c a6 ac bf 56 a5 ad 54 32 6d 0d 4b 18 e6 d3 55 29 eb 39 e7 ff 7e c5 f9 e7 b3 93 86 f5 8e f3 9f 2b 9c ff 7f eb 4e 64 1d d4 4e 64 77 f1 ef 2d df fe 67 cc 96 3f 53 fe 6c f9 3b dc bf 2b 65 f6 73 fe de fb 93
                                                                                                                            Data Ascii: PNGIHDRlaRIDATxM5W{bKTi^b11Qct51M1{g) JPQ&ez33}3gsRQB!S=G+MWD)6LVT2mKU)9~+NdNdw-g?Sl;+es
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 3e e7 7c e9 5f 97 4c 9b 4f 51 9b 0f 1e e0 ec 29 fb 49 67 8f 5d 93 1c 50 ff 59 de 38 84 10 0a 58 92 d8 e5 d6 ea a7 cd 71 24 f4 81 9f 09 86 2d 49 a4 f6 af ba 18 cd 9d 78 13 11 42 c8 27 75 eb df 74 88 73 f8 fe c2 31 fe 2f b5 24 76 61 94 20 f0 8a 83 17 ab 0c fb 67 32 07 82 37 14 21 84 ca 2c c9 e8 97 92 2e be f8 21 0c 11 02 99 aa 48 4f 02 84 10 ea 88 7a a9 fd 13 29 fb db ce a1 3a 82 41 3b 10 42 9a 13 86 35 3c 61 d8 17 30 eb 00 21 84 4a 54 65 3f fb 48 19 16 43 56 3f 44 88 75 6e a5 4a bf cc 71 bc e1 08 21 b4 93 24 74 ea 18 fe 1b 9d c3 f2 15 0c 06 44 99 ed 5d 29 af 3f b8 af fa 04 6f 3e 42 28 de 5f fd 46 e6 28 69 d7 eb b0 15 03 01 31 a3 c1 6d 5f 9c ce 7e 91 93 00 21 14 1b f5 a8 55 1f 95 24 bf ed dd fb 30 06 10 7b 12 69 6b b6 24 13 4a 02 2c 27 04 42 28 92 aa 7a a4
                                                                                                                            Data Ascii: >|_LOQ)Ig]PY8Xq$-IxB'uts1/$va g27!,.!HOz):A;B5<a0!JTe?HCV?DunJq!$tD])?o>B(_F(i1m_~!U$0{ik$J,'B(z
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 95 2a d3 f6 85 ce e6 b4 78 41 01 00 3c a7 b9 ca b0 cf c5 f2 20 3d 22 00 69 eb 4a a9 6b e5 c5 04 00 f0 8d 4c 32 65 5e 8c 05 42 81 2a 91 32 6f 73 36 63 91 17 12 00 c0 77 b2 55 69 f3 72 2c 11 0a 26 02 60 98 bf e5 25 04 00 08 94 bc c3 f5 58 24 e4 f3 15 80 79 27 2f 1f 00 80 16 14 13 86 79 2b 96 09 f9 55 05 40 1b 60 00 00 fd 7a 09 f4 c2 42 21 6f 73 00 d2 d6 5f 78 d9 00 00 b4 e5 01 2c 15 f2 44 55 29 eb 3e 5e 30 00 00 cd 9b 0a a5 ac 3f 63 b1 10 11 00 00 80 d8 5e 0d 98 bf c3 72 a1 32 25 01 5a 77 f3 52 01 00 84 8b aa b4 79 3b 16 0c 75 ec 0a c0 30 7f cd cb 04 00 10 ce aa 81 64 ca ba 11 4b 86 da 77 05 60 98 b7 f2 12 01 00 84 bb 8f 00 0d 85 50 db 1d 80 94 75 15 9d 00 01 00 a2 d1 59 50 e6 bb 60 d9 50 69 57 00 e9 cc 45 49 66 01 00 00 44 89 4c b2 da 3e 1f 0b 87 f6 16 01
                                                                                                                            Data Ascii: *xA< ="iJkL2e^B*2os6cwUir,&`%X$y'/y+U@`zB!os_x,DU)>^0?c^r2%ZwRy;u0dKw`PuYP`PiWEIfDL>
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 6d 0a 34 98 8d 05 a5 f2 95 c7 6d d5 fb 8d 9c db 4f 1f c5 53 f2 e4 a5 15 b3 94 1d d2 d6 18 02 68 2b fc 14 96 bb 4c 4a 18 d6 19 ce a2 16 d9 54 b0 d7 ec fe d1 19 35 6a 49 5e e5 f8 ea 47 3b 68 b3 55 74 67 34 d0 83 00 fc 44 06 db 61 c1 3b a8 4a 43 fd af b3 98 ef b2 a1 60 77 48 1d b9 d4 f3 4b 59 1f 42 7b cb 1d 90 ab a1 ef 8c c9 f0 ee 80 0f 4e 80 b5 a1 73 bf ba 03 b1 e4 1d 89 02 a4 ed 7f b2 99 60 57 f4 18 64 b9 93 ec 68 e4 83 da 23 b9 2a b8 76 62 46 9a bc f0 3e 01 4d 84 b4 cc 03 a8 6e 3e c9 59 c4 3c 1b 09 76 ee e4 27 e5 7d 75 36 c6 1f 75 5c 32 c7 40 f2 06 a4 35 34 ef 17 78 40 a1 b2 da fc 1a 16 bd ad ea a5 f6 4f a6 ed 39 6c 20 68 e5 b8 ed c6 bf 21 83 e1 42 e5 d7 92 ad 38 03 e0 19 0b 7b 1a ea 23 18 f6 b6 25 03 fe 9e 8d 03 ad f5 fd c6 fc 9c 6a ce 61 a8 90 f7 92 06
                                                                                                                            Data Ascii: m4mOSh+LJT5jI^G;hUtg4Da;JC`wHKYB{Ns`Wdh#*vbF>Mn>Y<v'}u6u\2@54x@O9l h!B8{#%ja
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: f0 fc 20 99 b2 ee 89 de 35 c0 80 fa cf 12 05 08 37 52 27 1f 96 04 c0 d5 0d 45 b7 2b dd 61 fd 79 6e 71 2f 33 7c f4 cd f0 38 03 cb ea 8a ea ab b4 9b 86 28 e6 06 24 0c eb 5e 1e 6c 78 91 04 ac 30 44 58 b7 5a 2d 5f fe 18 7f d8 91 93 1e b3 dd 99 0e f9 10 6c 62 29 b5 3d 7f 14 8d 85 e8 1b 60 f5 8a 8c 03 d0 bd b7 fa 94 e3 d9 6c e3 c1 86 b3 03 a0 8c bc 0d 43 73 1f 49 b0 fa 02 ed 59 61 0f 9c 3e c2 76 ef df c3 50 39 70 e5 33 38 02 31 67 eb c1 7d d5 27 a2 71 15 60 98 bf e3 81 86 b3 04 50 92 ac 74 96 7c d9 49 b8 97 bb 54 68 0b df 7b 3a e3 de c1 eb ac ac f3 e3 dd 3c 99 12 c2 78 63 ff 22 0a 51 80 03 9c 5f 66 1d 0f 33 7c 0e 80 ee 13 00 e5 10 bf 60 34 5f 4b d0 fe 28 97 e4 b9 48 f2 a8 ce 4e ee 2f a7 e2 08 c4 98 e5 32 6d 37 dc b9 00 29 fb 66 1e 64 b8 e8 e6 38 00 32 e6 55 57
                                                                                                                            Data Ascii: 57R'E+aynq/3|8($^lx0DXZ-_lb)=`lCsIYa>vP9p381g}'q`Pt|ITh{:<xc"Q_f3|`4_K(HN/2m7)fd82UW
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 3d 93 09 e4 20 91 76 c4 5f 18 c4 fa 03 b4 97 1f 8e cf b8 09 b5 7e eb bd c6 a2 db 52 9c 67 10 29 a6 fa e6 00 74 ed db 74 a8 f3 17 16 58 74 3d ee 17 83 08 2b 4a 33 a0 af 3c ce dd 22 40 47 e9 35 23 98 ce 9e d2 c4 88 f5 8f 14 79 b9 a6 f7 ab 37 c0 4f 59 70 3d f8 fb 2c ff 13 01 c4 e5 b8 6e 22 a5 80 00 e5 e2 c9 a5 fe 57 0c 64 0b 4a 9d 4a 92 60 b4 30 ac 1b fc aa 0a 98 ca 82 07 cf 49 8f d9 6e 73 1e bf d5 7b 0e 5f 10 00 e5 e4 a8 41 96 5a 16 40 44 4f 72 89 58 ff 48 31 c1 fb de 00 7d 1a 3e 47 55 80 1e 0c 0b a0 f1 c8 8c f7 98 53 0e e0 05 67 d5 06 53 e1 43 87 cf 68 55 09 74 ee 57 77 a0 d7 09 81 d7 b2 d0 c1 23 61 3c bf 13 8a 64 22 d9 f1 8f 12 3e 04 f0 8a 20 26 7f be b6 8e 68 40 a4 aa 04 52 d6 55 1e 77 09 34 9f 66 a1 83 67 ec bb fe 47 01 6e a4 ac 08 c0 73 82 e8 28 78 35
                                                                                                                            Data Ascii: = v_~Rg)ttXt=+J3<"@G5#y7OYp=,n"WdJJ`0Ins{_AZ@DOrXH1}>GUSgSChUtWw#a<d"> &h@RUw4fgGns(x5
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: db 34 7f 3e 22 be 31 9c 7c a2 10 d3 b8 d7 ce 81 89 6a fb 08 16 2a 18 24 d4 46 99 0f 00 b4 87 13 86 f8 53 5e 4c ab f1 70 d3 a5 bf d5 6d 6f 95 01 17 b3 50 c1 94 f9 f8 31 1a b4 d7 0c 5e 60 80 a8 e2 47 a3 b1 01 0b 98 23 10 66 12 29 fb db 7b 4e 0a 4c 59 7f 60 a1 fc e7 d4 e1 fe 24 05 9e 3f 8a 7c 00 80 a8 22 83 7e bc d6 eb 1b 88 26 86 3b 2f c0 bc 63 6f 49 81 8f b3 50 fe 73 d3 64 ef ef f3 6c e7 7c 90 09 85 ac 37 40 34 b9 d5 87 bc 80 c6 2c c9 81 a1 8e 3a a7 ac c1 7b 69 17 6c cf 65 a1 fc e7 81 d7 bc 4f 0a 9c b5 1e 0f 1e 20 ca 9c f6 84 3f 11 45 29 67 66 bd 43 5b 21 30 6b f7 1e 40 2f b5 2f 95 01 c1 e0 47 a7 c0 6a a6 06 02 90 5b 44 e7 40 2a 04 94 da 67 97 3e 80 64 0d b2 40 c1 20 5f e9 5e 4b 66 8f b3 d6 00 11 af 32 5a e3 fd 59 72 c7 8b 9c 25 a1 4e 0e ec 6f 26 77 e9 04
                                                                                                                            Data Ascii: 4>"1|j*$FS^LpmoP1^`G#f){NLY`$?|"~&;/coIPsdl|7@4,:{ileO ?E)gfC[!0k@//Gj[D@*g>d@ _^Kf2ZYr%No&w
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 00 7a 1a ea 23 ce 7f 51 64 51 82 c1 eb b0 a7 54 1f 84 65 2d ae 18 9f 51 3a 6a 5d 93 7f 8e 94 5c 3f e8 28 69 6f ed c7 ef ff a3 67 f4 dc 03 6b 1b c3 e3 4c 4b 77 49 af 25 dd 25 39 bf 43 4d a1 a2 97 da 7f 7b 52 a0 99 60 41 82 c3 eb d0 ef 5b 9b c3 73 78 f9 51 df dc 5e 9d f6 84 f7 5f c2 d2 a0 27 a7 a7 0f a0 c6 f8 94 25 df 4f e3 3d 10 96 7e 1b df 1c e5 83 13 f0 36 4e 40 d8 e9 d6 bf e9 10 d7 09 a8 4c 35 9f c0 82 04 47 33 d7 01 1f f0 e2 9a 82 b6 06 c0 8f 0e 72 df 1d 93 d1 f6 f7 f7 6b 1f 95 63 3a a2 57 fa c9 73 e1 68 90 e3 c7 3e 1a c2 75 40 74 ba 06 56 19 f6 b9 2c 48 70 6c f5 f8 0e 7c 4d 88 12 03 d7 34 14 b5 35 00 ff 7c dd fb 6c e8 a0 9b e3 ec 2d 2f a0 ab 0f 93 e3 24 ec ae ab fe 3e 2b 1c 19 f1 df f7 21 31 70 c0 02 9c 80 d0 77 0d 4c 5b 67 6d 6f 19 6c 5e ce 82 50 22
                                                                                                                            Data Ascii: z#QdQTe-Q:j]\?(iogkLKwI%%9CM{R`A[sxQ^_'%O=~6N@L5G3rkc:Wsh>u@tV,Hpl|M45|l-/$>+!1pwL[gmol^P"
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 27 33 6a 75 83 77 7b e0 c9 a5 7a ef 81 bd f1 c4 62 ef 3d 65 c9 95 e1 cc 8e 0c d9 56 27 a0 c8 62 04 8f 84 a1 bd d6 df 66 85 3b ab f7 a8 41 2d 86 30 57 c6 2f 42 09 fd de 3c 39 3c 89 4e 97 8f cb a8 a5 65 9c b4 27 7f 52 ed 92 7c 68 9a e1 c8 1e 18 b0 20 5f d6 3d 20 55 10 37 4d 0e 7f b2 db ca 7a ef cf 90 3e 73 a9 0c 88 10 05 9c 00 8d 98 b0 dc 7b 2f 5e 42 ca 51 58 ab 53 87 db 6a c4 db f9 0e 85 87 c5 e9 92 56 b0 87 0f 08 df ef 2f 09 60 b7 3f 9f 75 93 d7 da 2b 49 b6 7b d6 d9 73 e7 8f 0a 67 74 e8 b4 27 6c 55 db c1 3d 20 0e a0 94 81 86 71 0f ec cc d7 87 f9 13 4d 94 44 4d ce eb e8 39 01 5c 07 68 c0 03 af 79 9f 1c 28 07 e6 91 03 a3 b3 66 c7 d4 d8 ea ae e9 59 35 75 55 c1 6d ec b3 37 49 28 79 d8 e2 bc 3b 06 b5 8b 11 fe df 5f fa c4 5f fc 54 c6 ad 0d 2f 25 3a 60 39 5b 4c
                                                                                                                            Data Ascii: '3juw{zb=eV'bf;A-0W/B<9<Ne'R|h _= U7Mz>s{/^BQXSjV/`?u+I{sgt'lU= qMDM9\hy(fY5uUm7I(y;__T/%:`9[L
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: d1 9b 2f 0e f6 af 5f b8 a8 31 ab 54 4f 1a 08 01 c4 a2 31 90 5b 16 b8 a2 f4 b0 7d 5b 7b 98 d4 67 8a ea 88 01 3c 53 7d 22 01 d6 90 9d 23 01 0f b0 30 fa 53 6a f8 ad 5c 7a 86 24 41 80 c0 92 01 4d 7f 7d 00 75 f1 53 a5 e5 02 75 31 2c b5 a6 a1 ed 11 8a 9f 4e 61 c2 a0 36 39 01 86 75 ef 87 9c 80 2a c3 fe 19 0b a3 3f 72 af b6 a7 9a 5c 2f c4 8b 0b e0 73 a8 d6 61 fa 5a 7f 5f f4 d7 37 94 1e 05 b8 79 72 fb 12 95 27 ad 20 41 50 1b 27 20 65 df fc 61 27 a0 9f fd 1d 16 26 1c 0c 5d e4 6f 34 40 c2 78 5f 7a 8c 6b 01 00 bf b8 fb 65 7f ab 81 44 97 b7 a1 c5 ef ec 0d ed 73 50 64 d4 f0 31 35 9c 25 7a 60 7f eb 43 4e 40 65 aa f9 04 16 25 1c 88 41 b6 7c 0e 13 4e c6 83 07 f0 85 d3 9e f0 ff 1a 60 fa 9a d2 df ef 6f 3f d9 b1 e6 65 b7 3f 4f 64 51 8f c4 c0 ed dd 02 5b 95 e8 d3 f0 39 16 26
                                                                                                                            Data Ascii: /_1TO1[}[{g<S}"#0Sj\z$AM}uSu1,Na69u*?r\/saZ_7yr' AP' ea'&]o4@x_zkeDsPd15%z`CN@e%A|N`o?e?OdQ[9&


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            25192.168.2.449789188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:52 UTC410OUTGET /css/booking1/img/flags.png HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:52 UTC651INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:52 GMT
                                                                                                                            Content-Type: image/png
                                                                                                                            Content-Length: 30680
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:29 GMT
                                                                                                                            ETag: "66f56ed9-77d8"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: HIT
                                                                                                                            Age: 2
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Z4MBxU48Mle1OFkFD4g%2B8pO6ToRga6WxNlCayMKr75hXZxe2rVsqR7RtZWbgoXCA33aSy%2BX3B0UzUO0EW6mgS8Igst%2Bq4huyVgASbz3XXlx2srOtxMr21eXNQ3vwWOaUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05aa0d97f236b-EWR
                                                                                                                            2024-09-28 02:37:52 UTC718INData Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 18 63 08 03 00 00 00 f5 5f 72 a8 00 00 02 c7 50 4c 54 45 00 00 00 00 00 4e 9b 00 00 9e 00 00 00 00 00 08 00 05 09 00 06 00 02 00 6e 00 14 06 0e 37 02 7b ab 00 00 63 00 00 25 00 00 05 70 b6 53 c8 11 11 d0 00 01 d0 00 00 da 26 28 04 33 59 fc fc fb 04 31 5a 5f 00 28 03 04 04 d4 04 13 00 7e 78 00 81 26 05 06 68 e8 6b 69 80 13 11 00 06 3e 7c 07 0a 7d 08 0c 18 19 72 c2 08 32 f5 f5 f4 0d 0b 68 01 01 38 73 0f 13 2f 2f 28 0e 08 6c 2b 4c 87 04 16 48 da 31 31 ed 9f 00 81 00 00 d0 16 37 cb 11 1d 3f 3f 81 d7 1b 21 06 1d 7a 23 7a 10 03 76 2b e7 45 4b 43 23 33 d9 cf d4 cf 00 33 54 4f 6b 5c 59 91 12 09 08 0b 2d 7f d1 24 2e 65 6b a6 31 47 5c ea 7c 7e 1d 55 a4 00 01 5b d5 be 25 6d 6e 78 d3 3e 3d ee 76 7a 2d
                                                                                                                            Data Ascii: PNGIHDRc_rPLTENn7{c%pS&(3Y1Z_(~x&hki>|}r2h8s//(l+LH117??!z#zv+EKC#33TOk\Y-$.ek1G\|~U[%mnx>=vz-
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: ee 56 89 52 fd f6 80 8d ca a9 22 3c 91 a7 ac ad 68 32 7f 54 ac 7d f8 e7 20 f2 db 2b df 03 1f b7 d0 91 c9 a4 1b 33 00 00 00 c5 74 52 4e 53 00 19 02 02 26 1c 1d 09 17 3a fd f4 f7 e1 fe fd ec d7 fe 02 e2 3a 09 ea a8 fb fc e5 fe 3a 21 28 3a fd ec f8 ce 3a 49 fe fd aa 3a fe fb 3a c9 aa fd f9 f9 f2 fa fe 7f ab fd fe fe f8 ab ab fe 3a fe fd 02 ac fe f6 fd a4 4c fa fe 39 e0 ed 3a fe ed aa fe 3c 26 03 3a fd ac 3a fe 40 ac f7 64 68 0d 04 08 67 fe 05 fe 48 fe fc 67 b0 04 fd fa fd fd d2 3e f2 fd fe 48 fc fb 04 ee fc fc ab fe ef fe ab 37 fb 67 fe fa 05 ad f7 67 04 37 fe fe 05 fe fe fe 6c 04 04 fe fb ac 45 ad fe fe 04 fc 68 fe d7 fe 68 fe fe ac fe d9 64 fc 04 fe ab 92 04 fe 85 7a fe 0e fe 9c 66 fe fe ac fe fc f8 c0 03 ac 05 63 e2 fd a1 d6 bc 4a 00 00 73 fb 49 44 41 54
                                                                                                                            Data Ascii: VR"<h2T} +3tRNS&:::!(::I:::L9:<&::@dhgHg>H7gg7lEhhdzfcJsIDAT
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 47 47 52 18 23 68 b2 ac 05 59 29 71 20 05 39 4b b3 36 5d 01 a4 71 aa aa 2a 55 1c 72 36 98 b5 2a 97 6a c5 8a aa d4 15 2b d0 a0 59 bb 1d 3b 15 54 2a af 90 b5 48 c1 31 a4 e9 8a 15 46 34 42 59 0b f0 ca 1a 7c d6 2e 22 c8 5a 86 4a c5 67 ad 88 25 b2 56 44 d4 4c a3 4e 86 b1 54 68 77 85 41 43 6b 43 68 17 b1 db c2 42 ab 13 84 56 00 42 0b 35 1c 06 54 c2 56 11 09 98 0e 8b 48 20 69 15 22 d2 48 a1 e6 49 18 9a 42 72 ee 23 11 e7 c8 ef c4 aa 38 d2 59 c5 cf 9f f5 fe 73 90 08 1c 7b 8e 1f 62 68 75 61 20 b4 c5 48 51 21 c3 c5 e8 a3 6d 61 e4 b5 93 af 30 dd 15 80 b9 ef 77 54 77 7c fe 30 7c 77 22 fe 4d 14 89 48 c3 c5 8f 08 a8 3f 8b 48 c3 c5 8f 88 57 fe 6d 3a 64 01 7c 87 ac cb 46 4c fb 9f cf da a1 fe e1 50 87 4c bb e1 91 d1 91 a1 01 19 76 7c 87 0c d4 53 43 43 53 b3 7c 87 2c 05 aa
                                                                                                                            Data Ascii: GGR#hY)q 9K6]q*Ur6*j+Y;T*H1F4BY|."ZJg%VDLNThwACkChBVB5TVH i"HIBr#8Ys{bhua HQ!ma0wTw|0|w"MH?HWm:d|FLPLv|SCCS|,
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: ad 40 5e 50 50 ed 34 57 4c 06 c0 d3 40 26 54 52 52 92 bc 5a 89 35 86 a1 d6 a7 4f 4f 9d e2 14 5c 91 c4 62 a9 1e 6a 3d 15 54 45 49 d8 b0 86 60 ae b8 f2 94 57 14 3a 2e e7 6a a6 5a a9 da c0 54 52 11 ff 59 a6 18 58 17 28 90 68 2c ca 49 28 7e 86 bc 7c e3 f2 65 19 0d 7b 37 2e ff bb 63 6d 69 0b 3a e4 28 19 6b e9 b5 0f 1f dc 9b 6c 1e b5 e4 a2 de d1 60 58 69 7b 2f bb f8 b1 76 05 63 c8 a6 51 c1 5b 2a 38 95 8b a6 15 0a 3b 8d 56 3f 00 f4 68 68 b5 50 dc 2d 15 e8 4a a1 1e e1 a0 10 a1 2d 50 56 64 4e 31 32 2b 70 90 80 d0 b2 7b 1e ea ae 5c a9 0b a4 54 e3 00 95 40 16 d9 c0 eb b5 b5 af 07 94 d5 f2 a4 a4 a0 4a 09 dc aa ad bd 85 b3 98 42 d0 a8 6a ad ab 6b a5 aa 28 69 03 af 10 fb 6f 57 98 46 a5 e0 af 08 5b 8a 44 be 1a ea 15 44 95 bf cb 22 03 cd 8d af 7c cb 5d 16 1f 80 63 a5 51
                                                                                                                            Data Ascii: @^PP4WL@&TRRZ5OO\bj=TEI`W:.jZTRYX(h,I(~|e{7.cmi:(kl`Xi{/vcQ[*8;V?hhP-J-PVdN12+p{\T@JBjk(ioWF[DD"|]cQ
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 77 18 94 df 0d ab a3 e3 3a bc f0 8e 48 c4 2d f4 9a e4 c1 4d 4c 38 dd 23 ee 88 db cd 09 54 a4 20 62 1e d9 3e 32 72 7e c2 ec 2c e0 84 a9 9c e3 7c 93 8e d2 aa aa 52 0e 4d 50 f4 f6 c5 70 9d bc de dd 7d 6d d2 67 a6 09 9f bd 90 57 fb cc f4 57 f1 fb 45 0a f0 ba cc 3e 9f 37 e0 43 93 28 7a 21 73 e1 d5 40 d8 86 83 9f 46 ad 1a 8b bd 90 65 c0 45 82 79 7e de d8 a3 5e 21 c7 f3 fc bc fe 2a c3 af 24 cf 8f 0d b1 33 62 44 a3 e4 f9 e9 1f 1e 1d c6 a7 f0 34 3c 3f 83 cc f3 33 3c 68 35 f6 5a 8d c3 a0 bc 66 a3 e0 f9 29 b3 62 e6 9c f4 85 76 c7 82 55 ed 56 ae 7f 94 b7 85 b6 68 36 4e ac 75 eb f5 f0 fc 78 bc de 21 78 7f 43 2b 35 bb ed b9 65 69 21 bb bd ec cb 7e 6f 64 7c a2 ef c8 4a cd ca a2 22 bb fd a1 83 45 1e fb 78 30 12 09 0e 81 7a b1 e8 4b 2c 95 be fc f0 a0 bd fe 78 6a ea f1 6a
                                                                                                                            Data Ascii: w:H-ML8#T b>2r~,|RMPp}mgWWE>7C(z!s@FeEy~^!*$3bD4<?3<h5Zf)bvUVh6Nux!xC+5ei!~od|J"Ex0zK,xjj
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 1d f3 f3 c8 b0 9f 77 e4 e3 a2 84 02 13 f3 f3 23 9c cd 3b c4 73 91 fc 7c 0a 1d a5 54 cd 46 98 36 22 c1 30 17 69 c4 85 48 19 e8 c6 e0 bc 21 4a 01 d3 ce 79 c0 39 1d 8d 55 dc 89 08 c5 9d 4d ce eb 4d 3b a9 55 2a 66 6f d2 2f 20 34 4b f0 42 26 1c 5c 5f 51 b1 fe 20 b5 e0 fa 7b 62 01 96 57 7e ed 1b 98 6b 45 a0 79 97 b9 f6 0b 11 ef bd ca f6 b5 90 94 98 14 61 ec 1b 64 fb da f4 de ab 22 60 5f 64 ae f8 d1 5e 74 b0 d9 70 e8 1d 65 ae f8 e1 50 1f 98 f4 61 70 7d a1 61 96 a9 37 a6 f7 f9 cc a1 10 8c ba fa 31 16 d1 18 f2 f4 19 3d 85 39 39 85 1e 63 9f 07 de 79 36 65 9a 3d 9e cc 4c 8f c7 aa c7 bc b9 45 a0 0a 27 cd 1e c0 3c 59 08 8a cd a2 fd f0 d7 79 c9 8d d4 ef c9 14 52 a7 d1 0b 7f 25 9f 0f 87 42 89 22 c9 13 bf 1f 07 7d 94 3a df bf 5a 44 ff 79 a2 68 ae dd fa 96 88 ad 98 70 17
                                                                                                                            Data Ascii: w#;s|TF6"0iH!Jy9UMM;U*fo/ 4KB&\_Q {bW~kEyad"`_d^tpePap}a71=99cy6e=LE'<YyR%B"}:ZDyhp
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 89 2c 8f 68 9c 19 42 4a c8 70 61 2c a2 11 d0 e7 8c 8c e4 a4 4b 11 8d c0 8d f1 b2 11 57 d9 88 14 d1 08 b4 8f 97 cf cd 96 d7 0b e9 21 2c a2 f1 46 fb 38 16 b0 e5 f5 27 01 46 9d 05 55 51 0f 88 41 2f 94 2a 40 bd 00 39 75 16 54 5a 45 8c 62 37 62 15 15 a3 c8 5f 0b 6a 7d ac 17 fc b5 c8 bd c4 02 19 59 21 8b af 90 3f 13 20 04 22 27 5e 00 0d 9e eb 3d 96 51 af 2f 8c b2 20 87 0f 16 4c f2 28 8b c1 96 16 c4 56 20 8c 26 96 18 d2 37 60 4a 1f 56 26 86 20 70 66 14 76 65 59 88 f9 ee 1c 24 84 e0 51 03 f2 fc da b2 ed 99 65 31 1b 32 1b a2 5f de 94 8f 47 50 44 ae 97 51 34 6a 65 c0 0a 39 f1 47 ed f2 f2 d7 4a d4 80 02 44 0d a8 80 40 a8 ce 39 05 3a b7 69 3e 32 a9 f0 91 e6 8a 45 05 4c ac 8d 2a 50 ae ae 0a eb a0 ad 7c 44 81 32 7a 47 17 29 70 33 01 1e 6d c2 64 c5 97 c0 07 10 03 2e 4a
                                                                                                                            Data Ascii: ,hBJpa,KW!,F8'FUQA/*@9uTZEb7b_j}Y!? "'^=Q/ L(V &7`JV& pfveY$Qe12_GPDQ4je9GJD@9:i>2EL*P|D2zG)p3md.J
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 87 4f b5 3d 1d c8 72 87 0f af 42 bb 0d 91 37 24 fb 45 94 d3 2f 08 87 1d 8e 4a 82 09 bd 40 c5 24 c1 5e 7e e1 95 57 b6 be f5 f2 3d 25 c1 20 f5 d6 f0 d9 b7 98 24 58 22 19 1a 1b 84 48 55 d5 a8 55 19 1a 51 30 91 22 55 c5 51 0b f9 4d 03 cc 51 0e 8a 54 15 47 2d 93 df ac 72 0a 91 aa 85 62 b9 44 46 21 52 75 b8 3f 5d 18 b5 9b f3 09 95 06 0a 9e c8 61 a3 f6 04 d3 42 77 a0 97 30 6e 07 f7 2d 71 5f bb 4f 8f b7 82 3e 1d e1 b0 4e 9d 1b 30 9c 10 07 32 45 59 e8 24 3b 53 26 80 12 7d 57 af ba 2d d9 6c ab 2b c4 62 50 a0 eb a4 db 32 cd 0a cb d0 a8 85 3e 49 fa ea d5 f0 10 57 d2 be 96 d9 90 85 78 d5 ad 8f ab f7 b5 ea 51 4b f1 aa af c1 c8 98 68 49 98 98 62 d5 2b e4 f8 b1 51 5f 44 11 8b 8d 92 56 c8 52 6c d4 6d 69 85 2c c5 46 0d 31 65 79 46 cd 00 c1 d1 7e b3 cd cf 28 51 a6 64 74 fb
                                                                                                                            Data Ascii: O=rB7$E/J@$^~W=% $X"HUUQ0"UQMQTG-rbDF!Ru?]aBw0n-q_O>N02EY$;S&}W-l+bP2>IWxQKhIb+Q_DVRlmi,F1eyF~(Qdt
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 85 d7 b8 38 85 d7 1c 02 38 3e 56 78 cd c1 10 e6 ae c7 0a af 31 38 ae 8b 88 6f eb c0 a9 89 e3 9a 3a 9a ae 87 1d 38 76 10 05 6b b4 c3 51 85 f5 2c 7f 1d 47 46 81 ab 12 3f 8c 12 63 2a 1d d4 85 20 aa 67 80 0e f3 dd 68 a1 29 de 08 74 d0 59 ba 51 0e f4 5a de 85 d7 d8 5c db b0 e7 dd 25 cc b5 6f bf fa 73 f5 5c 1b e9 9b f0 ab e6 da 48 fa 44 58 35 d7 3a 47 dc 61 a5 95 3f ec 0e 49 14 7a b5 22 80 d9 e0 ce ec 37 38 19 10 4d ba d2 03 40 51 fc 21 8f 88 95 9a 1f e5 02 65 15 65 b9 51 fc 48 08 5f 74 68 3d 77 1c 52 94 2b fb fa 02 cf 9d b0 6a ae 05 c5 29 e6 5a d6 4b 35 d7 52 2f d5 5c bb f5 89 ff b2 7f 09 73 ed 37 bf df 90 60 73 2d a2 2c a4 45 14 24 91 ef 56 0c e6 17 5f 10 20 55 4f f9 b5 42 b0 aa 4e 5c 1e f5 ea 29 bf 96 05 ab b2 74 2e 3f 65 d8 ea 4f b3 60 55 1d 4b 89 d4 8f b2
                                                                                                                            Data Ascii: 88>Vx18o:8vkQ,GF?c* gh)tYQZ\%os\HDX5:Ga?Iz"78M@Q!eeQH_th=wR+j)ZK5R/\s7`s-,E$V_ UOBN\)t.?eO`UK
                                                                                                                            2024-09-28 02:37:52 UTC1369INData Raw: 96 34 4e be cb 04 0f 8a 3e 5c 51 df 65 2f 3a 38 46 89 21 ac ce cf 0a 7b 17 a8 15 68 51 9d 9f 27 1e 05 9e 78 14 ce 3c 1c 09 77 75 ea fd fa be ae ce 45 8f d6 66 f3 2b d3 b9 ac 90 05 d3 9b e5 d6 28 6b 2e 95 78 0a d9 62 d4 ea 9c 5c 24 85 e4 d8 fb 63 16 24 db c8 b0 80 74 9f 9f 2d 90 4e 8f ea fd 0c be f4 51 56 1d 75 a5 27 d7 27 4e 0c e7 45 77 dd 96 d0 79 bd 9f 18 df b0 5d cc b0 47 d8 db f9 7e 1b 94 5b 47 ce 97 3d 06 c0 d6 f1 24 64 0f b0 b3 3a 72 1e 0c e2 e0 1e 3b f2 24 7a 81 2b 83 bd 4b 94 47 40 2f 41 0b ec 91 ad 74 10 11 f7 d1 7e 5f 85 ff f4 d5 88 8d a2 62 d2 12 70 81 d8 28 ab 51 01 2b 4b 77 96 83 8b ab 48 10 27 0d 1b 4a 8e 0a 84 37 22 f0 55 85 33 f1 5e c8 a8 73 ad 40 ed d1 fb ef 85 8c 47 2b c9 0a 2d ae f6 f6 2b 99 ac 90 14 40 d3 c7 64 85 80 db 00 0b a0 61 b2
                                                                                                                            Data Ascii: 4N>\Qe/:8F!{hQ'x<wuEf+(k.xb\$c$t-NQVu''NEwy]G~[G=$d:r;$z+KG@/At~_bp(Q+KwH'J7"U3^s@G+-+@da


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            26192.168.2.44979118.245.60.684435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:53 UTC335OUTGET / HTTP/1.1
                                                                                                                            Host: booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            2024-09-28 02:37:53 UTC924INHTTP/1.1 301 Moved Permanently
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:37:53 GMT
                                                                                                                            location: https://www.booking.com/
                                                                                                                            nel: {"max_age":604800,"report_to":"default"}
                                                                                                                            report-to: {"max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default"}
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=45d91280dda40443&e=UmFuZG9tSVYkc2RlIyh9YdPFJGDFjZSqK4Z-4dNTMVuRkYu_uUBoq84UqUCLfnmrl1zesB4JTxA
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 4d156fc02c81ad97b906c107779265e2.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: jjexnTmB59Y176OdS5qTzqLwqirao2mZ1tbfRnhagx2HSYy6hkggag==
                                                                                                                            2024-09-28 02:37:53 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            27192.168.2.449796188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:53 UTC644OUTGET /img/support.png HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: image
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:53 UTC657INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:53 GMT
                                                                                                                            Content-Type: image/png
                                                                                                                            Content-Length: 15634
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:24:07 GMT
                                                                                                                            ETag: "66f56e87-3d12"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2FGenPC2A08EPfsQHUQ8jRm04bFYlRQYCYmjqG2UC2RqxjF%2BZVjtJXA5zzvi3fczFc3wzntTQ%2Boj79J1eVX73ue%2BZF4Uzqo2uEHMT2r1VUIiJHR%2FDQl4eR%2BTJqypBJtpUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05aa91b1d0f65-EWR
                                                                                                                            2024-09-28 02:37:53 UTC712INData Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 02 58 08 03 00 00 00 89 b8 68 ee 00 00 03 00 50 4c 54 45 4c 69 71 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11
                                                                                                                            Data Ascii: PNGIHDRXXhPLTELiq
                                                                                                                            2024-09-28 02:37:53 UTC1369INData Raw: d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 bf a6 9a d5 00 00 00 ff 74 52 4e 53 00 06 fb fc 01 fd 76 02 fe 04 fa 03 05 86 95 f5 07 08 f9 0b 09 e7 0c ef f2 10 0d eb f4 f0 f6 e0 ed f1 0a f8 e3 f3 f7 de 27 df ea 0f 12 ba 23 ec 19 14 11 1c 3d d7 1e 4f 16 e4 18 d0 b0 0e d9 2e 21 e9 20 e6 ee 73 af 15 8d 17 13 6c 3c d4 aa e1 cf ce 39 8c 28 1d 32 c4 2b e8 24 3f 47 9a c5 c9 bb 44 2c b9 1a b2 82 3a ca 2a be a9 a2 92 55 49 30 33 ab 9f ae 4d 4c 45 67 e5 29 d6 34 8f dc 5f 6f b6 1b 70 51 2d c0 53 93 e2 c3 b5 8b a0 5c a4 a7 c2
                                                                                                                            Data Ascii: tRNSv'#=O.! sl<9(2+$?GD,:*UI03MLEg)4_opQ-S\
                                                                                                                            2024-09-28 02:37:53 UTC1369INData Raw: 47 95 0f e8 86 ec 0e 86 18 04 90 b1 b2 0e 55 3e 52 67 65 06 fe a6 0a de d1 5d 47 95 cf e8 ba ef 48 02 54 cd 9f 4c a0 ca a7 12 da 35 87 bf 0b 38 b4 5a 43 95 8f 69 6e 3c 14 00 bf b6 78 74 2b 56 01 55 ab d1 23 e1 bf f4 63 0e 07 b1 4a a8 82 46 f5 d0 c3 4f 35 99 39 9f 55 46 f5 d0 cc 26 f0 4b 03 be 88 60 15 52 45 7c 91 07 ff 63 7e b8 af 96 55 4a a5 5d 3d c3 0c 3f 53 b8 2f 85 55 4e 95 b2 af 10 7e 25 ef d3 18 56 03 55 cc a7 79 f0 1f a6 87 57 cb ac 16 2a f9 c6 87 4d f0 13 61 8f a4 b3 da a8 d2 67 06 c3 2f d4 5b 19 c1 6a a4 8a 58 59 0f 7e e0 ec 22 1d ab 95 4a b7 68 2e 6a 3b 43 fd 77 58 ed 54 8d ea 1b 50 ab 45 2e 09 65 0d 50 85 2e c9 46 2d 36 72 65 22 6b 84 2a f1 da 91 a8 b5 36 8f d2 b0 86 a8 34 a3 9a a1 76 92 86 0d 61 0d 52 0d 19 26 a1 16 0a 78 f9 79 d6 28 d5 f3 2f
                                                                                                                            Data Ascii: GU>Rge]GHTL58ZCin<xt+VU#cJFO59UF&K`RE|c~UJ]=?S/UN~%VUyW*Mag/[jXY~"Jh.j;CwXTPE.eP.F-6re"k*64vaR&xy(/
                                                                                                                            2024-09-28 02:37:53 UTC1369INData Raw: f9 c2 48 71 fd d8 03 de 08 68 bb a5 67 e3 55 5a 56 88 31 e5 ad db 3b 8e b3 9a e0 15 e9 a9 4c 0a cb f8 45 13 54 33 fd ad a9 14 57 e7 31 a8 b8 ec 66 9f 37 2e 8e a0 57 d2 ba 8e ed 79 f7 bb 81 f0 82 fe 03 81 cb 8a b8 55 8f ea 35 66 3e c5 55 5c 17 15 65 da bc f7 95 16 5a 56 82 9c dc f4 aa 37 ce 4b a8 b8 dd fd 29 ac f9 3d 50 ad 46 1e 96 29 ac d3 cf a1 62 f4 ed 9f 9a ba 51 cb ca 4b 7e 7a c3 c4 7c 03 2a c8 f4 4b 02 45 25 8f 1a 89 6a 14 38 da 48 61 ad 7a 02 15 12 38 f0 d4 8f 71 f4 95 b8 e2 f7 67 64 a3 62 f4 0f 44 50 54 c6 9b 02 51 7d 0e 85 52 58 d1 5b 4c a8 80 b0 e9 13 66 d1 b7 a2 db dc 5a a0 47 45 98 8f 07 51 54 a1 87 50 6d 5a ae a6 b0 12 17 1a e0 b9 de 5b fe 53 4a df b3 bc 73 6a b8 01 15 10 35 2f 99 a2 5a dd 12 d5 24 ec 49 23 45 95 bc 26 0a 1e 6b f0 c8 72 23 ab
                                                                                                                            Data Ascii: HqhgUZV1;LET3W1f7.WyU5f>U\eZV7K)=PF)bQK~z|*KE%j8Haz8qgdbDPTQ}RX[LfZGEQTPmZ[SJsj5/Z$I#E&kr#
                                                                                                                            2024-09-28 02:37:53 UTC1369INData Raw: 4a 93 d7 b5 74 a4 9b 3a 12 35 20 e0 91 16 74 a4 fd 22 1b 2e 2d 4d a3 a8 5a 3d 07 1f 08 59 4b 61 69 8f c3 a5 9b 63 e9 44 e3 c5 a8 11 d6 07 c2 e9 28 f1 84 22 77 1c b8 36 04 95 77 28 81 c2 0a 3d 0f 57 fa 9c a6 13 6f 15 a1 86 04 b6 8e a5 a3 cc b7 e1 8a e9 1b 99 a2 4a b8 1a 95 16 79 8d 4c 61 4d 0b 86 0b 0d 9c de 21 ec db 0b 35 a6 c9 7b 71 74 b4 68 31 5c b9 bf 3f 45 25 ff 2b 12 95 24 ad 28 a5 b0 82 76 c3 05 f3 6b c9 74 f4 f4 5c d4 a0 c8 17 74 ce f6 49 cd 70 21 ac 0d 85 55 ba 42 42 e5 14 ee a2 b8 c6 9e 87 0b 03 43 e9 68 56 7d d4 a8 fc 5d 74 54 67 12 5c b9 2b 88 c2 da 55 88 ca a9 1f 41 61 c9 5b 25 38 17 79 58 a6 83 98 25 01 a8 59 19 7f d0 d1 f8 7c b8 f0 6e 09 85 15 31 1d 95 12 d5 98 e2 8a 9d 0e e7 02 5e 0b a2 03 ed bc 40 d4 b4 81 f1 74 a0 7d cf 0a e7 92 86 52 5c
                                                                                                                            Data Ascii: Jt:5 t".-MZ=YKaicD("w6w(=WoJyLaM!5{qth1\?E%+$(vkt\tIp!UBBChV}]tTg\+UAa[%8yX%Y|n1^@t}R\
                                                                                                                            2024-09-28 02:37:53 UTC1369INData Raw: f0 2f 2a 40 6e 01 dc 9b 11 4a 25 b8 55 82 ad 09 b4 93 76 14 0a 10 f2 02 ed 18 17 c0 56 93 2e 54 80 d0 19 70 cb 74 5c a6 02 a4 0d 83 2d c3 61 da 89 ce 83 02 48 37 d3 de 0f 12 6c e8 9f a4 02 c8 c7 4d 70 a7 ed 7f a8 04 7d 5b c2 56 c1 d7 b4 d3 b9 00 4a 30 23 b1 dc 41 85 1f 94 52 01 c6 b7 85 3b c7 c2 a9 00 5a 87 49 33 81 37 38 fc ff 04 43 09 7a 5d a0 9d c1 23 61 2b ec 2f 2a 40 f8 db 70 43 3a a5 a3 02 fc 98 07 7b f3 74 b4 b5 53 82 12 98 d7 d2 4e 6e 03 d8 39 94 4a f1 e9 6e 93 e0 5a d4 78 2a 40 d0 cf 12 ec 8d 29 a5 8d b4 27 a0 0c ed 68 4b 76 3c b5 29 fb 4b 2a c0 f8 30 b8 d6 29 85 e2 93 af 89 84 83 ec be b4 11 7f 0c ca f0 43 10 6d 8c 5a 0c 07 cd 97 cb 14 5e ca 9d 70 49 fa 46 43 f1 fd 38 05 8e f4 1d 65 96 35 a2 21 94 61 60 0b 96 75 e1 5d 38 f1 78 2a 85 67 fc 06 2e
                                                                                                                            Data Ascii: /*@nJ%UvV.Tpt\-aH7lMp}[VJ0#AR;ZI378Cz]#a+/*@pC:{tSNn9JnZx*@)'hKv<)K*0)CmZ^pIFC8e5!a`u]8x*g.
                                                                                                                            2024-09-28 02:37:53 UTC1369INData Raw: b1 e6 52 0c c9 cd 7c 15 56 71 18 94 e2 4e a3 8f c2 1a 17 4e 31 e4 5a f1 8f 96 77 50 0c 69 cb 7c 15 56 fc bb 50 8a cf 75 3e 0a 6b 76 34 c5 70 47 cb 8b ab be f8 5a 17 56 e9 52 28 84 a9 a7 5c db c2 8a ef 84 7f ec 48 a4 18 92 8f f9 2a 2c 63 6b 28 44 40 1b fa ea 52 58 4a 31 24 ee c0 3f 5a cb 14 83 f1 29 5f 85 c5 35 50 08 eb 63 bc 24 b7 76 ac b1 74 1f 5e be a7 20 06 dd 15 92 af c2 fa 1e 0a 11 35 87 97 7c 9c af c4 bf 0a 1d cd 33 e3 6f 91 5d 28 8a ad 26 54 c2 81 55 bc a4 71 24 94 61 73 0a 2f e9 5b 84 4a 68 96 46 41 74 89 c4 df 8a fa 52 14 7f 99 51 09 0f b7 e2 25 73 26 43 19 4e a4 f2 92 3f 2a 15 d6 d5 41 14 c1 e5 0f 48 46 3a 45 f1 8c 15 95 70 75 28 2f 89 7d 18 ca 70 93 8e 97 0c ae 4c 58 d2 15 3a 0a 22 3d 03 7f 3b 6b a1 28 e2 bf f5 55 58 f2 07 50 86 2f e8 a3 b0 0c
                                                                                                                            Data Ascii: R|VqNN1ZwPi|VPu>kv4pGZVR(\H*,ck(D@RXJ1$?Z)_5Pc$vt^ 5|3o](&TUq$as/[JhFAtRQ%s&CN?*AHF:Epu(/}pLX:"=;k(UXP/
                                                                                                                            2024-09-28 02:37:53 UTC1369INData Raw: 40 43 45 4a 1b 3f 7a f7 f0 30 eb 99 ab 7f f8 a2 91 96 8e 84 9e 94 95 d3 8d 6e 14 d7 43 59 75 13 a8 40 46 50 b1 62 4f 77 bb a3 b8 bf 86 e5 7a 7a 38 c4 b2 20 86 6e b4 98 84 b2 96 52 91 c0 da 4f d7 da 00 91 44 ee a2 3b 11 37 a3 0c d3 6d 6a 58 c2 ea 3e 12 22 b9 3e 81 ee c4 7c 87 32 02 af 52 c3 12 56 d0 51 08 24 6c 02 dd 8a d9 89 32 ac 2f a8 61 89 6b 7c 36 c4 71 b6 0e dd 4a 7c 59 0d 4b 74 0e cb 16 01 18 5e 90 e9 56 c2 52 94 11 f8 05 15 09 46 fa 83 1b 1a 40 14 9d 56 d1 bd fe 0f a3 0c 73 3b 2a 91 11 16 fa 83 b4 15 10 84 f5 5a 99 ee 75 bd cf 31 2c 75 e7 5d 54 cb 0b 21 86 31 fd 59 8e a6 79 b5 22 ac 18 fa 85 d4 05 10 42 c0 57 2c 4f a3 ec 5a b0 c6 4a 45 1d fa 87 f1 8b 21 82 bb b3 58 9e 67 02 50 86 f5 2b 2a 51 1d 84 d2 3f 18 1f 35 a1 e6 65 6f 60 b9 56 9b 51 46 d2 2b
                                                                                                                            Data Ascii: @CEJ?z0nCYu@FPbOwzz8 nROD;7mjX>">|2RVQ$l2/ak|6qJ|YKt^VRF@Vs;*Zu1,u]T!1Yy"BW,OZJE!XgP+*Q?5eo`VQF+
                                                                                                                            2024-09-28 02:37:53 UTC1369INData Raw: 14 4f 15 c9 b8 ed 77 1a e0 68 45 16 bd 15 d4 aa db fe fa 73 db c3 13 45 37 a5 b0 76 c8 ec 84 7f b4 bc 83 aa ff 09 1d 9d 01 7b 93 9b d2 3b 09 cb bf fa 61 78 54 00 3c d2 61 dd 33 5a d6 12 77 b4 c4 3f ac b9 54 fd 43 7e e6 5c 07 d8 c8 d9 20 d3 91 26 35 bc 4e 69 84 91 2e 68 23 e6 af 7d e3 50 11 3c 15 72 ef ae 18 d6 1a b9 56 fc 9f 41 97 fe ed 54 c9 7f 2c e8 8d cb 0c 0f a4 d1 9e 5c bc fd 96 b3 2d cf b4 9c dc f1 cd a6 74 14 d1 e8 f0 27 67 17 07 c3 63 6d 9f 98 1a ce da 43 1e 84 8b ae 30 f2 12 95 71 f9 a3 f5 2e 2d b5 cf 3b a6 73 e4 b5 e1 7a fc 43 9a 7c e5 2c 96 65 6c d5 e6 d7 97 5b 4a f0 9c 54 f0 c6 61 0b 6b 13 e3 15 b8 a8 be 85 aa 32 8c ef ec e9 53 88 bf 99 6e d7 d1 56 c4 55 b3 51 86 a9 ee 75 11 fc 47 f2 aa 21 2b af 6e d6 01 15 d1 64 f3 4d 63 e3 58 bb 58 ee c5 45
                                                                                                                            Data Ascii: OwhEsE7v{;axT<a3Zw?TC~\ &5Ni.h#}P<rVAT,\-t'gcmC0q.-;szC|,el[JTak2SnVUQuG!+ndMcXXE
                                                                                                                            2024-09-28 02:37:53 UTC1369INData Raw: cb 2f a6 72 f4 7f ef 5d 54 a5 a2 49 3b 5f fc 38 25 35 48 66 45 18 d7 44 c1 87 ac 8f e7 1a a9 18 c5 f9 70 2e e0 1e 2a 85 65 6a 5d 33 aa 9a a9 c1 ab e3 56 ec 99 fa f5 46 23 3d a4 1d d4 04 be d5 f6 d1 23 54 8a 7b 02 e0 9c 74 b3 8e ca f0 63 c7 30 54 13 c9 64 c8 58 b8 5c 43 4f 18 3f cd 81 cf 8d fb 3e 9c 8a a0 5b 27 c1 85 c9 99 54 82 d4 b5 e3 50 bd 7a ff 9e c5 f2 c5 3c 99 83 2a 10 fc f8 58 2d 15 20 73 32 5c 29 7c 93 0a d0 79 41 30 aa 9b e1 fa ee 2c 4f d7 47 ad 55 d5 f5 7f b3 28 be 37 23 e1 d2 37 46 8a ce f8 53 1f d4 84 65 0f 5a e8 8e f6 eb bb 0d a8 2a e6 a7 1e 93 29 38 e3 5d 70 ed ce 14 0a 2e a5 75 13 d4 8c b0 2d 7f 68 e8 d2 fc 4f 46 a2 2a d5 fb 3e 96 62 4b b9 13 ae 85 8d a7 d8 be 9e 21 a1 c6 14 dd e2 62 b1 23 97 cc 3b 8b 2a 16 fc dd f3 14 da c7 61 70 4d ba 4d
                                                                                                                            Data Ascii: /r]TI;_8%5HfEDp.*ej]3VF#=#T{tc0TdX\CO?>['TPz<*X- s2\)|yA0,OGU(7#7FSeZ*)8]p.u-hOF*>bK!b#;*apMM


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            28192.168.2.449797188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:53 UTC402OUTGET /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:53 UTC609INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:53 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mg%2BcZ9InDJlH4EaUNj5oF4Aa7y5uIxrmB%2B8KMHMlOjwWhkvKSiJ%2BcWfc%2FUV7k76NHu0mCOJDEWYgVvQ7sOkDIWxWYlmTkWRMM9gpumTpytTRf2UO8DMJZ8kCoxYn69%2BHoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05aa92bb615c3-EWR
                                                                                                                            2024-09-28 02:37:53 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            29192.168.2.449795188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:53 UTC645OUTGET /chat/%7Bimage%7D HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: image
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:53 UTC703INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:53 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tF1BMkd192qbU6sFc35IW%2B0%2B3MR0SZ%2Be9KymtWAug7U1QVra2X3bY59%2FJDStoupVvTlELKIsVA8Nt50FxCXeW3Ob9OuOOGHSrQIV3qkgtJCNC29rSAz%2Bf0wHEhnLrQ4Bng%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05aa929a18cda-EWR
                                                                                                                            2024-09-28 02:37:53 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            30192.168.2.449807188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:54 UTC782OUTPOST /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 10
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:54 UTC10OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c
                                                                                                                            Data Ascii: code=wakdl
                                                                                                                            2024-09-28 02:37:55 UTC656INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:55 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0SycZ8Yy4UvNlnwf2CNVdXr4EbuQyLaQiGh4i3WXTVBuMgPJeGKqItSyupTfyJmctvavVD60NeUA2%2FbP1cSQx88gk6G4jN8uoPdCkGnWN3uvASC19Tq4a03%2BZ%2BBSm4o5Jw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ab12ec18c95-EWR
                                                                                                                            2024-09-28 02:37:55 UTC22INData Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a
                                                                                                                            Data Ascii: 10{"status":false}
                                                                                                                            2024-09-28 02:37:55 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            31192.168.2.44980118.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:54 UTC339OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            2024-09-28 02:37:55 UTC3450INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:37:54 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"group":"default","max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}]}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:37:54 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:15:48 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecSZUYbFEmzg%2Fcdenn3lqv5nnIlZPsMz4oABQoqkIUxelfYoEcNboRWfXYo2RhFx3Tcmq3QQSE8I6YDLzIzyc%2Bzz%2F8A6shJLZ3uy0HAxZlznCFjHpv6sgygOpan7H%2FiOHjhpksppd4YGVYoGHXW2bIW; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:37:54 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:37:54 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            content-security-policy-report-only: base-uri 'none'; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=146&pid=e98212811a8100df&e=UmFuZG9tSVYkc2RlIyh9YYYdGuViorKPsxJ24kDYJ6KXt9gCSZOKe9eTrUjK-TA2; script-src 'self' 'nonce-SzNfKjVWwuwUgMt' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' 'sha256-iry7oJKoKJ+9HSjmU3E1TlRlpSesJWZ1vapuUz2MP38='
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            set-cookie: bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; Domain=.booking.com; Path=/; Expires=Mon, 28 Sep 2026 02:37:54 GMT; HttpOnly; Secure; SameSite=Lax
                                                                                                                            set-cookie: pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; Domain=.booking.com; Path=/; Expires=Sun, 28 Sep 2025 02:37:54 GMT; HttpOnly; Secure; SameSite=Lax
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 628e5146add9b3daeb91ab8792398818.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: sQtS0EVsRDRZphljY1nlana8gnDyjMkJkG_sQOgEFcI4qh4BGcLT0w==
                                                                                                                            2024-09-28 02:37:55 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 53 7a 4e 66 4b 6a 56 57 77 75 77 55 67 4d 74 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="SzNfKjVWwuwUgMt"
                                                                                                                            2024-09-28 02:37:55 UTC16384INData Raw: 33 66 66 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 3ffa<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:37:55 UTC16384INData Raw: 0d 0a 34 30 30 30 0d 0a 5f 79 65 61 72 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 6e 75 6d 65 72 69 63 5f 64 61 74 65 22 3a 22 7b 6d 6f 6e 74 68 7d 2f 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2f 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 79 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 75 6e 74 69 6c 22 3a 22 75 6e 74 69 6c 20 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d 65 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 6e 75 6d 65 72 69 63 5f 64 61 74 65 5f 72 61 6e 67 65 5f 62 6f 74 68 5f 79 65 61 72 73 22 3a 22 7b 6d 6f 6e 74 68 7d 2f 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2f 7b 66 75 6c 6c 5f 79 65 61
                                                                                                                            Data Ascii: 4000_year":"{month_name} {day_of_month}, {full_year}","numeric_date":"{month}/{day_of_month}/{full_year}","day_short_month_year_until":"until {short_month_name} {day_name}, {full_year}","numeric_date_range_both_years":"{month}/{day_of_month}/{full_yea
                                                                                                                            2024-09-28 02:37:55 UTC10INData Raw: 5f 6c 74 72 2f 61 63 37 0d 0a
                                                                                                                            Data Ascii: _ltr/ac7
                                                                                                                            2024-09-28 02:37:55 UTC22INData Raw: 31 30 0d 0a 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 0d 0a
                                                                                                                            Data Ascii: 103a1533c9b137d154
                                                                                                                            2024-09-28 02:37:55 UTC16384INData Raw: 33 66 66 61 0d 0a 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 26 23 34 37 3b 27 2c 0a 62 5f 74 68 69 73 5f 75 72 6c 20 3a 20 27 2f 69 6e
                                                                                                                            Data Ascii: 3ffae412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.booking.com&#47;',b_this_url : '/in
                                                                                                                            2024-09-28 02:37:55 UTC16384INData Raw: 0d 0a 38 30 30 30 0d 0a 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 4f 51 48 46 52 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 41 48 49 63 61 57 47 4e 50 5a 53 56 5a 4d 59 49 4f 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 4a 65 42 4f 62 56 49 53 63 66 46 64 48 56 54 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 6d 6f 64 61 6c 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50
                                                                                                                            Data Ascii: 8000',gnsInsCrd_bannerView_index: 'TDXRPVRBKKJVbFPbVCMIWIOQHFRYDEZRae',gnsInsCrd_bannerCtaClick_index: 'TDXRPVRBKKJVbFPbVCMIWIAHIcaWGNPZSVZMYIO',gnsInsCrd_bannerDismiss_index: 'TDXRPVRBKKJVbFPbVCMIJeBObVIScfFdHVT',gnsInsCrd_modalView_index: 'TDXRP
                                                                                                                            2024-09-28 02:37:55 UTC16384INData Raw: 55 62 51 57 65 22 3a 31 2c 22 42 49 55 4a 4c 4d 57 53 55 49 51 48 65 53 41 64 43 4d 64 49 58 64 66 64 54 4a 54 52 48 65 22 3a 32 2c 22 4e 41 46 4c 65 4f 65 4a 4f 4d 4f 4c 4a 4b 46 51 56 57 46 51 55 45 4a 44 58 4f 22 3a 31 2c 22 50 50 58 47 46 52 55 52 55 52 59 54 66 65 4d 63 48 42 63 47 63 49 4a 4b 61 65 22 3a 31 2c 22 48 57 41 46 59 42 66 50 44 42 64 52 57 4d 50 4e 53 49 43 44 64 44 53 64 56 4c 54 22 3a 31 2c 22 62 51 47 42 4e 50 42 46 44 48 4f 49 56 42 41 51 62 48 47 41 58 4a 4e 62 4d 53 58 65 22 3a 31 2c 22 48 57 41 46 4e 65 4f 59 57 62 53 61 4b 56 46 56 59 42 58 59 5a 49 43 46 4c 63 61 49 64 54 43 22 3a 31 2c 22 48 4d 62 49 5a 4a 42 41 4e 46 4d 50 51 53 54 45 44 46 61 54 62 59 42 58 65 22 3a 31 2c 22 61 58 54 66 48 41 45 44 64 55 4a 46 55 46 63 55 4b
                                                                                                                            Data Ascii: UbQWe":1,"BIUJLMWSUIQHeSAdCMdIXdfdTJTRHe":2,"NAFLeOeJOMOLJKFQVWFQUEJDXO":1,"PPXGFRURURYTfeMcHBcGcIJKae":1,"HWAFYBfPDBdRWMPNSICDdDSdVLT":1,"bQGBNPBFDHOIVBAQbHGAXJNbMSXe":1,"HWAFNeOYWbSaKVFVYBXYZICFLcaIdTC":1,"HMbIZJBANFMPQSTEDFaTbYBXe":1,"aXTfHAEDdUJFUFcUK
                                                                                                                            2024-09-28 02:37:55 UTC10INData Raw: 3a 31 2c 22 42 4b 41 54 0d 0a
                                                                                                                            Data Ascii: :1,"BKAT
                                                                                                                            2024-09-28 02:37:55 UTC16384INData Raw: 33 66 66 66 0d 0a 59 53 43 5a 57 4e 4f 48 65 4e 43 46 4a 65 48 66 4c 65 62 62 4f 63 65 5a 58 48 65 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 5a 57 4c 4b 56 48 4e 58 4f 45 66 55 55 45 52 45 4b 53 63 63 54 4e 55 44 5a 53 64 53 55 57 44 4b 65 22 3a 31 2c 22 49 5a 62 52 45 5a 56 50 54 4c 4b 47 42 66 57 4b 63 42 63 61 4d 45 41 61 59 57 65 22 3a 31 2c 22 63 43 63 43 63 43 57 50 4a 65 56 59 53 4c 4c 65 4c 48 59 4f 22 3a 31 2c 22 41 45 41 46 5a 41 5a 62 4c 59 59 64 52 54 22 3a 31 2c 22 54 50 4f 61 58 47 50 54 47 54 62 55 45 58 4f 44 50 46 44 43 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 62 4a 66 45 44 45 49 45 59 49 63 53 54 4b 65 22 3a 31 2c 22 55 4f 54 45 4c 4a 4b 41 46 5a 66 48 47 44 44 4a 4c 48 46 44 49 50 65 58 65 22 3a 31 2c 22 54 65 43 4f 65 4a 58 52 65 45
                                                                                                                            Data Ascii: 3fffYSCZWNOHeNCFJeHfLebbOceZXHe":1,"YdXfdKNKNKZWLKVHNXOEfUUEREKSccTNUDZSdSUWDKe":1,"IZbREZVPTLKGBfWKcBcaMEAaYWe":1,"cCcCcCWPJeVYSLLeLHYO":1,"AEAFZAZbLYYdRT":1,"TPOaXGPTGTbUEXODPFDC":1,"aWQOcYTBbJfEDEIEYIcSTKe":1,"UOTELJKAFZfHGDDJLHFDIPeXe":1,"TeCOeJXReE


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            32192.168.2.449808188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:54 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:54 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:37:55 UTC662INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:55 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ELHmBi0gCd0z2BcRVFYBxmQlZeKPfiVN4RoK2SGt4lIfszofU69zWu9QRqv%2Bte6%2Bxnl%2FQgJY8N57utkYk%2F0UApmEwFG3LiszDBubkaL%2BRVFsAt5k4fo7Eo6oxL3UR9%2BZcw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ab12d294344-EWR
                                                                                                                            2024-09-28 02:37:55 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            33192.168.2.449811188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:55 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:55 UTC735INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:55 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vvUaloKF19Uis3Sq5WxZLjzRzEz3zv4A9jh4%2BHJUy82V1P4iYn5%2BcDUZNs5ZWEWp%2BaoztQ9lnfCGMXq65TERPQxkWYHD0g9k8n6OBmtmgM8ey%2BJWa7tUJdfwjQdbPzzx3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ab41dbb42da-EWR
                                                                                                                            2024-09-28 02:37:55 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            34192.168.2.449812188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:55 UTC399OUTGET /img/support.png HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:55 UTC661INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:55 GMT
                                                                                                                            Content-Type: image/png
                                                                                                                            Content-Length: 15634
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:24:07 GMT
                                                                                                                            ETag: "66f56e87-3d12"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: HIT
                                                                                                                            Age: 2
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iESLvJWtPIZME55%2FWTg7%2Ffw74pnIJ0zsQ7bSjM3LtPDDtfWIJ%2FPe9fM%2FjD4Wvu8ftoFTZdHx5t0F8v95Ggfg8t%2FnqNv0Nhs4LMB84cfF8p%2Bgl1Gzzp3i%2BpDuXi%2FGNr4YbA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ab44c147d08-EWR
                                                                                                                            2024-09-28 02:37:55 UTC708INData Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 02 58 08 03 00 00 00 89 b8 68 ee 00 00 03 00 50 4c 54 45 4c 69 71 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11
                                                                                                                            Data Ascii: PNGIHDRXXhPLTELiq
                                                                                                                            2024-09-28 02:37:55 UTC1369INData Raw: 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 11 91 d0 bf a6 9a d5 00 00 00 ff 74 52 4e 53 00 06 fb fc 01 fd 76 02 fe 04 fa 03 05 86 95 f5 07 08 f9 0b 09 e7 0c ef f2 10 0d eb f4 f0 f6 e0 ed f1 0a f8 e3 f3 f7 de 27 df ea 0f 12 ba 23 ec 19 14 11 1c 3d d7 1e 4f 16 e4 18 d0 b0 0e d9 2e 21 e9 20 e6 ee 73 af 15 8d 17 13 6c 3c d4 aa e1 cf ce 39 8c 28 1d 32 c4 2b e8 24 3f 47 9a c5 c9 bb 44 2c b9 1a b2 82 3a ca 2a be a9 a2 92 55 49 30 33 ab 9f ae 4d 4c 45 67 e5 29 d6 34 8f dc 5f 6f b6 1b 70 51 2d c0 53 93 e2 c3 b5 8b a0
                                                                                                                            Data Ascii: tRNSv'#=O.! sl<9(2+$?GD,:*UI03MLEg)4_opQ-S
                                                                                                                            2024-09-28 02:37:55 UTC1369INData Raw: 0b de 3d 56 47 95 0f e8 86 ec 0e 86 18 04 90 b1 b2 0e 55 3e 52 67 65 06 fe a6 0a de d1 5d 47 95 cf e8 ba ef 48 02 54 cd 9f 4c a0 ca a7 12 da 35 87 bf 0b 38 b4 5a 43 95 8f 69 6e 3c 14 00 bf b6 78 74 2b 56 01 55 ab d1 23 e1 bf f4 63 0e 07 b1 4a a8 82 46 f5 d0 c3 4f 35 99 39 9f 55 46 f5 d0 cc 26 f0 4b 03 be 88 60 15 52 45 7c 91 07 ff 63 7e b8 af 96 55 4a a5 5d 3d c3 0c 3f 53 b8 2f 85 55 4e 95 b2 af 10 7e 25 ef d3 18 56 03 55 cc a7 79 f0 1f a6 87 57 cb ac 16 2a f9 c6 87 4d f0 13 61 8f a4 b3 da a8 d2 67 06 c3 2f d4 5b 19 c1 6a a4 8a 58 59 0f 7e e0 ec 22 1d ab 95 4a b7 68 2e 6a 3b 43 fd 77 58 ed 54 8d ea 1b 50 ab 45 2e 09 65 0d 50 85 2e c9 46 2d 36 72 65 22 6b 84 2a f1 da 91 a8 b5 36 8f d2 b0 86 a8 34 a3 9a a1 76 92 86 0d 61 0d 52 0d 19 26 a1 16 0a 78 f9 79 d6
                                                                                                                            Data Ascii: =VGU>Rge]GHTL58ZCin<xt+VU#cJFO59UF&K`RE|c~UJ]=?S/UN~%VUyW*Mag/[jXY~"Jh.j;CwXTPE.eP.F-6re"k*64vaR&xy
                                                                                                                            2024-09-28 02:37:55 UTC1369INData Raw: e6 a1 da 35 f9 c2 48 71 fd d8 03 de 08 68 bb a5 67 e3 55 5a 56 88 31 e5 ad db 3b 8e b3 9a e0 15 e9 a9 4c 0a cb f8 45 13 54 33 fd ad a9 14 57 e7 31 a8 b8 ec 66 9f 37 2e 8e a0 57 d2 ba 8e ed 79 f7 bb 81 f0 82 fe 03 81 cb 8a b8 55 8f ea 35 66 3e c5 55 5c 17 15 65 da bc f7 95 16 5a 56 82 9c dc f4 aa 37 ce 4b a8 b8 dd fd 29 ac f9 3d 50 ad 46 1e 96 29 ac d3 cf a1 62 f4 ed 9f 9a ba 51 cb ca 4b 7e 7a c3 c4 7c 03 2a c8 f4 4b 02 45 25 8f 1a 89 6a 14 38 da 48 61 ad 7a 02 15 12 38 f0 d4 8f 71 f4 95 b8 e2 f7 67 64 a3 62 f4 0f 44 50 54 c6 9b 02 51 7d 0e 85 52 58 d1 5b 4c a8 80 b0 e9 13 66 d1 b7 a2 db dc 5a a0 47 45 98 8f 07 51 54 a1 87 50 6d 5a ae a6 b0 12 17 1a e0 b9 de 5b fe 53 4a df b3 bc 73 6a b8 01 15 10 35 2f 99 a2 5a dd 12 d5 24 ec 49 23 45 95 bc 26 0a 1e 6b f0
                                                                                                                            Data Ascii: 5HqhgUZV1;LET3W1f7.WyU5f>U\eZV7K)=PF)bQK~z|*KE%j8Haz8qgdbDPTQ}RX[LfZGEQTPmZ[SJsj5/Z$I#E&k
                                                                                                                            2024-09-28 02:37:55 UTC1369INData Raw: ac 1b 0b e1 4a 93 d7 b5 74 a4 9b 3a 12 35 20 e0 91 16 74 a4 fd 22 1b 2e 2d 4d a3 a8 5a 3d 07 1f 08 59 4b 61 69 8f c3 a5 9b 63 e9 44 e3 c5 a8 11 d6 07 c2 e9 28 f1 84 22 77 1c b8 36 04 95 77 28 81 c2 0a 3d 0f 57 fa 9c a6 13 6f 15 a1 86 04 b6 8e a5 a3 cc b7 e1 8a e9 1b 99 a2 4a b8 1a 95 16 79 8d 4c 61 4d 0b 86 0b 0d 9c de 21 ec db 0b 35 a6 c9 7b 71 74 b4 68 31 5c b9 bf 3f 45 25 ff 2b 12 95 24 ad 28 a5 b0 82 76 c3 05 f3 6b c9 74 f4 f4 5c d4 a0 c8 17 74 ce f6 49 cd 70 21 ac 0d 85 55 ba 42 42 e5 14 ee a2 b8 c6 9e 87 0b 03 43 e9 68 56 7d d4 a8 fc 5d 74 54 67 12 5c b9 2b 88 c2 da 55 88 ca a9 1f 41 61 c9 5b 25 38 17 79 58 a6 83 98 25 01 a8 59 19 7f d0 d1 f8 7c b8 f0 6e 09 85 15 31 1d 95 12 d5 98 e2 8a 9d 0e e7 02 5e 0b a2 03 ed bc 40 d4 b4 81 f1 74 a0 7d cf 0a e7
                                                                                                                            Data Ascii: Jt:5 t".-MZ=YKaicD("w6w(=WoJyLaM!5{qth1\?E%+$(vkt\tIp!UBBChV}]tTg\+UAa[%8yX%Y|n1^@t}
                                                                                                                            2024-09-28 02:37:55 UTC1369INData Raw: ca dd b0 d5 f0 2f 2a 40 6e 01 dc 9b 11 4a 25 b8 55 82 ad 09 b4 93 76 14 0a 10 f2 02 ed 18 17 c0 56 93 2e 54 80 d0 19 70 cb 74 5c a6 02 a4 0d 83 2d c3 61 da 89 ce 83 02 48 37 d3 de 0f 12 6c e8 9f a4 02 c8 c7 4d 70 a7 ed 7f a8 04 7d 5b c2 56 c1 d7 b4 d3 b9 00 4a 30 23 b1 dc 41 85 1f 94 52 01 c6 b7 85 3b c7 c2 a9 00 5a 87 49 33 81 37 38 fc ff 04 43 09 7a 5d a0 9d c1 23 61 2b ec 2f 2a 40 f8 db 70 43 3a a5 a3 02 fc 98 07 7b f3 74 b4 b5 53 82 12 98 d7 d2 4e 6e 03 d8 39 94 4a f1 e9 6e 93 e0 5a d4 78 2a 40 d0 cf 12 ec 8d 29 a5 8d b4 27 a0 0c ed 68 4b 76 3c b5 29 fb 4b 2a c0 f8 30 b8 d6 29 85 e2 93 af 89 84 83 ec be b4 11 7f 0c ca f0 43 10 6d 8c 5a 0c 07 cd 97 cb 14 5e ca 9d 70 49 fa 46 43 f1 fd 38 05 8e f4 1d 65 96 35 a2 21 94 61 60 0b 96 75 e1 5d 38 f1 78 2a 85
                                                                                                                            Data Ascii: /*@nJ%UvV.Tpt\-aH7lMp}[VJ0#AR;ZI378Cz]#a+/*@pC:{tSNn9JnZx*@)'hKv<)K*0)CmZ^pIFC8e5!a`u]8x*
                                                                                                                            2024-09-28 02:37:55 UTC1369INData Raw: 20 0f c2 ff b1 e6 52 0c c9 cd 7c 15 56 71 18 94 e2 4e a3 8f c2 1a 17 4e 31 e4 5a f1 8f 96 77 50 0c 69 cb 7c 15 56 fc bb 50 8a cf 75 3e 0a 6b 76 34 c5 70 47 cb 8b ab be f8 5a 17 56 e9 52 28 84 a9 a7 5c db c2 8a ef 84 7f ec 48 a4 18 92 8f f9 2a 2c 63 6b 28 44 40 1b fa ea 52 58 4a 31 24 ee c0 3f 5a cb 14 83 f1 29 5f 85 c5 35 50 08 eb 63 bc 24 b7 76 ac b1 74 1f 5e be a7 20 06 dd 15 92 af c2 fa 1e 0a 11 35 87 97 7c 9c af c4 bf 0a 1d cd 33 e3 6f 91 5d 28 8a ad 26 54 c2 81 55 bc a4 71 24 94 61 73 0a 2f e9 5b 84 4a 68 96 46 41 74 89 c4 df 8a fa 52 14 7f 99 51 09 0f b7 e2 25 73 26 43 19 4e a4 f2 92 3f 2a 15 d6 d5 41 14 c1 e5 0f 48 46 3a 45 f1 8c 15 95 70 75 28 2f 89 7d 18 ca 70 93 8e 97 0c ae 4c 58 d2 15 3a 0a 22 3d 03 7f 3b 6b a1 28 e2 bf f5 55 58 f2 07 50 86 2f
                                                                                                                            Data Ascii: R|VqNN1ZwPi|VPu>kv4pGZVR(\H*,ck(D@RXJ1$?Z)_5Pc$vt^ 5|3o](&TUq$as/[JhFAtRQ%s&CN?*AHF:Epu(/}pLX:"=;k(UXP/
                                                                                                                            2024-09-28 02:37:55 UTC1369INData Raw: 9c 4a 05 b2 40 43 45 4a 1b 3f 7a f7 f0 30 eb 99 ab 7f f8 a2 91 96 8e 84 9e 94 95 d3 8d 6e 14 d7 43 59 75 13 a8 40 46 50 b1 62 4f 77 bb a3 b8 bf 86 e5 7a 7a 38 c4 b2 20 86 6e b4 98 84 b2 96 52 91 c0 da 4f d7 da 00 91 44 ee a2 3b 11 37 a3 0c d3 6d 6a 58 c2 ea 3e 12 22 b9 3e 81 ee c4 7c 87 32 02 af 52 c3 12 56 d0 51 08 24 6c 02 dd 8a d9 89 32 ac 2f a8 61 89 6b 7c 36 c4 71 b6 0e dd 4a 7c 59 0d 4b 74 0e cb 16 01 18 5e 90 e9 56 c2 52 94 11 f8 05 15 09 46 fa 83 1b 1a 40 14 9d 56 d1 bd fe 0f a3 0c 73 3b 2a 91 11 16 fa 83 b4 15 10 84 f5 5a 99 ee 75 bd cf 31 2c 75 e7 5d 54 cb 0b 21 86 31 fd 59 8e a6 79 b5 22 ac 18 fa 85 d4 05 10 42 c0 57 2c 4f a3 ec 5a b0 c6 4a 45 1d fa 87 f1 8b 21 82 bb b3 58 9e 67 02 50 86 f5 2b 2a 51 1d 84 d2 3f 18 1f 35 a1 e6 65 6f 60 b9 56 9b
                                                                                                                            Data Ascii: J@CEJ?z0nCYu@FPbOwzz8 nROD;7mjX>">|2RVQ$l2/ak|6qJ|YKt^VRF@Vs;*Zu1,u]T!1Yy"BW,OZJE!XgP+*Q?5eo`V
                                                                                                                            2024-09-28 02:37:55 UTC1369INData Raw: 7d 16 ff e8 14 4f 15 c9 b8 ed 77 1a e0 68 45 16 bd 15 d4 aa db fe fa 73 db c3 13 45 37 a5 b0 76 c8 ec 84 7f b4 bc 83 aa ff 09 1d 9d 01 7b 93 9b d2 3b 09 cb bf fa 61 78 54 00 3c d2 61 dd 33 5a d6 12 77 b4 c4 3f ac b9 54 fd 43 7e e6 5c 07 d8 c8 d9 20 d3 91 26 35 bc 4e 69 84 91 2e 68 23 e6 af 7d e3 50 11 3c 15 72 ef ae 18 d6 1a b9 56 fc 9f 41 97 fe ed 54 c9 7f 2c e8 8d cb 0c 0f a4 d1 9e 5c bc fd 96 b3 2d cf b4 9c dc f1 cd a6 74 14 d1 e8 f0 27 67 17 07 c3 63 6d 9f 98 1a ce da 43 1e 84 8b ae 30 f2 12 95 71 f9 a3 f5 2e 2d b5 cf 3b a6 73 e4 b5 e1 7a fc 43 9a 7c e5 2c 96 65 6c d5 e6 d7 97 5b 4a f0 9c 54 f0 c6 61 0b 6b 13 e3 15 b8 a8 be 85 aa 32 8c ef ec e9 53 88 bf 99 6e d7 d1 56 c4 55 b3 51 86 a9 ee 75 11 fc 47 f2 aa 21 2b af 6e d6 01 15 d1 64 f3 4d 63 e3 58 bb
                                                                                                                            Data Ascii: }OwhEsE7v{;axT<a3Zw?TC~\ &5Ni.h#}P<rVAT,\-t'gcmC0q.-;szC|,el[JTak2SnVUQuG!+ndMcX
                                                                                                                            2024-09-28 02:37:55 UTC1369INData Raw: 16 7b 3d 9c cb 2f a6 72 f4 7f ef 5d 54 a5 a2 49 3b 5f fc 38 25 35 48 66 45 18 d7 44 c1 87 ac 8f e7 1a a9 18 c5 f9 70 2e e0 1e 2a 85 65 6a 5d 33 aa 9a a9 c1 ab e3 56 ec 99 fa f5 46 23 3d a4 1d d4 04 be d5 f6 d1 23 54 8a 7b 02 e0 9c 74 b3 8e ca f0 63 c7 30 54 13 c9 64 c8 58 b8 5c 43 4f 18 3f cd 81 cf 8d fb 3e 9c 8a a0 5b 27 c1 85 c9 99 54 82 d4 b5 e3 50 bd 7a ff 9e c5 f2 c5 3c 99 83 2a 10 fc f8 58 2d 15 20 73 32 5c 29 7c 93 0a d0 79 41 30 aa 9b e1 fa ee 2c 4f d7 47 ad 55 d5 f5 7f b3 28 be 37 23 e1 d2 37 46 8a ce f8 53 1f d4 84 65 0f 5a e8 8e f6 eb bb 0d a8 2a e6 a7 1e 93 29 38 e3 5d 70 ed ce 14 0a 2e a5 75 13 d4 8c b0 2d 7f 68 e8 d2 fc 4f 46 a2 2a d5 fb 3e 96 62 4b b9 13 ae 85 8d a7 d8 be 9e 21 a1 c6 14 dd e2 62 b1 23 97 cc 3b 8b 2a 16 fc dd f3 14 da c7 61
                                                                                                                            Data Ascii: {=/r]TI;_8%5HfEDp.*ej]3VF#=#T{tc0TdX\CO?>['TPz<*X- s2\)|yA0,OGU(7#7FSeZ*)8]p.u-hOF*>bK!b#;*a


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            35192.168.2.449810188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:55 UTC400OUTGET /chat/%7Bimage%7D HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:55 UTC701INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:55 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hLiDmSgxLCWfoucMN9kTwfgs%2F%2F%2FOMIVWvDhMILpnF4yZt7Ovrdaa0y4vSd%2FujdKEbgZU64hHzepmAOhk7jpWoGKclBRbSkiLedo4tUfyhMCFwuO8hFEXJmJC0lzMnI59RA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ab4383c42a0-EWR
                                                                                                                            2024-09-28 02:37:55 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            36192.168.2.449816188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:56 UTC409OUTGET /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:56 UTC605INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:56 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r8TRjgXOQyDISN2k%2BzMPhNn32M870CcCsn7IQuyeIMgv%2BMPjNaMW3m6smo9nSkr7Y8HLvBEnkTMr7ZX1XXPDfTCBGWiepp7YpQZInsYUyLqJn%2BU4jNLKZ4hkkUU4p1ZKZg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ab99d9a8ca8-EWR
                                                                                                                            2024-09-28 02:37:56 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            37192.168.2.449818188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:56 UTC412OUTGET /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:56 UTC601INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:56 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AMZ10nctS4y17NIRvBtinfgCKYds%2FkilTZ5gDenyVfHa5tB569B4gnIiFPUdAyFzZyjn22SDtM7f6VIwONThBoqxemDbQdceeXQuUiFNTmttjiHLLkhQHVX27HaSnlTyyw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ab9fe5ec420-EWR
                                                                                                                            2024-09-28 02:37:56 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            38192.168.2.44981718.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:56 UTC1055OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecSZUYbFEmzg%2Fcdenn3lqv5nnIlZPsMz4oABQoqkIUxelfYoEcNboRWfXYo2RhFx3Tcmq3QQSE8I6YDLzIzyc%2Bzz%2F8A6shJLZ3uy0HAxZlznCFjHpv6sgygOpan7H%2FiOHjhpksppd4YGVYoGHXW2bIW; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone
                                                                                                                            2024-09-28 02:37:56 UTC2788INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:37:56 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"max_age":604800,"report_to":"default"}
                                                                                                                            report-to: {"max_age":604800,"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}]}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:37:56 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:15:52 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaIuemHPWXMVLWLXs2kPNTzXc2KQFfBu5If%2Bs%2BHtvWW6%2BAnai3eeNPc2JwHn1piDR4AxZjldatTLFzenofFjZmSn%2B1qDI8fLrGhEvu9lR%2BhqI1W2aH4oEGAQg%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:37:56 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:37:56 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            content-security-policy-report-only: base-uri 'none'; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=146&pid=89eb1282bb3002cc&e=UmFuZG9tSVYkc2RlIyh9YYYdGuViorKPnOETB65KbUPLFZaV2xCOCmq7v7dLvvuW; script-src 'self' 'nonce-v8lgDcuoaXmWXce' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' 'sha256-iry7oJKoKJ+9HSjmU3E1TlRlpSesJWZ1vapuUz2MP38='
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 69a82a9746d3a7343dca651e0829f000.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: caaUqaGgvEeS5XZ0Y5JOwPZBjnbcChnZBtx9O315TOvKQz2ME4JPrQ==
                                                                                                                            2024-09-28 02:37:56 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 76 38 6c 67 44 63 75 6f 61 58 6d 57 58 63 65 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="v8lgDcuoaXmWXce"
                                                                                                                            2024-09-28 02:37:57 UTC16384INData Raw: 33 66 66 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 3ffa<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:37:57 UTC16384INData Raw: 0d 0a 65 32 37 64 0d 0a 6c 6c 5f 79 65 61 72 7d 22 2c 22 72 61 6e 67 65 5f 66 72 6f 6d 5f 6c 6f 6e 67 5f 64 61 74 65 5f 74 69 6d 65 5f 75 6e 74 69 6c 5f 6c 6f 6e 67 5f 64 61 74 65 5f 74 69 6d 65 22 3a 22 66 72 6f 6d 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 20 61 74 20 7b 74 69 6d 65 7d 20 75 6e 74 69 6c 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 5f 75 6e 74 69 6c 7d 20 61 74 20 7b 74 69 6d 65 5f 75 6e 74 69 6c 7d 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 66 72 6f 6d 22 3a 22 66 72 6f 6d 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d
                                                                                                                            Data Ascii: e27dll_year}","range_from_long_date_time_until_long_date_time":"from {month_name} {day_of_month}, {full_year} at {time} until {month_name_until} {day_of_month_until}, {full_year_until} at {time_until}","day_month_year_from":"from {month_name} {day_nam
                                                                                                                            2024-09-28 02:37:57 UTC16384INData Raw: 64 66 72 6f 6e 74 5f 73 64 2e 69 71 5f 6c 74 72 2f 61 63 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e
                                                                                                                            Data Ascii: dfront_sd.iq_ltr/ac73a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.bookin
                                                                                                                            2024-09-28 02:37:57 UTC16384INData Raw: 54 64 4a 56 44 42 61 55 58 61 57 42 58 46 4a 56 47 53 42 42 4e 50 4d 50 53 58 57 65 27 2c 0a 67 6e 73 53 70 75 6e 5f 72 65 6d 69 6e 64 65 72 4d 6f 64 61 6c 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 43 54 4f 59 45 53 45 56 66 46 54 64 4a 56 44 42 61 55 58 53 5a 57 63 50 58 51 55 4a 64 44 42 4b 43 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 4f 51 48 46 52 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 41 48 49 63 61 57 47 4e 50 5a 53 56 5a 4d 59 49 4f 27 2c 0a 67 6e 73 49 6e
                                                                                                                            Data Ascii: TdJVDBaUXaWBXFJVGSBBNPMPSXWe',gnsSpun_reminderModalDismiss_index: 'TDXRPCTOYESEVfFTdJVDBaUXSZWcPXQUJdDBKC',gnsInsCrd_bannerView_index: 'TDXRPVRBKKJVbFPbVCMIWIOQHFRYDEZRae',gnsInsCrd_bannerCtaClick_index: 'TDXRPVRBKKJVbFPbVCMIWIAHIcaWGNPZSVZMYIO',gnsIn
                                                                                                                            2024-09-28 02:37:57 UTC8839INData Raw: 4a 53 66 56 66 56 5a 4d 59 43 42 4a 62 43 4d 46 52 55 52 55 52 48 65 22 3a 31 2c 22 63 43 47 61 59 53 64 45 54 66 62 46 62 63 56 49 5a 64 52 4a 59 54 45 54 22 3a 31 2c 22 66 65 66 53 4b 65 45 46 63 49 41 44 57 48 43 44 55 46 59 51 58 55 5a 57 50 48 44 44 57 65 22 3a 31 2c 22 62 50 46 50 4f 4b 5a 66 48 66 56 61 41 46 5a 4b 56 48 4a 62 64 59 65 4e 65 48 54 22 3a 31 2c 22 61 57 51 4f 63 54 45 57 63 66 42 51 44 50 42 46 4f 22 3a 31 2c 22 47 62 51 55 4a 57 50 48 44 44 50 57 56 61 54 4f 41 64 4c 58 65 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55 62 52 53 64 46 51 62 4d 44 65 66 45 57 48 5a 50 45 45 5a 66 4b 65 22 3a 31 2c 22 63 43 48 4f 62 4f 4e 64 50 62 49 5a 46 62 59 53 66 44 63 66 46 64 48 4d 62 4e 58 47 44 4a 64 4c 4f 4c 4f 4c 4d 4f 22 3a 31 2c 22 4f 41 5a 4f
                                                                                                                            Data Ascii: JSfVfVZMYCBJbCMFRURURHe":1,"cCGaYSdETfbFbcVIZdRJYTET":1,"fefSKeEFcIADWHCDUFYQXUZWPHDDWe":1,"bPFPOKZfHfVaAFZKVHJbdYeNeHT":1,"aWQOcTEWcfBQDPBFO":1,"GbQUJWPHDDPWVaTOAdLXe":1,"NAFQCJWZUbRSdFQbMDefEWHZPEEZfKe":1,"cCHObONdPbIZFbYSfDcfFdHMbNXGDJdLOLOLMO":1,"OAZO
                                                                                                                            2024-09-28 02:37:57 UTC16384INData Raw: 33 66 66 61 0d 0a 54 50 4d 4f 62 56 63 4b 4e 4d 66 58 4c 4d 45 4f 22 3a 31 2c 22 48 57 41 46 59 59 4b 53 43 52 56 46 4a 59 62 54 44 43 63 65 5a 54 57 65 58 4a 62 46 57 45 62 59 66 4c 56 54 22 3a 31 2c 22 4f 4f 49 42 54 42 42 4c 58 4f 4c 44 45 5a 52 64 5a 62 56 65 55 50 58 4b 45 43 48 54 65 59 54 22 3a 31 2c 22 48 49 4e 5a 4a 4c 65 55 58 53 61 5a 62 43 44 57 4f 4f 44 56 63 4e 56 42 55 4b 63 54 4b 65 22 3a 31 2c 22 59 54 54 48 62 58 65 65 56 4a 57 63 46 4b 4a 50 46 4e 4a 51 56 56 45 62 4d 4b 58 65 22 3a 32 2c 22 61 57 51 4f 63 59 54 42 49 5a 45 56 52 4e 51 63 65 64 50 58 50 52 4c 4f 22 3a 31 2c 22 63 43 48 4f 62 4d 4b 64 46 45 56 52 56 56 50 4b 4c 5a 5a 56 43 4d 49 53 4c 55 44 5a 53 65 64 4c 4f 4c 4f 4c 4d 4f 22 3a 31 2c 22 65 57 65 59 66 54 42 56 5a 64 4f
                                                                                                                            Data Ascii: 3ffaTPMObVcKNMfXLMEO":1,"HWAFYYKSCRVFJYbTDCceZTWeXJbFWEbYfLVT":1,"OOIBTBBLXOLDEZRdZbVeUPXKECHTeYT":1,"HINZJLeUXSaZbCDWOODVcNVBUKcTKe":1,"YTTHbXeeVJWcFKJPFNJQVVEbMKXe":2,"aWQOcYTBIZEVRNQcedPXPRLO":1,"cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO":1,"eWeYfTBVZdO
                                                                                                                            2024-09-28 02:37:57 UTC10479INData Raw: 0d 0a 32 38 65 35 0d 0a 41 46 51 43 4a 57 5a 55 61 59 4a 4b 53 45 43 59 42 5a 53 42 56 4e 52 58 4d 46 44 46 61 54 22 3a 31 2c 22 49 5a 56 42 45 54 57 52 47 4d 4d 66 45 44 64 65 5a 4f 48 65 59 48 65 22 3a 31 2c 22 63 51 50 48 62 63 47 52 63 63 51 59 49 4d 64 55 66 45 4a 4d 46 62 46 55 49 56 54 45 53 4d 43 43 22 3a 31 2c 22 4e 41 46 4c 65 4f 65 4a 4e 41 46 4c 4a 50 45 43 56 56 44 4a 59 4d 42 4d 4a 49 65 46 48 65 22 3a 31 2c 22 4f 4f 49 42 42 51 4d 41 4c 48 59 59 66 50 4e 65 4f 59 57 4b 64 54 4b 44 41 64 55 52 65 22 3a 31 2c 22 49 5a 56 53 46 56 42 50 53 63 57 55 57 44 64 65 45 61 51 44 4b 57 65 22 3a 31 2c 22 41 42 56 59 55 59 4e 61 58 54 62 51 47 4e 51 4a 53 46 56 66 45 51 49 4a 63 65 56 53 52 65 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 48 55 46 4b 59
                                                                                                                            Data Ascii: 28e5AFQCJWZUaYJKSECYBZSBVNRXMFDFaT":1,"IZVBETWRGMMfEDdeZOHeYHe":1,"cQPHbcGRccQYIMdUfEJMFbFUIVTESMCC":1,"NAFLeOeJNAFLJPECVVDJYMBMJIeFHe":1,"OOIBBQMALHYYfPNeOYWKdTKDAdURe":1,"IZVSFVBPScWUWDdeEaQDKWe":1,"ABVYUYNaXTbQGNQJSFVfEQIJceVSRe":1,"YdXfdKNKNKHUFKY
                                                                                                                            2024-09-28 02:37:57 UTC16384INData Raw: 31 62 66 65 32 0d 0a 50 4f 61 58 47 50 54 47 54 62 55 45 58 4f 44 50 46 44 43 22 3a 31 2c 22 4e 41 46 51 56 55 4e 4f 64 4f 4b 42 42 49 55 4a 4c 4d 44 50 56 53 66 58 50 52 51 4f 43 66 50 58 4f 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 44 62 4f 61 64 42 4b 43 4c 46 41 55 56 41 4c 43 43 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 59 52 62 4f 57 66 42 51 4d 63 53 62 46 4a 62 43 44 57 4f 4f 43 22 3a 31 2c 22 58 64 4b 59 45 61 45 41 46 53 56 43 4d 49 51 63 4c 50 4c 42 47 56 50 52 65 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 44 62 4f 61 64 42 4b 42 4a 41 62 52 61 65 22 3a 31 2c 22 48 57 41 43 63 4d 4c 61 55 4a 4d 46 52 54 61 57 4e 63 44 66 61 4e 4b 65 22 3a 31 2c 22 4e 41 46 4c 65 4e 49 4a 53 65 5a 52 42 55 66 46 41 65 46 48 4f 52 65 65 59 62 4f 4d 46 63 48 59 4b 65 22 3a
                                                                                                                            Data Ascii: 1bfe2POaXGPTGTbUEXODPFDC":1,"NAFQVUNOdOKBBIUJLMDPVSfXPRQOCfPXO":1,"TfNZeFcCDbOadBKCLFAUVALCC":1,"aWQOcYTBYRbOWfBQMcSbFJbCDWOOC":1,"XdKYEaEAFSVCMIQcLPLBGVPRe":1,"TfNZeFcCDbOadBKBJAbRae":1,"HWACcMLaUJMFRTaWNcDfaNKe":1,"NAFLeNIJSeZRBUfFAeFHOReeYbOMFcHYKe":
                                                                                                                            2024-09-28 02:37:57 UTC16384INData Raw: 46 49 62 4e 59 54 22 3a 31 2c 22 50 63 56 46 48 4d 50 61 52 52 65 61 53 64 49 65 5a 4e 4e 41 46 4c 57 45 5a 66 65 66 53 57 65 22 3a 31 2c 22 42 4b 62 56 5a 57 4e 5a 4a 46 47 62 52 64 65 46 49 62 51 62 41 64 50 4d 54 41 63 48 65 22 3a 31 2c 22 59 54 42 65 57 66 43 44 49 58 4c 53 47 62 44 61 46 53 52 66 41 42 4e 49 50 52 61 4f 22 3a 31 2c 22 48 57 41 46 59 42 66 50 44 42 64 4a 66 59 53 62 46 51 4a 54 66 4e 5a 65 4c 54 22 3a 32 2c 22 62 51 45 57 4d 64 43 50 59 4c 61 41 4c 53 47 51 43 64 42 43 22 3a 31 2c 22 59 64 58 66 43 44 57 4f 4f 53 63 55 44 4f 48 51 46 66 48 42 65 59 45 43 55 46 65 4a 48 55 43 22 3a 31 2c 22 63 43 48 4f 62 4f 4f 59 4b 59 59 61 44 63 4f 64 4a 65 61 49 4c 59 44 43 44 57 4f 4f 43 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55 66 51 4c 51 42 54
                                                                                                                            Data Ascii: FIbNYT":1,"PcVFHMPaRReaSdIeZNNAFLWEZfefSWe":1,"BKbVZWNZJFGbRdeFIbQbAdPMTAcHe":1,"YTBeWfCDIXLSGbDaFSRfABNIPRaO":1,"HWAFYBfPDBdJfYSbFQJTfNZeLT":2,"bQEWMdCPYLaALSGQCdBC":1,"YdXfCDWOOScUDOHQFfHBeYECUFeJHUC":1,"cCHObOOYKYYaDcOdJeaILYDCDWOOC":1,"NAFQCJWZUfQLQBT


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            39192.168.2.449821188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:56 UTC635OUTGET /favicon.ico HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: image
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:57 UTC707INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:57 GMT
                                                                                                                            Content-Type: image/vnd.microsoft.icon
                                                                                                                            Content-Length: 180744
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:23:53 GMT
                                                                                                                            ETag: "2c208-623067cf79562"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: REVALIDATED
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QoyIcamYL0k5HjTb9gPlfHt%2BxHtQwZLz45sHEVOAnSF06eUaBgI%2BHomdSDl5FT2HIjBSONqRQRvHJoYrJ1wMX%2F0%2Fuz1HynBf74J%2BOaSTl2215g6yt4hviMzQrPQUwbc8RA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05abe2ad119eb-EWR
                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                            2024-09-28 02:37:57 UTC662INData Raw: 00 00 01 00 09 00 10 10 00 00 01 00 20 00 68 04 00 00 96 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 fe 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 86 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 2e 1f 00 00 40 40 00 00 01 00 20 00 28 42 00 00 d6 44 00 00 48 48 00 00 01 00 20 00 88 54 00 00 fe 86 00 00 60 60 00 00 01 00 20 00 a8 94 00 00 86 db 00 00 80 80 00 00 01 00 20 00 28 08 01 00 2e 70 01 00 00 00 00 00 01 00 20 00 b2 49 00 00 56 78 02 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c d3 7c 3b 0c 7a 7c 3b 0c 13 7c
                                                                                                                            Data Ascii: h 00 %.@@ (BDHH T`` (.p IVx( |;|;|;|;|;|;|;|;|;|;|;|;|;|;|;z|;|
                                                                                                                            2024-09-28 02:37:57 UTC1369INData Raw: c7 ac 98 ff c6 aa 95 ff ed e5 de ff b8 94 7b ff 7d 3c 0e ff 7b 3a 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff bd 9c 84 ff f9 f6 f4 ff d9 c6 b8 ff e2 d4 c9 ff ee e5 e0 ff 99 67 42 ff 7b 39 09 ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff be 9d 86 ff ec e3 dd ff 8f 57 2f ff 96 62 3c ff f0 e8 e3 ff b9 96 7d ff 7b 39 0a ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff bd 9c 84 ff f8 f4 f1 ff c5 a7 92 ff cb b1 9f ff f5 f1 ed ff ae 86 69 ff 7b 39 0a ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff a1 72 51 ff d9 c7 b9
                                                                                                                            Data Ascii: {}<{:|;|;|;|;|;|;|;{:gB{9|;|;|;|;|;|;|;|;{:W/b<}{9|;|;|;|;|;|;|;|;{:i{9|;|;|;|;|;|;|;|;{:rQ
                                                                                                                            2024-09-28 02:37:57 UTC1369INData Raw: ee e9 ff f9 f6 f4 ff fc fc fa ff dc cb bf ff 93 5e 3a ff 9b 59 07 ff f0 ae 01 ff fd bc 00 ff be 7c 06 ff 7d 3c 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 39 09 ff a4 76 55 ff f7 f3 f0 ff f0 e8 e3 ff ab 82 64 ff 9d 6d 4a ff ae 86 6a ff ea df d8 ff fe fd fc ff be 9e 88 ff 90 50 0e ff d3 91 03 ff e5 a3 02 ff a5 64 08 ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 39 09 ff a4 76 55 ff f7 f3 f0 ff ea df d7 ff 8c 53 29 ff 79 36 06 ff 7d 3d 0e ff c8 ac 99 ff ff ff ff ff d1 ba a9 ff 81 43 15 ff 88 46 0a ff 8d 4c 0a ff 7f 3e 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff
                                                                                                                            Data Ascii: ^:Y|}<|;|;|;|;|;|;|;|;|;{9vUdmJjPd|;|;|;|;|;|;|;|;|;|;{9vUS)y6}=CFL>|;|;|;|;|;|;|;
                                                                                                                            2024-09-28 02:37:57 UTC1369INData Raw: 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ea 7c 3b 0c 70 7c 3b 0c 14 7c 3b 0c 7f 7c 3b 0c e4 7c 3b 0c fe 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c fe 7c 3b 0c e4 7c 3b 0c 7f 7c 3b 0c 14 7c 3b 0c 00 7c 3b 0c 10 7c 3b 0c 56 7c 3b 0c a4 7c 3b 0c c0 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c0 7c 3b 0c a4 7c 3b 0c 55 7c 3b 0c 10 7c 3b 0c 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                            Data Ascii: |;|;|;|;|;|;|;p|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;V|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;U|;|;
                                                                                                                            2024-09-28 02:37:57 UTC1369INData Raw: ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0b ff 86 4a 1e ff c9 ae 9a ff d5 c0 b0 ff d4 bf af ff d4 bf af ff d4 bf af ff d3 be ae ff ca af 9c ff af 88 6b ff 8b 51 28 ff 7b 39 0a ff 7c 3b 0c ff 7b 3a 0c ff 95 54 0a ff c9 88 05 ff c3 81 05 ff 8c 4b 0a ff 7b 3a 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff 8b 51 28 ff ee e6 e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fd ff e7 dc d3 ff a1 72 50 ff 7b 39 0b ff 82 41 0b ff db 99 03 ff ff bd 00 ff ff bd 00 ff c9 87 05 ff 7d 3c 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b
                                                                                                                            Data Ascii: |;|;|;|;|;|;|;|;|;|;{:JkQ({9|;{:TK{:|;|;|;|;|;|;|;|;|;|;|;|;|;{:Q(rP{9A}<|;|;|;
                                                                                                                            2024-09-28 02:37:57 UTC1369INData Raw: 85 48 1c ff 7b 3a 0b ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff 8b 51 27 ff ee e6 e0 ff ff ff ff ff ed e4 dd ff 89 4e 24 ff 7b 39 09 ff 7a 38 09 ff 8a 50 25 ff ee e6 e0 ff ff ff ff ff f1 e9 e4 ff 8d 55 2c ff 7b 39 0a ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff 8b 51 27 ff ee e6 e0 ff ff ff ff ff f4 ee ea ff 9c 6a 47 ff 84 47 1a ff 87 4b 20 ff b5 90 76 ff fb fa f8 ff ff ff ff ff e9 df d7
                                                                                                                            Data Ascii: H{:|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;{:Q'N${9z8P%U,{9|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;{:Q'jGGK v
                                                                                                                            2024-09-28 02:37:57 UTC1369INData Raw: 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c fa 7c 3b 0c 85 7c 3b 0c 06 7c 3b 0c 00 7c 3b 0c 0b 7c 3b 0c 76 7c 3b 0c e0 7c 3b 0c fd 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c fd 7c 3b 0c e0 7c 3b 0c 75 7c 3b 0c 0b 7c 3b 0c 00 00 00 00 00 7c 3b 0c 00 7c 3b 0c 02 7c 3b 0c 2f 7c 3b 0c 79 7c 3b 0c a2 7c 3b 0c a8 7c 3b 0c a7 7c 3b 0c a7
                                                                                                                            Data Ascii: ;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;v|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;u|;|;|;|;|;/|;y|;|;|;|;
                                                                                                                            2024-09-28 02:37:57 UTC1369INData Raw: 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c f7 7c 3b 0c d1 7c 3b 0c 77 7c 3b 0c 2f 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c
                                                                                                                            Data Ascii: |;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;w|;/|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|
                                                                                                                            2024-09-28 02:37:57 UTC1369INData Raw: ff 7c 3b 0b ff 7c 3b 0c ff 7c 3b 0c ff 7d 3c 0c ff 80 3f 0c ff 87 46 0b ff 89 48 0b ff 86 45 0b ff 7f 3e 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0b ff 7c 3c 0d ff 82 45 18 ff a0 71 4e ff be 9e 86 ff c5 a8 92 ff c6 aa 95 ff c5 a9 94 ff c5 a9 94 ff c5 a9 94 ff c5 a9 94 ff c4 a8 93 ff c1 a3 8c ff b9 96 7c ff aa 80 61 ff 96 63 3d ff 85 49 1d ff 7d 3c 0d ff 7b 39 0a ff 7c 3b 0c ff 7b 3a 0c ff 84 43 0b ff 98 57 0a ff b5 74 07 ff bc 7b 06 ff af 6d 07 ff 91 4f 0a ff 80 3f 0b ff 7b 3a 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b
                                                                                                                            Data Ascii: |;|;|;}<?FHE>|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;{:|<EqN|ac=I}<{9|;{:CWt{mO?{:|;|;|;|;|;
                                                                                                                            2024-09-28 02:37:57 UTC1369INData Raw: 9d 5b 09 ff 96 55 0a ff 86 45 0b ff 7e 3d 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff 7d 3d 0d ff 88 4c 21 ff bc 9b 83 ff f2 eb e7 ff fd fc fb ff fa f7 f5 ff dc ca bd ff 99 66 41 ff 7d 3d 0e ff 7a 37 08 ff 7a 38 09 ff 76 32 01 ff 81 42 15 ff ab 81 64 ff dd cc c0 ff ff ff ff ff ff ff ff ff e7 db d2 ff bc 9b 82 ff 88 4d 22 ff 78 35 06 ff 7c 3b 0c ff 80 3e 0b ff 80 3f 0c ff 7e 3d 0c ff 7b 3a 0c ff 7b 3a 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c
                                                                                                                            Data Ascii: [UE~=|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;{:}=L!fA}=z7z8v2BdM"x5|;>?~={:{:|;|;|;|;|;|;|;|;|;|;|;|;


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            40192.168.2.449824188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:57 UTC777OUTPOST /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 30
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:57 UTC30OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 6c 61 73 74 5f 6d 73 67 5f 69 64 3d 36 30 35 39 30 30 39
                                                                                                                            Data Ascii: code=wakdl&last_msg_id=6059009
                                                                                                                            2024-09-28 02:37:57 UTC658INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:57 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P1J65hta%2FL8zYHSgbqvyTiGLhPbeXv566dpp91bcVO8DfZajY6XZepdJQlKJybA%2BNu6M8p31q9Wbn6UlnMr0reM1XX7yTmwYc81Vz7Hv%2B3jSQUGtral8lTC5wI%2FYxNV46Q%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05abfdac61809-EWR
                                                                                                                            2024-09-28 02:37:57 UTC51INData Raw: 32 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 22 4d 65 73 73 61 67 65 73 20 6e 6f 74 20 66 6f 75 6e 64 21 22 7d 0d 0a
                                                                                                                            Data Ascii: 2d{"status":false,"text":"Messages not found!"}
                                                                                                                            2024-09-28 02:37:57 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            41192.168.2.449825188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:57 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:57 UTC731INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:57 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4tQ2ia4QILn2vvvSUe92HBh6V6zmvPai8KPiIAsKOjM5u8HWUAyUcAk3acN2aBJcAJgNOTv7v%2FJS6Mdsvq0ReCkC4sa3YXonpsV1vacJIaSr%2Bg7mph58Bl5MnvUwCHV6uQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ac198a743dd-EWR
                                                                                                                            2024-09-28 02:37:57 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            42192.168.2.449826188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:57 UTC599OUTGET /css/chat.mp3 HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept-Encoding: identity;q=1, *;q=0
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: no-cors
                                                                                                                            Sec-Fetch-Dest: audio
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            Range: bytes=0-
                                                                                                                            2024-09-28 02:37:58 UTC683INHTTP/1.1 206 Partial Content
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:57 GMT
                                                                                                                            Content-Type: audio/mpeg
                                                                                                                            Content-Length: 12709
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:25:08 GMT
                                                                                                                            ETag: "66f56ec4-31a5"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: EXPIRED
                                                                                                                            Content-Range: bytes 0-12708/12709
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KLPgG9I6ouRBrvynpR0U%2FW1sLpnalSyBIdwTmb%2FJrx4aiF8XhcR0QfDgVmEXV%2F9arbQBsWUx3XJrX%2FRVzXaHON1HuxPaNBLmd9j0xnx%2FXsygWgwtMLcvm6J%2BdAHYcSiy%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ac41bd78c1b-EWR
                                                                                                                            2024-09-28 02:37:58 UTC686INData Raw: ff fb 90 c4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 69 6e 67 00 00 00 0f 00 00 00 3e 00 00 31 a5 00 02 04 04 06 08 08 0a 0a 0d 0f 0f 11 13 13 15 15 17 1a 1a 1c 1e 1e 20 20 22 24 24 27 27 29 2b 2b 3c 43 43 4a 4a 52 5b 5b 60 64 64 6a 6a 6f 74 74 79 7e 7e 84 84 88 8e 8e 92 92 97 9c 9c a1 a5 a5 ab ab af b4 b4 b9 bd bd c2 c2 c6 cb cb d0 d0 d4 d8 d8 dd e2 e2 e7 e7 eb ef ef f4 f7 f7 f9 f9 fb fd fd ff 00 00 00 50 4c 41 4d 45 33 2e 31 30 30 04 b9 00 00 00 00 00 00 00 00 15 20 24 03 b3 41 00 01 e0 00 00 31 a5 70 eb a5 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                            Data Ascii: Xing>1 "$$'')++<CCJJR[[`ddjjotty~~PLAME3.100 $A1pM
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 4c 41 4d 45 33 2e 31 30 30 55 55 55 55 ff fb 10 c4 7c 83 c0 00 01 a4 00 00 00 20 00 00 34 80 00 00 04 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 4c 41 4d 45 33 2e 31 30 30 55 55 55 55 ff fb 10 c4 a6 03 c0 00 01 a4 00 00 00 20 00 00 34 80 00 00 04 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 4c 41 4d 45 33 2e 31 30 30 55 55 55 55 ff fb 10 c4
                                                                                                                            Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUUUUUUULAME3.100UUUU| 4UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUULAME3.100UUUU 4UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUULAME3.100UUUU
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 5b a9 04 6f c8 9b 87 14 e8 9a 65 44 9d 06 7c 02 e1 ff ff ff ff f3 b6 9d cb d0 ff fb 10 c4 d6 03 c0 00 01 a4 00 00 00 20 00 00 34 80 00 00 04 fe 16 f0 f3 33 c9 b6 3d 90 af 23 42 80 b5 37 e8 64 23 4d 04 06 33 16 17 23 19 70 df 21 09 23 0a 20 44 ff ff ff ff ff ff ff ff ef ff ff 98 1a 80 d9 77 80 c0 28 60 76 05 20 60 27 81 8c 02 40 1c 14 00 ed bb 73 53 3f ff ff ff ff ff ff ff fc 3f bc d5 8e ff fb 10 c4 d6 03 c0 00 01 a4 00 00 00 20 00 00 34 80 00 00 04 fe 1f ac 3b 5d 14 d4 1d 30 db 75 55 30 01 01 53 01 50 01 30 80 05 e3 01 c0 29 30 57 02 93 04 00 32 30 36 04 23 04 00 14 30 06 01 43 01 c0 08 ff ff ff ff ff ff ff ff ff ff ff ff ff ff 97 f3 ff ff ff ff ff ff ff ff ff ff ff ff fe 18 b5 c5 94 5c 76 01 ff fb 10 c4 d6 03 c0 00 01 a4 00 00 00 20 00 00 34 80 00 00 04
                                                                                                                            Data Ascii: [oeD| 43=#B7d#M3#p!# Dw(`v `'@sS?? 4;]0uU0SP0)0W206#0C\v 4
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 62 f4 96 56 5e 40 8a a4 b3 63 19 70 e2 67 10 38 c6 e6 89 22 92 2a fd 02 22 2d c3 24 7f dd 46 32 44 08 82 01 42 88 18 fc 24 06 0e 02 90 e2 e1 b9 e1 d4 46 92 c4 a9 0f 19 50 30 91 90 0c ea a5 03 15 01 c2 ec 10 98 bc 51 73 53 67 c7 f1 b8 36 08 81 af 3e 54 47 ff ff ff ff ff ff fa 53 12 e9 d3 84 d2 5f 53 4f 98 aa 61 22 00 00 04 39 7d ff 00 10 88 80 b1 91 a1 30 12 02 20 80 10 30 13 06 13 0e 04 29 31 e9 07 d3 22 1c 30 60 63 15 31 41 0c 48 06 c0 4c 66 34 08 ab da 65 29 20 11 64 d9 21 7b df 48 6d c0 15 02 0a 85 bf 55 e6 e8 04 20 05 70 be b2 85 62 79 45 e6 c9 39 1c 92 34 5d 6b 45 06 77 aa 74 d1 d7 fa 44 f1 8a 1e aa d1 96 47 78 24 18 0e 89 a1 0a 9c 2a 54 74 f9 75 d3 ff fb 80 c4 ea 00 55 21 95 39 ee 1a b8 62 d7 b2 66 75 af 54 bc 10 50 02 4d 81 e0 20 06 81 58 cd 9a b1
                                                                                                                            Data Ascii: bV^@cpg8"*"-$F2DB$FP0QsSg6>TGS_SOa"9}0 0)1"0`c1AHLf4e) d!{HmU pbyE94]kEwtDGx$*TtuU!9bfuTPM X
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: fb 60 c4 f7 00 0e 61 0d 49 ee 31 b0 e1 ea 21 a8 7d c4 36 94 b0 dc 03 01 a4 52 32 81 4c a1 38 a4 8a c7 7a bd ea b0 a7 11 16 8f e7 d4 7a 92 0e 71 d4 b9 c2 f3 a9 fd 4a a9 62 a8 0d ea 3e c3 a8 11 73 c9 aa 9b 7d 49 7a 60 b5 05 44 a0 9f ab b0 54 c0 0e a1 48 9f ff f9 c3 c9 a5 fd 8d d0 82 00 02 00 04 39 d8 00 20 0d c5 30 48 27 26 0c 1b 7a 87 18 0c 11 18 7d 01 19 2e 15 15 41 f4 15 30 20 0b 49 58 18 58 1d 79 89 40 32 80 85 9e 32 ca 8d 9b b2 8b 35 e1 64 f1 c6 99 b2 89 12 3f b1 7d 3b bb 15 22 f5 37 98 ea 25 04 c0 6c b6 a5 86 10 58 9a a5 53 2f dd 6e de 3e 88 10 b8 87 fa 8e 8c 50 bd 09 17 5f ff f5 28 fb fd 4c 63 32 88 00 00 09 3f 40 01 80 ba 47 40 e0 30 06 09 04 4e 04 7a 40 a0 c1 93 b0 91 9a 41 71 89 6a 66 40 85 07 17 c9 bb 18 1c c3 c8 08 4b 93 21 78 81 62 60 28 ca 37
                                                                                                                            Data Ascii: `aI1!}6R2L8zzqJb>s}Iz`DTH9 0H'&z}.A0 IXXy@225d?};"7%lXS/n>P_(Lc2?@G@0Nz@Aqjf@K!xb`(7
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: b6 87 0b 2f 90 69 3d 55 17 cd f3 49 09 11 0a 35 13 4b a9 67 f3 05 b5 6c 21 09 87 5a 49 0e f1 67 0e 04 8f a0 ff f6 a4 b2 68 02 e1 38 3a 26 8d 55 d6 c6 61 8b 8b a2 cc 22 26 ea 26 8f c1 6e f2 4a c2 00 00 03 04 6d d8 00 30 0c 10 31 30 91 29 db 0b 05 8e 22 23 03 10 03 8a 01 ff fb 60 c4 f2 00 0e e8 f9 33 ee a2 34 a1 b2 1e e6 bd d4 b5 ed 1f a4 29 05 08 8a a1 16 63 28 0e 29 13 16 19 bc 9a 8f 76 91 ea a1 e6 c7 22 e0 5d 0a 2a c5 64 f4 08 27 b6 54 4a 46 81 ad 04 14 f6 45 6e 8d 20 bf 9a 37 65 09 f8 54 46 b4 10 ff e9 21 44 77 0e d0 13 02 78 6e 7b bc d4 d4 c0 09 80 10 60 df 40 f9 af ff d6 68 7c 92 47 f3 55 9b b6 20 03 18 28 c3 ff d1 41 80 0d 0e 20 2b 2a 83 03 06 4d 88 5c be 06 05 10 0a d6 31 61 c0 83 21 00 5e 55 42 87 69 f2 d1 a2 76 12 54 50 3a d8 b0 11 01 a2 63 92 11
                                                                                                                            Data Ascii: /i=UI5Kgl!ZIgh8:&Ua"&&nJm010)"#`34)c()v"]*d'TJFEn 7eTF!Dwxn{`@h|GU (A +*M\1a!^UBivTP:c
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: cc 48 a9 20 1d 01 17 20 67 bf c2 01 de db 80 02 50 87 77 ff 22 00 00 c2 42 8c 50 2d 4d 81 02 a6 4b 06 96 26 3f 8a 80 b5 1c 0c 06 48 70 81 4a 01 40 36 a4 cd 50 0c dd e4 72 a8 19 58 8a 82 cb b4 15 12 a0 2e 99 0d 10 d7 45 a9 ab 6c ab 3a a5 98 c8 ef d5 69 d9 21 c6 24 e3 b5 fb 2c 61 03 88 93 34 66 df ff 89 b0 73 89 47 9f fa d4 b1 25 35 0b 23 26 96 00 01 08 48 4d e8 00 20 1a 22 17 96 c0 c2 20 13 21 19 8c 16 0b 30 45 64 d6 20 90 b0 38 98 28 15 01 c1 d0 58 34 2a 96 65 97 45 66 a1 1f 89 a5 14 d5 2c 71 da 7e f8 e7 eb 5d 3c 68 10 3d 56 41 22 4e 55 ff fb 50 c4 f5 00 0d d8 d1 31 ed b1 b2 a1 a1 1a 66 bd bc 2c ec 95 f6 6e 1f 1c 9c 59 65 d1 c0 41 fc be 12 22 f9 8a 1f fe a4 56 27 c1 c4 0d a3 73 55 29 b7 bb 09 fa 42 52 77 fc 80 84 31 a2 e4 00 04 19 a1 77 a9 10 80 79 0b f6
                                                                                                                            Data Ascii: H gPw"BP-MK&?HpJ@6PrX.El:i!$,a4fsG%5#&HM " !0Ed 8(X4*eEf,q~]<h=VA"NUP1f,nYeA"V'sU)BRw1wy
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 21 5b 6c e7 21 21 09 84 a2 08 74 c9 a5 40 00 81 85 d6 fa 82 00 06 bb 03 17 54 90 60 62 05 54 90 c0 d6 53 22 01 59 e8 70 35 31 86 80 b4 8e ca a0 02 e5 30 77 fc 3b 37 34 79 5a e7 c6 f9 ea 5c a2 3a 0c 6a c7 2e 17 5d 47 32 ad 0f 8a 65 db ce 13 48 3f f8 69 24 4a 41 4b 3e bf ff 8e 1c f2 90 1e 81 b4 6a 5c ff be 1e 40 d1 89 ba d5 b4 00 13 08 08 7f ea 6c 80 0c 2c 30 c1 02 d3 48 46 4a 6b 6f 68 a2 63 1d 26 52 02 14 03 2b 03 2e 58 60 ce 43 21 ca 12 3c 07 06 bf 5f 83 0c e8 0a c8 50 44 44 3b 34 11 5d f2 51 ff fb 60 c4 e5 80 0c 8c d3 31 ee 65 a7 a1 a4 9a 65 7d c3 36 94 92 1f ab f5 a7 b1 eb 52 f4 54 ec 74 62 12 83 d9 d7 d6 25 80 a4 88 92 54 ed 5f fa 46 90 e4 04 fc 61 86 16 6e 87 65 b9 34 73 8b 32 39 4d 63 ae 00 04 81 0d 97 f8 19 00 00 10 e8 39 28 58 c4 64 60 e3 82 43 91
                                                                                                                            Data Ascii: ![l!!t@T`bTS"Yp510w;74yZ\:j.]G2eH?i$JAK>j\@l,0HFJkohc&R+.X`C!<_PDD;4]Q`1ee}6RTtb%T_Fane4s29Mc9(Xd`C
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 33 55 8c cf 12 13 6b ad ee e2 66 ae 6a 1a 60 91 0a b5 71 d8 81 3a 1e ae 2e 6b ff f9 8d b8 f0 3e 0e b2 11 d4 ff eb a4 46 90 1a 1b 88 ad 93 00 13 18 38 7f f4 2c 80 0c 0c 20 c0 06 d0 f8 08 6e 6a f4 e6 04 0a 63 0d 21 0c 6f 91 41 29 50 0d 4c fc b6 0f 31 75 1a 53 33 ef a9 1b 4d 76 3b 0f d0 d2 2a 6f ee 79 28 b8 e6 e3 ba 6c 71 42 94 ca 7c 37 38 ab a5 cd 4c 6c 0f 80 fd ba 5c 91 88 72 87 08 f4 4f ff 5d 6b 31 74 05 a8 2b 84 06 5a 9f dd 45 c1 dc 4d 3c f4 60 06 ff fb 50 c4 f6 00 4b bc d3 27 ae 25 51 21 6c 1a 65 3d b4 b6 1c 80 cb 0b fe 24 80 01 8e 0c 99 88 f2 18 98 88 b1 e1 06 02 96 8d 6b 50 c7 40 02 97 4f 53 24 44 23 a5 10 b5 ce 48 77 79 80 cb d4 30 70 91 47 06 4b 43 0c 53 ae 0b d9 6c e5 25 9b 9a 9c 86 22 b2 65 87 dd 54 94 44 42 df c9 e0 78 aa 26 fe 47 d0 27 0d 6e f9
                                                                                                                            Data Ascii: 3Ukfj`q:.k>F8, njc!oA)PL1uS3Mv;*oy(lqB|78Ll\rO]k1t+ZEM<`PK'%Q!le=$kP@OS$D#Hwy0pGKCSl%"eTDBx&G'n
                                                                                                                            2024-09-28 02:37:58 UTC1071INData Raw: bb 5f fc c3 59 a7 b3 66 9e 54 8c a8 8a 74 65 47 34 05 27 1d ef ff 42 a2 68 5d 8d 57 ba 39 92 e0 2c 87 31 11 80 4b 5c a5 f0 61 90 04 99 a1 c5 48 b5 10 80 22 11 98 40 f8 05 c1 7c 95 7b 0c b1 76 82 eb 9d 53 b8 77 71 fe 73 33 90 84 d2 01 60 9b b1 c7 83 ff fb 50 c4 f2 80 0b f8 d3 29 ed 0d b4 a1 75 1a 64 fd b1 b6 94 2c fe 9f fc 80 d9 df 42 ea 68 01 57 27 86 50 05 44 00 2d 4e b1 64 05 9d e2 b5 41 84 17 2a e4 1f 82 21 2c fd a6 2d 57 ca 23 18 87 71 00 a9 fa bd db 1d fc bf fe ca 15 1d 06 2f 64 3c 89 9f ff f2 85 a5 03 dd 2c 80 68 01 cc ef 0e 86 46 6b f6 23 a0 f6 02 a1 05 25 06 a0 70 58 00 80 c3 b6 ca b2 4d 39 09 18 ff fd 60 af 00 ff d9 54 8f b5 a0 01 00 05 44 78 48 3a 9a 66 1e 28 ea c7 07 2c 84 94 71 52 fb 28 4a fe f8 06 7f ff fe 7f 94 7f f8 8a f8 35 f1 80 41 25 02
                                                                                                                            Data Ascii: _YfTteG4'Bh]W9,1K\aH"@|{vSwqs3`P)ud,BhW'PD-NdA*!,-W#q/d<,hFk#%pXM9`TDxH:f(,qR(J5A%


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            43192.168.2.449831188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:58 UTC395OUTGET /favicon.ico HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:58 UTC673INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:58 GMT
                                                                                                                            Content-Type: image/vnd.microsoft.icon
                                                                                                                            Content-Length: 180744
                                                                                                                            Connection: close
                                                                                                                            Last-Modified: Thu, 26 Sep 2024 14:23:53 GMT
                                                                                                                            ETag: "2c208-623067cf79562"
                                                                                                                            Cache-Control: max-age=14400
                                                                                                                            CF-Cache-Status: HIT
                                                                                                                            Age: 1
                                                                                                                            Accept-Ranges: bytes
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9q2yuy%2BA358Khvt910d756J7hUPbNcv1QOGFAQAT166yuaavuh5vEGJXQS7WZgPdkcDlt9ZoaeEyXe3wNBw6NGtLUzCr6CBjYcGFAZccXOpjNRKWG7iV65F%2FkEvETTG6%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ac83c067285-EWR
                                                                                                                            2024-09-28 02:37:58 UTC696INData Raw: 00 00 01 00 09 00 10 10 00 00 01 00 20 00 68 04 00 00 96 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 fe 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 86 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 2e 1f 00 00 40 40 00 00 01 00 20 00 28 42 00 00 d6 44 00 00 48 48 00 00 01 00 20 00 88 54 00 00 fe 86 00 00 60 60 00 00 01 00 20 00 a8 94 00 00 86 db 00 00 80 80 00 00 01 00 20 00 28 08 01 00 2e 70 01 00 00 00 00 00 01 00 20 00 b2 49 00 00 56 78 02 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c e2 7c 3b 0c d3 7c 3b 0c 7a 7c 3b 0c 13 7c
                                                                                                                            Data Ascii: h 00 %.@@ (BDHH T`` (.p IVx( |;|;|;|;|;|;|;|;|;|;|;|;|;|;|;z|;|
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff bd 9c 84 ff f9 f6 f4 ff d9 c6 b8 ff e2 d4 c9 ff ee e5 e0 ff 99 67 42 ff 7b 39 09 ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff be 9d 86 ff ec e3 dd ff 8f 57 2f ff 96 62 3c ff f0 e8 e3 ff b9 96 7d ff 7b 39 0a ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff bd 9c 84 ff f8 f4 f1 ff c5 a7 92 ff cb b1 9f ff f5 f1 ed ff ae 86 69 ff 7b 39 0a ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff a1 72 51 ff d9 c7 b9 ff dd cb bf ff d9 c6 b9 ff b9 96 7d ff 85 48 1d ff 7b 3a 0b ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c
                                                                                                                            Data Ascii: |;|;|;|;{:gB{9|;|;|;|;|;|;|;|;{:W/b<}{9|;|;|;|;|;|;|;|;{:i{9|;|;|;|;|;|;|;|;{:rQ}H{:|;|;|;|
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: ff 7d 3c 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 39 09 ff a4 76 55 ff f7 f3 f0 ff f0 e8 e3 ff ab 82 64 ff 9d 6d 4a ff ae 86 6a ff ea df d8 ff fe fd fc ff be 9e 88 ff 90 50 0e ff d3 91 03 ff e5 a3 02 ff a5 64 08 ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 39 09 ff a4 76 55 ff f7 f3 f0 ff ea df d7 ff 8c 53 29 ff 79 36 06 ff 7d 3d 0e ff c8 ac 99 ff ff ff ff ff d1 ba a9 ff 81 43 15 ff 88 46 0a ff 8d 4c 0a ff 7f 3e 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 39 09 ff a4 76 55 ff f7 f3 f0 ff ed e5 de ff 96 62 3c ff 81 42
                                                                                                                            Data Ascii: }<|;|;|;|;|;|;|;|;|;{9vUdmJjPd|;|;|;|;|;|;|;|;|;|;{9vUS)y6}=CFL>|;|;|;|;|;|;|;|;|;|;{9vUb<B
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 7c 3b 0c 7f 7c 3b 0c e4 7c 3b 0c fe 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c fe 7c 3b 0c e4 7c 3b 0c 7f 7c 3b 0c 14 7c 3b 0c 00 7c 3b 0c 10 7c 3b 0c 56 7c 3b 0c a4 7c 3b 0c c0 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c1 7c 3b 0c c0 7c 3b 0c a4 7c 3b 0c 55 7c 3b 0c 10 7c 3b 0c 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                            Data Ascii: |;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;V|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;U|;|;
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 3b 0c ff 7c 3b 0c ff 7b 3a 0b ff 86 4a 1e ff c9 ae 9a ff d5 c0 b0 ff d4 bf af ff d4 bf af ff d4 bf af ff d3 be ae ff ca af 9c ff af 88 6b ff 8b 51 28 ff 7b 39 0a ff 7c 3b 0c ff 7b 3a 0c ff 95 54 0a ff c9 88 05 ff c3 81 05 ff 8c 4b 0a ff 7b 3a 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff 8b 51 28 ff ee e6 e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fd ff e7 dc d3 ff a1 72 50 ff 7b 39 0b ff 82 41 0b ff db 99 03 ff ff bd 00 ff ff bd 00 ff c9 87 05 ff 7d 3c 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff
                                                                                                                            Data Ascii: ;|;{:JkQ({9|;{:TK{:|;|;|;|;|;|;|;|;|;|;|;|;|;{:Q(rP{9A}<|;|;|;|;|;|;|;|;|;|;|;
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff 8b 51 27 ff ee e6 e0 ff ff ff ff ff ed e4 dd ff 89 4e 24 ff 7b 39 09 ff 7a 38 09 ff 8a 50 25 ff ee e6 e0 ff ff ff ff ff f1 e9 e4 ff 8d 55 2c ff 7b 39 0a ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff 8b 51 27 ff ee e6 e0 ff ff ff ff ff f4 ee ea ff 9c 6a 47 ff 84 47 1a ff 87 4b 20 ff b5 90 76 ff fb fa f8 ff ff ff ff ff e9 df d7 ff 88 4d 22 ff 7b 3a 0b ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c
                                                                                                                            Data Ascii: |;|;|;|;|;|;|;|;|;|;|;{:Q'N${9z8P%U,{9|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;{:Q'jGGK vM"{:|;|;|;|;|;|;|
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c fa 7c 3b 0c 85 7c 3b 0c 06 7c 3b 0c 00 7c 3b 0c 0b 7c 3b 0c 76 7c 3b 0c e0 7c 3b 0c fd 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c fd 7c 3b 0c e0 7c 3b 0c 75 7c 3b 0c 0b 7c 3b 0c 00 00 00 00 00 7c 3b 0c 00 7c 3b 0c 02 7c 3b 0c 2f 7c 3b 0c 79 7c 3b 0c a2 7c 3b 0c a8 7c 3b 0c a7 7c 3b 0c a7 7c 3b 0c a7 7c 3b 0c a7 7c 3b 0c a7 7c 3b 0c a7 7c 3b 0c a7 7c 3b 0c a7 7c 3b 0c a7 7c 3b 0c a7 7c 3b
                                                                                                                            Data Ascii: |;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;v|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;u|;|;|;|;|;/|;y|;|;|;|;|;|;|;|;|;|;|;|;|;
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c f7 7c 3b 0c d1 7c 3b 0c 77 7c 3b 0c 2f 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c fe 7c 3b 0c
                                                                                                                            Data Ascii: |;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;w|;/|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 3e 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0b ff 7c 3c 0d ff 82 45 18 ff a0 71 4e ff be 9e 86 ff c5 a8 92 ff c6 aa 95 ff c5 a9 94 ff c5 a9 94 ff c5 a9 94 ff c5 a9 94 ff c4 a8 93 ff c1 a3 8c ff b9 96 7c ff aa 80 61 ff 96 63 3d ff 85 49 1d ff 7d 3c 0d ff 7b 39 0a ff 7c 3b 0c ff 7b 3a 0c ff 84 43 0b ff 98 57 0a ff b5 74 07 ff bc 7b 06 ff af 6d 07 ff 91 4f 0a ff 80 3f 0b ff 7b 3a 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff
                                                                                                                            Data Ascii: >|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;{:|<EqN|ac=I}<{9|;{:CWt{mO?{:|;|;|;|;|;|;|;|;|;|;|;|;|;
                                                                                                                            2024-09-28 02:37:58 UTC1369INData Raw: 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b 3a 0a ff 7d 3d 0d ff 88 4c 21 ff bc 9b 83 ff f2 eb e7 ff fd fc fb ff fa f7 f5 ff dc ca bd ff 99 66 41 ff 7d 3d 0e ff 7a 37 08 ff 7a 38 09 ff 76 32 01 ff 81 42 15 ff ab 81 64 ff dd cc c0 ff ff ff ff ff ff ff ff ff e7 db d2 ff bc 9b 82 ff 88 4d 22 ff 78 35 06 ff 7c 3b 0c ff 80 3e 0b ff 80 3f 0c ff 7e 3d 0c ff 7b 3a 0c ff 7b 3a 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7c 3b 0c ff 7b
                                                                                                                            Data Ascii: |;|;|;|;|;|;|;|;|;|;|;|;|;|;|;{:}=L!fA}=z7z8v2BdM"x5|;>?~={:{:|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;|;{


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            44192.168.2.449832188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:58 UTC402OUTGET /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:58 UTC609INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:58 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bU2Lyvl%2BLUVYvQUOMefKP4c7xfUXr6jHqHs6OBlh%2F%2F37TgsiquqIfBp8MooaHITnfz1QvSw6a8QFEOS4vERqEYiMKQUw75G7DnKY%2Fh155OLka4h57dzN0jbq%2FymuOlEXmw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ac84d214308-EWR
                                                                                                                            2024-09-28 02:37:58 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            45192.168.2.44983018.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:58 UTC1071OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaIuemHPWXMVLWLXs2kPNTzXc2KQFfBu5If%2Bs%2BHtvWW6%2BAnai3eeNPc2JwHn1piDR4AxZjldatTLFzenofFjZmSn%2B1qDI8fLrGhEvu9lR%2BhqI1W2aH4oEGAQg%3D
                                                                                                                            2024-09-28 02:37:58 UTC2353INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:37:58 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"max_age":604800,"report_to":"default"}
                                                                                                                            report-to: {"group":"default","max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}]}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:37:58 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:15:56 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2BKiro%2BD%2Fd%2BbEYg2dIjOTVgZx0n4mX0wsh%2F1Wa2JnJGCWuXkiFjyzpUbkcowxj78F8W00H1zeoiZGL4k9cjuVqd%2Fs9ZKMpRxNrFnRoWRJ3DcmI7tzlb7wXBCAbDCwULsffoiQWOVfHQphMG%2Byjss8XhuthszdPMDWE%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:37:58 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:37:58 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 e505058447bf5e74cc264f4e72f27bee.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: uFrsq9LAqctYjxmtF3WHcM-1KBMf5TNCinUuPqXBxVpmNVJT07YIzw==
                                                                                                                            2024-09-28 02:37:58 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 42 6d 6b 78 68 78 66 42 75 49 53 30 44 33 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="xBmkxhxfBuIS0D3"
                                                                                                                            2024-09-28 02:37:59 UTC16384INData Raw: 33 66 66 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 3ffa<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:37:59 UTC16384INData Raw: 0d 0a 61 38 64 38 0d 0a 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 20 e2 80 93 20 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 5f 75 6e 74 69 6c 7d 22 2c 22 73 68 6f 72 74 5f 64 61 74 65 5f 77 69 74 68 5f 77 65 65 6b 64 61 79 5f 77 69 74 68 6f 75 74 5f 79 65 61 72 22 3a 22 7b 73 68 6f 72 74 5f 77 65 65 6b 64 61 79 7d 2c 20 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 22 2c 22 73 68 6f 72 74 5f 64 61 74 65 5f 77 69 74 68 6f 75 74 5f 79 65 61 72 5f 72 61 6e 67 65 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 20 2d 20 7b 73 68
                                                                                                                            Data Ascii: a8d8 {full_year} {short_month_name_until} {day_of_month_until}, {full_year_until}","short_date_with_weekday_without_year":"{short_weekday}, {short_month_name} {day_of_month}","short_date_without_year_range":"{short_month_name} {day_of_month} - {sh
                                                                                                                            2024-09-28 02:37:59 UTC16384INData Raw: 71 5f 6c 74 72 2f 61 63 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 26 23 34 37 3b 27
                                                                                                                            Data Ascii: q_ltr/ac73a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.booking.com&#47;'
                                                                                                                            2024-09-28 02:37:59 UTC10466INData Raw: 44 42 61 55 58 53 5a 57 63 50 58 51 55 4a 64 44 42 4b 43 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 4f 51 48 46 52 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 41 48 49 63 61 57 47 4e 50 5a 53 56 5a 4d 59 49 4f 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 4a 65 42 4f 62 56 49 53 63 66 46 64 48 56 54 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 6d 6f 64 61 6c 56 69 65 77 5f 69 6e
                                                                                                                            Data Ascii: DBaUXSZWcPXQUJdDBKC',gnsInsCrd_bannerView_index: 'TDXRPVRBKKJVbFPbVCMIWIOQHFRYDEZRae',gnsInsCrd_bannerCtaClick_index: 'TDXRPVRBKKJVbFPbVCMIWIAHIcaWGNPZSVZMYIO',gnsInsCrd_bannerDismiss_index: 'TDXRPVRBKKJVbFPbVCMIJeBObVIScfFdHVT',gnsInsCrd_modalView_in
                                                                                                                            2024-09-28 02:37:59 UTC10031INData Raw: 32 37 32 37 0d 0a 62 50 49 4b 4f 52 41 51 5a 66 65 50 64 4a 58 44 43 22 3a 31 2c 22 49 5a 4f 55 61 58 4a 56 64 66 55 4a 64 44 42 4b 46 4b 4a 49 66 50 41 43 4c 4f 22 3a 31 2c 22 48 56 51 65 59 46 52 55 52 55 52 59 59 4f 4c 45 63 65 55 44 4a 51 61 43 52 62 4e 5a 42 55 62 65 45 50 54 64 4d 5a 62 47 58 48 63 57 58 54 22 3a 30 2c 22 4f 4f 49 42 42 51 4d 41 4c 48 59 59 66 50 59 54 61 53 54 52 66 49 65 43 53 4c 49 46 54 64 5a 52 43 54 43 46 46 61 59 51 47 43 4b 58 65 22 3a 31 2c 22 63 43 48 4f 47 41 51 5a 47 46 53 62 48 46 42 64 64 51 57 55 4d 4b 54 61 53 64 46 61 4c 62 46 46 52 55 52 55 52 48 65 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 48 55 53 63 4a 46 44 58 50 64 52 65 22 3a 31 2c 22 61 64 55 41 41 43 44 4f 54 64 43 64 45 4b 51 52 56 4a 45 58 4f 22 3a 30
                                                                                                                            Data Ascii: 2727bPIKORAQZfePdJXDC":1,"IZOUaXJVdfUJdDBKFKJIfPACLO":1,"HVQeYFRURURYYOLEceUDJQaCRbNZBUbeEPTdMZbGXHcWXT":0,"OOIBBQMALHYYfPYTaSTRfIeCSLIFTdZRCTCFFaYQGCKXe":1,"cCHOGAQZGFSbHFBddQWUMKTaSdFaLbFFRURURHe":1,"YdXfdKNKNKHUScJFDXPdRe":1,"adUAACDOTdCdEKQRVJEXO":0
                                                                                                                            2024-09-28 02:37:59 UTC16384INData Raw: 33 66 66 61 0d 0a 54 4b 65 65 50 55 63 65 64 4a 48 42 56 55 43 22 3a 31 2c 22 48 57 41 46 4e 55 56 53 5a 4e 5a 5a 4a 52 5a 61 54 4b 65 22 3a 31 2c 22 4e 56 4e 5a 59 65 4a 54 55 4c 59 48 46 4f 50 53 54 5a 4b 42 41 4e 51 63 50 58 50 52 65 22 3a 31 2c 22 55 4f 54 45 4c 47 4e 53 46 59 41 54 5a 64 53 47 57 55 57 53 4a 48 50 51 50 54 41 43 22 3a 31 2c 22 62 51 4b 50 44 44 53 57 44 46 62 65 41 50 47 4f 61 59 45 4f 22 3a 31 2c 22 59 4e 61 58 54 62 58 41 4c 4b 46 54 43 57 54 55 54 5a 41 4c 53 49 57 65 22 3a 31 2c 22 65 57 65 59 66 44 5a 61 41 63 59 63 41 57 49 41 47 50 43 59 49 62 53 55 54 65 45 42 58 65 22 3a 31 2c 22 48 49 4e 5a 4a 4c 65 55 58 53 61 5a 62 64 4b 4e 4b 4e 4b 48 59 59 66 50 4e 52 41 50 4c 53 49 66 4a 64 59 4f 22 3a 31 2c 22 42 43 64 47 55 4b 43 4d
                                                                                                                            Data Ascii: 3ffaTKeePUcedJHBVUC":1,"HWAFNUVSZNZZJRZaTKe":1,"NVNZYeJTULYHFOPSTZKBANQcPXPRe":1,"UOTELGNSFYATZdSGWUWSJHPQPTAC":1,"bQKPDDSWDFbeAPGOaYEO":1,"YNaXTbXALKFTCWTUTZALSIWe":1,"eWeYfDZaAcYcAWIAGPCYIbSUTeEBXe":1,"HINZJLeUXSaZbdKNKNKHYYfPNRAPLSIfJdYO":1,"BCdGUKCM
                                                                                                                            2024-09-28 02:37:59 UTC1529INData Raw: 0d 0a 35 66 30 0d 0a 3a 31 2c 22 63 43 48 4f 62 56 4b 4b 4d 61 64 4d 55 50 58 50 52 51 41 56 57 50 4a 53 53 41 5a 66 41 43 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 46 4c 55 59 59 65 46 65 48 43 22 3a 31 2c 22 4f 4f 49 42 54 56 58 4d 41 63 5a 45 41 48 59 63 54 45 66 57 65 22 3a 31 2c 22 48 4d 62 43 61 41 53 42 61 52 4a 5a 4d 46 57 42 4f 46 4f 22 3a 31 2c 22 48 4f 64 43 4c 56 58 63 4e 4e 44 64 4f 4e 49 4e 53 51 46 53 55 43 4b 56 53 56 4a 50 56 54 22 3a 31 2c 22 65 44 64 65 46 43 59 41 41 46 55 54 55 65 45 43 64 52 4a 4a 52 62 61 54 61 54 61 45 54 22 3a 31 2c 22 4e 56 46 56 63 66 54 62 64 4e 4e 46 63 4d 58 4c 46 65 45 57 47 5a 61 54 61 54 61 45 54 22 3a 31 2c 22 4f 4f 49 42 42 51 4d 41 4c 48 59 59 66 50 4e 65 4f 59 57 4b 64 54 4b 44 41 64 55 52 65 22 3a 31 2c
                                                                                                                            Data Ascii: 5f0:1,"cCHObVKKMadMUPXPRQAVWPJSSAZfAC":1,"TfNZeFcCFLUYYeFeHC":1,"OOIBTVXMAcZEAHYcTEfWe":1,"HMbCaASBaRJZMFWBOFO":1,"HOdCLVXcNNDdONINSQFSUCKVSVJPVT":1,"eDdeFCYAAFUTUeECdRJJRbaTaTaET":1,"NVFVcfTbdNNFcMXLFeEWGZaTaTaET":1,"OOIBBQMALHYYfPNeOYWKdTKDAdURe":1,
                                                                                                                            2024-09-28 02:37:59 UTC16384INData Raw: 33 66 66 39 0d 0a 48 57 41 46 59 52 4b 47 43 62 47 4e 4d 51 4d 4c 50 53 43 54 61 4d 4f 22 3a 32 2c 22 49 4e 4c 47 50 5a 50 46 42 57 44 45 43 51 64 48 5a 56 61 41 62 48 4a 47 4f 47 56 54 43 47 56 54 4b 65 22 3a 31 2c 22 61 58 54 66 48 41 45 44 4d 63 54 63 4e 50 47 4a 4e 5a 65 46 41 5a 62 45 43 45 46 53 65 4b 65 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 48 55 53 63 44 49 66 56 66 64 52 65 22 3a 31 2c 22 41 48 65 48 4c 41 46 51 63 4e 4c 4a 5a 55 42 57 65 46 5a 4d 4f 22 3a 31 2c 22 54 57 55 4c 48 4a 64 4c 65 4c 62 46 44 41 56 62 42 48 4d 63 4f 22 3a 31 2c 22 4e 56 46 56 63 66 54 62 64 4e 4e 4a 64 44 42 4b 44 44 4a 4b 44 4b 47 64 48 5a 63 4b 5a 61 54 61 54 61 45 54 22 3a 31 2c 22 5a 47 62 50 46 4d 65 48 47 57 4f 52 54 65 43 49 53 55 5a 58 44 4d 55 42 64 64
                                                                                                                            Data Ascii: 3ff9HWAFYRKGCbGNMQMLPSCTaMO":2,"INLGPZPFBWDECQdHZVaAbHJGOGVTCGVTKe":1,"aXTfHAEDMcTcNPGJNZeFAZbECEFSeKe":1,"YdXfdKNKNKHUScDIfVfdRe":1,"AHeHLAFQcNLJZUBWeFZMO":1,"TWULHJdLeLbFDAVbBHMcO":1,"NVFVcfTbdNNJdDBKDDJKDKGdHZcKZaTaTaET":1,"ZGbPFMeHGWORTeCISUZXDMUBdd
                                                                                                                            2024-09-28 02:37:59 UTC16384INData Raw: 0a 31 38 30 30 30 0d 0a 63 48 43 47 57 56 55 4e 5a 64 65 4c 45 63 61 44 66 65 63 59 54 45 54 22 3a 31 2c 22 4f 4d 4e 4e 53 43 5a 46 63 59 57 43 47 45 62 49 65 49 50 48 65 22 3a 31 2c 22 59 64 58 66 4d 54 58 45 55 44 64 53 59 46 4f 4c 62 4f 4d 46 63 48 52 62 64 46 49 61 5a 50 45 45 63 63 61 54 22 3a 31 2c 22 4e 41 52 45 46 59 54 42 61 63 54 54 4e 41 49 4f 46 57 43 22 3a 31 2c 22 61 57 51 4f 63 64 4c 59 48 4d 52 46 65 52 51 4c 4f 4c 4f 4c 4f 64 51 65 52 48 66 4f 50 52 41 4c 54 22 3a 31 2c 22 48 4d 62 56 41 47 66 50 44 61 52 43 47 62 62 4e 48 55 48 65 22 3a 31 2c 22 63 43 48 4f 62 64 52 64 4a 4a 58 52 44 56 4d 44 54 45 52 45 48 47 55 52 58 5a 41 4c 4f 4c 4f 4c 4d 4f 22 3a 31 2c 22 59 64 58 66 43 44 57 4f 4f 53 63 55 53 66 42 43 57 58 46 5a 45 56 43 22 3a 31
                                                                                                                            Data Ascii: 18000cHCGWVUNZdeLEcaDfecYTET":1,"OMNNSCZFcYWCGEbIeIPHe":1,"YdXfMTXEUDdSYFOLbOMFcHRbdFIaZPEEccaT":1,"NAREFYTBacTTNAIOFWC":1,"aWQOcdLYHMRFeRQLOLOLOdQeRHfOPRALT":1,"HMbVAGfPDaRCGbbNHUHe":1,"cCHObdRdJJXRDVMDTEREHGURXZALOLOLMO":1,"YdXfCDWOOScUSfBCWXFZEVC":1


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            46192.168.2.449833188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:58 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:59 UTC729INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:59 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gjkl%2F9bM2klNphDIbcphbH6OfExmyCdWchojrcVGb2HNjrgNd40S2kFMdvwm92rywuE7pbTRXqYxQBlm5YXNnev620fHnvq02K8jTwybfNhEJBpxpmQXqaJI4KxaHm3oyg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05acace588cab-EWR
                                                                                                                            2024-09-28 02:37:59 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            47192.168.2.449837188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:59 UTC782OUTPOST /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 10
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:59 UTC10OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c
                                                                                                                            Data Ascii: code=wakdl
                                                                                                                            2024-09-28 02:37:59 UTC654INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:59 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=znse0NyBRXr8Ckx7mM4jYWUsNrSLzYdtCN6b7SWwXkKFDt%2BXP6vUtvs8t2dJ5f2H0z0bHYfWhvn%2FJanCZZ8eppHaNHc73zAOYrrVyRjxio4fkSUPIN4ZmsNwFmNrHJxLwg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05acef854c326-EWR
                                                                                                                            2024-09-28 02:37:59 UTC22INData Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a
                                                                                                                            Data Ascii: 10{"status":false}
                                                                                                                            2024-09-28 02:37:59 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            48192.168.2.449836188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:59 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:37:59 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:37:59 UTC658INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:37:59 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T9mATjzWp%2FwJKu4y7FZiE3LraslaVahvVve6Gjzcy2gLl9Ng6CA5MPmEScQYWW4gT0WkUUg%2BviFCosc6nJGDHJqeIz155G%2FkpQAwrEOXpSZAQloj1s2NNjuBk0g0m8b%2Bsw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05acefe8dc339-EWR
                                                                                                                            2024-09-28 02:37:59 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            49192.168.2.44983918.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:37:59 UTC1075OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2BKiro%2BD%2Fd%2BbEYg2dIjOTVgZx0n4mX0wsh%2F1Wa2JnJGCWuXkiFjyzpUbkcowxj78F8W00H1zeoiZGL4k9cjuVqd%2Fs9ZKMpRxNrFnRoWRJ3DcmI7tzlb7wXBCAbDCwULsffoiQWOVfHQphMG%2Byjss8XhuthszdPMDWE%3D
                                                                                                                            2024-09-28 02:38:00 UTC2347INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:00 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"max_age":604800,"report_to":"default"}
                                                                                                                            report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default","max_age":604800}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:00 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:00 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecycdScdyX0Hmhw8xicEW5REeGhbcKfOr%2BfCWXK1lTBknjfiQGLZ6mVrr%2BqWPKxMzC6N55Bddi52xlBHJJFwgyNSGnAf9OP35S8bxQfWk0vJ36kkQ42TCQTVH%2Bzm7LZP0s4Ro%2BuyAabpTvw5UAdsccyxKXiG5RDhI8%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:00 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:00 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 f7bf54ada21ef4f1f7e0646051894136.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: TlBO77YWKvNPr-s3jz-IXbrN7vTOOjNMzoE2KTX_fYS7A57s2iYbTA==
                                                                                                                            2024-09-28 02:38:00 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 4b 59 56 65 57 68 50 38 36 6a 4a 64 53 6c 66 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="KYVeWhP86jJdSlf"
                                                                                                                            2024-09-28 02:38:00 UTC8200INData Raw: 32 30 30 30 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 2000<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:00 UTC8682INData Raw: 32 31 65 32 0d 0a 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 63 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 61 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 43 61 74 61 6c c3 a0 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 69 74 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 49 74 61 6c 69 61 6e 6f 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 70 74 2d
                                                                                                                            Data Ascii: 21e2l" hreflang="ca" href="https://www.booking.com/index.ca.html" title="Catal"/><link rel="alternate" type="text/html" hreflang="it" href="https://www.booking.com/index.it.html" title="Italiano"/><link rel="alternate" type="text/html" hreflang="pt-
                                                                                                                            2024-09-28 02:38:00 UTC16384INData Raw: 33 66 66 61 0d 0a 2f 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 6d 6f 6e 74 68 5f 77 69 74 68 5f 79 65 61 72 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 77 69 74 68 5f 79 65 61 72 5f 6f 6e 6c 79 7d 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 74 65 5f 77 69 74 68 5f 77 65 65 6b 64 61 79 5f 77 69 74 68 5f 6d 61 72 6b 65 72 73 22 3a 22 7b 77 65 65 6b 64 61 79 7d 2c 20 7b 62 65 67 69 6e 5f 6d 61 72 6b 65 72 7d 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 7b 65 6e 64 5f 6d 61 72 6b 65 72 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 6e 6f 6d 7d 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 62 65 74 77 65 65 6e 22 3a 22 62 65 74 77
                                                                                                                            Data Ascii: 3ffa/{full_year}","month_with_year":"{month_name_with_year_only} {full_year}","date_with_weekday_with_markers":"{weekday}, {begin_marker}{month_name} {day_of_month}{end_marker}, {full_year}","month_name_only":"{month_name_nom}","day_month_between":"betw
                                                                                                                            2024-09-28 02:38:00 UTC991INData Raw: 0d 0a 33 64 36 0d 0a 70 65 3d 74 6f 74 61 6c 26 27 2c 0a 62 5f 74 68 69 73 5f 75 72 6c 5f 77 69 74 68 6f 75 74 5f 6c 61 6e 67 20 3a 20 27 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 6c 61 62 65 6c 3d 67 65 6e 31 37 33 6e 72 2d 31 46 43 41 45 6f 67 67 49 34 36 41 64 49 4d 31 67 45 61 4b 63 43 69 41 45 42 6d 41 45 78 75 41 45 58 79 41 45 4d 32 41 45 42 36 41 45 42 2d 41 45 43 69 41 49 42 71 41 49 44 75 41 4b 49 32 4e 32 33 42 73 41 43 41 64 49 43 4a 47 51 79 59 7a 6c 6b 5a 57 55 79 4c 54 6c 68 4d 6a 51 74 4e 44 4a 6d 4e 43 31 69 4d 47 55 32 4c 54 67 78 4d 7a 4a 6d 4d 7a 67 32 4e 44 68 6b 5a 4e 67 43 42 65 41 43 41 51 26 73 69 64 3d 39 37 32 64 34 66 37 31 63 32 32 39 66 64 37 32 39 38 38 35 66 33 31 65 36 31 38 32 37 38 61 63 26 73 62 5f 70 72 69 63 65 5f 74 79 70
                                                                                                                            Data Ascii: 3d6pe=total&',b_this_url_without_lang : '/index.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AECiAIBqAIDuAKI2N23BsACAdICJGQyYzlkZWUyLTlhMjQtNDJmNC1iMGU2LTgxMzJmMzg2NDhkZNgCBeACAQ&sid=972d4f71c229fd729885f31e618278ac&sb_price_typ
                                                                                                                            2024-09-28 02:38:00 UTC16384INData Raw: 33 66 66 61 0d 0a 63 75 72 72 65 6e 63 79 3a 20 22 22 2c 0a 62 5f 73 65 6c 65 63 74 65 64 5f 6c 61 6e 67 75 61 67 65 3a 20 27 65 6e 2d 75 73 27 2c 0a 62 5f 73 65 6c 65 63 74 65 64 5f 6c 61 6e 67 75 61 67 65 5f 63 6f 75 6e 74 72 79 5f 66 6c 61 67 3a 20 27 75 73 27 2c 0a 70 61 67 65 76 69 65 77 5f 69 64 3a 20 27 65 65 37 63 31 32 38 34 35 61 62 63 30 36 31 31 27 2c 0a 61 69 64 3a 20 27 33 30 34 31 34 32 27 2c 0a 62 5f 63 73 72 66 5f 74 6f 6b 65 6e 3a 20 27 53 4b 54 33 5a 67 41 41 41 41 41 3d 49 31 30 74 7a 30 4b 35 72 76 47 52 75 73 41 59 4e 69 68 31 31 56 2d 79 75 4d 71 61 4b 74 61 31 30 2d 6f 49 70 62 6e 41 70 6d 5a 6a 39 34 61 73 79 63 38 63 49 65 63 37 46 6e 36 4d 36 66 44 76 30 4a 6f 6d 6d 46 4e 73 56 79 37 6f 79 5f 6e 4a 6e 4b 50 5f 39 30 62 54 52 4c
                                                                                                                            Data Ascii: 3ffacurrency: "",b_selected_language: 'en-us',b_selected_language_country_flag: 'us',pageview_id: 'ee7c12845abc0611',aid: '304142',b_csrf_token: 'SKT3ZgAAAAA=I10tz0K5rvGRusAYNih11V-yuMqaKta10-oIpbnApmZj94asyc8cIec7Fn6M6fDv0JommFNsVy7oy_nJnKP_90bTRL
                                                                                                                            2024-09-28 02:38:00 UTC9935INData Raw: 0d 0a 32 36 63 35 0d 0a 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 4c 52 45 48 47 56 61 53 58 62 66 49 41 62 53 4f 42 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 4c 52 45 48 47 62 4e 48 4e 45 52 47 65 66 4d 50 53 58 57 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f 64 61 6c 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 51 52 66 44 52 49 56 54 62 57 64 4b 50 4d 50 53 58 57 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f 64 61 6c 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65
                                                                                                                            Data Ascii: 26c5,gnsInsDisc_bannerCtaClick_index: 'TDXRPVRBKKQUYBFLLREHGVaSXbfIAbSOBYDEZRae',gnsInsDisc_bannerDismiss_index: 'TDXRPVRBKKQUYBFLLREHGbNHNERGefMPSXWe',gnsInsDisc_modalView_index: 'TDXRPVRBKKQUYBFLQRfDRIVTbWdKPMPSXWe',gnsInsDisc_modalCtaClick_inde
                                                                                                                            2024-09-28 02:38:00 UTC16384INData Raw: 31 33 36 63 37 0d 0a 58 61 66 4a 43 66 53 46 64 55 4f 4f 49 42 42 4f 22 3a 31 2c 22 48 57 41 46 59 44 45 5a 52 45 54 57 4a 47 47 4b 42 49 4e 53 48 54 22 3a 31 2c 22 5a 4f 42 4a 5a 47 46 64 52 61 61 4b 4f 56 56 58 62 4b 4a 4b 51 4b 56 4e 52 48 65 22 3a 30 2c 22 42 4b 65 57 49 45 63 59 54 42 65 44 51 65 50 45 59 52 57 65 52 51 63 53 4e 44 65 4d 53 5a 45 48 65 22 3a 31 2c 22 48 57 41 46 59 44 45 5a 52 45 4a 57 63 52 4c 52 53 56 55 4e 44 55 63 62 4c 43 22 3a 30 2c 22 4f 44 52 45 54 61 59 59 66 50 59 4b 66 5a 50 43 47 56 54 4b 65 22 3a 30 2c 22 48 43 52 4e 4c 4b 58 47 4b 53 46 4f 4c 53 63 58 51 4f 56 57 65 22 3a 30 2c 22 4f 41 59 44 4e 66 48 41 45 44 42 4f 53 49 53 49 42 54 64 51 65 52 48 66 43 57 49 4b 4c 63 45 41 56 41 4c 62 43 54 48 4f 22 3a 30 2c 22 61 57
                                                                                                                            Data Ascii: 136c7XafJCfSFdUOOIBBO":1,"HWAFYDEZRETWJGGKBINSHT":1,"ZOBJZGFdRaaKOVVXbKJKQKVNRHe":0,"BKeWIEcYTBeDQePEYRWeRQcSNDeMSZEHe":1,"HWAFYDEZREJWcRLRSVUNDUcbLC":0,"ODRETaYYfPYKfZPCGVTKe":0,"HCRNLKXGKSFOLScXQOVWe":0,"OAYDNfHAEDBOSISIBTdQeRHfCWIKLcEAVALbCTHO":0,"aW
                                                                                                                            2024-09-28 02:38:00 UTC16384INData Raw: 58 4e 4f 41 56 64 4e 48 57 54 52 54 66 49 5a 4b 65 22 3a 31 2c 22 47 43 4c 61 59 43 4b 64 46 59 46 63 43 62 4e 42 4f 50 56 4b 46 45 53 54 45 55 4f 4f 49 42 42 4f 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 4c 4c 43 42 4c 54 59 53 44 53 41 56 4c 51 57 46 4b 65 22 3a 31 2c 22 63 43 48 4f 62 4d 4b 64 46 45 56 52 56 56 50 4b 4c 5a 5a 56 43 4d 49 53 4c 55 44 5a 53 65 64 4c 4f 4c 4f 4c 4d 4f 22 3a 31 2c 22 65 45 42 5a 46 4a 5a 65 4f 51 50 54 4c 4b 47 42 66 4a 46 53 45 4f 55 57 44 4b 65 22 3a 31 2c 22 41 45 41 46 48 4b 4c 4f 57 57 62 41 55 66 44 4d 63 4d 61 4d 45 41 62 43 54 48 4f 22 3a 31 2c 22 4e 41 46 59 59 41 4e 41 61 64 54 58 61 51 41 65 45 45 46 44 43 4b 57 49 5a 58 52 48 65 22 3a 31 2c 22 59 54 42 48 4d 47 4c 4c 5a 42 62 4b 65 48 41 63 43 4f 53 50 4a 54 52
                                                                                                                            Data Ascii: XNOAVdNHWTRTfIZKe":1,"GCLaYCKdFYFcCbNBOPVKFESTEUOOIBBO":1,"dLYHMRFeRLLCBLTYSDSAVLQWFKe":1,"cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO":1,"eEBZFJZeOQPTLKGBfJFSEOUWDKe":1,"AEAFHKLOWWbAUfDMcMaMEAbCTHO":1,"NAFYYANAadTXaQAeEEFDCKWIZXRHe":1,"YTBHMGLLZBbKeHAcCOSPJTR
                                                                                                                            2024-09-28 02:38:00 UTC16384INData Raw: 53 56 49 41 46 45 54 22 3a 31 2c 22 4f 56 59 50 55 51 57 49 62 41 61 4c 46 53 65 62 55 4d 65 46 4c 4f 22 3a 31 2c 22 62 51 47 42 56 49 5a 64 52 4a 47 49 4e 59 54 46 49 59 61 58 52 4f 5a 45 50 59 4b 44 63 64 43 22 3a 31 2c 22 48 57 41 46 4e 65 4f 59 53 47 44 4d 46 4c 45 43 4a 58 44 62 4e 5a 61 65 22 3a 31 2c 22 4f 44 52 45 5a 66 65 66 54 4c 4b 47 42 66 46 4b 4a 42 4b 57 55 4f 66 41 59 55 4c 4d 5a 5a 43 47 56 4b 65 22 3a 31 2c 22 48 57 41 46 4e 65 4f 59 44 44 46 46 63 4e 52 65 22 3a 31 2c 22 49 5a 56 54 57 52 47 45 41 46 63 46 50 49 57 44 44 4a 65 56 47 54 5a 56 4e 57 65 22 3a 31 2c 22 41 45 41 46 53 58 5a 58 64 47 56 44 5a 53 64 53 55 57 44 62 43 54 48 4f 22 3a 31 2c 22 59 64 41 65 59 64 48 57 4e 4f 54 4d 65 41 5a 63 47 63 5a 55 62 53 42 4c 58 65 22 3a 31
                                                                                                                            Data Ascii: SVIAFET":1,"OVYPUQWIbAaLFSebUMeFLO":1,"bQGBVIZdRJGINYTFIYaXROZEPYKDcdC":1,"HWAFNeOYSGDMFLECJXDbNZae":1,"ODREZfefTLKGBfFKJBKWUOfAYULMZZCGVKe":1,"HWAFNeOYDDFFcNRe":1,"IZVTWRGEAFcFPIWDDJeVGTZVNWe":1,"AEAFSXZXdGVDZSdSUWDbCTHO":1,"YdAeYdHWNOTMeAZcGcZUbSBLXe":1


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            50192.168.2.449840188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:00 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:00 UTC741INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:00 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CenTWWNLdK%2FZ9LnM%2FJAESSJdDrzUBx7V8fT4SkLESaP8eRoiWIRzed85Y1Cn1BGRM7wOettekpb%2B3qepAfK45gtXHYUDWrMHj%2FC%2FXk2z%2BfIavE%2FH9UCDdsnLRknPJSLQ2w%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ad37b837ca0-EWR
                                                                                                                            2024-09-28 02:38:00 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            51192.168.2.449843188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:00 UTC412OUTGET /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:01 UTC607INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:01 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jEL5mI1Ocb110x68%2F4gDS4qZ5aNf22HdFOMfJ4Fa7NHt8oEm8KpzzMk9V%2F89NvgGCvMClibQIxAUiOhl1CUe1P7PMxvZYWrOm1SoYbW0OCbxrFR5Tr8a%2FNen1tzFUL%2BmbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ad74ba642d0-EWR
                                                                                                                            2024-09-28 02:38:01 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            52192.168.2.449844188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:00 UTC409OUTGET /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:01 UTC603INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:01 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rLJlPCKH7%2BhdGGtlT9tCvPw6Sb%2BzYXP76Dn2HP0QVA22KFaSIcUcOoKEBjxpVlNJgqSsh5USx1VA0f0xynGSmlhvgx8zADetQnbHKNCMyzakz0pxkHOcOaWYGux26h5wQw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ad7fe117cac-EWR
                                                                                                                            2024-09-28 02:38:01 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            53192.168.2.44984518.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:01 UTC1069OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecycdScdyX0Hmhw8xicEW5REeGhbcKfOr%2BfCWXK1lTBknjfiQGLZ6mVrr%2BqWPKxMzC6N55Bddi52xlBHJJFwgyNSGnAf9OP35S8bxQfWk0vJ36kkQ42TCQTVH%2Bzm7LZP0s4Ro%2BuyAabpTvw5UAdsccyxKXiG5RDhI8%3D
                                                                                                                            2024-09-28 02:38:01 UTC2788INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:01 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"max_age":604800,"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}]}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:01 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:02 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3XHNRMedXrYtRcmsHuVGPx6ydc2GlsSApWlS2ZbgFD6Ti8jMejZNqA%2Bxo398YpelfYbPBRM5BCQ6SmLBRPG742XNcvztv5S41JG7YwJdpOOE0xjzOaOxrrVeWyEUvMVFaC4wSbfCFm%2FX%2FuNMlCygFEs49za%2BlNKPfA%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:01 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:01 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            content-security-policy-report-only: base-uri 'none'; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=146&pid=63651284ab820329&e=UmFuZG9tSVYkc2RlIyh9YYYdGuViorKPD4MsvfNk2NyhhQvBawS9vGPyJaO5tvcl; script-src 'self' 'nonce-yB8iWQBcCsRZNuw' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' 'sha256-iry7oJKoKJ+9HSjmU3E1TlRlpSesJWZ1vapuUz2MP38='
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 7dbea139a5c4f501bc4b0e9d19a50c9a.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: LUOP-OSMkWPu4pcH6B0Kv-FgUx3m0lk7mySe3rtXFunWcC4me-qpig==
                                                                                                                            2024-09-28 02:38:01 UTC8951INData Raw: 32 32 65 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 79 42 38 69 57 51 42 63 43 73 52 5a 4e 75 77 22
                                                                                                                            Data Ascii: 22ef<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="yB8iWQBcCsRZNuw"
                                                                                                                            2024-09-28 02:38:01 UTC3124INData Raw: 63 32 64 0d 0a 37 64 35 64 32 61 31 33 2e 63 73 73 22 20 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 63 73 73 2f 67 70 72 6f 66 5f 69 63 6f 6e 73 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2e 69 71 5f 6c 74 72 2f 33 30 38 34 33 36 63 61 32 36 61 61 63 66 36 61 37 35 35 33 65 34 63 30 63 66 32 39 38 64 30 66 37 38 30 37 32 37 61 32 2e 63 73 73 22 20 2f 3e 20 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 63 73 73 2f 78 70 2d 69 6e 64 65
                                                                                                                            Data Ascii: c2d7d5d2a13.css" /><link rel="stylesheet" href="https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css" /> <link rel="stylesheet" type="text/css" href="https://cf.bstatic.com/static/css/xp-inde
                                                                                                                            2024-09-28 02:38:02 UTC16384INData Raw: 33 66 66 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 3ffa<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:02 UTC16384INData Raw: 0d 0a 39 63 35 32 0d 0a 61 72 5f 62 65 74 77 65 65 6e 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 20 e2 80 93 20 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 5f 75 6e 74 69 6c 7d 22 2c 22 64 61 74 65 5f 77 69 74 68 5f 77 65 65 6b 64 61 79 5f 77 69 74 68 5f 6d 61 72 6b 65 72 73 22 3a 22 7b 77 65 65 6b 64 61 79 7d 2c 20 7b 62 65 67 69 6e 5f 6d 61 72 6b 65 72 7d 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 7b 65 6e 64 5f 6d 61 72 6b 65 72 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 6e 75 6d
                                                                                                                            Data Ascii: 9c52ar_between":"{short_month_name} {day_of_month}, {full_year} {short_month_name_until} {day_of_month_until}, {full_year_until}","date_with_weekday_with_markers":"{weekday}, {begin_marker}{month_name} {day_of_month}{end_marker}, {full_year}","num
                                                                                                                            2024-09-28 02:38:02 UTC16384INData Raw: 64 66 72 6f 6e 74 5f 73 64 2e 69 71 5f 6c 74 72 2f 61 63 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e
                                                                                                                            Data Ascii: dfront_sd.iq_ltr/ac73a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.bookin
                                                                                                                            2024-09-28 02:38:02 UTC7260INData Raw: 59 45 53 45 56 66 46 54 64 4a 56 44 42 61 55 58 53 5a 57 63 50 58 51 55 4a 64 44 42 4b 43 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 4f 51 48 46 52 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 41 48 49 63 61 57 47 4e 50 5a 53 56 5a 4d 59 49 4f 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 4a 65 42 4f 62 56 49 53 63 66 46 64 48 56 54 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 6d
                                                                                                                            Data Ascii: YESEVfFTdJVDBaUXSZWcPXQUJdDBKC',gnsInsCrd_bannerView_index: 'TDXRPVRBKKJVbFPbVCMIWIOQHFRYDEZRae',gnsInsCrd_bannerCtaClick_index: 'TDXRPVRBKKJVbFPbVCMIWIAHIcaWGNPZSVZMYIO',gnsInsCrd_bannerDismiss_index: 'TDXRPVRBKKJVbFPbVCMIJeBObVIScfFdHVT',gnsInsCrd_m
                                                                                                                            2024-09-28 02:38:02 UTC16384INData Raw: 31 30 33 61 65 0d 0a 46 44 64 4d 58 4b 62 49 4e 4c 62 65 54 51 48 55 59 42 62 46 43 22 3a 30 2c 22 42 4b 41 54 59 44 4f 52 4d 54 66 46 49 64 4f 63 63 50 44 58 61 66 42 51 45 51 53 56 57 65 22 3a 30 2c 22 61 61 4f 59 57 62 4f 54 45 53 43 57 49 4b 64 46 48 61 4f 22 3a 30 2c 22 61 57 51 4f 63 59 54 42 4f 4f 49 42 54 4d 58 57 48 55 53 43 4e 56 41 45 4c 58 54 22 3a 30 2c 22 48 43 52 4e 4c 4b 58 47 4b 53 46 4f 4c 53 63 58 51 4f 56 57 65 22 3a 30 2c 22 42 4b 41 54 59 57 62 57 4f 4f 46 47 44 58 41 4e 4a 4a 59 4e 4f 46 42 43 43 22 3a 30 2c 22 48 57 41 46 59 48 49 45 55 58 50 4e 4d 57 65 22 3a 30 2c 22 4f 4f 49 42 42 51 4d 41 4c 5a 57 4c 4b 56 42 42 56 59 55 65 44 55 62 4e 62 49 55 4f 4e 53 46 54 55 51 4f 44 50 55 4f 65 61 4e 52 65 22 3a 30 2c 22 48 57 41 46 59 44
                                                                                                                            Data Ascii: 103aeFDdMXKbINLbeTQHUYBbFC":0,"BKATYDORMTfFIdOccPDXafBQEQSVWe":0,"aaOYWbOTESCWIKdFHaO":0,"aWQOcYTBOOIBTMXWHUSCNVAELXT":0,"HCRNLKXGKSFOLScXQOVWe":0,"BKATYWbWOOFGDXANJJYNOFBCC":0,"HWAFYHIEUXPNMWe":0,"OOIBBQMALZWLKVBBVYUeDUbNbIUONSFTUQODPUOeaNRe":0,"HWAFYD
                                                                                                                            2024-09-28 02:38:02 UTC16384INData Raw: 2c 22 54 5a 55 66 49 49 43 4e 58 4b 65 4e 4a 62 65 46 4e 48 43 22 3a 31 2c 22 65 57 65 59 66 44 5a 61 41 63 59 63 64 62 44 46 50 43 59 49 62 53 55 54 65 45 42 58 65 22 3a 31 2c 22 59 54 54 48 62 58 65 65 56 4a 57 63 57 50 61 44 4d 57 4f 4d 48 54 63 63 54 42 4c 57 43 41 57 64 50 5a 4b 65 22 3a 31 2c 22 48 56 50 5a 45 59 64 49 62 4e 45 49 45 42 46 4b 43 54 58 4a 49 5a 54 66 4b 65 22 3a 31 2c 22 4e 41 52 45 46 61 63 54 54 4e 41 49 42 61 46 4f 58 54 22 3a 31 2c 22 48 48 59 50 57 4d 50 64 4b 50 4f 4d 48 42 48 56 50 52 62 51 66 58 52 54 22 3a 32 2c 22 5a 64 5a 61 59 50 5a 5a 47 62 4d 51 66 49 4f 65 5a 46 4e 5a 52 4f 22 3a 31 2c 22 64 4c 63 58 4a 65 49 54 50 4d 4f 62 56 63 4b 4e 4d 66 58 4c 4d 45 4f 22 3a 31 2c 22 54 66 4e 5a 65 46 4f 42 59 63 41 51 59 49 66 42
                                                                                                                            Data Ascii: ,"TZUfIICNXKeNJbeFNHC":1,"eWeYfDZaAcYcdbDFPCYIbSUTeEBXe":1,"YTTHbXeeVJWcWPaDMWOMHTccTBLWCAWdPZKe":1,"HVPZEYdIbNEIEBFKCTXJIZTfKe":1,"NAREFacTTNAIBaFOXT":1,"HHYPWMPdKPOMHBHVPRbQfXRT":2,"ZdZaYPZZGbMQfIOeZFNZRO":1,"dLcXJeITPMObVcKNMfXLMEO":1,"TfNZeFOBYcAQYIfB
                                                                                                                            2024-09-28 02:38:02 UTC16384INData Raw: 66 46 64 48 4d 62 4e 58 47 44 4a 54 4c 5a 4e 50 44 63 4f 4f 49 42 42 4f 22 3a 31 2c 22 64 44 66 50 44 42 45 59 64 4f 65 52 53 61 51 66 61 48 4d 56 48 53 47 46 4f 22 3a 31 2c 22 48 57 41 46 59 42 66 50 44 42 45 44 48 49 57 44 66 51 50 64 44 53 64 56 4c 54 22 3a 32 2c 22 4f 4f 49 42 54 42 42 4c 58 4f 4c 57 43 47 45 66 4a 63 66 4e 57 4f 43 65 4d 4a 59 47 49 57 65 22 3a 31 2c 22 48 4d 62 45 62 57 63 42 42 65 49 61 5a 5a 57 49 4f 49 65 4d 45 66 64 57 56 4d 63 4f 63 59 54 45 54 22 3a 31 2c 22 61 58 54 66 48 41 45 44 42 4f 53 64 51 5a 58 44 4f 58 57 58 4b 59 53 53 64 61 64 46 51 52 4d 65 58 63 49 46 55 57 62 57 4f 4f 43 22 3a 31 2c 22 41 64 48 55 59 57 43 47 54 4c 53 64 4d 57 53 4f 5a 45 64 48 4f 55 4b 65 22 3a 31 2c 22 66 54 5a 61 54 61 54 61 42 66 46 64 48 4d
                                                                                                                            Data Ascii: fFdHMbNXGDJTLZNPDcOOIBBO":1,"dDfPDBEYdOeRSaQfaHMVHSGFO":1,"HWAFYBfPDBEDHIWDfQPdDSdVLT":2,"OOIBTBBLXOLWCGEfJcfNWOCeMJYGIWe":1,"HMbEbWcBBeIaZZWIOIeMEfdWVMcOcYTET":1,"aXTfHAEDBOSdQZXDOXWXKYSSdadFQRMeXcIFUWbWOOC":1,"AdHUYWCGTLSdMWSOZEdHOUKe":1,"fTZaTaTaBfFdHM
                                                                                                                            2024-09-28 02:38:02 UTC16384INData Raw: 42 59 4b 65 22 3a 31 2c 22 4f 56 59 50 53 4d 41 48 48 62 50 49 52 5a 5a 42 52 66 4e 44 4a 45 4c 57 50 4a 4f 43 44 4f 4a 47 61 54 22 3a 31 2c 22 48 57 41 46 4e 65 4f 59 46 4c 44 55 61 65 56 62 61 4f 22 3a 31 2c 22 66 65 66 49 4f 52 4e 58 4a 63 42 49 66 45 62 57 48 51 43 22 3a 31 2c 22 47 43 53 58 48 48 56 51 49 5a 44 46 4a 4e 4c 63 4f 64 48 65 48 62 42 47 62 62 65 4c 42 58 65 22 3a 31 2c 22 63 43 48 4f 62 54 59 57 65 4c 4a 46 61 4d 45 41 62 4b 43 42 5a 59 66 4e 4f 51 49 58 57 59 4f 22 3a 31 2c 22 4f 41 5a 4f 58 48 48 50 54 4c 4b 47 42 66 44 4a 65 66 44 63 62 42 43 64 57 50 48 44 44 57 65 22 3a 31 2c 22 50 50 58 47 53 43 5a 46 63 4e 53 54 4c 45 5a 4a 4f 22 3a 31 2c 22 48 4f 50 51 4c 52 42 47 64 4e 4f 4b 54 66 47 43 62 65 44 55 48 59 4b 65 22 3a 31 2c 22 48
                                                                                                                            Data Ascii: BYKe":1,"OVYPSMAHHbPIRZZBRfNDJELWPJOCDOJGaT":1,"HWAFNeOYFLDUaeVbaO":1,"fefIORNXJcBIfEbWHQC":1,"GCSXHHVQIZDFJNLcOdHeHbBGbbeLBXe":1,"cCHObTYWeLJFaMEAbKCBZYfNOQIXWYO":1,"OAZOXHHPTLKGBfDJefDcbBCdWPHDDWe":1,"PPXGSCZFcNSTLEZJO":1,"HOPQLRBGdNOKTfGCbeDUHYKe":1,"H


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            54192.168.2.449848188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:01 UTC777OUTPOST /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 30
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:01 UTC30OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 6c 61 73 74 5f 6d 73 67 5f 69 64 3d 36 30 35 39 30 30 39
                                                                                                                            Data Ascii: code=wakdl&last_msg_id=6059009
                                                                                                                            2024-09-28 02:38:02 UTC656INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:02 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dnqze5alid%2Fq78i4I3UAA5Zc3%2FDD4EXQwugFSgLn2fpDruyzBZ7g1mYzV4JTsRtV0tevim3CcFIDR%2FaiHs6vo7iwZJEDTx8Fi7KHqzy3KSgvsOElv9ZCrua6lzqh9DaO8A%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05adeee0c19db-EWR
                                                                                                                            2024-09-28 02:38:02 UTC51INData Raw: 32 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 22 4d 65 73 73 61 67 65 73 20 6e 6f 74 20 66 6f 75 6e 64 21 22 7d 0d 0a
                                                                                                                            Data Ascii: 2d{"status":false,"text":"Messages not found!"}
                                                                                                                            2024-09-28 02:38:02 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            55192.168.2.449849188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:02 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:02 UTC731INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:02 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xckQPG2JEiNEFwEP9MLxMW4lpYgf4ahtJVdKbU8KtfjgG74troTPBCp8XDuCDVauEX1UXonQO1vgAUVFHv%2BBcK77pgzZPdFJHZyVYNNZblMsHgq0Dq%2FtjVMwmU1wE52fjw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05adf6e9542d2-EWR
                                                                                                                            2024-09-28 02:38:02 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            56192.168.2.45202418.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:03 UTC1071OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3XHNRMedXrYtRcmsHuVGPx6ydc2GlsSApWlS2ZbgFD6Ti8jMejZNqA%2Bxo398YpelfYbPBRM5BCQ6SmLBRPG742XNcvztv5S41JG7YwJdpOOE0xjzOaOxrrVeWyEUvMVFaC4wSbfCFm%2FX%2FuNMlCygFEs49za%2BlNKPfA%3D
                                                                                                                            2024-09-28 02:38:03 UTC2343INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:03 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"max_age":604800,"report_to":"default"}
                                                                                                                            report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default","max_age":604800}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:03 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:06 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2Brs1r37jhThu3ARVRE5U8l2koX86dVzYFXpAMjW8i3dNyPSj8UbzsSZ3ZRrsnECiOVO768IXheGaPEYstxV%2BnIbyWutHJOh98NHByDwIGFQhGctRS5c2amCLYE2zbdSGGZHfeUWfJBInbEjXjSDMenu2KB5KWMHRY%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:03 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:03 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 4d156fc02c81ad97b906c107779265e2.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: xnmi9LPcQCdrgsXT_Pu8N3CpPihmTeG5F6blHDehQJFp_rhUSj3mNg==
                                                                                                                            2024-09-28 02:38:03 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 57 79 34 38 52 35 65 75 63 4e 72 6d 6c 50 47 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="Wy48R5eucNrmlPG"
                                                                                                                            2024-09-28 02:38:04 UTC16384INData Raw: 37 36 39 34 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 7694<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:04 UTC13980INData Raw: 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 62 65 74 77 65 65 6e 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 20 e2 80 93 20 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 20 5c 6e 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 20 22 2c 22 6c 6f 6e 67 5f 64 61 74 65 5f 72 61 6e 67 65 5f 62 6f 74 68 5f 79 65 61 72 73 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 20 e2 80 93 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 5f 75 6e 74 69 6c 7d 22 2c 22 64 61 74 65 5f 77 69 74
                                                                                                                            Data Ascii: _short_month_between":"{short_month_name} {day_of_month} {short_month_name_until} \n{day_of_month_until} ","long_date_range_both_years":"{month_name} {day_of_month}, {full_year} {month_name_until} {day_of_month_until}, {full_year_until}","date_wit
                                                                                                                            2024-09-28 02:38:04 UTC989INData Raw: 33 64 36 0d 0a 67 68 74 65 73 74 3a 20 22 23 46 46 46 30 46 30 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 64 61 72 6b 3a 20 22 23 30 30 36 36 30 37 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 3a 20 22 23 30 30 38 30 30 39 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 3a 20 22 23 39 37 45 35 39 43 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 72 3a 20 22 23 45 37 46 44 45 39 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 73 74 3a 20 22 23 46 31 46 45 46 32 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 3a 20 22 23 30 30 37 31 43 32 22 2c
                                                                                                                            Data Ascii: 3d6ghtest: "#FFF0F0",bui_color_constructive_dark: "#006607",bui_color_constructive: "#008009",bui_color_constructive_light: "#97E59C",bui_color_constructive_lighter: "#E7FDE9",bui_color_constructive_lightest: "#F1FEF2",bui_color_action: "#0071C2",
                                                                                                                            2024-09-28 02:38:04 UTC8951INData Raw: 32 32 65 66 0d 0a 5f 76 32 5f 63 6e 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2f 62 64 37 65 37 61 64 62 66 39 37 33 31 38 31 30 61 37 39 62 61 64 63 35 36 37 63 64 34 38 34 36 62 31 61 62 34 64 36 38 2e 6a 73 27 2c 0a 61 73 79 6e 63 5f 61 74 6c 61 73 5f 76 32 5f 6e 6f 6e 5f 63 6e 5f 6a 73 3a 20 27 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6a 73 2f 61 73 79 6e 63 5f 61 74 6c 61 73 5f 76 32 5f 6e 6f 6e 5f 63 6e 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2f 38 38 30 36 37 32 38 32 33 64 33 34 61 36 63 63 31 33 36 36 66 64 33 38 66 39 38 63 36 62 34 66 66 39 30 66 63 66 32 30 2e 6a 73 27 2c 0a 69 6d 61 67 65 5f 67 61 6c 6c 65 72 79 5f 6a 73 3a 20 27 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f
                                                                                                                            Data Ascii: 22ef_v2_cn_cloudfront_sd/bd7e7adbf9731810a79badc567cd4846b1ab4d68.js',async_atlas_v2_non_cn_js: 'https://cf.bstatic.com/static/js/async_atlas_v2_non_cn_cloudfront_sd/880672823d34a6cc1366fd38f98c6b4ff90fcf20.js',image_gallery_js: 'https://cf.bstatic.co
                                                                                                                            2024-09-28 02:38:04 UTC16384INData Raw: 37 66 66 61 0d 0a 62 73 70 22 3a 22 26 6e 62 73 70 3b 22 2c 22 6f 6e 65 5f 64 6f 74 5f 6c 65 61 64 65 72 22 3a 22 5c 75 32 30 32 34 22 7d 2c 0a 62 5f 68 6f 73 74 6e 61 6d 65 20 3a 20 27 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 72 61 63 6b 72 61 74 65 73 5f 6d 6f 6e 69 74 6f 72 69 6e 67 5f 72 75 6e 6e 69 6e 67 3a 20 74 72 75 65 2c 0a 62 5f 77 69 73 68 6c 69 73 74 5f 72 65 66 65 72 72 65 72 20 3a 20 27 27 2c 0a 62 5f 72 65 67 5f 75 73 65 72 5f 6c 61 73 74 5f 75 73 65 64 5f 77 69 73 68 6c 69 73 74 3a 20 22 22 2c 0a 62 5f 72 65 67 5f 75 73 65 72 5f 77 69 73 68 6c 69 73 74 5f 72 65 6d 61 69 6e 69 6e 67 3a 20 31 2c 0a 69 73 5f 75 73 65 72 5f 63 65 6e 74 65 72 5f 62 61 72 3a 20 31 2c 0a 62 5f 73 69 74 65 5f 65 78 70 65 72 69 6d 65 6e 74 5f 75
                                                                                                                            Data Ascii: 7ffabsp":"&nbsp;","one_dot_leader":"\u2024"},b_hostname : 'www.booking.com',b_rackrates_monitoring_running: true,b_wishlist_referrer : '',b_reg_user_last_used_wishlist: "",b_reg_user_wishlist_remaining: 1,is_user_center_bar: 1,b_site_experiment_u
                                                                                                                            2024-09-28 02:38:04 UTC16384INData Raw: 22 50 49 5a 54 4f 46 52 55 52 55 52 4e 4a 42 43 44 43 59 54 57 4e 5a 56 43 44 64 48 4a 65 66 41 46 65 59 41 46 43 22 3a 31 2c 22 5a 4f 42 4a 5a 47 46 64 52 61 61 4b 4f 56 56 58 62 4b 4a 4b 51 4b 56 4e 52 48 65 22 3a 30 2c 22 48 4d 62 56 61 63 44 64 4b 43 46 4b 56 50 4c 61 4b 51 41 51 55 59 54 45 54 22 3a 31 2c 22 48 57 41 46 59 48 49 45 4a 4b 61 45 48 54 22 3a 30 2c 22 4f 4f 49 42 42 51 4d 41 4c 48 55 4a 4e 4f 42 4e 52 47 65 50 4f 46 42 66 57 41 57 66 42 51 4d 5a 51 4b 65 22 3a 30 2c 22 4f 4d 42 4b 4f 4d 61 4b 43 51 5a 64 42 47 55 4f 22 3a 30 2c 22 48 57 41 46 4e 52 59 4c 4a 56 44 58 4b 65 22 3a 30 2c 22 4f 41 5a 4f 58 48 48 5a 58 50 4b 56 59 53 4b 53 4d 65 53 4e 61 61 59 59 66 50 48 65 22 3a 31 2c 22 61 58 54 66 48 41 45 44 42 4f 53 49 53 49 42 54 4f 58
                                                                                                                            Data Ascii: "PIZTOFRURURNJBCDCYTWNZVCDdHJefAFeYAFC":1,"ZOBJZGFdRaaKOVVXbKJKQKVNRHe":0,"HMbVacDdKCFKVPLaKQAQUYTET":1,"HWAFYHIEJKaEHT":0,"OOIBBQMALHUJNOBNRGePOFBfWAWfBQMZQKe":0,"OMBKOMaKCQZdBGUO":0,"HWAFNRYLJVDXKe":0,"OAZOXHHZXPKVYSKSMeSNaaYYfPHe":1,"aXTfHAEDBOSISIBTOX
                                                                                                                            2024-09-28 02:38:04 UTC4593INData Raw: 0d 0a 31 31 65 37 0d 0a 4d 62 59 48 46 42 64 64 51 43 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 49 5a 64 4c 56 46 63 59 42 58 65 22 3a 31 2c 22 4f 4d 47 66 48 4d 63 51 59 49 4d 64 55 66 45 4a 53 57 65 22 3a 31 2c 22 56 56 4f 63 54 57 59 57 5a 53 56 62 61 42 5a 55 48 5a 4a 46 61 4e 63 43 58 4b 46 4b 65 22 3a 31 2c 22 61 44 4d 52 44 66 55 46 46 45 50 51 42 61 59 62 54 51 46 4c 47 48 4f 43 55 43 22 3a 32 2c 22 65 45 42 50 42 4a 46 4a 5a 65 4f 51 50 42 4f 42 54 55 57 54 4e 55 43 22 3a 31 2c 22 49 5a 62 52 45 5a 56 50 54 4c 4b 47 42 66 57 4b 63 42 63 61 4d 45 41 61 59 57 65 22 3a 31 2c 22 63 43 48 4f 62 4b 64 63 66 46 64 48 4d 62 4e 58 47 44 4a 54 4c 5a 4e 50 44 63 4f 4f 49 42 42 4f 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 4c 65 4d 58 46 50 51 43 63 5a 48 42 57
                                                                                                                            Data Ascii: 11e7MbYHFBddQC":1,"aWQOcYTBIZdLVFcYBXe":1,"OMGfHMcQYIMdUfEJSWe":1,"VVOcTWYWZSVbaBZUHZJFaNcCXKFKe":1,"aDMRDfUFFEPQBaYbTQFLGHOCUC":2,"eEBPBJFJZeOQPBOBTUWTNUC":1,"IZbREZVPTLKGBfWKcBcaMEAaYWe":1,"cCHObKdcfFdHMbNXGDJTLZNPDcOOIBBO":1,"dLYHMRFeRLeMXFPQCcZHBW
                                                                                                                            2024-09-28 02:38:04 UTC16384INData Raw: 35 61 36 38 0d 0a 61 57 51 4f 63 59 54 42 49 5a 45 58 61 46 58 52 41 58 5a 5a 43 44 4c 52 65 22 3a 31 2c 22 49 5a 56 53 46 56 43 53 66 41 57 44 49 63 4b 65 22 3a 31 2c 22 41 64 5a 5a 64 52 64 4a 63 65 4f 41 62 57 54 45 51 41 4f 46 55 49 45 46 47 57 65 22 3a 32 2c 22 62 4c 45 42 42 56 59 55 42 55 41 5a 4e 64 4d 41 5a 64 4a 41 49 4e 52 65 22 3a 31 2c 22 62 51 4b 50 46 54 55 50 66 51 63 50 58 50 4c 42 58 65 22 3a 31 2c 22 42 43 45 58 46 61 47 4d 58 46 53 64 43 58 4a 51 4c 59 58 51 64 4a 47 47 41 59 52 47 65 66 62 4e 5a 66 41 43 22 3a 31 2c 22 49 5a 42 54 64 46 50 66 42 4b 53 41 45 4c 53 58 48 58 53 48 46 64 56 66 57 49 48 43 41 64 50 65 48 54 22 3a 31 2c 22 48 57 41 46 59 54 66 62 61 63 57 43 63 4b 62 4f 46 48 65 22 3a 31 2c 22 48 4b 52 52 48 61 62 5a 4e 48
                                                                                                                            Data Ascii: 5a68aWQOcYTBIZEXaFXRAXZZCDLRe":1,"IZVSFVCSfAWDIcKe":1,"AdZZdRdJceOAbWTEQAOFUIEFGWe":2,"bLEBBVYUBUAZNdMAZdJAINRe":1,"bQKPFTUPfQcPXPLBXe":1,"BCEXFaGMXFSdCXJQLYXQdJGGAYRGefbNZfAC":1,"IZBTdFPfBKSAELSXHXSHFdVfWIHCAdPeHT":1,"HWAFYTfbacWCcKbOFHe":1,"HKRRHabZNH
                                                                                                                            2024-09-28 02:38:04 UTC6768INData Raw: 2c 22 4e 41 46 4c 65 4f 65 4a 59 54 42 4f 4c 50 54 64 4d 5a 62 47 58 50 4a 55 63 64 5a 51 4d 43 53 41 58 4b 64 63 45 47 42 48 56 55 57 58 46 5a 45 56 43 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 4e 62 62 47 53 52 61 50 53 50 58 50 52 51 41 55 52 41 66 50 4d 45 55 58 50 4e 4d 57 65 22 3a 31 2c 22 62 51 4b 50 52 43 42 51 41 55 61 53 4a 51 52 43 4d 50 61 46 54 50 54 59 55 41 4a 61 41 53 50 59 66 42 48 48 55 48 61 4f 22 3a 31 2c 22 4f 4f 49 42 54 56 58 4f 43 5a 42 4b 65 4a 61 44 43 43 44 46 51 46 61 4c 64 50 65 47 59 4f 22 3a 31 2c 22 50 50 58 47 57 50 48 44 44 50 5a 50 4e 5a 46 65 65 53 64 50 58 4d 50 5a 64 55 57 50 61 65 4b 4b 65 22 3a 31 2c 22 59 54 42 54 52 59 5a 4c 57 5a 44 63 4a 50 45 45 49 62 4c 65 59 52 41 62 66 52 56 43 46 44 4f 4a 46 43 22 3a 31 2c 22
                                                                                                                            Data Ascii: ,"NAFLeOeJYTBOLPTdMZbGXPJUcdZQMCSAXKdcEGBHVUWXFZEVC":1,"aWQOcYTBNbbGSRaPSPXPRQAURAfPMEUXPNMWe":1,"bQKPRCBQAUaSJQRCMPaFTPTYUAJaASPYfBHHUHaO":1,"OOIBTVXOCZBKeJaDCCDFQFaLdPeGYO":1,"PPXGWPHDDPZPNZFeeSdPXMPZdUWPaeKKe":1,"YTBTRYZLWZDcJPEEIbLeYRAbfRVCFDOJFC":1,"


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            57192.168.2.452025188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:03 UTC402OUTGET /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:03 UTC605INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:03 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I4qQBvFNQDm7LENaTR1xJy0xbPSvtpAQSkGwT6pVZ5xFay9pp749QHP7GgSKW3NPF7NzH%2BJJ39KlGxpFzY1hmlsdAqyZBXi8Vp3X%2Bv1bgSk9GB8qWCZEti6y55dQCM%2FJRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ae74a3a5e6a-EWR
                                                                                                                            2024-09-28 02:38:03 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            58192.168.2.452027188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:03 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:03 UTC733INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:03 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVLiJWGJO0YSnOTQn2vNTAjHMZB8gstUsfZ%2FovEsTWttyXmhPRyBl80yWfWRy4uKaW7AQutuuYOp1eDmoZDk7DM3IEdevLjMaLH0wB4EcL%2BeQU2K3ELm%2F09Trh69b5ijPg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ae7ca20430e-EWR
                                                                                                                            2024-09-28 02:38:03 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            59192.168.2.452033188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:04 UTC782OUTPOST /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 10
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:04 UTC10OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c
                                                                                                                            Data Ascii: code=wakdl
                                                                                                                            2024-09-28 02:38:05 UTC658INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:05 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cHgINpBjV0bu1iuevFoWwB2H0B2ZN5QofurB%2BHMpxGi40y6%2BsVK%2B4ZfNRoTQKeCY94PIr134RDJbpDghpqkO1F7zS8lWre0Clvo88mBtdC8w06YGRotaAlzxeYkWFmN%2BzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05aefcfb35e65-EWR
                                                                                                                            2024-09-28 02:38:05 UTC22INData Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a
                                                                                                                            Data Ascii: 10{"status":false}
                                                                                                                            2024-09-28 02:38:05 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            60192.168.2.45203118.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:04 UTC1071OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3XHNRMedXrYtRcmsHuVGPx6ydc2GlsSApWlS2ZbgFD6Ti8jMejZNqA%2Bxo398YpelfYbPBRM5BCQ6SmLBRPG742XNcvztv5S41JG7YwJdpOOE0xjzOaOxrrVeWyEUvMVFaC4wSbfCFm%2FX%2FuNMlCygFEs49za%2BlNKPfA%3D
                                                                                                                            2024-09-28 02:38:05 UTC2353INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:05 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:04 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:08 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3UQPQTAZa%2BlQoKgztFWqO%2FFQT5DTiYE44RtW33rI59xMHRsF0yoZQZNecrkZKefbHEGmnbtSgK5jnLT0HgMJUvh3aSHgDqe00lC4Et%2FUrHABs8wD0K5zcGDRuBqK6997%2FjuhlpqW%2B5WJdZIphhghSgrZ%2BFHbJU4yA4%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:05 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:05 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 9bd86598a7f45cc948aa2f9674ece0b2.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: ND94jPy1XPR7A9zEegH-5jhZR3qNyjUaV9HrwWhVcskxaaW8pijlTw==
                                                                                                                            2024-09-28 02:38:05 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 68 71 63 32 55 46 42 33 4e 54 69 56 77 38 4c 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="hqc2UFB3NTiVw8L"
                                                                                                                            2024-09-28 02:38:05 UTC8200INData Raw: 32 30 30 30 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 2000<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:05 UTC14474INData Raw: 33 38 38 32 0d 0a 3d 22 63 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 61 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 43 61 74 61 6c c3 a0 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 69 74 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 49 74 61 6c 69 61 6e 6f 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 70 74 2d 70 74 22 20 68 72 65 66 3d 22 68
                                                                                                                            Data Ascii: 3882="ca" href="https://www.booking.com/index.ca.html" title="Catal"/><link rel="alternate" type="text/html" hreflang="it" href="https://www.booking.com/index.it.html" title="Italiano"/><link rel="alternate" type="text/html" hreflang="pt-pt" href="h
                                                                                                                            2024-09-28 02:38:05 UTC16384INData Raw: 33 66 66 61 0d 0a 2c 22 6e 61 6d 65 5f 64 65 66 5f 61 72 74 69 63 6c 65 5f 75 63 22 3a 22 54 68 65 20 44 65 63 65 6d 62 65 72 22 2c 22 67 65 6e 69 74 69 76 65 5f 75 63 22 3a 22 44 65 63 65 6d 62 65 72 22 2c 22 67 65 6e 69 74 69 76 65 5f 6c 63 22 3a 22 44 65 63 65 6d 62 65 72 20 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 44 65 63 22 2c 22 6e 61 6d 65 5f 64 65 66 5f 61 72 74 69 63 6c 65 5f 6c 63 22 3a 22 74 68 65 20 44 65 63 65 6d 62 65 72 22 2c 22 6e 61 6d 65 22 3a 22 44 65 63 65 6d 62 65 72 22 2c 22 6d 6f 6e 74 68 5f 31 22 3a 22 44 65 63 65 6d 62 65 72 22 2c 22 6e 61 6d 65 5f 77 69 74 68 5f 79 65 61 72 5f 6f 6e 6c 79 22 3a 22 44 65 63 65 6d 62 65 72 22 2c 22 6f 6e 5f 64 61 79 5f 6d 6f 6e 74 68 22 3a 22 31 32 22 2c 22 6e 61 6d 65 5f 66
                                                                                                                            Data Ascii: 3ffa,"name_def_article_uc":"The December","genitive_uc":"December","genitive_lc":"December ","short_name_only":"Dec","name_def_article_lc":"the December","name":"December","month_1":"December","name_with_year_only":"December","on_day_month":"12","name_f
                                                                                                                            2024-09-28 02:38:05 UTC16384INData Raw: 0d 0a 34 30 30 30 0d 0a 69 6e 20 39 20 64 69 67 69 74 73 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 27 2c 0a 62 5f 62 6c 61 6e 6b 5f 6e 75 6d 65 72 69 63 5f 70 69 6e 3a 20 27 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 62 6f 6f 6b 69 6e 67 5c 27 73 20 50 49 4e 20 63 6f 64 65 2e 27 2c 0a 62 5f 62 6c 61 6e 6b 5f 62 6b 6e 67 5f 6e 72 3a 20 27 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 62 6f 6f 6b 69 6e 67 20 6e 75 6d 62 65 72 2e 27 2c 0a 70 61 73 73 77 6f 72 64 5f 63 61 6e 74 5f 62 65 5f 75 73 65 72 6e 61 6d 65 3a 20 27 59 6f 75 72 20 70 61 73 73 77 6f 72 64 20 63 61 6e 5c 27 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 61 73 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 27 2c 0a 62 5f 73 68 6f 77 5f 70 61 73 73 77
                                                                                                                            Data Ascii: 4000in 9 digits. Please try again.',b_blank_numeric_pin: 'Please enter your booking\'s PIN code.',b_blank_bkng_nr: 'Please enter your booking number.',password_cant_be_username: 'Your password can\'t be the same as your email address',b_show_passw
                                                                                                                            2024-09-28 02:38:05 UTC10INData Raw: 50 4b 65 45 51 41 42 59 0d 0a
                                                                                                                            Data Ascii: PKeEQABY
                                                                                                                            2024-09-28 02:38:05 UTC16384INData Raw: 31 31 31 62 32 0d 0a 4b 65 22 3a 30 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 5a 55 54 50 54 51 4d 4f 42 66 53 54 62 46 4b 42 64 42 65 57 65 22 3a 31 2c 22 42 4b 65 57 49 45 63 58 41 55 41 44 66 45 63 4f 62 44 42 58 53 43 46 50 43 57 63 44 61 57 65 22 3a 30 2c 22 4f 41 59 4a 4a 63 43 57 4e 65 56 48 49 63 46 44 53 4b 66 58 64 66 64 54 46 52 55 52 55 52 48 65 22 3a 30 2c 22 54 5a 55 66 43 44 57 4f 4f 44 58 61 4a 50 65 54 4a 4c 42 57 48 5a 48 54 22 3a 30 2c 22 64 4c 63 58 4a 56 4f 54 63 63 43 54 59 59 53 54 66 4e 63 65 49 57 55 44 58 4b 65 22 3a 30 2c 22 61 43 54 50 49 4b 45 4c 63 63 43 47 47 63 43 63 43 63 43 52 53 59 4e 43 42 45 55 44 50 42 53 42 52 66 4e 64 65 51 59 63 41 5a 64 4a 41 49 4e 51 55 45 55 44 5a 53 65 45 52 4d 43 22 3a 30 2c 22 4f 44 52 45 54 62 61
                                                                                                                            Data Ascii: 111b2Ke":0,"YdXfdKNKNKZUTPTQMOBfSTbFKBdBeWe":1,"BKeWIEcXAUADfEcObDBXSCFPCWcDaWe":0,"OAYJJcCWNeVHIcFDSKfXdfdTFRURURHe":0,"TZUfCDWOODXaJPeTJLBWHZHT":0,"dLcXJVOTccCTYYSTfNceIWUDXKe":0,"aCTPIKELccCGGcCcCcCRSYNCBEUDPBSBRfNdeQYcAZdJAINQUEUDZSeERMC":0,"ODRETba
                                                                                                                            2024-09-28 02:38:05 UTC16384INData Raw: 66 66 59 53 59 4e 42 59 54 45 54 22 3a 31 2c 22 48 4d 62 64 66 4f 59 46 66 64 58 55 44 50 42 53 42 4f 46 4f 22 3a 31 2c 22 66 58 47 57 64 55 44 47 4e 4b 4a 58 63 47 42 65 44 64 65 46 43 59 41 4f 49 42 5a 4d 5a 43 22 3a 31 2c 22 64 4c 63 58 4a 65 49 54 50 4d 4f 62 4f 56 4b 47 61 4c 54 22 3a 31 2c 22 59 54 42 65 57 66 43 44 49 58 4c 53 47 62 44 61 46 53 52 66 41 42 4e 49 50 52 61 4f 22 3a 31 2c 22 63 43 48 4f 62 4b 64 63 5a 4e 4d 51 4d 4c 65 62 54 5a 57 4b 4e 55 66 46 64 48 4d 4f 4f 49 42 42 4f 22 3a 31 2c 22 48 4d 62 49 43 57 56 5a 45 64 4d 4f 44 53 4f 65 65 63 62 58 41 62 57 4e 57 65 22 3a 31 2c 22 54 57 55 4c 46 63 53 4f 50 57 4f 43 5a 53 56 62 58 51 57 56 50 50 53 64 61 66 62 4f 41 55 52 41 66 42 66 43 22 3a 31 2c 22 66 65 66 53 43 4f 4a 5a 66 49 50 66
                                                                                                                            Data Ascii: ffYSYNBYTET":1,"HMbdfOYFfdXUDPBSBOFO":1,"fXGWdUDGNKJXcGBeDdeFCYAOIBZMZC":1,"dLcXJeITPMObOVKGaLT":1,"YTBeWfCDIXLSGbDaFSRfABNIPRaO":1,"cCHObKdcZNMQMLebTZWKNUfFdHMOOIBBO":1,"HMbICWVZEdMODSOeecbXAbWNWe":1,"TWULFcSOPWOCZSVbXQWVPPSdafbOAURAfBfC":1,"fefSCOJZfIPf
                                                                                                                            2024-09-28 02:38:05 UTC16384INData Raw: 46 47 5a 4a 45 53 65 48 54 22 3a 31 2c 22 41 5a 4e 64 41 59 62 65 44 55 5a 5a 4a 42 63 53 65 57 53 49 4e 4e 4b 62 4e 49 46 48 56 50 53 44 44 4b 65 22 3a 31 2c 22 41 45 5a 56 50 54 4c 4b 47 42 66 57 50 42 5a 4f 43 22 3a 31 2c 22 61 64 55 41 41 4d 59 50 4b 53 4a 47 47 48 53 57 65 64 4e 54 55 51 4f 44 50 57 5a 4a 61 65 22 3a 31 2c 22 61 58 54 66 48 41 45 44 49 53 49 42 54 56 5a 4d 59 43 45 62 57 63 63 50 63 4e 50 4d 41 4f 65 62 51 41 43 22 3a 32 2c 22 48 4d 62 58 4c 51 41 46 52 47 45 4d 45 61 58 47 62 52 62 42 4f 46 4f 22 3a 31 2c 22 48 4d 62 56 41 41 4e 46 54 65 53 55 62 45 4e 48 55 48 65 22 3a 31 2c 22 42 49 55 4a 4c 4d 46 50 41 41 42 48 65 55 4e 66 47 59 4b 61 50 4e 5a 46 5a 65 61 50 4c 61 41 46 5a 4b 58 65 22 3a 31 2c 22 4f 4f 49 42 54 4b 42 4f 4d 44 5a
                                                                                                                            Data Ascii: FGZJESeHT":1,"AZNdAYbeDUZZJBcSeWSINNKbNIFHVPSDDKe":1,"AEZVPTLKGBfWPBZOC":1,"adUAAMYPKSJGGHSWedNTUQODPWZJae":1,"aXTfHAEDISIBTVZMYCEbWccPcNPMAOebQAC":2,"HMbXLQAFRGEMEaXGbRbBOFO":1,"HMbVAANFTeSUbENHUHe":1,"BIUJLMFPAABHeUNfGYKaPNZFZeaPLaAFZKXe":1,"OOIBTKBOMDZ
                                                                                                                            2024-09-28 02:38:05 UTC16384INData Raw: 54 22 3a 31 2c 22 4f 4f 49 42 54 56 58 49 4e 4c 63 4d 59 4e 61 58 54 62 43 42 50 47 44 44 52 54 59 43 22 3a 31 2c 22 49 5a 56 53 46 56 42 50 53 63 57 55 57 44 64 65 45 61 51 44 4b 57 65 22 3a 31 2c 22 66 65 66 53 4b 65 45 44 57 48 43 4a 5a 41 52 65 62 46 65 64 5a 55 44 4f 64 4b 4e 4b 4e 4b 57 65 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 4c 50 59 4b 44 63 64 46 63 65 48 45 56 46 49 4d 4e 53 65 50 54 42 50 65 47 45 45 43 22 3a 31 2c 22 64 4c 63 58 4a 65 49 54 50 56 4e 65 4a 4d 42 4d 57 5a 4e 4e 4f 65 62 51 41 59 49 45 42 43 22 3a 31 2c 22 42 49 55 4a 4c 4d 44 53 57 50 61 44 4d 57 58 46 5a 45 56 43 22 3a 31 2c 22 66 65 66 53 4b 65 45 46 63 49 41 44 57 48 43 44 55 46 59 51 58 55 5a 43 22 3a 31 2c 22 42 50 48 41 66 61 52 49 4d 4a 52 42 48 4c 64 52 54 4b 65 65
                                                                                                                            Data Ascii: T":1,"OOIBTVXINLcMYNaXTbCBPGDDRTYC":1,"IZVSFVBPScWUWDdeEaQDKWe":1,"fefSKeEDWHCJZARebFedZUDOdKNKNKWe":1,"dLYHMRFeRLPYKDcdFceHEVFIMNSePTBPeGEEC":1,"dLcXJeITPVNeJMBMWZNNOebQAYIEBC":1,"BIUJLMDSWPaDMWXFZEVC":1,"fefSKeEFcIADWHCDUFYQXUZC":1,"BPHAfaRIMJRBHLdRTKee


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            61192.168.2.452032188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:04 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:04 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:38:05 UTC660INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:05 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hTb%2BLFPVpS26EEpUkXezPH6TVw7zORnsUy3qm36oO71EQ%2BeJ%2FeRRYa1sX6TnZzkvEx4OeVCyrSeSlj00JQX0BUump1%2FwXnilN64WHBFEvUHGaZTpBeITK%2BzjWfxPZGDuFA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05aeffdda7c69-EWR
                                                                                                                            2024-09-28 02:38:05 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            62192.168.2.452034188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:04 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:05 UTC737INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:05 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nQcbmbAdQAgMY5wXtF3comCaF7F%2BDuPf42vAgwoypoiSQi32wfCeH%2BVTs639%2BP0z80OJXUY75Mt%2BJHTbCpXCpf7j5OEns9jlKbqGgBvFwoOgH0MdsDyyf%2BM7p5LTgq3wng%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05af06bdf4390-EWR
                                                                                                                            2024-09-28 02:38:05 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            63192.168.2.45203718.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:06 UTC1075OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3UQPQTAZa%2BlQoKgztFWqO%2FFQT5DTiYE44RtW33rI59xMHRsF0yoZQZNecrkZKefbHEGmnbtSgK5jnLT0HgMJUvh3aSHgDqe00lC4Et%2FUrHABs8wD0K5zcGDRuBqK6997%2FjuhlpqW%2B5WJdZIphhghSgrZ%2BFHbJU4yA4%3D
                                                                                                                            2024-09-28 02:38:06 UTC2351INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:06 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"group":"default","max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}]}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:06 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:12 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT8vm0w1KLmAmEWpcHVSsk4E6%2FcVWqZgXabyO6TX6A2a1jJEL0KA%2FwGIDWBpHIqH2gV5JxfJ1xOz%2FGY9yN236vcxioPmwgajVKxode3mmnurN7lhMLFdCcjNeIAW5eAr52mKaQ0O%2FbozRrlY3syZrLT%2BHmbk1%2BqIVMw%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:06 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:06 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 4d156fc02c81ad97b906c107779265e2.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: c4dSOAmO93ZOsKp9lSsHkTyuVgNP1PgjI1NKiZBA3gOF4LCqyo8jMw==


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            64192.168.2.452039188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:06 UTC412OUTGET /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:06 UTC601INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:06 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=liXvnSCPi97qdgUWmUyI4NTxNebM5PjmxGMXRC7dsEtptAReRCawABSwho1qJi4fIOwJO5ZPR5VhiEjRcvihDzqPtGUZFfbkTV1dTeYM1Vm9vi2Tv38kbAIO%2Fu4wRLMAig%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05af9092dc34f-EWR
                                                                                                                            2024-09-28 02:38:06 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            65192.168.2.452038188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:06 UTC409OUTGET /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:06 UTC603INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:06 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dUz6WRXMEMRoG0KWro6nHZ6q6NAF8sUgfGj2NsZrANgGfTdYayLAl1GBXXtDF%2FR2Y7qMwOZWBrazr8QsKagXJ6itbvjQ5ikjJbnfRJETJLC3nQdlNh78PU%2F3yYhe58oUNw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05af90dee4264-EWR
                                                                                                                            2024-09-28 02:38:06 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            66192.168.2.45204152.222.236.424435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:06 UTC388OUTOPTIONS /report HTTP/1.1
                                                                                                                            Host: nellie.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Origin: https://www.booking.com
                                                                                                                            Access-Control-Request-Method: POST
                                                                                                                            Access-Control-Request-Headers: content-type
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            2024-09-28 02:38:07 UTC569INHTTP/1.1 204 No Content
                                                                                                                            Content-Type: text/html
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:07 GMT
                                                                                                                            allow: POST, OPTIONS
                                                                                                                            access-control-allow-headers: content-type
                                                                                                                            access-control-allow-methods: POST, OPTIONS
                                                                                                                            access-control-allow-origin: *
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 2c29bb35ddacc1dc2616fe65bdf5122e.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA56-P4
                                                                                                                            X-Amz-Cf-Id: IdqaY8ocJ2DlhcDgz7oAXcFbwnAEaPKf2A6bWrRehBctsEx2jKPRgQ==


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            67192.168.2.452043188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:07 UTC777OUTPOST /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 30
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:07 UTC30OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 6c 61 73 74 5f 6d 73 67 5f 69 64 3d 36 30 35 39 30 30 39
                                                                                                                            Data Ascii: code=wakdl&last_msg_id=6059009
                                                                                                                            2024-09-28 02:38:07 UTC658INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:07 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tTHZwiqtHM2Lly10sEHXLjPr2yqxfv4Mae%2BYXB7rFFz8FiDfw1f6xHKfhwgE5UkCamxsvtvF6%2FnPu8aQYSDxt0kqre8PbZd7pQ8BUS6U%2BwZbfwELHvDTelAcCY1R%2BMQ5Kw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05afeee2e8c0c-EWR
                                                                                                                            2024-09-28 02:38:07 UTC51INData Raw: 32 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 22 4d 65 73 73 61 67 65 73 20 6e 6f 74 20 66 6f 75 6e 64 21 22 7d 0d 0a
                                                                                                                            Data Ascii: 2d{"status":false,"text":"Messages not found!"}
                                                                                                                            2024-09-28 02:38:07 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            68192.168.2.452045188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:07 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:07 UTC731INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:07 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BLN1ysjlqwcFIL8xaKlzOKefTomuFsoZ3WigZW6MUMPF9yj58RUuqx%2Fx7tE8iCSZWUd39lYvaXVRiqGDXllDeKBQGNnxvLYPThgv79ThEun9KO6Lx4M9%2FB7uIzoQd7xdJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b004f560c7a-EWR
                                                                                                                            2024-09-28 02:38:07 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            69192.168.2.45204418.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:07 UTC1075OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3UQPQTAZa%2BlQoKgztFWqO%2FFQT5DTiYE44RtW33rI59xMHRsF0yoZQZNecrkZKefbHEGmnbtSgK5jnLT0HgMJUvh3aSHgDqe00lC4Et%2FUrHABs8wD0K5zcGDRuBqK6997%2FjuhlpqW%2B5WJdZIphhghSgrZ%2BFHbJU4yA4%3D
                                                                                                                            2024-09-28 02:38:07 UTC2349INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:07 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"max_age":604800,"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}]}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:07 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:14 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5tLlwCxUN8AKuxt7XdvfKtF9rlecg6yBm7ga93hhKw87dIsvMIseqtt06e9JyO6dypO0zEkeUur%2B4XWAaU7v70ngvWKYFrM5TVAh0I8RKK7iTE%2FhWQ3lO%2Bw6p1gvmJPt8uK5Tnsyp%2FHLjW1l4qANcRfvCNJpwBUApI%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:07 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:07 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 bd96095bb3c15c742ab4d72d1fecba6c.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: sBQiCZ98UX9l6gHEX4s-UaPQeclYatd-4VjVdderRopBpjQQ_jgKqA==
                                                                                                                            2024-09-28 02:38:08 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 52 5a 4d 43 37 55 59 6d 6d 64 39 42 76 74 36 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="RZMC7UYmmd9Bvt6"
                                                                                                                            2024-09-28 02:38:08 UTC16384INData Raw: 33 66 66 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 3ffa<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:08 UTC16384INData Raw: 0d 0a 34 30 30 30 0d 0a 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 6f 6e 22 3a 22 6f 6e 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d 65 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 75 78 5f 64 61 79 5f 6d 6f 6e 74 68 5f 6f 6e 22 3a 22 6f 6e 20 7b 6d 6f 6e 74 68 5f 32 7d 20 7b 64 61 79 5f 32 7d 22 2c 22 64 61 79 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 74 69 6d 65 5f 62 65 74 77 65 65 6e 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2c 20 7b 74 69 6d 65 7d 20 e2 80 93 20 7b 74 69 6d 65 5f 75 6e 74 69 6c 7d 22 2c 22 73 68 6f 72 74 5f 64 61 74 65 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66
                                                                                                                            Data Ascii: 4000full_year}","day_month_year_on":"on {month_name} {day_name}, {full_year}","ux_day_month_on":"on {month_2} {day_2}","day_short_month_time_between":"{short_month_name} {day_of_month}, {time} {time_until}","short_date":"{short_month_name} {day_of
                                                                                                                            2024-09-28 02:38:08 UTC10INData Raw: 71 5f 6c 74 72 2f 61 63 0d 0a
                                                                                                                            Data Ascii: q_ltr/ac
                                                                                                                            2024-09-28 02:38:08 UTC16384INData Raw: 38 66 65 38 0d 0a 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 26 23 34 37 3b 27 2c 0a
                                                                                                                            Data Ascii: 8fe873a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.booking.com&#47;',
                                                                                                                            2024-09-28 02:38:08 UTC16384INData Raw: 61 55 58 53 5a 57 63 50 58 51 55 4a 64 44 42 4b 43 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 4f 51 48 46 52 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 41 48 49 63 61 57 47 4e 50 5a 53 56 5a 4d 59 49 4f 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 4a 65 42 4f 62 56 49 53 63 66 46 64 48 56 54 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 6d 6f 64 61 6c 56 69 65 77 5f 69 6e 64 65
                                                                                                                            Data Ascii: aUXSZWcPXQUJdDBKC',gnsInsCrd_bannerView_index: 'TDXRPVRBKKJVbFPbVCMIWIOQHFRYDEZRae',gnsInsCrd_bannerCtaClick_index: 'TDXRPVRBKKJVbFPbVCMIWIAHIcaWGNPZSVZMYIO',gnsInsCrd_bannerDismiss_index: 'TDXRPVRBKKJVbFPbVCMIJeBObVIScfFdHVT',gnsInsCrd_modalView_inde
                                                                                                                            2024-09-28 02:38:08 UTC4080INData Raw: 2c 22 5a 64 66 66 5a 5a 47 62 42 59 4f 57 4d 53 4e 46 46 4c 4b 5a 4c 58 4a 4b 62 4f 46 48 65 22 3a 31 2c 22 59 54 54 48 62 58 65 65 41 53 63 64 4a 4f 59 46 56 58 4b 4c 4a 44 43 22 3a 31 2c 22 4e 56 4e 5a 59 65 4a 4d 65 48 47 57 4f 52 54 65 43 49 53 55 5a 58 44 4d 55 42 64 49 55 46 5a 5a 5a 64 65 51 52 41 53 58 45 65 52 65 22 3a 31 2c 22 42 48 44 54 4a 64 52 65 4c 41 55 65 41 53 48 4c 55 58 65 22 3a 31 2c 22 55 4f 54 45 4c 4a 4b 41 46 5a 66 48 47 4a 63 62 57 45 57 42 4f 66 4b 59 49 49 42 63 4d 43 4d 61 52 54 22 3a 31 2c 22 61 44 4d 52 44 66 55 46 46 45 50 51 42 61 59 62 54 51 46 4c 47 48 4f 43 55 43 22 3a 32 2c 22 61 57 51 4f 63 4f 4c 51 51 50 46 59 63 41 51 46 4a 4f 22 3a 31 2c 22 63 43 48 4f 62 4b 64 63 41 5a 54 66 4d 50 53 58 50 65 65 46 62 4d 49 4f 63
                                                                                                                            Data Ascii: ,"ZdffZZGbBYOWMSNFFLKZLXJKbOFHe":1,"YTTHbXeeAScdJOYFVXKLJDC":1,"NVNZYeJMeHGWORTeCISUZXDMUBdIUFZZZdeQRASXEeRe":1,"BHDTJdReLAUeASHLUXe":1,"UOTELJKAFZfHGJcbWEWBOfKYIIBcMCMaRT":1,"aDMRDfUFFEPQBaYbTQFLGHOCUC":2,"aWQOcOLQQPFYcAQFJO":1,"cCHObKdcAZTfMPSXPeeFbMIOc
                                                                                                                            2024-09-28 02:38:08 UTC16384INData Raw: 37 66 66 61 0d 0a 4d 4f 66 44 48 43 4f 4c 5a 42 61 51 44 66 49 4f 61 66 56 48 4c 65 4e 42 4c 4c 54 22 3a 31 2c 22 4e 56 4e 5a 57 55 61 4d 5a 58 52 55 52 4e 65 4a 4d 42 59 47 61 65 50 54 57 45 55 56 56 4f 48 54 22 3a 31 2c 22 65 57 48 4a 64 41 51 54 45 66 45 49 54 4e 50 66 66 59 53 59 4e 42 64 4c 48 65 22 3a 31 2c 22 48 57 41 46 59 44 45 5a 52 45 62 55 4f 62 51 47 4e 4c 58 54 46 57 4f 56 56 57 61 49 66 58 54 22 3a 31 2c 22 56 56 4f 63 54 52 59 5a 4c 57 5a 57 4f 52 54 65 43 49 53 55 5a 45 59 59 45 4f 22 3a 31 2c 22 49 5a 62 52 45 5a 56 50 54 4c 4b 47 42 66 52 4f 51 46 4a 44 44 5a 43 62 56 54 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 41 63 5a 47 53 52 61 50 53 5a 64 65 57 41 51 47 50 57 48 44 4e 43 58 4f 22 3a 31 2c 22 56 4d 58 4e 48 44 52 58 49 55 55 49 48 4f
                                                                                                                            Data Ascii: 7ffaMOfDHCOLZBaQDfIOafVHLeNBLLT":1,"NVNZWUaMZXRURNeJMBYGaePTWEUVVOHT":1,"eWHJdAQTEfEITNPffYSYNBdLHe":1,"HWAFYDEZREbUObQGNLXTFWOVVWaIfXT":1,"VVOcTRYZLWZWORTeCISUZEYYEO":1,"IZbREZVPTLKGBfROQFJDDZCbVT":1,"aWQOcYTBAcZGSRaPSZdeWAQGPWHDNCXO":1,"VMXNHDRXIUUIHO
                                                                                                                            2024-09-28 02:38:08 UTC16384INData Raw: 61 48 52 49 58 54 48 54 22 3a 31 2c 22 66 65 66 53 4b 65 45 46 56 46 4b 4f 55 59 4c 4c 4c 44 63 44 61 5a 65 56 56 4b 66 47 5a 61 54 61 54 61 45 54 22 3a 31 2c 22 66 54 50 4d 50 58 63 52 57 4c 49 5a 53 56 61 66 45 4a 5a 62 47 58 5a 61 54 61 54 61 45 54 22 3a 31 2c 22 4e 41 52 45 46 45 4a 4b 61 45 63 42 55 47 43 51 41 45 43 48 54 65 55 56 49 5a 64 52 52 54 22 3a 31 2c 22 49 5a 56 54 57 52 47 4d 50 4f 4f 41 55 61 4c 65 46 66 5a 43 22 3a 31 2c 22 45 4a 51 4b 45 5a 66 65 62 41 5a 53 63 4e 48 43 22 3a 31 2c 22 54 66 4e 5a 65 46 4f 42 4d 62 66 4a 41 54 49 48 4f 47 5a 57 46 61 59 48 52 64 65 62 51 4e 50 53 4f 42 4e 63 62 64 61 54 22 3a 31 2c 22 54 65 43 4f 65 4a 65 50 45 4a 42 4d 43 43 64 47 4e 52 4f 5a 64 52 4a 4f 63 49 59 55 4e 41 4c 4f 4d 44 52 58 4c 45 46 44
                                                                                                                            Data Ascii: aHRIXTHT":1,"fefSKeEFVFKOUYLLLDcDaZeVVKfGZaTaTaET":1,"fTPMPXcRWLIZSVafEJZbGXZaTaTaET":1,"NAREFEJKaEcBUGCQAECHTeUVIZdRRT":1,"IZVTWRGMPOOAUaLeFfZC":1,"EJQKEZfebAZScNHC":1,"TfNZeFOBMbfJATIHOGZWFaYHRdebQNPSOBNcbdaT":1,"TeCOeJePEJBMCCdGNROZdRJOcIYUNALOMDRXLEFD
                                                                                                                            2024-09-28 02:38:08 UTC16384INData Raw: 0d 0a 32 31 65 30 38 0d 0a 49 55 4f 4e 53 46 48 42 4f 41 49 45 63 56 49 5a 64 52 52 54 22 3a 31 2c 22 48 57 41 46 4e 52 59 4c 44 52 47 62 56 58 64 62 4b 4f 48 59 59 66 50 48 65 22 3a 31 2c 22 48 57 41 46 59 42 66 61 51 43 56 52 66 4a 55 58 49 44 55 44 43 52 65 22 3a 31 2c 22 54 66 4e 5a 65 46 4f 42 55 4e 43 4b 41 55 4a 49 58 4f 22 3a 31 2c 22 4f 54 66 64 41 53 46 59 54 53 55 61 52 51 4d 65 42 59 61 65 62 43 4e 5a 65 4f 42 4f 22 3a 31 2c 22 48 56 55 42 4e 4e 65 52 42 4e 65 50 65 45 42 56 55 57 56 59 52 45 48 47 43 22 3a 31 2c 22 48 4d 62 41 4c 53 49 5a 59 5a 58 50 45 65 50 57 49 49 47 44 43 22 3a 31 2c 22 48 57 41 46 59 54 66 4e 4f 53 54 55 5a 58 44 43 4a 46 66 61 4e 62 66 46 54 55 5a 53 54 48 54 22 3a 31 2c 22 54 65 43 4f 65 4a 49 55 57 55 48 63 4b 4b 53
                                                                                                                            Data Ascii: 21e08IUONSFHBOAIEcVIZdRRT":1,"HWAFNRYLDRGbVXdbKOHYYfPHe":1,"HWAFYBfaQCVRfJUXIDUDCRe":1,"TfNZeFOBUNCKAUJIXO":1,"OTfdASFYTSUaRQMeBYaebCNZeOBO":1,"HVUBNNeRBNePeEBVUWVYREHGC":1,"HMbALSIZYZXPEePWIIGDC":1,"HWAFYTfNOSTUZXDCJFfaNbfFTUZSTHT":1,"TeCOeJIUWUHcKKS


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            70192.168.2.45204652.222.236.424435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:07 UTC330OUTPOST /report HTTP/1.1
                                                                                                                            Host: nellie.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 423
                                                                                                                            Content-Type: application/reports+json
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            2024-09-28 02:38:07 UTC423OUTData Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 32 35 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 2e 32 34 35 2e 36 30 2e 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 76 61 6c 69 64 2e 69 6e 63 6f 6d 70 6c 65 74 65 5f 63 68 75 6e 6b 65 64 5f 65 6e 63 6f 64 69 6e 67 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d
                                                                                                                            Data Ascii: [{"age":0,"body":{"elapsed_time":2252,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"18.245.60.7","status_code":200,"type":"http.response.invalid.incomplete_chunked_encoding"},"type":"network-
                                                                                                                            2024-09-28 02:38:08 UTC401INHTTP/1.1 204 No Content
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:08 GMT
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 89e34e3fd814f1393ef77867b93dd12e.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA56-P4
                                                                                                                            X-Amz-Cf-Id: FTjAAdm8rJT7uO16gTkV9Lt8l8-l-vuqcQVAWqyvu6wjmnA6WdFZTA==


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            71192.168.2.452049188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:08 UTC402OUTGET /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:08 UTC605INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:08 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k2YPaUCKEHEQJe0PbvnIvQwNpWeEmtlIrgg8DKUdIihifDibDzEXT%2B3W1DSUkoKkWJHvLHyrq7dL4szeEI2CWXUCdiSAbxx8tWzjtBN%2FdWZzqkzQYJxzzLDPXht%2B9CVycw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b06d8c341a1-EWR
                                                                                                                            2024-09-28 02:38:08 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            72192.168.2.452051188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:08 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:09 UTC735INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:09 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lj%2BHHbyWPtqKJR%2Fie1zIvaluxsM29zWAR3kmaDcI8fq4pXHmt3cSw6qK35QZQPmWqZU96nW8f8dVcImYumDbUyOzkoRw9JtA3U0R%2F9%2BUg0XT3lglLnQvC758p5HEySRvug%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b08dc3a7d05-EWR
                                                                                                                            2024-09-28 02:38:09 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            73192.168.2.45205018.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:08 UTC1075OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3UQPQTAZa%2BlQoKgztFWqO%2FFQT5DTiYE44RtW33rI59xMHRsF0yoZQZNecrkZKefbHEGmnbtSgK5jnLT0HgMJUvh3aSHgDqe00lC4Et%2FUrHABs8wD0K5zcGDRuBqK6997%2FjuhlpqW%2B5WJdZIphhghSgrZ%2BFHbJU4yA4%3D
                                                                                                                            2024-09-28 02:38:09 UTC2802INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:09 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"max_age":604800,"report_to":"default"}
                                                                                                                            report-to: {"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:08 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:16 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT8%2BtDv5f2isrDSqVp%2BtL%2Bpbl9ug7b%2BO3oUOcOfJido%2BBbFSJuj8bWW%2BdRrAtV09KyX3TNoOc%2B%2FTCsdtswkIZIuUtWMN4LV2G5mlceQInj1EIywQxflCWgMiAyFpLWIjA%2B6lC%2BuHSYN7%2FHgulCPjLi408F2%2F6w4iPGg%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:09 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:09 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            content-security-policy-report-only: base-uri 'none'; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=146&pid=b5fd12882ee000a7&e=UmFuZG9tSVYkc2RlIyh9YYYdGuViorKPCmcVzmk8gei66bIdlWQUdXCJYfxMxCWc; script-src 'self' 'nonce-kLp9R7BWI6qhiKg' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' 'sha256-iry7oJKoKJ+9HSjmU3E1TlRlpSesJWZ1vapuUz2MP38='
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 40b08d02195372b460c02aaae6d50d56.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: GUIzGOTcZPKSFda3enm37txCLCt40OpMFUGBqW5_9njfvqYYNiK4FQ==
                                                                                                                            2024-09-28 02:38:09 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 6b 4c 70 39 52 37 42 57 49 36 71 68 69 4b 67 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="kLp9R7BWI6qhiKg"
                                                                                                                            2024-09-28 02:38:09 UTC16384INData Raw: 34 35 65 33 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 45e3<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:09 UTC1515INData Raw: 6e 67 65 5f 62 6f 74 68 5f 79 65 61 72 73 22 3a 22 7b 6d 6f 6e 74 68 7d 2f 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2f 7b 66 75 6c 6c 5f 79 65 61 72 7d 20 2d 20 7b 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 2f 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 2f 7b 66 75 6c 6c 5f 79 65 61 72 5f 75 6e 74 69 6c 7d 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 62 65 74 77 65 65 6e 22 3a 22 62 65 74 77 65 65 6e 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d 65 7d 20 61 6e 64 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 20 7b 64 61 79 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 22 2c 22 6c 6f 6e 67 5f 64 61 74 65 5f 72 61 6e 67 65 5f 62 6f 74 68 5f 79 65 61 72 73 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f
                                                                                                                            Data Ascii: nge_both_years":"{month}/{day_of_month}/{full_year} - {month_until}/{day_of_month_until}/{full_year_until}","day_month_between":"between {month_name} {day_name} and {month_name_until} {day_name_until}","long_date_range_both_years":"{month_name} {day_of_mo
                                                                                                                            2024-09-28 02:38:09 UTC16384INData Raw: 62 66 66 61 0d 0a 22 6e 75 6d 65 72 69 63 5f 64 61 74 65 22 3a 22 7b 6d 6f 6e 74 68 7d 2f 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2f 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 74 65 5f 77 69 74 68 5f 77 65 65 6b 64 61 79 5f 66 72 6f 6d 22 3a 22 7b 77 65 65 6b 64 61 79 5f 66 72 6f 6d 7d 2c 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 66 72 6f 6d 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 6f 74 68 65 72 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 74 68 65 72 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 73 68 6f 72 74 5f 64 61 74 65 5f 77 69 74 68 6f 75 74 5f 79 65 61 72 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d
                                                                                                                            Data Ascii: bffa"numeric_date":"{month}/{day_of_month}/{full_year}","date_with_weekday_from":"{weekday_from}, {month_name_from} {day_of_month}, {full_year}","day_month_year_other":"{month_name} {day_other}, {full_year}","short_date_without_year":"{short_month_name}
                                                                                                                            2024-09-28 02:38:09 UTC16384INData Raw: 5f 6c 61 6e 67 75 61 67 65 5f 63 6f 75 6e 74 72 79 5f 66 6c 61 67 3a 20 27 75 73 27 2c 0a 70 61 67 65 76 69 65 77 5f 69 64 3a 20 27 62 35 66 64 31 32 38 38 32 65 65 30 30 30 61 37 27 2c 0a 61 69 64 3a 20 27 33 30 34 31 34 32 27 2c 0a 62 5f 63 73 72 66 5f 74 6f 6b 65 6e 3a 20 27 55 4b 54 33 5a 67 41 41 41 41 41 3d 65 31 68 5a 51 71 62 66 4d 4f 55 78 62 42 59 48 55 4b 30 39 69 56 5a 4f 64 50 6b 47 39 53 35 33 39 48 48 49 56 31 52 79 70 69 56 79 57 33 67 5f 63 47 37 34 33 76 6f 52 67 2d 7a 33 62 4b 46 77 63 62 39 54 7a 57 4f 4a 30 4e 73 38 6f 50 39 53 37 32 75 31 47 57 6a 36 48 70 49 59 2d 50 68 2d 59 47 4e 68 73 67 47 31 50 79 4f 37 64 54 58 4a 62 39 62 68 39 63 55 70 4b 38 32 76 4f 35 54 57 49 36 4a 69 31 71 32 4a 63 5f 76 39 69 39 43 73 46 65 63 59 33 32
                                                                                                                            Data Ascii: _language_country_flag: 'us',pageview_id: 'b5fd12882ee000a7',aid: '304142',b_csrf_token: 'UKT3ZgAAAAA=e1hZQqbfMOUxbBYHUK09iVZOdPkG9S539HHIV1RypiVyW3g_cG743voRg-z3bKFwcb9TzWOJ0Ns8oP9S72u1GWj6HpIY-Ph-YGNhsgG1PyO7dTXJb9bh9cUpK82vO5TWI6Ji1q2Jc_v9i9CsFecY32
                                                                                                                            2024-09-28 02:38:09 UTC16384INData Raw: 4e 48 4e 45 52 47 65 66 4d 50 53 58 57 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f 64 61 6c 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 51 52 66 44 52 49 56 54 62 57 64 4b 50 4d 50 53 58 57 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f 64 61 6c 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 51 52 66 44 52 49 56 62 52 41 4c 57 49 51 5a 44 53 42 66 46 64 48 56 54 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f 64 61 6c 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 51 52 66 44 52 41 55 59 42 46 61 41 54 4c 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 72 65 6d 69 6e 64 65 72 4d 6f 64 61 6c
                                                                                                                            Data Ascii: NHNERGefMPSXWe',gnsInsDisc_modalView_index: 'TDXRPVRBKKQUYBFLQRfDRIVTbWdKPMPSXWe',gnsInsDisc_modalCtaClick_index: 'TDXRPVRBKKQUYBFLQRfDRIVbRALWIQZDSBfFdHVT',gnsInsDisc_modalDismiss_index: 'TDXRPVRBKKQUYBFLQRfDRAUYBFaATLDEZRae',gnsInsDisc_reminderModal
                                                                                                                            2024-09-28 02:38:09 UTC16384INData Raw: 0d 0a 63 31 66 30 0d 0a 4f 63 4e 53 5a 42 65 4c 50 5a 61 54 61 54 61 45 54 22 3a 31 2c 22 48 4d 62 4b 41 63 51 4a 46 59 44 54 65 43 46 45 44 59 63 61 4d 45 41 4b 65 22 3a 32 2c 22 48 57 41 46 59 44 45 5a 52 64 4a 62 45 4e 65 44 42 46 64 4d 4f 50 58 59 4a 55 43 65 61 65 22 3a 31 2c 22 42 43 64 53 63 41 63 46 46 52 65 4e 42 4c 51 4a 65 41 63 45 55 57 48 4a 48 4a 49 58 4f 22 3a 31 2c 22 63 43 48 4f 62 4b 64 63 54 55 5a 53 54 46 5a 65 4d 4e 45 63 61 4f 56 4b 4e 64 63 49 46 66 56 55 63 43 63 43 63 43 43 22 3a 31 2c 22 59 52 64 42 4c 50 63 56 57 45 59 63 5a 62 4d 43 44 59 54 55 57 5a 66 65 63 51 56 4f 22 3a 31 2c 22 64 44 66 50 44 42 45 59 64 4f 65 52 53 61 51 66 61 48 4d 56 48 53 47 46 4f 22 3a 31 2c 22 66 58 53 4d 4c 66 64 4a 48 42 4f 58 54 22 3a 31 2c 22 48
                                                                                                                            Data Ascii: c1f0OcNSZBeLPZaTaTaET":1,"HMbKAcQJFYDTeCFEDYcaMEAKe":2,"HWAFYDEZRdJbENeDBFdMOPXYJUCeae":1,"BCdScAcFFReNBLQJeAcEUWHJHJIXO":1,"cCHObKdcTUZSTFZeMNEcaOVKNdcIFfVUcCcCcCC":1,"YRdBLPcVWEYcZbMCDYTUWZfecQVO":1,"dDfPDBEYdOeRSaQfaHMVHSGFO":1,"fXSMLfdJHBOXT":1,"H
                                                                                                                            2024-09-28 02:38:09 UTC16384INData Raw: 31 2c 22 47 44 49 63 64 53 5a 63 48 43 53 43 47 56 66 4f 45 4a 45 55 58 50 4e 4d 57 65 22 3a 31 2c 22 4e 56 4e 5a 57 55 41 54 59 52 52 53 51 59 42 4a 4f 55 41 61 44 65 4c 42 55 4a 63 62 54 45 41 54 5a 64 53 47 57 43 22 3a 31 2c 22 59 54 42 59 4e 61 58 54 61 53 4a 4b 62 4e 43 64 44 5a 54 61 50 66 4c 52 42 64 53 4d 48 45 54 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 4e 62 62 46 4a 62 64 61 48 4f 4f 5a 54 5a 43 44 57 4f 4f 43 22 3a 31 2c 22 56 56 4f 63 54 52 59 5a 4c 57 5a 57 4f 52 54 65 43 49 53 55 5a 45 59 59 45 4f 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 46 58 42 52 46 55 4c 4b 4b 41 55 63 4f 22 3a 31 2c 22 42 43 56 4c 42 51 46 65 61 53 47 4d 57 5a 4e 41 4f 4f 4d 4e 58 43 22 3a 31 2c 22 4f 4d 61 58 61 65 50 4c 53 49 52 53 48 54 22 3a 31 2c 22 48 57 41 46 4e 65
                                                                                                                            Data Ascii: 1,"GDIcdSZcHCSCGVfOEJEUXPNMWe":1,"NVNZWUATYRRSQYBJOUAaDeLBUJcbTEATZdSGWC":1,"YTBYNaXTaSJKbNCdDZTaPfLRBdSMHET":1,"aWQOcYTBNbbFJbdaHOOZTZCDWOOC":1,"VVOcTRYZLWZWORTeCISUZEYYEO":1,"TfNZeFcCFXBRFULKKAUcO":1,"BCVLBQFeaSGMWZNAOOMNXC":1,"OMaXaePLSIRSHT":1,"HWAFNe
                                                                                                                            2024-09-28 02:38:09 UTC16384INData Raw: 22 63 43 47 61 59 53 64 45 54 66 62 46 62 63 5a 4e 54 55 50 51 46 41 65 46 64 64 4b 4e 4b 4e 4b 57 65 22 3a 31 2c 22 66 54 48 59 50 4d 50 53 58 48 53 64 4e 42 4a 49 52 45 56 43 22 3a 32 2c 22 61 58 54 66 48 41 45 44 42 4f 53 4d 65 45 66 45 49 54 4e 50 66 61 53 64 42 55 4c 51 45 57 48 51 48 44 44 48 59 59 66 50 48 65 22 3a 31 2c 22 42 4b 65 57 49 45 63 62 51 47 57 46 42 61 61 65 48 47 5a 4f 54 50 63 65 59 44 65 48 5a 54 53 4a 56 56 50 65 50 5a 57 4e 57 65 22 3a 31 2c 22 48 57 41 46 59 54 66 41 4e 42 41 41 4a 53 57 51 49 58 65 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 50 5a 5a 57 4c 4b 56 48 4e 45 51 66 4b 43 55 4b 58 65 22 3a 31 2c 22 4e 41 52 45 46 42 43 43 55 46 46 57 65 41 52 66 44 52 61 52 54 43 4b 57 61 65 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55
                                                                                                                            Data Ascii: "cCGaYSdETfbFbcZNTUPQFAeFddKNKNKWe":1,"fTHYPMPSXHSdNBJIREVC":2,"aXTfHAEDBOSMeEfEITNPfaSdBULQEWHQHDDHYYfPHe":1,"BKeWIEcbQGWFBaaeHGZOTPceYDeHZTSJVVPePZWNWe":1,"HWAFYTfANBAAJSWQIXe":1,"YdXfdKNKNKPZZWLKVHNEQfKCUKXe":1,"NAREFBCCUFFWeARfDRaRTCKWae":1,"NAFQCJWZU
                                                                                                                            2024-09-28 02:38:09 UTC506INData Raw: 57 44 62 4b 49 64 44 5a 42 48 52 58 4d 4a 47 45 54 22 3a 31 2c 22 63 43 63 43 63 43 57 50 4a 65 56 59 53 4c 4c 65 4c 48 59 4f 22 3a 31 2c 22 4f 44 52 45 42 64 5a 57 54 51 43 47 56 54 61 57 65 56 48 4a 65 66 4f 42 4d 58 54 22 3a 31 2c 22 48 57 41 46 59 42 66 50 44 42 45 44 48 49 57 44 62 4b 49 64 44 5a 42 64 50 55 57 45 62 59 62 4f 44 64 65 62 59 48 55 44 50 42 46 4f 22 3a 31 2c 22 48 57 41 46 4e 65 4f 59 53 47 44 4d 53 43 61 49 66 58 66 51 59 54 22 3a 31 2c 22 61 57 48 4d 56 4b 62 54 42 50 41 41 64 4b 4c 52 45 63 61 4e 41 4f 5a 45 56 4a 4f 66 48 4a 63 47 59 54 45 54 22 3a 31 2c 22 61 61 4d 4c 46 58 4c 59 53 66 44 63 48 61 5a 46 59 57 45 49 46 4e 56 42 55 4b 63 4b 65 22 3a 31 2c 22 66 45 4f 4d 4e 56 4c 57 50 47 47 4d 52 62 42 59 57 4b 4f 4c 42 42 56 59 59
                                                                                                                            Data Ascii: WDbKIdDZBHRXMJGET":1,"cCcCcCWPJeVYSLLeLHYO":1,"ODREBdZWTQCGVTaWeVHJefOBMXT":1,"HWAFYBfPDBEDHIWDbKIdDZBdPUWEbYbODdebYHUDPBFO":1,"HWAFNeOYSGDMSCaIfXfQYT":1,"aWHMVKbTBPAAdKLREcaNAOZEVJOfHJcGYTET":1,"aaMLFXLYSfDcHaZFYWEIFNVBUKcKe":1,"fEOMNVLWPGGMRbBYWKOLBBVYY


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            74192.168.2.452055188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:09 UTC782OUTPOST /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 10
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:09 UTC10OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c
                                                                                                                            Data Ascii: code=wakdl
                                                                                                                            2024-09-28 02:38:09 UTC654INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:09 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6gaWwOMCplGy%2BLt54CkDUSe%2B9rKCtJS9cKmojRlIM7QEFpKi7U5dAMcqQaPfWYflXlxNRIaPAsV4QXKfCdVsiIuaSVORASNGyPrMICUnue26sbmBXWcwutT66nfBF9L4Aw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b0d2e01420a-EWR
                                                                                                                            2024-09-28 02:38:09 UTC22INData Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a
                                                                                                                            Data Ascii: 10{"status":false}
                                                                                                                            2024-09-28 02:38:09 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            75192.168.2.452054188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:09 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:09 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:38:09 UTC660INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:09 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FUNsAqBHV9wOSFt2u2BHkPUz5SPMtOTfgHZghn%2FYtPhX18%2FpmftkAV%2FhP%2F7kyG12k8RMMGjHQApWck4i8jXYPunIMD6p4rwQ7C85ou1ec%2FXR6mmDv9RZjz0HVBHF24pOKg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b0d59dc6a55-EWR
                                                                                                                            2024-09-28 02:38:09 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            76192.168.2.45205718.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:09 UTC1071OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5tLlwCxUN8AKuxt7XdvfKtF9rlecg6yBm7ga93hhKw87dIsvMIseqtt06e9JyO6dypO0zEkeUur%2B4XWAaU7v70ngvWKYFrM5TVAh0I8RKK7iTE%2FhWQ3lO%2Bw6p1gvmJPt8uK5Tnsyp%2FHLjW1l4qANcRfvCNJpwBUApI%3D
                                                                                                                            2024-09-28 02:38:10 UTC2349INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:10 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800,"group":"default"}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:10 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:20 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBJpZXE9O1fVFCYjjeiPYJ7qnuDEEOQAcLaOt1TAbAYlOs3Y9v0wa18nv0b44ZHuu0LHJ3LWKcHFRYSI9chno6qLqPLVvB4%2Fp%2BZhcrRBijo0WgN%2FCS2g9Y3e06PAnXfhfzwcfi1lzI%2FIrs6LcUnl0pNL9GvZCH4%2FD3k%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:10 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:10 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 dc57cbf9d7336ae929f762b5ada2ed98.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: bwuUK_kMnPwejNzKRYpGgcQQOgzIHbPwEuBk-j4EA_zJ17eZAJ80mQ==
                                                                                                                            2024-09-28 02:38:10 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 52 51 71 6a 64 39 48 57 57 34 77 76 4d 32 65 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="RQqjd9HWW4wvM2e"
                                                                                                                            2024-09-28 02:38:10 UTC8200INData Raw: 32 30 30 30 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 2000<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:10 UTC16384INData Raw: 33 66 66 61 0d 0a 3d 22 63 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 61 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 43 61 74 61 6c c3 a0 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 69 74 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 49 74 61 6c 69 61 6e 6f 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 70 74 2d 70 74 22 20 68 72 65 66 3d 22 68
                                                                                                                            Data Ascii: 3ffa="ca" href="https://www.booking.com/index.ca.html" title="Catal"/><link rel="alternate" type="text/html" hreflang="it" href="https://www.booking.com/index.it.html" title="Italiano"/><link rel="alternate" type="text/html" hreflang="pt-pt" href="h
                                                                                                                            2024-09-28 02:38:10 UTC1523INData Raw: 0d 0a 35 65 61 0d 0a 5f 61 72 74 69 63 6c 65 5f 6c 63 22 3a 22 74 68 65 20 41 70 72 69 6c 22 7d 2c 22 35 22 3a 7b 22 69 6e 5f 6d 6f 6e 74 68 5f 6c 63 22 3a 22 69 6e 20 4d 61 79 22 2c 22 67 65 6e 69 74 69 76 65 5f 6c 63 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 6c 63 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 64 65 66 5f 61 72 74 69 63 6c 65 5f 75 63 22 3a 22 54 68 65 20 4d 61 79 22 2c 22 6d 6f 6e 74 68 5f 32 22 3a 22 4d 61 79 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 5f 75 63 22 3a 22 4d 61 79 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 64 65 66 5f 61 72 74 69 63 6c 65 5f 6c 63 22 3a 22 74 68 65 20 4d 61 79 22 2c 22 6e 61 6d 65 5f 74 6f 22 3a 22 4d 61 79 22 2c 22 6e 61
                                                                                                                            Data Ascii: 5ea_article_lc":"the April"},"5":{"in_month_lc":"in May","genitive_lc":"May","name_lc":"May","name_def_article_uc":"The May","month_2":"May","short_name_uc":"May","short_name_only":"May","name":"May","name_def_article_lc":"the May","name_to":"May","na
                                                                                                                            2024-09-28 02:38:10 UTC16384INData Raw: 64 32 61 38 0d 0a 68 6f 72 74 5f 6e 61 6d 65 5f 75 63 22 3a 22 41 75 67 75 73 74 22 2c 22 6e 61 6d 65 22 3a 22 41 75 67 75 73 74 22 2c 22 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 41 75 67 75 73 74 22 2c 22 6e 61 6d 65 5f 77 69 74 68 5f 79 65 61 72 5f 6f 6e 6c 79 22 3a 22 41 75 67 75 73 74 22 2c 22 6e 61 6d 65 5f 64 65 66 5f 61 72 74 69 63 6c 65 5f 6c 63 22 3a 22 74 68 65 20 41 75 67 75 73 74 22 2c 22 6e 61 6d 65 5f 74 6f 22 3a 22 41 75 67 75 73 74 22 2c 22 67 65 6e 69 74 69 76 65 5f 75 63 22 3a 22 41 75 67 75 73 74 22 2c 22 6e 61 6d 65 5f 66 72 6f 6d 22 3a 22 41 75 67 75 73 74 22 2c 22 6e 61 6d 65 5f 69 6e 22 3a 22 41 75 67 75 73 74 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 41 75 67 22 2c 22 6e 61 6d 65 5f 75 63 22 3a 22 41 75 67 75 73 74 22 2c 22 6e 61
                                                                                                                            Data Ascii: d2a8hort_name_uc":"August","name":"August","name_only":"August","name_with_year_only":"August","name_def_article_lc":"the August","name_to":"August","genitive_uc":"August","name_from":"August","name_in":"August","short_name":"Aug","name_uc":"August","na
                                                                                                                            2024-09-28 02:38:10 UTC16384INData Raw: 32 4e 32 33 42 73 41 43 41 64 49 43 4a 44 45 33 59 6a 63 33 59 6a 4e 6d 4c 57 4d 77 4f 44 55 74 4e 47 56 6c 5a 69 30 34 4d 44 49 33 4c 57 4e 6b 59 6d 59 34 4e 6a 4d 79 4f 47 52 6a 4e 64 67 43 42 65 41 43 41 51 26 73 69 64 3d 39 37 32 64 34 66 37 31 63 32 32 39 66 64 37 32 39 38 38 35 66 33 31 65 36 31 38 32 37 38 61 63 26 73 62 5f 74 72 61 76 65 6c 5f 70 75 72 70 6f 73 65 3d 6c 65 69 73 75 72 65 22 2c 0a 66 65 5f 72 65 73 65 72 76 61 74 69 6f 6e 73 5f 75 72 6c 5f 74 72 61 76 65 6c 5f 70 75 72 70 6f 73 65 5f 62 75 73 69 6e 65 73 73 3a 20 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 72 65 73 65 72 76 61 74 69 6f 6e 73 2e 68 74 6d 6c 3f 6c 61 62 65 6c 3d 67 65 6e 31 37 33 6e 72 2d 31 46 43 41 45
                                                                                                                            Data Ascii: 2N23BsACAdICJDE3Yjc3YjNmLWMwODUtNGVlZi04MDI3LWNkYmY4NjMyOGRjNdgCBeACAQ&sid=972d4f71c229fd729885f31e618278ac&sb_travel_purpose=leisure",fe_reservations_url_travel_purpose_business: "https://secure.booking.com/company/reservations.html?label=gen173nr-1FCAE
                                                                                                                            2024-09-28 02:38:10 UTC16384INData Raw: 53 4e 44 65 4d 53 5a 45 48 65 22 3a 31 2c 22 48 57 41 46 4e 4c 64 55 65 4d 58 43 22 3a 30 2c 22 48 57 41 46 4e 52 4e 46 4d 57 58 65 22 3a 30 2c 22 49 5a 56 42 42 56 59 55 4f 48 53 46 56 4a 54 64 4d 48 46 42 64 63 45 55 43 22 3a 30 2c 22 59 64 58 66 43 44 57 4f 4f 57 4e 54 51 43 4d 5a 46 4c 4d 4a 66 4c 54 22 3a 30 2c 22 63 43 48 4f 62 4b 64 63 66 46 64 48 4d 4f 49 61 49 64 54 55 53 58 56 56 51 61 48 59 59 66 50 48 65 22 3a 30 2c 22 4f 41 5a 4f 58 48 65 43 58 4c 45 45 43 46 57 55 46 4e 53 65 62 52 61 54 4b 45 54 22 3a 30 2c 22 42 4b 41 54 59 57 50 48 44 44 48 66 4c 65 62 62 4d 45 4b 4b 41 63 51 4a 46 59 4a 4f 22 3a 30 2c 22 63 43 48 4f 47 41 51 5a 47 46 53 62 48 46 42 64 64 51 57 55 4d 4b 54 61 53 64 46 61 4c 62 46 46 52 55 52 55 52 48 65 22 3a 31 2c 22 48
                                                                                                                            Data Ascii: SNDeMSZEHe":1,"HWAFNLdUeMXC":0,"HWAFNRNFMWXe":0,"IZVBBVYUOHSFVJTdMHFBdcEUC":0,"YdXfCDWOOWNTQCMZFLMJfLT":0,"cCHObKdcfFdHMOIaIdTUSXVVQaHYYfPHe":0,"OAZOXHeCXLEECFWUFNSebRaTKET":0,"BKATYWPHDDHfLebbMEKKAcQJFYJO":0,"cCHOGAQZGFSbHFBddQWUMKTaSdFaLbFFRURURHe":1,"H
                                                                                                                            2024-09-28 02:38:10 UTC4784INData Raw: 52 53 49 4e 66 61 62 53 57 55 48 62 53 47 65 46 54 59 63 65 4d 54 58 45 55 44 61 65 22 3a 31 2c 22 5a 63 53 49 63 63 65 4e 53 65 4f 4e 57 48 4a 4e 62 50 4d 59 52 65 64 66 50 49 4f 22 3a 31 2c 22 4e 41 52 45 46 63 43 63 43 63 43 46 63 46 46 57 45 43 48 54 65 55 56 49 5a 64 52 52 54 22 3a 31 2c 22 4e 4e 53 43 5a 57 58 46 47 64 56 61 63 44 64 4d 55 4e 50 59 53 62 53 43 5a 43 22 3a 31 2c 22 48 49 4e 5a 4a 4c 65 55 58 53 61 5a 62 58 4b 42 65 62 66 44 55 46 59 51 46 58 53 42 59 51 4f 57 48 54 22 3a 31 2c 22 61 64 55 41 41 49 46 64 64 57 54 59 55 41 4c 45 65 43 49 4f 62 54 64 52 54 4b 65 65 48 52 62 64 46 49 4b 65 22 3a 31 2c 22 54 66 4e 5a 65 46 4f 42 4e 51 56 45 65 53 4e 64 52 54 22 3a 31 2c 22 65 52 51 57 63 49 58 64 43 63 61 49 58 4d 54 42 45 4a 63 43 59 65
                                                                                                                            Data Ascii: RSINfabSWUHbSGeFTYceMTXEUDae":1,"ZcSIcceNSeONWHJNbPMYRedfPIO":1,"NAREFcCcCcCFcFFWECHTeUVIZdRRT":1,"NNSCZWXFGdVacDdMUNPYSbSCZC":1,"HINZJLeUXSaZbXKBebfDUFYQFXSBYQOWHT":1,"adUAAIFddWTYUALEeCIObTdRTKeeHRbdFIKe":1,"TfNZeFOBNQVEeSNdRT":1,"eRQWcIXdCcaIXMTBEJcCYe
                                                                                                                            2024-09-28 02:38:10 UTC8950INData Raw: 32 32 65 65 0d 0a 5a 54 4c 47 65 50 54 57 48 54 22 3a 31 2c 22 63 43 48 4f 62 64 52 64 4a 57 4e 42 4a 5a 47 57 4b 5a 45 54 54 65 4d 58 43 45 46 52 55 52 55 52 48 65 22 3a 31 2c 22 61 57 51 4f 63 64 4c 65 4c 46 59 4d 5a 56 52 53 65 62 51 41 55 44 4e 4e 50 4c 62 62 48 56 4a 53 42 65 58 4a 48 49 58 54 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 59 52 62 4f 57 66 42 51 4d 63 53 62 46 4a 62 43 44 57 4f 4f 43 22 3a 31 2c 22 4f 4a 56 5a 41 4f 51 59 49 4e 54 49 50 4f 4b 48 58 64 4a 4f 4f 49 42 42 4f 22 3a 31 2c 22 61 58 54 66 48 41 45 44 42 4f 53 4d 65 45 66 45 49 54 4e 50 66 61 53 64 42 55 4c 51 45 57 48 51 48 44 44 48 59 59 66 50 48 65 22 3a 31 2c 22 49 5a 56 53 46 56 57 65 42 4a 62 43 4d 41 4c 43 22 3a 31 2c 22 54 57 50 41 42 4f 53 45 49 44 53 65 57 5a 4d 66 55 64
                                                                                                                            Data Ascii: 22eeZTLGePTWHT":1,"cCHObdRdJWNBJZGWKZETTeMXCEFRURURHe":1,"aWQOcdLeLFYMZVRSebQAUDNNPLbbHVJSBeXJHIXT":1,"aWQOcYTBYRbOWfBQMcSbFJbCDWOOC":1,"OJVZAOQYINTIPOKHXdJOOIBBO":1,"aXTfHAEDBOSMeEfEITNPfaSdBULQEWHQHDDHYYfPHe":1,"IZVSFVWeBJbCMALC":1,"TWPABOSEIDSeWZMfUd
                                                                                                                            2024-09-28 02:38:10 UTC16384INData Raw: 33 66 66 61 0d 0a 43 55 53 44 50 41 41 42 47 58 49 5a 4c 54 4b 65 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 62 64 62 44 4e 44 51 56 4f 22 3a 31 2c 22 65 44 53 64 55 62 4b 48 51 61 64 54 47 4a 4e 42 64 49 59 42 5a 4a 56 63 54 43 22 3a 31 2c 22 42 50 48 4f 61 42 56 49 50 66 4c 59 4f 4c 62 48 44 45 4f 4e 54 44 56 46 62 57 4e 5a 4c 46 63 4c 42 47 56 50 52 65 22 3a 31 2c 22 48 57 41 46 59 62 49 65 49 50 4e 51 42 44 56 52 47 43 4d 52 58 5a 58 65 22 3a 33 2c 22 48 57 41 46 59 54 62 47 66 65 56 54 4a 41 4c 57 51 49 56 55 62 51 57 65 22 3a 31 2c 22 66 54 4a 58 4e 43 53 4c 46 4a 5a 5a 56 43 42 4f 50 51 4f 52 48 65 22 3a 31 2c 22 41 5a 4e 64 41 59 62 65 44 55 50 44 49 55 4e 5a 63 4e 52 62 44 62 65 51 4d 49 54 66 64 41 48 4c 54 22 3a 31 2c 22 62 51 4b 50 57 4c 56 52 62
                                                                                                                            Data Ascii: 3ffaCUSDPAABGXIZLTKe":1,"aWQOcYTBbdbDNDQVO":1,"eDSdUbKHQadTGJNBdIYBZJVcTC":1,"BPHOaBVIPfLYOLbHDEONTDVFbWNZLFcLBGVPRe":1,"HWAFYbIeIPNQBDVRGCMRXZXe":3,"HWAFYTbGfeVTJALWQIVUbQWe":1,"fTJXNCSLFJZZVCBOPQORHe":1,"AZNdAYbeDUPDIUNZcNRbDbeQMITfdAHLT":1,"bQKPWLVRb


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            77192.168.2.452058188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:10 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:10 UTC731INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:10 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EmSzHA807CbgLZniYBk2ZrftP6r66ZKPEkLzB12dV4OovdTzWAArSaPokrGuiUKGgqi1S0lTR7oEpWPq0UlQMz9%2BVinjQbU2NnKYZ7%2BQxPO12kfxobs5KAVVtmo2c04IfA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b112ef941e1-EWR
                                                                                                                            2024-09-28 02:38:10 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            78192.168.2.452061188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:10 UTC412OUTGET /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:10 UTC609INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:10 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wl69LCvZJziQ7CJGd%2FDPcx35S7eJheqMUTGN1AfEEqcLPea46%2B%2BQ7zCzq%2FB6Uffnl4iEIc9TIs9JIpsKKBOdAuPdbscDupeKX2W9YuKZFQFwqMyxv%2FpgCImdFH3WVlzRYA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b14ce434282-EWR
                                                                                                                            2024-09-28 02:38:10 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            79192.168.2.452062188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:10 UTC409OUTGET /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:11 UTC605INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:11 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5ZFqeTZw3zRIVPZawSA2txlyt3yNjMDYsR0RP%2BoJ4OpY2rWh2ozMxHLsoHwRUsseH8OcMNDYvUjEIftGxT49h02ultMF1CQclCAQLxHFop115B%2BsS%2BK2Kv1tlYKslerRw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b170d5c41ff-EWR
                                                                                                                            2024-09-28 02:38:11 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            80192.168.2.45206318.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:11 UTC1085OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT8%2BtDv5f2isrDSqVp%2BtL%2Bpbl9ug7b%2BO3oUOcOfJido%2BBbFSJuj8bWW%2BdRrAtV09KyX3TNoOc%2B%2FTCsdtswkIZIuUtWMN4LV2G5mlceQInj1EIywQxflCWgMiAyFpLWIjA%2B6lC%2BuHSYN7%2FHgulCPjLi408F2%2F6w4iPGg%3D
                                                                                                                            2024-09-28 02:38:11 UTC2345INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:11 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default","max_age":604800}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:11 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:22 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzkd2Gc3KUyC4kPxWyFOAE0AMFYLuA6tzyikIWqgywrflvlN6FNq0XKEC7WYyFd0%2BZj7Y5PVIAUCPELr10Ym1udT4d2YMJbQ9MMPhJvw1VIWqnglmBChXp%2FCNzAZDqPp6IsDJny3IQIIkqOUHjKzAb3yq%2BdgyrJY92g%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:11 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:11 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 f7bf54ada21ef4f1f7e0646051894136.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: l8ASyGD-MYZfXQ1OVO1WSHxvq98eN9nNQpTCapECdVn3APJhDrD2Qw==
                                                                                                                            2024-09-28 02:38:11 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 34 68 75 30 4a 4e 63 46 7a 4a 6c 72 76 6d 44 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="4hu0JNcFzJlrvmD"
                                                                                                                            2024-09-28 02:38:12 UTC16384INData Raw: 61 37 39 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: a79a<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:12 UTC16384INData Raw: 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 6e 75 6d 65 72 69 63 5f 64 61 74 65 5f 72 61 6e 67 65 22 3a 22 7b 6d 6f 6e 74 68 7d 2f 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 20 2d 20 7b 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 2f 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 22 2c 22 69 6e 5f 6d 6f 6e 74 68 5f 77 69 74 68 5f 79 65 61 72 22 3a 22 69 6e 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 69 6e 7d 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 75 6e 74 69 6c 22 3a 22 75 6e 74 69 6c 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d 65 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 79 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 74 69 6d 65 5f 62 65 74 77 65 65 6e 22 3a 22 7b
                                                                                                                            Data Ascii: full_year}","numeric_date_range":"{month}/{day_of_month} - {month_until}/{day_of_month_until}","in_month_with_year":"in {month_name_in} {full_year}","day_month_year_until":"until {month_name} {day_name}, {full_year}","day_short_month_year_time_between":"{
                                                                                                                            2024-09-28 02:38:12 UTC10146INData Raw: 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 26 23 34 37 3b 27 2c 0a 62 5f 74 68 69 73
                                                                                                                            Data Ascii: 73a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.booking.com&#47;',b_this
                                                                                                                            2024-09-28 02:38:12 UTC16384INData Raw: 36 38 35 30 0d 0a 73 73 22 2c 0a 66 65 5f 72 65 73 65 72 76 61 74 69 6f 6e 73 5f 75 72 6c 5f 74 72 61 76 65 6c 5f 70 75 72 70 6f 73 65 5f 6c 65 69 73 75 72 65 3a 20 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 6d 79 72 65 73 65 72 76 61 74 69 6f 6e 73 2e 68 74 6d 6c 3f 6c 61 62 65 6c 3d 67 65 6e 31 37 33 6e 72 2d 31 46 43 41 45 6f 67 67 49 34 36 41 64 49 4d 31 67 45 61 4b 63 43 69 41 45 42 6d 41 45 78 75 41 45 58 79 41 45 4d 32 41 45 42 36 41 45 42 2d 41 45 43 69 41 49 42 71 41 49 44 75 41 4b 54 32 4e 32 33 42 73 41 43 41 64 49 43 4a 44 64 6c 4d 54 55 33 5a 54 42 69 4c 54 55 31 4f 54 67 74 4e 44 6b 34 5a 69 30 35 5a 6d 49 35 4c 54 51 77 4d 54 42 6d 4d 44 56 6d 59 57 49 7a 4d 39 67 43 42 65 41 43 41 51 26 73 69 64 3d
                                                                                                                            Data Ascii: 6850ss",fe_reservations_url_travel_purpose_leisure: "https://secure.booking.com/myreservations.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AECiAIBqAIDuAKT2N23BsACAdICJDdlMTU3ZTBiLTU1OTgtNDk4Zi05ZmI5LTQwMTBmMDVmYWIzM9gCBeACAQ&sid=
                                                                                                                            2024-09-28 02:38:12 UTC10328INData Raw: 66 4d 4f 42 66 43 22 3a 31 2c 22 49 5a 56 42 42 56 59 55 4f 48 53 46 56 4a 54 64 4d 48 46 42 64 63 45 55 43 22 3a 30 2c 22 48 57 41 46 59 44 45 5a 52 64 4a 66 65 56 41 58 4e 4c 45 48 4a 57 65 22 3a 31 2c 22 59 4e 61 58 54 66 4b 41 4d 55 54 55 57 5a 66 61 4b 41 4f 62 63 59 54 22 3a 31 2c 22 5a 43 4f 42 5a 61 41 41 44 56 52 47 43 4d 62 51 64 65 46 61 44 4a 5a 57 4e 57 65 22 3a 31 2c 22 59 62 54 5a 50 49 48 41 45 4c 57 49 58 4f 45 52 4a 50 58 61 66 4a 43 66 53 46 63 43 63 43 63 43 44 54 43 22 3a 30 2c 22 66 65 66 53 4b 65 45 46 43 4e 42 62 63 4d 4d 49 59 54 42 62 42 59 58 41 64 44 43 22 3a 31 2c 22 54 5a 55 66 64 4b 4e 4b 4e 4b 50 52 56 66 45 65 53 50 47 4f 61 59 64 59 4f 22 3a 30 2c 22 54 57 55 51 51 62 48 56 45 5a 4e 65 50 65 45 42 56 48 44 57 4e 50 4a 64
                                                                                                                            Data Ascii: fMOBfC":1,"IZVBBVYUOHSFVJTdMHFBdcEUC":0,"HWAFYDEZRdJfeVAXNLEHJWe":1,"YNaXTfKAMUTUWZfaKAObcYT":1,"ZCOBZaAADVRGCMbQdeFaDJZWNWe":1,"YbTZPIHAELWIXOERJPXafJCfSFcCcCcCDTC":0,"fefSKeEFCNBbcMMIYTBbBYXAdDC":1,"TZUfdKNKNKPRVfEeSPGOaYdYO":0,"TWUQQbHVEZNePeEBVHDWNPJd
                                                                                                                            2024-09-28 02:38:12 UTC16384INData Raw: 31 63 36 33 31 0d 0a 42 55 62 58 44 43 4a 46 4f 4f 49 42 42 4f 22 3a 31 2c 22 41 64 5a 5a 4d 51 4d 4c 53 57 64 52 64 4a 63 65 42 65 57 65 22 3a 31 2c 22 61 58 54 66 48 41 45 44 64 55 46 46 42 53 42 62 57 55 65 4d 4a 65 4e 42 4c 46 5a 62 46 4b 4d 42 4b 49 53 49 42 42 4f 22 3a 31 2c 22 54 65 43 4f 65 4a 4e 4c 4a 5a 4c 57 5a 48 4f 66 4f 46 55 49 45 46 47 50 4e 4a 54 65 4b 42 57 43 22 3a 31 2c 22 65 44 55 64 47 56 64 4e 43 4a 57 4d 64 49 4b 64 46 48 61 4f 22 3a 31 2c 22 65 55 46 4a 5a 56 61 63 4b 64 5a 4a 56 56 55 57 50 48 44 44 57 65 22 3a 31 2c 22 50 50 58 47 53 43 5a 46 63 59 55 42 58 56 66 53 54 64 61 54 22 3a 31 2c 22 48 57 41 46 4e 52 4e 52 49 50 4b 61 48 49 63 4e 4c 52 4b 47 43 66 54 4c 4b 47 42 66 43 22 3a 31 2c 22 63 51 59 49 4d 64 55 59 62 65 59 59
                                                                                                                            Data Ascii: 1c631BUbXDCJFOOIBBO":1,"AdZZMQMLSWdRdJceBeWe":1,"aXTfHAEDdUFFBSBbWUeMJeNBLFZbFKMBKISIBBO":1,"TeCOeJNLJZLWZHOfOFUIEFGPNJTeKBWC":1,"eDUdGVdNCJWMdIKdFHaO":1,"eUFJZVacKdZJVVUWPHDDWe":1,"PPXGSCZFcYUBXVfSTdaT":1,"HWAFNRNRIPKaHIcNLRKGCfTLKGBfC":1,"cQYIMdUYbeYY
                                                                                                                            2024-09-28 02:38:12 UTC16384INData Raw: 53 62 53 43 5a 52 41 66 5a 43 22 3a 31 2c 22 41 42 56 59 55 61 58 41 5a 66 4c 64 50 63 52 58 55 4a 64 46 43 44 52 54 59 43 22 3a 31 2c 22 65 57 66 66 51 4c 51 42 54 41 55 52 41 66 50 4d 5a 61 65 57 57 55 42 42 45 63 53 43 48 52 41 4f 41 63 45 55 43 22 3a 31 2c 22 55 45 54 54 4a 62 5a 57 4d 5a 66 50 4d 50 53 58 50 53 65 50 41 56 61 52 4b 5a 56 56 4c 54 22 3a 31 2c 22 65 44 55 64 47 56 59 4d 5a 58 5a 41 51 65 63 61 66 49 52 56 56 52 58 5a 58 65 22 3a 31 2c 22 55 61 44 45 4c 61 42 57 50 56 43 42 47 57 63 4f 43 66 57 50 63 43 22 3a 31 2c 22 59 54 42 55 49 48 4f 64 56 4c 42 51 52 4d 65 62 66 54 49 4e 66 54 4b 65 22 3a 31 2c 22 49 5a 56 54 57 52 47 64 4a 4d 54 52 49 4c 59 59 53 50 49 44 55 50 4f 45 54 22 3a 31 2c 22 4e 51 45 44 41 55 52 41 66 50 4d 56 4d 49 48
                                                                                                                            Data Ascii: SbSCZRAfZC":1,"ABVYUaXAZfLdPcRXUJdFCDRTYC":1,"eWffQLQBTAURAfPMZaeWWUBBEcSCHRAOAcEUC":1,"UETTJbZWMZfPMPSXPSePAVaRKZVVLT":1,"eDUdGVYMZXZAQecafIRVVRXZXe":1,"UaDELaBWPVCBGWcOCfWPcC":1,"YTBUIHOdVLBQRMebfTINfTKe":1,"IZVTWRGdJMTRILYYSPIDUPOET":1,"NQEDAURAfPMVMIH
                                                                                                                            2024-09-28 02:38:12 UTC16384INData Raw: 4d 65 4f 4a 4c 42 57 48 48 54 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 54 45 59 44 58 47 44 53 4d 53 41 5a 44 43 22 3a 31 2c 22 4e 56 4e 5a 59 65 4a 65 56 59 5a 58 44 4d 55 42 64 41 55 52 41 66 50 56 54 22 3a 31 2c 22 4f 4d 49 5a 64 46 53 41 50 56 46 66 46 41 59 54 5a 54 45 65 4e 47 54 4f 46 4d 65 52 54 22 3a 31 2c 22 4e 41 46 51 56 55 4e 4f 64 4f 4b 42 42 49 55 4a 4c 4d 46 66 4f 59 45 51 43 42 56 53 63 61 65 22 3a 31 2c 22 42 50 48 41 66 61 53 64 4e 54 44 49 58 61 63 47 4b 5a 43 43 56 52 53 65 62 51 41 43 22 3a 31 2c 22 47 61 59 50 64 51 56 58 56 52 45 48 47 57 63 62 65 4a 4f 63 4b 62 44 5a 54 5a 57 4b 4e 65 63 4f 4c 63 50 43 22 3a 31 2c 22 66 65 66 53 43 4f 4a 5a 66 49 5a 5a 52 41 62 4f 4f 57 54 43 55 5a 63 65 4e 47 54 4f 44 4f 52 4d 54 66 4c 54 22 3a 31
                                                                                                                            Data Ascii: MeOJLBWHHT":1,"aWQOcYTBTEYDXGDSMSAZDC":1,"NVNZYeJeVYZXDMUBdAURAfPVT":1,"OMIZdFSAPVFfFAYTZTEeNGTOFMeRT":1,"NAFQVUNOdOKBBIUJLMFfOYEQCBVScae":1,"BPHAfaSdNTDIXacGKZCCVRSebQAC":1,"GaYPdQVXVREHGWcbeJOcKbDZTZWKNecOLcPC":1,"fefSCOJZfIZZRAbOOWTCUZceNGTODORMTfLT":1
                                                                                                                            2024-09-28 02:38:12 UTC16384INData Raw: 56 59 55 48 61 5a 46 5a 62 65 4b 52 4a 65 43 5a 65 42 50 63 63 59 65 54 4d 56 57 4a 63 45 53 44 61 65 22 3a 31 2c 22 50 49 5a 54 4f 53 43 5a 4a 65 61 49 4c 59 44 58 59 4c 49 65 56 66 56 57 59 4f 22 3a 31 2c 22 48 4d 62 4b 41 63 51 4a 46 59 44 54 65 43 46 45 44 59 63 61 4d 45 41 4b 65 22 3a 32 2c 22 59 54 42 54 52 59 50 4f 48 42 64 45 50 55 55 54 44 55 41 41 64 4c 4f 53 62 5a 48 61 4f 22 3a 32 2c 22 5a 63 53 49 63 63 65 4e 44 53 4a 56 47 47 5a 59 66 50 58 50 52 4c 4f 22 3a 31 2c 22 63 51 59 49 4d 64 55 59 57 45 49 46 50 42 4e 51 4b 41 45 59 54 4b 65 22 3a 31 2c 22 61 57 51 4f 63 4f 4f 49 42 54 64 51 65 52 48 66 45 58 4e 55 47 55 53 48 4d 61 4c 4d 4a 59 4a 62 56 57 65 22 3a 31 2c 22 48 55 4a 53 45 53 51 55 50 4d 63 50 58 50 52 51 41 55 52 41 66 50 4d 63 43
                                                                                                                            Data Ascii: VYUHaZFZbeKRJeCZeBPccYeTMVWJcESDae":1,"PIZTOSCZJeaILYDXYLIeVfVWYO":1,"HMbKAcQJFYDTeCFEDYcaMEAKe":2,"YTBTRYPOHBdEPUUTDUAAdLOSbZHaO":2,"ZcSIcceNDSJVGGZYfPXPRLO":1,"cQYIMdUYWEIFPBNQKAEYTKe":1,"aWQOcOOIBTdQeRHfEXNUGUSHMaLMJYJbVWe":1,"HUJSESQUPMcPXPRQAURAfPMcC


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            81192.168.2.452066188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:11 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:12 UTC743INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:12 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nqsy%2Fsqcugx%2F5haFubEVYrul8uY5BENNgcas%2FfzbmqwXl7Fg37FwFrZ2ekFl%2F9RtFqD%2B1Js1B%2BxZHtFwJKHyVkIE%2BbXEHyQtCmhi1vRNOVXVynsAqDgYHZl%2ByDdtVIyeBw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b1cfd66437b-EWR
                                                                                                                            2024-09-28 02:38:12 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            82192.168.2.452067188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:12 UTC777OUTPOST /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 30
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:12 UTC30OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 6c 61 73 74 5f 6d 73 67 5f 69 64 3d 36 30 35 39 30 30 39
                                                                                                                            Data Ascii: code=wakdl&last_msg_id=6059009
                                                                                                                            2024-09-28 02:38:12 UTC684INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:12 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jpPTDTCRRrELtLzqS1oxjQT%2FdPcRvP8aPXHKSKKTjJtyUQBRz5HXvUG6siLE%2B5lwVtFt1bZHTaq8eYAmbh0jwY56ibVUifi5qDVXo7MTIps73bReR4P737Mkl0VcWdrJpw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b1d9cee6a5c-EWR
                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                            2024-09-28 02:38:12 UTC51INData Raw: 32 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 22 4d 65 73 73 61 67 65 73 20 6e 6f 74 20 66 6f 75 6e 64 21 22 7d 0d 0a
                                                                                                                            Data Ascii: 2d{"status":false,"text":"Messages not found!"}
                                                                                                                            2024-09-28 02:38:12 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            83192.168.2.45206918.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:13 UTC1067OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzkd2Gc3KUyC4kPxWyFOAE0AMFYLuA6tzyikIWqgywrflvlN6FNq0XKEC7WYyFd0%2BZj7Y5PVIAUCPELr10Ym1udT4d2YMJbQ9MMPhJvw1VIWqnglmBChXp%2FCNzAZDqPp6IsDJny3IQIIkqOUHjKzAb3yq%2BdgyrJY92g%3D
                                                                                                                            2024-09-28 02:38:13 UTC2357INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:13 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default"}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:13 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:26 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3XXte3yV58vwJ%2FhGSygNJ0RDICgH%2B5NmSa4sT%2BMFyvplOrdWQo%2FpzjVZJ%2FykIrTRaGGLKTmmuTT8EHGilfw%2F68flHPMo5Izmc8ky1xI3Tbdn2EwJcTrK%2FVD5oUgIOMvIGMcL6Lwn7%2BFyKBjykFEsMGaIrbrVBFNGsw%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:13 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:13 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 4d156fc02c81ad97b906c107779265e2.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: kxt1RAG-O6miUNvYD1mrTTH3ttTBFzLo8JVG_-7TzgWcxTg_4qavCA==
                                                                                                                            2024-09-28 02:38:13 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 42 46 6c 42 49 6d 30 75 47 64 69 72 6b 61 53 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="BFlBIm0uGdirkaS"
                                                                                                                            2024-09-28 02:38:14 UTC16384INData Raw: 33 66 66 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 3ffa<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:14 UTC16384INData Raw: 0d 0a 38 30 30 30 0d 0a 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 74 68 65 72 7d 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 62 65 74 77 65 65 6e 22 3a 22 62 65 74 77 65 65 6e 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d 65 7d 20 61 6e 64 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 20 7b 64 61 79 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 22 2c 22 6e 75 6d 65 72 69 63 5f 64 61 79 5f 6d 6f 6e 74 68 5f 79 65 61 72 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 30 7d 2f 7b 64 61 79 5f 6e 61 6d 65 5f 30 7d 2f 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 6f 6e 22 3a 22 6f 6e 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d 65 7d 22 2c 22 64 61 74 65 5f 77 69 74 68 5f 77 65
                                                                                                                            Data Ascii: 8000":"{month_name} {day_other}","day_month_between":"between {month_name} {day_name} and {month_name_until} {day_name_until}","numeric_day_month_year":"{month_name_0}/{day_name_0}/{full_year}","day_month_on":"on {month_name} {day_name}","date_with_we
                                                                                                                            2024-09-28 02:38:14 UTC16384INData Raw: 64 66 72 6f 6e 74 5f 73 64 2e 69 71 5f 6c 74 72 2f 61 63 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e
                                                                                                                            Data Ascii: dfront_sd.iq_ltr/ac73a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.bookin
                                                                                                                            2024-09-28 02:38:14 UTC10INData Raw: 54 4f 59 45 53 45 56 66 0d 0a
                                                                                                                            Data Ascii: TOYESEVf
                                                                                                                            2024-09-28 02:38:14 UTC16384INData Raw: 37 66 65 61 0d 0a 46 54 64 4a 56 44 42 61 55 58 53 5a 57 63 50 58 51 55 4a 64 44 42 4b 43 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 4f 51 48 46 52 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 41 48 49 63 61 57 47 4e 50 5a 53 56 5a 4d 59 49 4f 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 4a 65 42 4f 62 56 49 53 63 66 46 64 48 56 54 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 6d
                                                                                                                            Data Ascii: 7feaFTdJVDBaUXSZWcPXQUJdDBKC',gnsInsCrd_bannerView_index: 'TDXRPVRBKKJVbFPbVCMIWIOQHFRYDEZRae',gnsInsCrd_bannerCtaClick_index: 'TDXRPVRBKKJVbFPbVCMIWIAHIcaWGNPZSVZMYIO',gnsInsCrd_bannerDismiss_index: 'TDXRPVRBKKJVbFPbVCMIJeBObVIScfFdHVT',gnsInsCrd_m
                                                                                                                            2024-09-28 02:38:14 UTC16370INData Raw: 4a 55 4b 65 59 45 47 57 65 22 3a 31 2c 22 54 48 48 53 4f 44 49 4c 4a 62 62 66 59 46 5a 49 4a 65 50 49 43 61 65 46 59 54 45 54 22 3a 31 2c 22 48 57 41 46 59 42 66 50 57 42 5a 4f 57 5a 61 4d 62 55 4d 65 46 51 49 58 51 52 61 51 59 61 46 41 55 41 44 57 65 22 3a 31 2c 22 66 65 66 53 4b 65 45 52 43 65 59 61 43 46 64 58 47 44 53 43 44 57 4f 4f 43 22 3a 31 2c 22 49 5a 64 48 55 4e 48 48 66 58 66 53 61 4e 59 57 63 55 58 53 45 63 4e 48 43 22 3a 31 2c 22 66 65 62 4b 43 42 50 52 46 48 52 58 4d 4a 47 42 42 47 51 58 42 4b 54 53 64 5a 50 64 4b 4e 4b 4e 4b 57 65 22 3a 31 2c 22 48 57 41 46 59 54 62 44 4f 4c 62 65 54 53 4c 62 49 65 49 64 4b 57 42 5a 45 57 61 53 45 4f 22 3a 31 2c 22 63 43 47 61 59 53 64 4d 62 59 53 66 63 64 52 65 4c 62 46 5a 56 47 41 5a 61 59 59 66 50 48 65
                                                                                                                            Data Ascii: JUKeYEGWe":1,"THHSODILJbbfYFZIJePICaeFYTET":1,"HWAFYBfPWBZOWZaMbUMeFQIXQRaQYaFAUADWe":1,"fefSKeERCeYaCFdXGDSCDWOOC":1,"IZdHUNHHfXfSaNYWcUXSEcNHC":1,"febKCBPRFHRXMJGBBGQXBKTSdZPdKNKNKWe":1,"HWAFYTbDOLbeTSLbIeIdKWBZEWaSEO":1,"cCGaYSdMbYSfcdReLbFZVGAZaYYfPHe
                                                                                                                            2024-09-28 02:38:14 UTC16384INData Raw: 66 66 65 36 0d 0a 22 3a 31 2c 22 63 43 48 4f 62 49 56 49 41 44 49 42 4e 47 53 64 4f 4e 62 43 4e 4c 4f 4c 4f 4c 4f 42 46 4f 22 3a 31 2c 22 4e 56 4e 5a 57 55 4d 65 48 47 57 47 61 52 42 51 42 62 51 47 57 52 43 66 50 53 49 4f 41 49 45 63 56 49 5a 64 52 52 54 22 3a 31 2c 22 41 64 52 45 46 48 5a 55 66 46 66 46 63 59 52 51 61 58 64 52 54 22 3a 31 2c 22 62 51 47 42 62 51 47 57 46 42 61 61 65 48 47 5a 4f 54 50 63 65 59 57 44 46 52 53 47 51 43 42 59 4b 65 22 3a 31 2c 22 4e 56 4e 5a 59 65 4a 62 46 4d 4f 46 49 66 47 4f 61 59 64 4b 54 48 48 66 49 58 62 42 48 54 4e 43 4d 43 22 3a 31 2c 22 59 54 42 65 57 66 43 44 42 48 65 4a 4f 55 54 42 53 53 50 4e 4c 63 53 64 65 61 65 22 3a 31 2c 22 49 4e 46 64 43 44 4f 54 45 4b 42 65 4a 47 62 58 48 57 62 58 61 54 46 4b 47 5a 53 58 54
                                                                                                                            Data Ascii: ffe6":1,"cCHObIVIADIBNGSdONbCNLOLOLOBFO":1,"NVNZWUMeHGWGaRBQBbQGWRCfPSIOAIEcVIZdRRT":1,"AdREFHZUfFfFcYRQaXdRT":1,"bQGBbQGWFBaaeHGZOTPceYWDFRSGQCBYKe":1,"NVNZYeJbFMOFIfGOaYdKTHHfIXbBHTNCMC":1,"YTBeWfCDBHeJOUTBSSPNLcSdeae":1,"INFdCDOTEKBeJGbXHWbXaTFKGZSXT
                                                                                                                            2024-09-28 02:38:14 UTC16384INData Raw: 44 43 63 41 43 4f 4a 4f 4d 58 64 4b 59 45 61 45 41 53 4e 48 52 55 55 4f 22 3a 31 2c 22 61 57 48 4d 56 4b 62 54 42 50 41 41 64 4b 4c 52 45 63 5a 65 66 46 44 55 43 22 3a 31 2c 22 61 58 54 62 53 46 59 54 42 48 4d 48 48 56 62 52 65 49 4e 4c 4f 4c 4f 4c 4f 41 5a 66 4c 64 50 55 56 49 5a 64 52 52 54 22 3a 31 2c 22 48 4d 62 4f 48 4e 4a 4f 62 44 47 56 52 51 59 49 55 59 54 45 54 22 3a 31 2c 22 4e 56 4e 5a 57 55 56 56 4f 63 5a 46 4b 49 62 4c 57 65 5a 51 4d 5a 43 22 3a 31 2c 22 54 57 55 4c 48 4a 45 66 48 55 4e 51 62 48 56 45 5a 4e 63 61 4e 59 43 4c 57 4f 54 4c 4f 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 54 45 59 44 58 47 44 53 4d 53 41 5a 44 43 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 41 42 56 59 55 54 65 4b 48 4d 59 41 5a 62 48 4a 64 46 4d 55 43 22 3a 31 2c 22 4f 4d 54
                                                                                                                            Data Ascii: DCcACOJOMXdKYEaEASNHRUUO":1,"aWHMVKbTBPAAdKLREcZefFDUC":1,"aXTbSFYTBHMHHVbReINLOLOLOAZfLdPUVIZdRRT":1,"HMbOHNJObDGVRQYIUYTET":1,"NVNZWUVVOcZFKIbLWeZQMZC":1,"TWULHJEfHUNQbHVEZNcaNYCLWOTLO":1,"aWQOcYTBTEYDXGDSMSAZDC":1,"aWQOcYTBABVYUTeKHMYAZbHJdFMUC":1,"OMT
                                                                                                                            2024-09-28 02:38:14 UTC16384INData Raw: 5a 43 22 3a 31 2c 22 42 48 44 54 4a 64 52 65 51 48 55 59 59 4f 4c 45 61 4d 4e 53 55 43 22 3a 31 2c 22 4e 41 46 4c 65 4f 65 4a 59 54 42 4e 41 46 51 56 46 62 58 50 4b 56 59 58 4d 48 4f 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 56 4d 58 4e 50 58 50 52 4c 4f 22 3a 31 2c 22 55 45 54 54 4a 62 5a 57 4d 5a 66 50 4b 47 57 50 61 44 4d 57 58 46 5a 45 56 43 22 3a 31 2c 22 48 5a 55 61 63 4d 55 49 41 5a 64 4a 41 49 4e 51 5a 51 4e 42 4a 66 42 4d 49 5a 65 62 57 4e 57 65 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55 62 58 65 43 46 4e 5a 53 45 4f 4a 63 52 41 64 4a 4b 65 22 3a 31 2c 22 4f 41 5a 4f 58 50 54 4c 4b 47 42 66 53 61 56 55 46 65 63 55 64 56 61 63 44 59 4f 22 3a 31 2c 22 61 58 54 66 48 41 45 44 42 4f 53 49 53 49 42 54 42 59 51 66 42 4e 65 5a 49 4e 51 46 4b 46 62 62 65 52
                                                                                                                            Data Ascii: ZC":1,"BHDTJdReQHUYYOLEaMNSUC":1,"NAFLeOeJYTBNAFQVFbXPKVYXMHO":1,"aWQOcYTBVMXNPXPRLO":1,"UETTJbZWMZfPKGWPaDMWXFZEVC":1,"HZUacMUIAZdJAINQZQNBJfBMIZebWNWe":1,"NAFQCJWZUbXeCFNZSEOJcRAdJKe":1,"OAZOXPTLKGBfSaVUFecUdVacDYO":1,"aXTfHAEDBOSISIBTBYQfBNeZINQFKFbbeR


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            84192.168.2.452071188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:13 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:13 UTC737INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:13 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=joLFoz%2BQHAZ1NSAViiCeEwxfy%2BA5%2FuOG2aHoK27xos0Ns7ZjeBpvxrkYqMCjllGFA6BOj%2FQCuUYJbd5Eq3iKtsUnyZX4XfSTawj0rhG9DqOZMaC0DyCNw%2FtqmE0vBeqcWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b254c9c8c3b-EWR
                                                                                                                            2024-09-28 02:38:13 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            85192.168.2.452072188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:13 UTC402OUTGET /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:13 UTC603INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:13 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aaO7q5ny7G4RGYizXo42pm9kEDR4w%2FotoLNFChyNU%2BvZfspPZEWChWN6AI5DZ7c55aaVcNJQ19LiroXVmOjPYdD8IMGygSjV5bwD1X1YeZfzlDe3wsVXCfmnX1H9jzxR2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b26d9f48c42-EWR
                                                                                                                            2024-09-28 02:38:13 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            86192.168.2.452077188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:14 UTC782OUTPOST /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 10
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:14 UTC10OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c
                                                                                                                            Data Ascii: code=wakdl
                                                                                                                            2024-09-28 02:38:14 UTC660INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:14 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nINPDW57teDVDU0%2FaCo2Bq1Nwh5YiX357VWe2oQgef9oV%2FUr95BoJ2upEKrPDqJPJvgUZ%2FWwg%2B5f5UFS%2BzFK5rkZXTyqIJ3PAGsBzB3OnrTqiPTIInOnJ7LRfwhOYPt5sA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b2c8d0b4245-EWR
                                                                                                                            2024-09-28 02:38:14 UTC22INData Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a
                                                                                                                            Data Ascii: 10{"status":false}
                                                                                                                            2024-09-28 02:38:14 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            87192.168.2.452078188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:14 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:14 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:38:14 UTC658INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:14 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K0JkCPnGqihiuVNokexmjDtqRwbN36hJA5QoSr52Ie75CyxqsthS%2Bd6VAfDoxbJc%2BQeqI7k%2BmmuLYlFsH9hvX3RRievZVdsUrqx%2FJSoTPX7dy4QuV0QWjAKvknAR6538Yw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b2cac6c43fe-EWR
                                                                                                                            2024-09-28 02:38:14 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            88192.168.2.45207518.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:14 UTC1067OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzkd2Gc3KUyC4kPxWyFOAE0AMFYLuA6tzyikIWqgywrflvlN6FNq0XKEC7WYyFd0%2BZj7Y5PVIAUCPELr10Ym1udT4d2YMJbQ9MMPhJvw1VIWqnglmBChXp%2FCNzAZDqPp6IsDJny3IQIIkqOUHjKzAb3yq%2BdgyrJY92g%3D
                                                                                                                            2024-09-28 02:38:14 UTC2351INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:14 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"max_age":604800,"report_to":"default"}
                                                                                                                            report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default","max_age":604800}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:14 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:28 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWznNF%2FKpKLEsUjzoVwsFxhzCGchRWzm41bIYtwj6%2BJOHrm5jSKabUUIo7U%2FxfC0UhPOJ1%2BzZDcDB%2BUeWJqRKlebzvZSpUXCXrLDYm6bsuDLKDq5bigDIqVgFXo8I3072QMkrD3U8Bpli2ZZibWFl8bN%2BNn50bWE7J64%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:14 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:14 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 2b92d172bc628dd9c34a8c262218ac02.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: Q7-CxX5N-BPcULWWGKa0kOckv8BZU2dFbYHB7MBLCRYF9uGi2LdZrQ==
                                                                                                                            2024-09-28 02:38:14 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 79 6d 35 45 51 71 52 42 42 7a 39 6a 34 45 61 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="ym5EQqRBBz9j4Ea"
                                                                                                                            2024-09-28 02:38:15 UTC8200INData Raw: 32 30 30 30 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 2000<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:15 UTC16384INData Raw: 33 66 66 61 0d 0a 3d 22 63 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 61 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 43 61 74 61 6c c3 a0 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 69 74 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 49 74 61 6c 69 61 6e 6f 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 70 74 2d 70 74 22 20 68 72 65 66 3d 22 68
                                                                                                                            Data Ascii: 3ffa="ca" href="https://www.booking.com/index.ca.html" title="Catal"/><link rel="alternate" type="text/html" hreflang="it" href="https://www.booking.com/index.it.html" title="Italiano"/><link rel="alternate" type="text/html" hreflang="pt-pt" href="h
                                                                                                                            2024-09-28 02:38:15 UTC9666INData Raw: 0d 0a 32 35 62 38 0d 0a 72 22 2c 22 67 65 6e 69 74 69 76 65 5f 75 63 22 3a 22 41 70 72 69 6c 22 7d 2c 22 35 22 3a 7b 22 73 68 6f 72 74 5f 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 4d 61 79 22 2c 22 67 65 6e 69 74 69 76 65 5f 75 63 22 3a 22 4d 61 79 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 4d 61 79 22 2c 22 67 65 6e 69 74 69 76 65 5f 6c 63 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 6c 63 22 3a 22 4d 61 79 22 2c 22 74 6f 5f 6d 6f 6e 74 68 5f 6c 63 22 3a 22 74 6f 20 4d 61 79 22 2c 22 6e 61 6d 65 5f 69 6e 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 6f 74 68 65 72 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 77 69 74 68 5f 79 65 61 72 5f 6f 6e 6c 79 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 66 72 6f 6d 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 75 63 22 3a 22 4d 61
                                                                                                                            Data Ascii: 25b8r","genitive_uc":"April"},"5":{"short_name_only":"May","genitive_uc":"May","short_name":"May","genitive_lc":"May","name_lc":"May","to_month_lc":"to May","name_in":"May","name_other":"May","name_with_year_only":"May","name_from":"May","name_uc":"Ma
                                                                                                                            2024-09-28 02:38:15 UTC16384INData Raw: 33 66 66 61 0d 0a 22 2c 0a 62 5f 73 65 6c 65 63 74 65 64 5f 6c 61 6e 67 75 61 67 65 3a 20 27 65 6e 2d 75 73 27 2c 0a 62 5f 73 65 6c 65 63 74 65 64 5f 6c 61 6e 67 75 61 67 65 5f 63 6f 75 6e 74 72 79 5f 66 6c 61 67 3a 20 27 75 73 27 2c 0a 70 61 67 65 76 69 65 77 5f 69 64 3a 20 27 35 30 31 66 31 32 38 62 33 61 65 61 30 31 66 61 27 2c 0a 61 69 64 3a 20 27 33 30 34 31 34 32 27 2c 0a 62 5f 63 73 72 66 5f 74 6f 6b 65 6e 3a 20 27 56 71 54 33 5a 67 41 41 41 41 41 3d 66 6c 2d 53 59 48 54 6e 56 71 6f 53 53 30 79 78 6b 38 69 4f 64 43 51 57 5f 49 66 56 51 50 45 6e 39 31 33 64 5f 6e 62 6d 4a 6d 37 48 63 4c 68 39 6b 79 52 74 4f 5a 4d 48 69 51 4e 58 30 75 50 4b 4b 66 53 31 41 47 70 46 72 4b 69 48 44 6e 67 62 73 6b 57 79 6a 62 6e 74 33 57 45 78 5f 52 69 46 50 50 62 4e 30
                                                                                                                            Data Ascii: 3ffa",b_selected_language: 'en-us',b_selected_language_country_flag: 'us',pageview_id: '501f128b3aea01fa',aid: '304142',b_csrf_token: 'VqT3ZgAAAAA=fl-SYHTnVqoSS0yxk8iOdCQW_IfVQPEn913d_nbmJm7HcLh9kyRtOZMHiQNX0uPKKfS1AGpFrKiHDngbskWyjbnt3WEx_RiFPPbN0
                                                                                                                            2024-09-28 02:38:15 UTC16384INData Raw: 0d 0a 38 33 63 61 0d 0a 44 69 73 63 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 4c 52 45 48 47 62 4e 48 4e 45 52 47 65 66 4d 50 53 58 57 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f 64 61 6c 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 51 52 66 44 52 49 56 54 62 57 64 4b 50 4d 50 53 58 57 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f 64 61 6c 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 51 52 66 44 52 49 56 62 52 41 4c 57 49 51 5a 44 53 42 66 46 64 48 56 54 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f 64 61 6c 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56
                                                                                                                            Data Ascii: 83caDisc_bannerDismiss_index: 'TDXRPVRBKKQUYBFLLREHGbNHNERGefMPSXWe',gnsInsDisc_modalView_index: 'TDXRPVRBKKQUYBFLQRfDRIVTbWdKPMPSXWe',gnsInsDisc_modalCtaClick_index: 'TDXRPVRBKKQUYBFLQRfDRIVbRALWIQZDSBfFdHVT',gnsInsDisc_modalDismiss_index: 'TDXRPV
                                                                                                                            2024-09-28 02:38:15 UTC16384INData Raw: 56 50 5a 46 4b 4d 42 4b 41 55 52 41 66 50 56 54 22 3a 31 2c 22 59 57 59 48 66 55 44 65 41 54 50 52 58 55 42 4f 22 3a 32 2c 22 61 58 62 53 62 63 42 4f 58 42 59 57 59 48 62 49 4f 44 49 56 56 4f 22 3a 31 2c 22 48 4d 47 4c 4c 59 41 4e 41 61 64 4d 4b 5a 4c 49 4f 47 64 43 58 4f 45 4b 65 22 3a 31 2c 22 4f 56 59 50 53 4d 41 48 48 62 50 49 52 5a 5a 42 52 66 4e 44 4a 45 4c 57 50 46 4a 5a 65 43 44 41 41 63 61 54 22 3a 31 2c 22 42 43 54 48 65 55 41 46 66 66 66 58 4d 50 4c 56 4a 47 4b 54 4a 56 4a 42 42 50 62 42 66 43 22 3a 31 2c 22 65 44 64 65 46 43 59 41 64 51 41 50 55 65 44 54 41 4e 5a 49 4b 64 46 48 66 43 4c 56 58 48 54 22 3a 31 2c 22 62 51 4b 50 52 43 42 51 41 55 61 53 4a 51 52 43 4d 50 61 46 54 50 54 59 55 41 4a 61 41 53 50 59 4b 65 22 3a 31 2c 22 50 65 59 47 49
                                                                                                                            Data Ascii: VPZFKMBKAURAfPVT":1,"YWYHfUDeATPRXUBO":2,"aXbSbcBOXBYWYHbIODIVVO":1,"HMGLLYANAadMKZLIOGdCXOEKe":1,"OVYPSMAHHbPIRZZBRfNDJELWPFJZeCDAAcaT":1,"BCTHeUAFfffXMPLVJGKTJVJBBPbBfC":1,"eDdeFCYAdQAPUeDTANZIKdFHfCLVXHT":1,"bQKPRCBQAUaSJQRCMPaFTPTYUAJaASPYKe":1,"PeYGI
                                                                                                                            2024-09-28 02:38:15 UTC980INData Raw: 52 54 65 43 49 53 55 5a 58 44 4d 55 42 64 42 4a 62 58 4c 49 42 56 4e 4c 54 22 3a 31 2c 22 48 4d 62 64 47 46 64 4b 41 63 51 4a 46 66 48 50 53 4f 65 4b 65 22 3a 31 2c 22 62 51 45 57 4d 64 43 50 59 4c 61 41 4c 53 47 51 43 64 42 43 22 3a 31 2c 22 63 51 5a 4a 41 4c 4f 64 65 45 45 42 46 66 5a 4c 4d 42 55 58 43 45 57 50 48 44 44 57 65 22 3a 31 2c 22 4f 4d 47 66 48 4d 41 44 44 62 64 45 42 56 51 59 54 22 3a 31 2c 22 63 43 48 4f 62 49 50 50 51 46 46 4e 63 55 57 42 5a 45 57 61 53 64 64 4b 4e 4b 4e 4b 57 65 22 3a 31 2c 22 54 44 58 44 50 5a 57 4f 52 54 65 43 49 53 55 50 59 4a 4f 61 59 59 66 50 48 65 22 3a 31 2c 22 54 66 4e 5a 65 46 4f 42 4e 51 56 45 65 53 4e 64 52 54 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 50 57 5a 4a 64 55 51 57 54 43 55 5a 5a 41 55 47 4f 22 3a
                                                                                                                            Data Ascii: RTeCISUZXDMUBdBJbXLIBVNLT":1,"HMbdGFdKAcQJFfHPSOeKe":1,"bQEWMdCPYLaALSGQCdBC":1,"cQZJALOdeEEBFfZLMBUXCEWPHDDWe":1,"OMGfHMADDbdEBVQYT":1,"cCHObIPPQFFNcUWBZEWaSddKNKNKWe":1,"TDXDPZWORTeCISUPYJOaYYfPHe":1,"TfNZeFOBNQVEeSNdRT":1,"YdXfdKNKNKPWZJdUQWTCUZZAUGO":
                                                                                                                            2024-09-28 02:38:15 UTC16384INData Raw: 34 30 30 30 0d 0a 42 65 4c 50 48 59 59 66 50 48 65 22 3a 31 2c 22 50 5a 65 51 46 63 65 48 64 59 66 53 4d 4d 52 63 55 53 43 5a 43 22 3a 31 2c 22 65 44 53 64 55 62 5a 52 4e 57 42 4f 66 57 56 57 4e 59 4f 22 3a 31 2c 22 56 58 53 45 4c 4c 4f 46 65 66 46 61 58 62 41 50 52 65 52 65 22 3a 31 2c 22 65 52 59 5a 42 51 45 4b 42 65 57 65 63 4e 66 45 44 59 4f 54 44 45 49 62 65 52 54 22 3a 31 2c 22 61 58 62 49 53 48 63 41 61 5a 51 41 56 4c 42 51 50 65 48 54 22 3a 31 2c 22 42 49 55 4a 4c 4d 4a 56 66 4e 61 62 46 58 46 42 63 45 62 4a 56 4b 66 4c 57 65 22 3a 31 2c 22 4e 56 4e 5a 59 65 4a 42 42 4d 65 48 47 55 46 51 62 4d 44 4f 48 51 53 47 61 54 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55 62 52 53 64 55 46 51 62 4d 46 4b 4d 64 59 59 63 61 57 59 4f 61 56 43 22 3a 31 2c 22 54 56
                                                                                                                            Data Ascii: 4000BeLPHYYfPHe":1,"PZeQFceHdYfSMMRcUSCZC":1,"eDSdUbZRNWBOfWVWNYO":1,"VXSELLOFefFaXbAPReRe":1,"eRYZBQEKBeWecNfEDYOTDEIbeRT":1,"aXbISHcAaZQAVLBQPeHT":1,"BIUJLMJVfNabFXFBcEbJVKfLWe":1,"NVNZYeJBBMeHGUFQbMDOHQSGaT":1,"NAFQCJWZUbRSdUFQbMFKMdYYcaWYOaVC":1,"TV
                                                                                                                            2024-09-28 02:38:15 UTC8INData Raw: 63 42 50 4b 65 22 0d 0a
                                                                                                                            Data Ascii: cBPKe"


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            89192.168.2.452079188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:14 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:15 UTC733INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:15 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5FXAXSbM%2BcwunjTJ0WMACzvQPPIPm6ACFaIU6CtAQewWnhg64eyzrx1%2Fd7ync2DaFxvqSPRe9Y8fwk%2BQIXX3qbzfRRWmqHsbqFX9SIqIUbl6uz2HFWgqRmU3vNLu35Ec3g%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b2ebef08cc0-EWR
                                                                                                                            2024-09-28 02:38:15 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            90192.168.2.452084188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:15 UTC409OUTGET /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:16 UTC611INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:16 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OtBFn7w%2B4%2FR6zoLfmFw3qkR6qoArVOCLuLbTwdH%2FO3uRvcvGHr0w09JBB%2BM7MKcY4TZVK4Jxx%2FwFlPZ57WhVvYmYZb%2BVdvuQw2PCc7C7K5J9RCEJsKve3F0kqu31651rDg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b35c8e94282-EWR
                                                                                                                            2024-09-28 02:38:16 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            91192.168.2.452083188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:15 UTC412OUTGET /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:16 UTC605INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:16 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jy9MAVOKrLVtudLUFlTJRfj0c%2FgMQqGTZymtoGAkHbvnzv5EPLHB3O9uB34sBwwY7J9itZfnYAwohOBxFnd%2Fcj7O6KXZHzbw8m1AZ9OWig9z6vf4BE39672%2BCcdEENy0Kw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b35cdfa8c87-EWR
                                                                                                                            2024-09-28 02:38:16 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            92192.168.2.45208218.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:15 UTC1073OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWznNF%2FKpKLEsUjzoVwsFxhzCGchRWzm41bIYtwj6%2BJOHrm5jSKabUUIo7U%2FxfC0UhPOJ1%2BzZDcDB%2BUeWJqRKlebzvZSpUXCXrLDYm6bsuDLKDq5bigDIqVgFXo8I3072QMkrD3U8Bpli2ZZibWFl8bN%2BNn50bWE7J64%3D
                                                                                                                            2024-09-28 02:38:16 UTC2351INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:16 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default"}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:16 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:32 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaImcAIvzijSJ%2FvDpaf5LdSbxyCNoj63UU%2BO0z%2BnupLD9cRrVvO4bY4Fapwt00KjfprUOQgUoMRJ%2FL4YMjG7%2FxHIXZZf4dukMX4letpRfz%2FvoBMm6y2znIDbg%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:16 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:16 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 62e2e45895008240d70f26081269c850.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: 1L6UWlfkavaSAMuViSD7jX5zM_RgUULEHRpCsri53KYZzmv7KtJobA==
                                                                                                                            2024-09-28 02:38:16 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 6d 47 4d 6d 45 65 55 62 64 50 61 6f 65 39 48 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="mGMmEeUbdPaoe9H"
                                                                                                                            2024-09-28 02:38:16 UTC16384INData Raw: 34 35 65 34 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 45e4<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:16 UTC1516INData Raw: 74 69 6c 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 5f 75 6e 74 69 6c 7d 22 2c 22 64 61 74 65 5f 77 69 74 68 5f 77 65 65 6b 64 61 79 5f 77 69 74 68 5f 6d 61 72 6b 65 72 73 22 3a 22 7b 77 65 65 6b 64 61 79 7d 2c 20 7b 62 65 67 69 6e 5f 6d 61 72 6b 65 72 7d 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 7b 65 6e 64 5f 6d 61 72 6b 65 72 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 74 65 5f 77 69 74 68 5f 73 68 6f 72 74 5f 77 65 65 6b 64 61 79 5f 77 69 74 68 6f 75 74 5f 79 65 61 72 22 3a 22 7b 73 68 6f 72 74 5f 77 65 65 6b 64 61 79 7d 2c 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 20 22 2c 22 6d 6f 6e 74 68 5f 6e 61
                                                                                                                            Data Ascii: til} {day_of_month_until}, {full_year_until}","date_with_weekday_with_markers":"{weekday}, {begin_marker}{month_name} {day_of_month}{end_marker}, {full_year}","date_with_short_weekday_without_year":"{short_weekday}, {month_name} {day_of_month} ","month_na
                                                                                                                            2024-09-28 02:38:16 UTC16384INData Raw: 33 66 66 61 0d 0a 63 5f 64 61 79 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 74 69 6d 65 5f 62 65 66 6f 72 65 22 3a 22 62 65 66 6f 72 65 20 7b 74 69 6d 65 7d 20 6f 6e 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 30 7d 2f 7b 64 61 79 5f 6e 61 6d 65 5f 30 7d 2f 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 6d 6f 6e 74 68 5f 77 69 74 68 5f 79 65 61 72 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 77 69 74 68 5f 79 65 61 72 5f 6f 6e 6c 79 7d 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 79 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 74 69 6d 65 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 2c 20 7b 74 69 6d 65 7d 22 2c 22 6e 75 6d 65 72 69 63 5f 64 61 74 65 5f 72
                                                                                                                            Data Ascii: 3ffac_day_month_year_time_before":"before {time} on {month_name_0}/{day_name_0}/{full_year}","month_with_year":"{month_name_with_year_only} {full_year}","day_short_month_year_time":"{short_month_name} {day_of_month}, {full_year}, {time}","numeric_date_r
                                                                                                                            2024-09-28 02:38:16 UTC16384INData Raw: 0d 0a 31 35 62 65 65 0d 0a 6c 61 6e 67 75 61 67 65 5f 63 6f 75 6e 74 72 79 5f 66 6c 61 67 3a 20 27 75 73 27 2c 0a 70 61 67 65 76 69 65 77 5f 69 64 3a 20 27 39 66 63 32 31 32 38 63 62 39 31 35 30 30 63 61 27 2c 0a 61 69 64 3a 20 27 33 30 34 31 34 32 27 2c 0a 62 5f 63 73 72 66 5f 74 6f 6b 65 6e 3a 20 27 57 4b 54 33 5a 67 41 41 41 41 41 3d 74 50 48 70 37 57 57 6a 79 56 4e 6f 64 63 6a 41 45 50 46 6f 49 62 4c 42 4f 44 4b 45 58 32 79 64 59 75 50 30 6b 73 62 30 32 35 33 56 63 65 42 4a 4f 50 38 38 6b 70 4a 69 72 41 6a 72 67 31 37 38 6e 61 43 33 7a 30 32 4f 6d 46 62 42 4e 59 74 4e 58 54 43 7a 4c 6b 79 6e 31 6e 4e 38 34 52 42 66 41 6d 45 48 4e 41 4f 53 74 33 67 36 31 54 45 44 6c 39 38 46 52 69 54 53 4d 30 66 35 57 2d 4c 6a 32 66 74 58 51 6e 74 4a 72 4d 7a 6e 49 72
                                                                                                                            Data Ascii: 15beelanguage_country_flag: 'us',pageview_id: '9fc2128cb91500ca',aid: '304142',b_csrf_token: 'WKT3ZgAAAAA=tPHp7WWjyVNodcjAEPFoIbLBODKEX2ydYuP0ksb0253VceBJOP88kpJirAjrg178naC3z02OmFbBNYtNXTCzLkyn1nN84RBfAmEHNAOSt3g61TEDl98FRiTSM0f5W-Lj2ftXQntJrMznIr
                                                                                                                            2024-09-28 02:38:16 UTC16384INData Raw: 4c 52 45 48 47 56 61 53 58 62 66 49 41 62 53 4f 42 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 4c 52 45 48 47 62 4e 48 4e 45 52 47 65 66 4d 50 53 58 57 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f 64 61 6c 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 51 52 66 44 52 49 56 54 62 57 64 4b 50 4d 50 53 58 57 65 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f 64 61 6c 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 51 55 59 42 46 4c 51 52 66 44 52 49 56 62 52 41 4c 57 49 51 5a 44 53 42 66 46 64 48 56 54 27 2c 0a 67 6e 73 49 6e 73 44 69 73 63 5f 6d 6f
                                                                                                                            Data Ascii: LREHGVaSXbfIAbSOBYDEZRae',gnsInsDisc_bannerDismiss_index: 'TDXRPVRBKKQUYBFLLREHGbNHNERGefMPSXWe',gnsInsDisc_modalView_index: 'TDXRPVRBKKQUYBFLQRfDRIVTbWdKPMPSXWe',gnsInsDisc_modalCtaClick_index: 'TDXRPVRBKKQUYBFLQRfDRIVbRALWIQZDSBfFdHVT',gnsInsDisc_mo
                                                                                                                            2024-09-28 02:38:17 UTC16384INData Raw: 63 63 4e 5a 52 4f 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55 61 59 4a 4b 53 45 43 59 42 5a 53 42 56 4e 52 58 4d 46 44 46 61 54 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 5a 47 61 64 42 63 53 45 4c 49 45 52 45 48 47 43 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 59 64 64 48 4d 4d 54 62 54 4a 54 4e 56 54 22 3a 31 2c 22 65 44 64 65 46 43 59 41 41 46 55 54 55 65 45 43 64 52 4a 4a 52 62 61 54 61 54 61 42 4b 48 59 61 52 58 55 62 5a 46 4c 4d 5a 47 48 43 54 52 64 49 47 48 54 22 3a 31 2c 22 61 58 54 61 59 59 66 50 59 4c 58 53 4f 65 4b 65 22 3a 31 2c 22 4f 4d 65 52 51 46 43 46 65 61 52 58 55 62 5a 46 4c 4d 5a 47 48 43 54 52 64 49 65 4d 65 4f 58 62 62 46 4a 46 43 22 3a 31 2c 22 65 57 66 61 51 44 53 46 63 46 50 49 57 57 58 56 58 65 4c 61 42 56 41 56 4b 43 59 4f 22 3a 31 2c 22
                                                                                                                            Data Ascii: ccNZRO":1,"NAFQCJWZUaYJKSECYBZSBVNRXMFDFaT":1,"aWQOcYTBZGadBcSELIEREHGC":1,"aWQOcYTBYddHMMTbTJTNVT":1,"eDdeFCYAAFUTUeECdRJJRbaTaTaBKHYaRXUbZFLMZGHCTRdIGHT":1,"aXTaYYfPYLXSOeKe":1,"OMeRQFCFeaRXUbZFLMZGHCTRdIeMeOXbbFJFC":1,"eWfaQDSFcFPIWWXVXeLaBVAVKCYO":1,"
                                                                                                                            2024-09-28 02:38:17 UTC16384INData Raw: 5a 55 54 50 54 51 41 64 4d 4b 4a 5a 4b 65 22 3a 32 2c 22 61 58 62 53 62 63 4f 51 50 43 50 52 57 58 64 42 47 5a 58 65 59 42 42 56 59 59 54 22 3a 31 2c 22 4f 4d 4e 4e 46 48 4d 50 64 54 44 4a 51 48 53 46 47 4a 44 5a 54 4b 4d 62 41 61 65 22 3a 32 2c 22 50 63 56 46 48 4d 50 62 4a 41 52 47 50 58 41 50 45 50 59 4b 44 63 64 4a 4c 4f 64 50 4f 48 54 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 61 57 51 4f 63 45 46 65 4c 48 4e 41 4c 53 49 50 4e 44 4a 61 65 22 3a 31 2c 22 49 5a 56 42 45 48 62 56 46 62 58 55 43 65 65 44 4e 51 55 5a 41 52 59 66 59 4f 22 3a 31 2c 22 61 58 54 62 53 46 59 54 42 48 4d 48 48 56 62 52 65 49 4e 4c 4f 4c 4f 4c 4f 41 5a 66 4c 64 50 55 56 49 5a 64 52 52 54 22 3a 31 2c 22 48 57 41 46 4e 52 4e 48 57 4d 53 58 65 22 3a 31 2c 22 4e 41 52 45 46 45 4a 4b 61
                                                                                                                            Data Ascii: ZUTPTQAdMKJZKe":2,"aXbSbcOQPCPRWXdBGZXeYBBVYYT":1,"OMNNFHMPdTDJQHSFGJDZTKMbAae":2,"PcVFHMPbJARGPXAPEPYKDcdJLOdPOHT":1,"aWQOcYTBaWQOcEFeLHNALSIPNDJae":1,"IZVBEHbVFbXUCeeDNQUZARYfYO":1,"aXTbSFYTBHMHHVbReINLOLOLOAZfLdPUVIZdRRT":1,"HWAFNRNHWMSXe":1,"NAREFEJKa
                                                                                                                            2024-09-28 02:38:17 UTC16384INData Raw: 62 51 46 64 4d 64 62 44 63 48 44 51 49 54 46 53 59 59 42 61 65 22 3a 31 2c 22 61 58 62 53 47 63 53 5a 4a 4f 44 58 51 45 61 4b 64 4c 4f 4c 4f 4c 4d 4f 22 3a 31 2c 22 59 54 54 48 62 58 65 65 56 4a 57 63 57 50 61 44 4d 57 4f 4d 48 54 63 59 65 49 48 63 55 4a 50 55 46 4f 22 3a 31 2c 22 5a 64 4c 4e 4b 5a 61 64 57 49 52 63 4e 48 54 49 48 52 58 4d 4a 47 45 54 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 44 62 4f 61 64 42 4b 42 4a 41 62 52 61 65 22 3a 31 2c 22 63 43 47 61 59 53 64 56 4b 53 59 44 59 42 5a 45 53 66 42 4b 45 4c 5a 51 41 46 46 51 5a 63 59 54 45 54 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 4c 65 4d 58 46 50 41 43 51 56 43 4d 49 51 52 57 53 45 5a 49 65 5a 41 66 57 64 56 54 22 3a 31 2c 22 66 65 62 64 53 41 4e 46 52 57 45 59 42 58 59 46 50 43 44 57 4f 4f 43 22
                                                                                                                            Data Ascii: bQFdMdbDcHDQITFSYYBae":1,"aXbSGcSZJODXQEaKdLOLOLMO":1,"YTTHbXeeVJWcWPaDMWOMHTcYeIHcUJPUFO":1,"ZdLNKZadWIRcNHTIHRXMJGET":1,"TfNZeFcCDbOadBKBJAbRae":1,"cCGaYSdVKSYDYBZESfBKELZQAFFQZcYTET":1,"dLYHMRFeRLeMXFPACQVCMIQRWSEZIeZAfWdVT":1,"febdSANFRWEYBXYFPCDWOOC"
                                                                                                                            2024-09-28 02:38:17 UTC7161INData Raw: 3a 31 2c 22 4f 4d 47 66 48 4d 41 44 44 62 64 45 42 56 51 59 54 22 3a 31 2c 22 49 4e 46 64 42 4f 53 45 4f 43 4d 48 4d 5a 4f 58 65 48 4f 22 3a 31 2c 22 49 5a 56 47 48 65 43 58 4c 48 62 56 46 66 46 65 4e 44 59 54 55 45 54 22 3a 31 2c 22 59 64 58 66 4d 4f 66 5a 50 44 48 43 4f 4c 5a 49 44 65 52 52 49 54 66 54 4c 4b 47 42 66 43 22 3a 31 2c 22 4f 4d 49 5a 45 50 51 42 61 46 42 64 64 51 4a 58 44 62 59 58 61 52 49 59 41 43 22 3a 31 2c 22 4f 4f 49 42 42 51 4d 41 4c 48 59 59 66 50 4e 65 4f 59 57 41 44 43 51 65 52 5a 46 64 42 4b 65 22 3a 31 2c 22 54 66 4e 5a 65 46 4f 42 55 4e 43 4b 41 55 4a 49 58 4f 22 3a 31 2c 22 48 48 59 50 46 4f 57 50 48 44 44 5a 46 55 64 4a 56 45 46 41 53 4f 64 49 43 46 48 55 65 55 61 65 22 3a 31 2c 22 48 4d 62 54 59 57 65 4c 4a 46 42 42 61 4d 45
                                                                                                                            Data Ascii: :1,"OMGfHMADDbdEBVQYT":1,"INFdBOSEOCMHMZOXeHO":1,"IZVGHeCXLHbVFfFeNDYTUET":1,"YdXfMOfZPDHCOLZIDeRRITfTLKGBfC":1,"OMIZEPQBaFBddQJXDbYXaRIYAC":1,"OOIBBQMALHYYfPNeOYWADCQeRZFdBKe":1,"TfNZeFOBUNCKAUJIXO":1,"HHYPFOWPHDDZFUdJVEFASOdICFHUeUae":1,"HMbTYWeLJFBBaME


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            93192.168.2.452087188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:16 UTC777OUTPOST /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 30
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:16 UTC30OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 6c 61 73 74 5f 6d 73 67 5f 69 64 3d 36 30 35 39 30 30 39
                                                                                                                            Data Ascii: code=wakdl&last_msg_id=6059009
                                                                                                                            2024-09-28 02:38:17 UTC658INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:17 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GV5NyJHm20afcH2XJURm6vu3UhG%2Bk9e9jimj2D2wER78KlpbSSop%2FsH7vKQxoCAWj%2ByF5fOXvnEm2g%2Fu87DJWrHbZ3WGZiOjBNrMv6bVKcakyl7BHR0s9S76xvOOjYt7gg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b3cb80f8cc3-EWR
                                                                                                                            2024-09-28 02:38:17 UTC51INData Raw: 32 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 22 4d 65 73 73 61 67 65 73 20 6e 6f 74 20 66 6f 75 6e 64 21 22 7d 0d 0a
                                                                                                                            Data Ascii: 2d{"status":false,"text":"Messages not found!"}
                                                                                                                            2024-09-28 02:38:17 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            94192.168.2.452088188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:17 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:17 UTC737INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:17 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2BG1rkhWYHoKtj0P55aYAVbjXhc60TvJCBvbdt1lqxApBtxtgA9T%2FokyQrFgee30SzTpwGizJth5axyvtk9haK81x%2BT%2FCR2p6iIQ7HmzC4rdOw1TJsmojHleUJSV2zfplQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b3d4d2d43e6-EWR
                                                                                                                            2024-09-28 02:38:17 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            95192.168.2.45209118.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:18 UTC1073OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaImcAIvzijSJ%2FvDpaf5LdSbxyCNoj63UU%2BO0z%2BnupLD9cRrVvO4bY4Fapwt00KjfprUOQgUoMRJ%2FL4YMjG7%2FxHIXZZf4dukMX4letpRfz%2FvoBMm6y2znIDbg%3D
                                                                                                                            2024-09-28 02:38:18 UTC2347INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:18 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:18 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:36 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPeeJvfKSKAJ7y79nWSxEdbWZBPtQXXL2a57izjPr0W9T5xQsdcEnIG2XZ4KJKJrS%2FMYI3KTZ0xij%2FVvZiFD5oeocYPNTJFi0T2ZVtywUIG8jKGxear%2Fj963Bki0Ld4Y0GKzFdgrbkAzV01AWJCnbO%2BQsEliSs0btpvg%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:18 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:18 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 6ce3814cb60a4c907ac701e60e4c1e5a.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: m86q-IO06c0EuDNRr8GXTbkfy5Y07Ir8no6B_eWCq6X83LbKTjf1nQ==
                                                                                                                            2024-09-28 02:38:18 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 53 43 34 5a 79 65 4d 55 77 54 7a 63 6d 36 53 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="SC4ZyeMUwTzcm6S"
                                                                                                                            2024-09-28 02:38:19 UTC16384INData Raw: 33 66 66 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 3ffa<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:19 UTC16384INData Raw: 0d 0a 36 37 61 30 0d 0a 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 20 22 2c 22 64 61 79 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 74 69 6d 65 5f 62 65 74 77 65 65 6e 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 2c 20 7b 74 69 6d 65 7d 20 e2 80 93 20 7b 74 69 6d 65 5f 75 6e 74 69 6c 7d 22 2c 22 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6f 6e 6c 79 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 66 72 6f 6d 22 3a 22 66 72 6f 6d 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d 65 7d 2c 20 7b 66 75
                                                                                                                            Data Ascii: 67a0month_name_until} {day_of_month_until} ","day_short_month_year_time_between":"{short_month_name} {day_of_month}, {full_year}, {time} {time_until}","short_month_only":"{short_month_name}","day_month_year_from":"from {month_name} {day_name}, {fu
                                                                                                                            2024-09-28 02:38:19 UTC10154INData Raw: 64 66 72 6f 6e 74 5f 73 64 2e 69 71 5f 6c 74 72 2f 61 63 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e
                                                                                                                            Data Ascii: dfront_sd.iq_ltr/ac73a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.bookin
                                                                                                                            2024-09-28 02:38:19 UTC16384INData Raw: 33 66 66 61 0d 0a 70 6f 73 65 3d 62 75 73 69 6e 65 73 73 22 2c 0a 66 65 5f 72 65 73 65 72 76 61 74 69 6f 6e 73 5f 75 72 6c 5f 74 72 61 76 65 6c 5f 70 75 72 70 6f 73 65 5f 6c 65 69 73 75 72 65 3a 20 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 6d 79 72 65 73 65 72 76 61 74 69 6f 6e 73 2e 68 74 6d 6c 3f 6c 61 62 65 6c 3d 67 65 6e 31 37 33 6e 72 2d 31 46 43 41 45 6f 67 67 49 34 36 41 64 49 4d 31 67 45 61 4b 63 43 69 41 45 42 6d 41 45 78 75 41 45 58 79 41 45 4d 32 41 45 42 36 41 45 42 2d 41 45 43 69 41 49 42 71 41 49 44 75 41 4b 61 32 4e 32 33 42 73 41 43 41 64 49 43 4a 44 55 35 5a 54 5a 68 4d 6a 41 34 4c 57 46 6d 4d 7a 63 74 4e 47 59 34 59 69 31 68 4f 44 41 78 4c 54 64 6d 4e 44 41 33 59 32 59 34 4f 54 56 69 4e 64 67 43
                                                                                                                            Data Ascii: 3ffapose=business",fe_reservations_url_travel_purpose_leisure: "https://secure.booking.com/myreservations.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AECiAIBqAIDuAKa2N23BsACAdICJDU5ZTZhMjA4LWFmMzctNGY4Yi1hODAxLTdmNDA3Y2Y4OTViNdgC
                                                                                                                            2024-09-28 02:38:19 UTC16384INData Raw: 0d 0a 31 36 38 64 37 0d 0a 51 54 4e 57 52 66 44 46 4f 22 3a 31 2c 22 49 4e 51 48 55 59 5a 49 45 50 66 4c 61 4d 62 41 4d 48 4d 5a 4d 51 63 43 56 4b 4c 4c 59 61 4b 58 4f 59 4f 22 3a 31 2c 22 63 4a 4e 53 43 44 4f 54 4d 4f 42 66 53 66 56 53 64 51 66 4c 43 63 56 4e 4a 4a 59 44 64 66 61 65 22 3a 31 2c 22 49 4e 46 64 42 4f 53 4f 54 42 4d 42 50 66 52 44 63 54 4c 45 58 65 22 3a 31 2c 22 4f 4d 47 66 48 4d 49 5a 64 46 53 55 43 4b 56 42 56 51 59 54 22 3a 31 2c 22 61 57 48 4d 56 4b 62 54 42 50 41 41 64 4b 4c 52 45 63 5a 65 62 57 4e 57 65 22 3a 31 2c 22 59 64 58 66 54 51 4e 41 56 57 50 4a 53 53 41 50 50 65 64 4a 4b 65 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 54 4c 45 41 52 52 52 4f 45 63 5a 55 59 61 54 54 43 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 4c 42 42 56 59 55 48
                                                                                                                            Data Ascii: 168d7QTNWRfDFO":1,"INQHUYZIEPfLaMbAMHMZMQcCVKLLYaKXOYO":1,"cJNSCDOTMOBfSfVSdQfLCcVNJJYDdfae":1,"INFdBOSOTBMBPfRDcTLEXe":1,"OMGfHMIZdFSUCKVBVQYT":1,"aWHMVKbTBPAAdKLREcZebWNWe":1,"YdXfTQNAVWPJSSAPPedJKe":1,"aWQOcYTBTLEARRROEcZUYaTTC":1,"dLYHMRFeRLBBVYUH
                                                                                                                            2024-09-28 02:38:19 UTC16384INData Raw: 59 61 4e 66 4c 54 52 65 22 3a 31 2c 22 4e 41 46 4c 65 4e 4c 53 53 49 42 63 62 54 59 55 53 64 66 54 66 61 52 4b 58 42 65 4d 50 4a 43 42 58 53 54 53 45 51 62 42 61 4f 52 62 44 64 52 52 54 22 3a 31 2c 22 47 44 49 63 64 53 5a 63 42 49 55 4a 4c 4d 44 50 43 53 45 61 4a 4d 57 46 4c 4c 45 63 59 43 22 3a 31 2c 22 4e 56 4e 5a 59 65 4a 4f 48 53 46 41 46 66 66 66 50 48 5a 65 4b 47 4e 56 46 4b 61 4f 4c 59 41 4e 41 61 64 63 48 65 22 3a 31 2c 22 59 64 58 66 4d 54 58 45 55 44 64 48 63 58 4a 45 42 53 52 56 66 42 4a 5a 56 63 57 43 54 5a 51 57 65 22 3a 31 2c 22 42 49 55 4a 4c 4d 46 50 41 41 4d 62 54 42 59 62 42 48 55 53 54 44 4c 4f 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55 66 52 46 47 64 4e 45 43 59 42 5a 53 42 56 4e 52 58 4d 46 44 46 61 54 22 3a 31 2c 22 61 57 51 4f 63 59
                                                                                                                            Data Ascii: YaNfLTRe":1,"NAFLeNLSSIBcbTYUSdfTfaRKXBeMPJCBXSTSEQbBaORbDdRRT":1,"GDIcdSZcBIUJLMDPCSEaJMWFLLEcYC":1,"NVNZYeJOHSFAFfffPHZeKGNVFKaOLYANAadcHe":1,"YdXfMTXEUDdHcXJEBSRVfBJZVcWCTZQWe":1,"BIUJLMFPAAMbTBYbBHUSTDLO":1,"NAFQCJWZUfRFGdNECYBZSBVNRXMFDFaT":1,"aWQOcY
                                                                                                                            2024-09-28 02:38:19 UTC16384INData Raw: 3a 32 2c 22 4e 61 4d 50 4f 55 62 41 4b 65 57 4a 61 66 64 4f 4c 59 64 54 57 4f 62 59 4e 59 55 4f 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 4a 65 61 49 4c 59 44 58 59 4c 49 65 56 66 56 52 52 66 47 43 46 43 22 3a 31 2c 22 48 57 41 46 59 44 45 5a 52 64 4a 62 45 4e 65 44 42 46 64 4d 4f 50 58 59 4a 55 43 65 61 65 22 3a 31 2c 22 48 57 41 46 59 46 54 66 62 4b 43 42 5a 64 54 59 4f 4d 59 57 65 22 3a 31 2c 22 66 54 50 49 4d 4c 65 66 48 41 45 44 54 55 61 44 57 4e 42 4f 46 4f 22 3a 31 2c 22 45 4a 51 4b 45 42 64 52 42 63 49 42 48 41 55 4e 53 54 41 65 4f 59 4a 50 55 53 54 4e 57 4a 63 45 41 5a 4b 42 57 47 57 65 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 56 4d 58 4e 50 58 50 52 4c 4f 22 3a 31 2c 22 49 4e 46 64 42 4f 53 54 50 65 56 63 44 48 42 59 41 5a 45 52 4d 43 22 3a 31 2c 22
                                                                                                                            Data Ascii: :2,"NaMPOUbAKeWJafdOLYdTWObYNYUO":1,"TfNZeFcCJeaILYDXYLIeVfVRRfGCFC":1,"HWAFYDEZRdJbENeDBFdMOPXYJUCeae":1,"HWAFYFTfbKCBZdTYOMYWe":1,"fTPIMLefHAEDTUaDWNBOFO":1,"EJQKEBdRBcIBHAUNSTAeOYJPUSTNWJcEAZKBWGWe":1,"aWQOcYTBVMXNPXPRLO":1,"INFdBOSTPeVcDHBYAZERMC":1,"
                                                                                                                            2024-09-28 02:38:19 UTC16384INData Raw: 43 45 55 4d 4b 41 61 46 59 4e 51 63 66 45 49 52 62 44 58 65 22 3a 31 2c 22 48 49 4e 5a 4a 4c 65 55 58 53 61 5a 62 64 4b 4e 4b 4e 4b 48 59 59 66 50 4e 52 41 50 4c 53 49 66 4a 64 59 4f 22 3a 31 2c 22 66 58 53 4d 4c 66 64 4a 48 42 4f 58 54 22 3a 31 2c 22 59 64 58 66 43 44 57 4f 4f 53 63 55 53 41 58 4b 64 63 45 49 5a 54 47 53 58 4e 51 42 53 42 62 51 62 43 22 3a 31 2c 22 49 4e 51 48 55 4e 50 49 46 64 64 66 4c 4c 46 4b 57 49 46 64 43 56 61 53 50 58 65 22 3a 31 2c 22 48 57 41 46 4e 65 4f 59 53 47 44 4d 53 43 61 49 66 58 66 51 59 54 22 3a 31 2c 22 61 64 55 41 41 49 46 64 64 57 54 59 55 41 4c 45 65 43 49 4f 62 54 64 52 54 4b 65 65 48 52 62 64 46 49 4b 65 22 3a 31 2c 22 4f 54 66 64 41 53 46 58 4f 56 41 55 56 53 5a 59 64 46 66 47 45 58 47 4f 22 3a 31 2c 22 42 4b 41
                                                                                                                            Data Ascii: CEUMKAaFYNQcfEIRbDXe":1,"HINZJLeUXSaZbdKNKNKHYYfPNRAPLSIfJdYO":1,"fXSMLfdJHBOXT":1,"YdXfCDWOOScUSAXKdcEIZTGSXNQBSBbQbC":1,"INQHUNPIFddfLLFKWIFdCVaSPXe":1,"HWAFNeOYSGDMSCaIfXfQYT":1,"adUAAIFddWTYUALEeCIObTdRTKeeHRbdFIKe":1,"OTfdASFXOVAUVSZYdFfGEXGO":1,"BKA
                                                                                                                            2024-09-28 02:38:19 UTC16384INData Raw: 4c 55 42 4f 22 3a 31 2c 22 48 57 41 46 4e 4c 54 4c 58 4d 48 55 58 65 22 3a 31 2c 22 59 57 59 48 61 55 57 50 48 44 44 50 43 62 4a 4f 44 4b 50 49 50 4f 44 57 65 22 3a 31 2c 22 61 58 54 66 4f 46 4a 5a 4d 59 65 4b 54 63 65 48 61 42 66 46 64 48 4d 5a 61 61 46 61 57 51 4f 63 54 45 59 4f 43 52 45 59 4e 49 64 4a 45 46 47 5a 53 58 54 22 3a 31 2c 22 55 45 54 54 4a 63 62 54 59 55 53 4d 66 65 66 56 55 64 42 41 46 51 4a 54 65 43 59 62 65 4c 54 22 3a 31 2c 22 48 57 41 46 59 44 48 49 57 44 66 53 4d 48 4f 52 65 65 48 65 22 3a 31 2c 22 48 4d 62 56 61 63 44 4e 56 41 62 63 59 54 45 54 22 3a 31 2c 22 50 50 58 47 53 43 5a 57 4e 4f 54 45 62 57 63 4b 5a 49 58 58 63 66 66 57 65 22 3a 32 2c 22 47 44 49 63 64 53 5a 63 66 55 59 51 4e 55 47 64 45 61 4a 4d 57 46 4c 4c 61 65 22 3a 31
                                                                                                                            Data Ascii: LUBO":1,"HWAFNLTLXMHUXe":1,"YWYHaUWPHDDPCbJODKPIPODWe":1,"aXTfOFJZMYeKTceHaBfFdHMZaaFaWQOcTEYOCREYNIdJEFGZSXT":1,"UETTJcbTYUSMfefVUdBAFQJTeCYbeLT":1,"HWAFYDHIWDfSMHOReeHe":1,"HMbVacDNVAbcYTET":1,"PPXGSCZWNOTEbWcKZIXXcffWe":2,"GDIcdSZcfUYQNUGdEaJMWFLLae":1


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            96192.168.2.452092188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:18 UTC402OUTGET /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:18 UTC603INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:18 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=umpUnbE5Y4hkBuF99UBxjSg%2FLNjx5OL6s64obZ4nxWB3Otq5pzeeecK8fMKoExhtmUPEhZYjr7%2BgKWeVpXDRBMFDO9nIOuwBMJdhwnnFW6tUIJ38EAptAKVZ4fzWs7KWrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b4518c032f4-EWR
                                                                                                                            2024-09-28 02:38:18 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            97192.168.2.452093188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:18 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:18 UTC733INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:18 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kkte8XoBAuVAYkyVHGAs%2BMqi2Pkf4ArZdQWhGjbfB%2B5YLP19OFeFeIWuhX9RpWf5ucRpOLgBl1iu1qr035ukPNWrjicbFU8kg5PgJTx50xRu%2FpqUqs88zBn1YXpRioYm0w%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b460c5642a9-EWR
                                                                                                                            2024-09-28 02:38:18 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            98192.168.2.452098188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:19 UTC782OUTPOST /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 10
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:19 UTC10OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c
                                                                                                                            Data Ascii: code=wakdl
                                                                                                                            2024-09-28 02:38:19 UTC654INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:19 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SeSynFYFChAChDohscJ%2Fnwh3wli0Top6lDEFIX6qAsiU0TjFSOzNpu5N2YyKiJAFTpxoVp9g5ryBZJAEhyrGqCo5D7OuElFvOBk9%2B774NEwiwPNPKruB3hpTmZHM9eaQUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b4bad0743d0-EWR
                                                                                                                            2024-09-28 02:38:19 UTC22INData Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a
                                                                                                                            Data Ascii: 10{"status":false}
                                                                                                                            2024-09-28 02:38:19 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            99192.168.2.452099188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:19 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:19 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:38:19 UTC656INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:19 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YQMgtGUpnkCYO7fqMvBfTbh%2BGuUOzN8rCp1cYFUCYUiqkwoynmC6a6CJyuzmc86Z4zDzuxxFjL%2FfiUZzqjq9V1Qjr2Ok0a%2FCak8GoctgJTyL3XxSoC3a061R88kKBKPLlg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b4c084e8c39-EWR
                                                                                                                            2024-09-28 02:38:19 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            100192.168.2.45209718.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:19 UTC1069OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPeeJvfKSKAJ7y79nWSxEdbWZBPtQXXL2a57izjPr0W9T5xQsdcEnIG2XZ4KJKJrS%2FMYI3KTZ0xij%2FVvZiFD5oeocYPNTJFi0T2ZVtywUIG8jKGxear%2Fj963Bki0Ld4Y0GKzFdgrbkAzV01AWJCnbO%2BQsEliSs0btpvg%3D
                                                                                                                            2024-09-28 02:38:20 UTC2349INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:19 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default"}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:19 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:38 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzmPXWgz8hIo9NnOlssH%2Brwe7r1IZhloK2Jjcmz69jzEhaDasPo48B%2B3fs9WdQis8Go3%2Fi3Vc%2FvTMgmB5CjogRFWIqtufM7OTt6wN0IAirvSkODiaCX2%2BIsPUPTaw4P259lDhSTegzWRGHpmi3AljRZshhSYATGxKm0%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:19 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:19 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 69387ca0ad24846d99bf107cb3133bf6.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: 0XkTworzCxWUeWvG2EdUjc1_SZJtx_Ous7DOUuIxghdtzaboqi0iYA==
                                                                                                                            2024-09-28 02:38:20 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 63 4b 65 6e 4c 73 58 69 41 77 45 6a 75 47 69 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="cKenLsXiAwEjuGi"
                                                                                                                            2024-09-28 02:38:20 UTC16384INData Raw: 64 62 38 30 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: db80<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:20 UTC16384INData Raw: 73 68 6f 72 74 5f 77 65 65 6b 64 61 79 5f 75 6e 74 69 6c 7d 2c 20 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 20 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 66 72 6f 6d 22 3a 22 66 72 6f 6d 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d 65 7d 22 2c 22 64 61 79 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 74 69 6d 65 5f 62 65 74 77 65 65 6e 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 2c 20 7b 74 69 6d 65 7d 20 e2 80 93 20 7b 74 69 6d 65 5f 75 6e 74 69 6c 7d 22 2c 22 75 78 5f 64 61 79 5f 6d 6f 6e 74 68 5f 6f 6e 22 3a 22 6f 6e 20 7b 6d 6f 6e 74 68 5f 32 7d 20 7b 64 61 79 5f 32 7d 22 2c 22 64 61 74
                                                                                                                            Data Ascii: short_weekday_until}, {short_month_name_until} {day_of_month_until} ","day_month_from":"from {month_name} {day_name}","day_short_month_time_between":"{short_month_name} {day_of_month}, {time} {time_until}","ux_day_month_on":"on {month_2} {day_2}","dat
                                                                                                                            2024-09-28 02:38:20 UTC16384INData Raw: 64 2e 69 71 5f 6c 74 72 2f 61 63 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 26 23 34
                                                                                                                            Data Ascii: d.iq_ltr/ac73a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.booking.com&#4
                                                                                                                            2024-09-28 02:38:20 UTC7048INData Raw: 58 61 57 42 58 46 4a 56 47 53 42 42 4e 50 4d 50 53 58 57 65 27 2c 0a 67 6e 73 53 70 75 6e 5f 72 65 6d 69 6e 64 65 72 4d 6f 64 61 6c 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 43 54 4f 59 45 53 45 56 66 46 54 64 4a 56 44 42 61 55 58 53 5a 57 63 50 58 51 55 4a 64 44 42 4b 43 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 4f 51 48 46 52 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 41 48 49 63 61 57 47 4e 50 5a 53 56 5a 4d 59 49 4f 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e
                                                                                                                            Data Ascii: XaWBXFJVGSBBNPMPSXWe',gnsSpun_reminderModalDismiss_index: 'TDXRPCTOYESEVfFTdJVDBaUXSZWcPXQUJdDBKC',gnsInsCrd_bannerView_index: 'TDXRPVRBKKJVbFPbVCMIWIOQHFRYDEZRae',gnsInsCrd_bannerCtaClick_index: 'TDXRPVRBKKJVbFPbVCMIWIAHIcaWGNPZSVZMYIO',gnsInsCrd_ban
                                                                                                                            2024-09-28 02:38:20 UTC16384INData Raw: 64 31 62 65 0d 0a 42 4d 42 54 56 64 56 50 61 45 53 4c 61 65 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 48 55 53 63 46 49 4d 4e 46 4d 62 63 4d 41 44 44 62 64 64 51 42 43 22 3a 31 2c 22 48 57 41 46 4e 65 4f 59 53 47 44 4d 46 4c 45 43 4a 58 44 62 4e 5a 61 65 22 3a 31 2c 22 59 54 42 59 4e 61 58 54 62 47 62 63 47 4f 41 59 53 59 43 22 3a 31 2c 22 65 44 55 64 47 56 48 4d 4c 4d 4a 64 58 4d 52 66 55 46 51 54 4b 61 56 57 58 46 5a 45 56 43 22 3a 31 2c 22 4f 4d 49 5a 64 46 53 55 43 4b 56 42 56 59 59 64 4a 54 41 63 48 65 22 3a 31 2c 22 55 45 54 54 4a 62 5a 57 4d 5a 66 50 41 4a 4e 4c 4a 50 47 45 62 66 57 45 42 4f 57 65 22 3a 31 2c 22 4f 4f 47 62 49 46 42 55 41 43 42 59 51 4c 4a 43 61 47 48 47 61 62 61 55 4a 42 45 66 64 66 54 52 65 22 3a 31 2c 22 50 50 58 47 53 43 5a
                                                                                                                            Data Ascii: d1beBMBTVdVPaESLae":1,"YdXfdKNKNKHUScFIMNFMbcMADDbddQBC":1,"HWAFNeOYSGDMFLECJXDbNZae":1,"YTBYNaXTbGbcGOAYSYC":1,"eDUdGVHMLMJdXMRfUFQTKaVWXFZEVC":1,"OMIZdFSUCKVBVYYdJTAcHe":1,"UETTJbZWMZfPAJNLJPGEbfWEBOWe":1,"OOGbIFBUACBYQLJCaGHGabaUJBEfdfTRe":1,"PPXGSCZ
                                                                                                                            2024-09-28 02:38:20 UTC16384INData Raw: 54 51 55 45 54 51 57 59 51 53 59 48 57 56 4e 4d 4a 4f 22 3a 31 2c 22 59 54 63 45 4a 4b 61 45 63 47 64 4e 4f 4e 65 58 53 5a 46 4e 59 53 48 4e 59 4f 22 3a 31 2c 22 48 4d 62 42 58 61 66 45 52 57 62 53 41 50 50 61 65 62 57 4e 57 65 22 3a 31 2c 22 65 57 66 49 46 56 4e 52 58 4d 46 44 46 61 54 22 3a 31 2c 22 61 57 51 4f 63 59 52 59 4e 50 4e 44 4a 64 51 4a 45 63 54 65 4b 48 4d 65 54 43 22 3a 31 2c 22 66 65 66 53 4b 65 45 46 4b 4d 42 4b 58 49 65 49 50 51 65 4a 4f 50 52 61 5a 4f 48 62 44 4e 51 4c 4f 4c 4f 4c 4d 4f 22 3a 31 2c 22 66 65 66 53 4b 65 45 46 56 46 4b 4f 55 59 4c 4c 4c 44 63 44 61 5a 65 56 56 4b 66 47 5a 61 54 61 54 61 45 54 22 3a 31 2c 22 48 4d 62 56 41 47 41 5a 54 62 57 4e 57 65 22 3a 31 2c 22 50 63 4a 4a 53 4a 49 52 41 44 4d 50 49 47 55 4f 22 3a 31 2c
                                                                                                                            Data Ascii: TQUETQWYQSYHWVNMJO":1,"YTcEJKaEcGdNONeXSZFNYSHNYO":1,"HMbBXafERWbSAPPaebWNWe":1,"eWfIFVNRXMFDFaT":1,"aWQOcYRYNPNDJdQJEcTeKHMeTC":1,"fefSKeEFKMBKXIeIPQeJOPRaZOHbDNQLOLOLMO":1,"fefSKeEFVFKOUYLLLDcDaZeVVKfGZaTaTaET":1,"HMbVAGAZTbWNWe":1,"PcJJSJIRADMPIGUO":1,
                                                                                                                            2024-09-28 02:38:20 UTC16384INData Raw: 5a 57 4d 53 47 45 4e 49 66 57 4d 50 64 4b 48 48 56 50 5a 4a 42 63 62 54 59 55 46 4f 22 3a 31 2c 22 4e 41 44 50 46 42 62 53 46 63 46 58 65 55 4e 5a 57 50 50 4c 62 53 49 50 52 4c 58 65 22 3a 31 2c 22 66 65 62 64 53 41 4e 46 52 57 64 4e 48 49 51 57 50 48 44 44 57 65 22 3a 31 2c 22 63 43 48 4f 62 49 50 50 51 46 46 4e 63 55 57 42 5a 45 57 61 53 64 64 4b 4e 4b 4e 4b 57 65 22 3a 31 2c 22 48 43 5a 45 49 42 53 59 50 47 54 50 64 55 46 53 62 65 43 4a 45 58 63 43 48 48 51 4a 62 48 46 52 54 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 51 63 44 61 49 50 61 4d 4e 66 51 43 63 62 4e 58 47 44 4a 61 65 22 3a 31 2c 22 48 57 41 46 59 54 66 4a 61 41 4b 44 66 57 56 64 61 57 4e 42 65 57 65 22 3a 31 2c 22 62 51 62 59 57 58 46 5a 45 56 57 4b 4d 54 55 42 56 58 61 43 4e 46 45 55 58 50
                                                                                                                            Data Ascii: ZWMSGENIfWMPdKHHVPZJBcbTYUFO":1,"NADPFBbSFcFXeUNZWPPLbSIPRLXe":1,"febdSANFRWdNHIQWPHDDWe":1,"cCHObIPPQFFNcUWBZEWaSddKNKNKWe":1,"HCZEIBSYPGTPdUFSbeCJEXcCHHQJbHFRT":1,"dLYHMRFeRQcDaIPaMNfQCcbNXGDJae":1,"HWAFYTfJaAKDfWVdaWNBeWe":1,"bQbYWXFZEVWKMTUBVXaCNFEUXP
                                                                                                                            2024-09-28 02:38:20 UTC4550INData Raw: 4c 50 63 56 57 52 66 47 41 53 4f 64 41 5a 66 4c 42 5a 44 44 44 42 4d 64 65 58 65 22 3a 31 2c 22 4e 56 4e 5a 57 55 61 4d 5a 58 52 55 52 4e 65 4a 4d 42 59 47 61 65 50 54 57 45 55 56 56 4f 48 54 22 3a 31 2c 22 48 4d 62 56 41 47 42 4f 58 42 61 58 66 4d 50 58 63 52 55 53 43 5a 43 22 3a 31 2c 22 66 58 53 4d 4c 66 64 4a 48 42 4f 58 54 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 5a 4e 54 62 4a 52 58 46 4e 4d 4b 64 53 51 62 46 66 64 4f 4b 56 53 42 62 51 62 43 22 3a 31 2c 22 4e 56 4e 5a 59 65 4a 65 56 59 5a 58 44 4d 55 42 64 41 55 52 41 66 50 56 54 22 3a 31 2c 22 50 5a 65 51 46 63 65 48 64 59 66 53 4d 4d 52 63 55 53 43 5a 43 22 3a 31 2c 22 65 57 48 4d 41 64 65 4f 59 44 47 44 47 54 51 59 52 58 44 55 63 4c 53 4e 53 42 58 65 22 3a 31 2c 22 50 50 58 47 53 43 5a 57 61
                                                                                                                            Data Ascii: LPcVWRfGASOdAZfLBZDDDBMdeXe":1,"NVNZWUaMZXRURNeJMBYGaePTWEUVVOHT":1,"HMbVAGBOXBaXfMPXcRUSCZC":1,"fXSMLfdJHBOXT":1,"YdXfdKNKNKZNTbJRXFNMKdSQbFfdOKVSBbQbC":1,"NVNZYeJeVYZXDMUBdAURAfPVT":1,"PZeQFceHdYfSMMRcUSCZC":1,"eWHMAdeOYDGDGTQYRXDUcLSNSBXe":1,"PPXGSCZWa
                                                                                                                            2024-09-28 02:38:20 UTC16384INData Raw: 38 30 34 34 0d 0a 45 4f 63 59 52 49 53 55 61 50 5a 64 4d 63 43 63 43 63 43 43 22 3a 31 2c 22 48 56 50 5a 64 5a 57 4d 59 58 53 55 50 57 4d 50 54 65 4b 62 54 44 4f 43 61 4a 65 4b 65 22 3a 31 2c 22 62 4c 64 4c 4f 4c 4f 4c 4f 4f 54 49 4e 55 46 44 49 4e 46 50 49 57 42 48 54 22 3a 31 2c 22 41 45 41 46 5a 64 54 59 4d 49 61 59 66 50 48 5a 56 55 66 43 52 65 22 3a 31 2c 22 59 54 54 48 62 58 65 65 41 65 4a 49 4e 55 46 4a 55 41 63 57 4d 48 54 63 66 61 4e 4b 65 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 62 42 43 64 4a 61 62 65 51 63 4a 65 66 55 55 59 63 41 51 59 49 66 62 53 54 52 66 45 4b 58 4f 22 3a 31 2c 22 59 54 42 48 4d 62 41 61 42 63 48 4f 47 5a 57 46 66 52 62 64 50 4e 5a 46 5a 65 61 50 51 51 44 49 56 58 4f 22 3a 31 2c 22 62 51 47 42 42 4f 58 42 62 51 47 57 46 42 61
                                                                                                                            Data Ascii: 8044EOcYRISUaPZdMcCcCcCC":1,"HVPZdZWMYXSUPWMPTeKbTDOCaJeKe":1,"bLdLOLOLOOTINUFDINFPIWBHT":1,"AEAFZdTYMIaYfPHZVUfCRe":1,"YTTHbXeeAeJINUFJUAcWMHTcfaNKe":1,"aWQOcYTBbBCdJabeQcJefUUYcAQYIfbSTRfEKXO":1,"YTBHMbAaBcHOGZWFfRbdPNZFZeaPQQDIVXO":1,"bQGBBOXBbQGWFBa


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            101192.168.2.452100188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:19 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:20 UTC767INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:20 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZApVeXwizaqQLER4lAnJRE3ykJr%2BFjl2KxfO5ErItJFVC52mFxQbeU6R1hJjte6x5cw4jsJBXTbGGMlP2VGHTb5aX1a0Nz%2BOquj5Jtg4gOV8r%2B6QVNtvoWQ1Gj%2BNW%2B9x8g%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b4e3dd343dc-EWR
                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                            2024-09-28 02:38:20 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            102192.168.2.454128188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:20 UTC412OUTGET /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:21 UTC599INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:21 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B2rbiqwFKQGFg83tYmeHVnHeXBJ59oDjupkgD6s8iuE4GgXbfNd3HezKjhrwNsaRcTC9ai2blBKVSqGJqqCaQONJHvx1vzorBC27gPb8X4KAzHVyfHAmjIesNAb5JSqXtg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b5428fc43e7-EWR
                                                                                                                            2024-09-28 02:38:21 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            103192.168.2.454129188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:20 UTC409OUTGET /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:21 UTC605INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:21 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aMBhPmthZfUhPa9G9tSvL3Vr%2BD0IFhwu%2BtCgWQxiiMXqfHWPnfX1PIYfu9VJwwPFgXY3GmIge0RvK5ilKZFCy5Fsyna1ePmLlfg0gwyLWLSsExRNZt3Ptg6l39fJ43%2B0iQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b54ae4b437b-EWR
                                                                                                                            2024-09-28 02:38:21 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            104192.168.2.45412718.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:20 UTC1071OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzmPXWgz8hIo9NnOlssH%2Brwe7r1IZhloK2Jjcmz69jzEhaDasPo48B%2B3fs9WdQis8Go3%2Fi3Vc%2FvTMgmB5CjogRFWIqtufM7OTt6wN0IAirvSkODiaCX2%2BIsPUPTaw4P259lDhSTegzWRGHpmi3AljRZshhSYATGxKm0%3D
                                                                                                                            2024-09-28 02:38:21 UTC2786INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:21 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800,"group":"default"}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:21 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:42 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhC2Bxpad7rBkhZNPRfETCJt%2FgmTrI%2B0JxRKnul6OEl0y1dJ557oF4nyB5%2Fa5i4Qn%2FpCERJ6OAwf4FCDjW1nF4ZdQ02BXlpO7vLWXWodH8NGtzYhktZLZlGcpqWKYWSxNqvh2Skcsc5h0q5J2SsSSWjATobmHqwwQyw%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:21 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:21 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            content-security-policy-report-only: base-uri 'none'; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=146&pid=14f8128e3a7f02e4&e=UmFuZG9tSVYkc2RlIyh9YYYdGuViorKPL_O48BsvHEaN6XQNqn7j19crUBBRHz3o; script-src 'self' 'nonce-OZwN1FIACBqzU9c' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' 'sha256-iry7oJKoKJ+9HSjmU3E1TlRlpSesJWZ1vapuUz2MP38='
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 62e2e45895008240d70f26081269c850.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: _drw6mejrG7_7FLRctUJ8ZwCI9GZJHk49Zrtb_t5E0dg9MqiscNB8A==
                                                                                                                            2024-09-28 02:38:21 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 4f 5a 77 4e 31 46 49 41 43 42 71 7a 55 39 63 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="OZwN1FIACBqzU9c"
                                                                                                                            2024-09-28 02:38:22 UTC13986INData Raw: 33 36 39 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 369a<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:22 UTC16384INData Raw: 64 39 35 30 0d 0a 6c 61 63 65 28 27 6e 6f 4a 53 27 2c 20 27 27 29 20 2b 20 27 20 68 61 73 4a 53 27 3b 0a 76 61 72 20 62 5f 65 78 70 65 72 69 6d 65 6e 74 73 20 3d 20 7b 7d 2c 20 57 49 44 54 48 2c 20 42 20 3d 20 77 69 6e 64 6f 77 2e 62 6f 6f 6b 69 6e 67 20 3d 20 7b 0a 5f 6f 6e 66 6c 79 3a 20 5b 5d 2c 20 2f 2f 20 22 6f 6e 20 74 68 65 20 66 6c 79 22 20 66 75 6e 63 74 69 6f 6e 73 2c 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 20 61 73 20 73 6f 6f 6e 20 61 73 20 65 78 74 65 72 6e 61 6c 20 6a 73 20 66 69 6c 65 73 20 77 65 72 65 20 6c 6f 61 64 65 64 0a 64 65 76 54 6f 6f 6c 73 3a 20 7b 0a 74 72 61 63 6b 65 64 45 78 70 65 72 69 6d 65 6e 74 73 3a 20 5b 5d 0a 7d 2c 0a 75 73 65 72 3a 20 7b 0a 7d 2c 0a 65 6e 76 20 3a 20 7b 0a 69 73 52 65 74 69 6e 61 20 3a 20 77
                                                                                                                            Data Ascii: d950lace('noJS', '') + ' hasJS';var b_experiments = {}, WIDTH, B = window.booking = {_onfly: [], // "on the fly" functions, will be executed as soon as external js files were loadeddevTools: {trackedExperiments: []},user: {},env : {isRetina : w
                                                                                                                            2024-09-28 02:38:22 UTC16384INData Raw: 67 68 74 65 73 74 3a 20 22 23 46 46 46 30 46 30 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 64 61 72 6b 3a 20 22 23 30 30 36 36 30 37 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 3a 20 22 23 30 30 38 30 30 39 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 3a 20 22 23 39 37 45 35 39 43 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 72 3a 20 22 23 45 37 46 44 45 39 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 73 74 3a 20 22 23 46 31 46 45 46 32 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 3a 20 22 23 30 30 37 31 43 32 22 2c 0a 62 75 69 5f
                                                                                                                            Data Ascii: ghtest: "#FFF0F0",bui_color_constructive_dark: "#006607",bui_color_constructive: "#008009",bui_color_constructive_light: "#97E59C",bui_color_constructive_lighter: "#E7FDE9",bui_color_constructive_lightest: "#F1FEF2",bui_color_action: "#0071C2",bui_
                                                                                                                            2024-09-28 02:38:22 UTC16384INData Raw: 74 79 30 32 47 4f 2d 79 43 39 59 45 36 55 61 5a 42 62 70 2d 4c 62 62 79 77 41 38 39 70 6a 4e 50 73 65 32 78 73 7a 38 52 6b 4e 36 54 2d 72 56 52 5f 78 78 6e 44 72 41 49 4e 59 4d 76 55 46 45 6f 6f 6e 72 47 6f 48 47 51 59 58 55 5f 53 70 6d 4d 75 30 6c 31 49 55 6d 74 34 59 69 78 50 6d 4a 57 71 45 30 73 72 54 44 50 62 67 72 31 73 5a 77 53 36 34 67 7a 4c 31 6e 50 34 62 4b 45 70 65 4d 31 39 73 48 6e 70 51 51 6a 4d 6a 77 54 45 79 78 36 31 35 35 4d 4b 54 41 67 6c 76 77 35 76 31 52 41 71 78 44 6a 39 6d 56 34 79 70 67 50 77 57 63 41 54 33 37 6b 50 63 4c 66 54 5a 32 69 4f 42 37 30 69 74 38 53 57 6a 49 7a 32 32 53 62 6c 65 34 75 79 61 32 65 30 2d 4f 6d 77 4f 79 58 43 62 5f 37 68 46 6e 71 74 70 6f 30 4f 6e 58 67 43 36 75 61 74 54 75 58 34 62 54 35 43 53 30 62 32 5a 7a
                                                                                                                            Data Ascii: ty02GO-yC9YE6UaZBbp-LbbywA89pjNPse2xsz8RkN6T-rVR_xxnDrAINYMvUFEoonrGoHGQYXU_SpmMu0l1IUmt4YixPmJWqE0srTDPbgr1sZwS64gzL1nP4bKEpeM19sHnpQQjMjwTEyx6155MKTAglvw5v1RAqxDj9mV4ypgPwWcAT37kPcLfTZ2iOB70it8SWjIz22Sble4uya2e0-OmwOyXCb_7hFnqtpo0OnXgC6uatTuX4bT5CS0b2Zz
                                                                                                                            2024-09-28 02:38:22 UTC6488INData Raw: 48 44 54 4a 64 52 65 4c 47 4d 65 45 63 59 50 66 66 63 56 44 5a 42 5a 4d 4f 22 3a 31 2c 22 63 43 47 61 59 53 64 4d 62 59 53 66 63 64 52 65 4c 62 46 5a 56 47 41 5a 62 61 54 61 54 61 45 54 22 3a 31 2c 22 56 4d 49 54 63 5a 4a 4c 43 5a 42 66 61 4e 4b 65 22 3a 31 31 2c 22 5a 4f 64 47 4a 51 46 63 46 5a 57 42 5a 45 57 61 53 64 49 42 66 46 64 48 56 54 22 3a 31 7d 2c 22 66 22 3a 7b 22 45 4c 53 58 50 65 4a 49 50 51 4a 51 56 56 64 4e 5a 54 65 43 46 45 44 59 63 48 56 50 48 41 48 55 48 65 22 3a 31 2c 22 4e 41 46 4c 66 4f 64 41 53 55 54 62 57 54 48 4e 4f 44 5a 55 42 47 53 63 53 55 48 48 56 50 5a 43 22 3a 31 2c 22 4e 41 52 45 46 5a 62 44 42 45 53 63 58 51 4f 56 50 46 41 65 4c 54 22 3a 31 2c 22 49 5a 56 47 48 65 43 58 4c 4a 54 56 46 66 46 65 4e 44 59 54 55 45 54 22 3a 31
                                                                                                                            Data Ascii: HDTJdReLGMeEcYPffcVDZBZMO":1,"cCGaYSdMbYSfcdReLbFZVGAZbaTaTaET":1,"VMITcZJLCZBfaNKe":11,"ZOdGJQFcFZWBZEWaSdIBfFdHVT":1},"f":{"ELSXPeJIPQJQVVdNZTeCFEDYcHVPHAHUHe":1,"NAFLfOdASUTbWTHNODZUBGScSUHHVPZC":1,"NAREFZbDBEScXQOVPFAeLT":1,"IZVGHeCXLJTVFfFeNDYTUET":1
                                                                                                                            2024-09-28 02:38:22 UTC16384INData Raw: 34 35 65 32 0d 0a 55 52 55 52 4e 4c 56 42 48 56 52 56 4b 61 4d 55 48 47 65 46 5a 42 51 49 4f 22 3a 31 2c 22 59 4e 61 58 54 61 53 64 4e 42 55 59 4c 4d 63 58 54 22 3a 31 2c 22 48 57 41 46 59 54 62 53 49 41 57 54 57 45 55 63 53 62 57 52 57 43 48 4a 57 65 22 3a 31 2c 22 65 45 42 5a 46 4a 5a 65 4f 51 50 54 4c 4b 47 42 66 4a 46 53 45 4f 55 57 44 4b 65 22 3a 31 2c 22 48 56 50 5a 64 5a 47 49 47 50 65 66 61 62 53 57 55 48 62 44 41 56 62 42 48 4d 5a 4e 43 4a 4f 22 3a 31 2c 22 65 45 42 5a 46 4a 5a 65 4f 51 50 54 4a 41 41 64 62 47 49 65 46 66 4d 63 43 49 58 56 4b 5a 59 5a 41 5a 53 47 61 44 66 65 48 54 22 3a 31 2c 22 48 57 41 46 59 53 47 5a 58 62 54 59 43 22 3a 31 2c 22 54 65 43 4f 65 4a 50 51 5a 57 43 54 51 51 46 49 62 61 61 4b 4a 46 41 4e 64 53 53 46 49 47 47 58 4f
                                                                                                                            Data Ascii: 45e2URURNLVBHVRVKaMUHGeFZBQIO":1,"YNaXTaSdNBUYLMcXT":1,"HWAFYTbSIAWTWEUcSbWRWCHJWe":1,"eEBZFJZeOQPTLKGBfJFSEOUWDKe":1,"HVPZdZGIGPefabSWUHbDAVbBHMZNCJO":1,"eEBZFJZeOQPTJAAdbGIeFfMcCIXVKZYZAZSGaDfeHT":1,"HWAFYSGZXbTYC":1,"TeCOeJPQZWCTQQFIbaaKJFANdSSFIGGXO
                                                                                                                            2024-09-28 02:38:22 UTC1514INData Raw: 49 50 48 65 22 3a 31 2c 22 62 4c 45 42 42 56 59 55 49 5a 64 44 4d 63 4d 64 50 46 4b 46 42 4f 50 64 51 56 4d 53 64 61 48 4d 56 48 53 47 46 4f 22 3a 31 2c 22 50 57 42 4a 62 65 42 61 53 50 54 61 46 49 66 4d 53 4a 51 46 42 42 42 63 51 59 41 49 52 4b 65 22 3a 31 2c 22 58 64 4b 59 45 47 46 41 5a 65 56 4e 4c 44 4a 46 46 4b 4d 45 63 45 51 50 44 48 43 4f 4c 5a 43 44 57 4f 4f 43 22 3a 31 2c 22 65 45 42 5a 46 4a 5a 65 4f 51 50 62 62 46 43 65 61 50 4c 59 4e 52 66 57 50 47 4f 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 48 42 54 4c 45 56 44 45 52 64 61 66 4e 5a 46 65 65 53 64 50 58 4d 50 50 57 66 5a 58 52 54 22 3a 31 2c 22 49 5a 45 53 61 5a 45 59 5a 44 45 62 65 4e 42 5a 58 54 51 65 46 58 55 46 63 4e 51 53 59 53 42 4e 61 4b 65 22 3a 31 2c 22 61 58 54 66 4f 46 4a 5a 4d 59 65
                                                                                                                            Data Ascii: IPHe":1,"bLEBBVYUIZdDMcMdPFKFBOPdQVMSdaHMVHSGFO":1,"PWBJbeBaSPTaFIfMSJQFBBBcQYAIRKe":1,"XdKYEGFAZeVNLDJFFKMEcEQPDHCOLZCDWOOC":1,"eEBZFJZeOQPbbFCeaPLYNRfWPGO":1,"aWQOcYTBHBTLEVDERdafNZFeeSdPXMPPWfZXRT":1,"IZESaZEYZDEbeNBZXTQeFXUFcNQSYSBNaKe":1,"aXTfOFJZMYe
                                                                                                                            2024-09-28 02:38:22 UTC8957INData Raw: 32 32 66 35 0d 0a 44 57 65 22 3a 31 2c 22 4e 41 46 51 51 41 46 4a 5a 65 4f 51 5a 58 62 53 59 4a 4e 65 44 48 46 4d 4d 57 65 22 3a 31 2c 22 62 51 4b 50 46 4b 5a 61 48 45 50 49 62 62 61 41 44 42 4a 63 54 54 58 65 22 3a 31 2c 22 59 64 58 66 43 44 57 4f 4f 53 63 55 53 66 42 43 57 58 46 5a 45 56 43 22 3a 31 2c 22 4e 56 4e 5a 59 65 4a 59 51 47 41 52 57 53 64 5a 63 49 59 55 64 53 59 4f 22 3a 31 2c 22 42 43 64 47 59 42 45 52 42 64 53 49 46 65 44 61 48 58 46 43 56 43 47 49 5a 4d 4f 22 3a 31 2c 22 4e 41 46 4c 65 4e 51 51 41 4e 41 42 61 4f 52 62 44 64 52 4a 5a 47 62 47 59 4a 4f 22 3a 31 2c 22 62 51 45 41 48 53 47 56 54 64 57 50 42 51 47 4d 5a 62 65 4b 52 4a 64 50 57 4b 50 4e 45 54 22 3a 31 2c 22 63 43 63 43 63 43 44 50 43 44 43 63 42 55 48 42 5a 4e 58 4d 52 55 4d 56
                                                                                                                            Data Ascii: 22f5DWe":1,"NAFQQAFJZeOQZXbSYJNeDHFMMWe":1,"bQKPFKZaHEPIbbaADBJcTTXe":1,"YdXfCDWOOScUSfBCWXFZEVC":1,"NVNZYeJYQGARWSdZcIYUdSYO":1,"BCdGYBERBdSIFeDaHXFCVCGIZMO":1,"NAFLeNQQANABaORbDdRJZGbGYJO":1,"bQEAHSGVTdWPBQGMZbeKRJdPWKPNET":1,"cCcCcCDPCDCcBUHBZNXMRUMV
                                                                                                                            2024-09-28 02:38:22 UTC16384INData Raw: 38 35 64 63 0d 0a 63 50 54 63 65 4d 62 56 5a 45 48 65 22 3a 31 2c 22 50 63 56 65 4a 65 49 66 4d 50 58 63 52 46 52 57 5a 58 4a 58 52 41 58 5a 5a 42 4f 46 4f 22 3a 32 2c 22 66 65 61 53 4c 41 5a 57 41 63 46 43 4e 42 54 4c 45 4b 58 4a 59 58 54 22 3a 31 2c 22 63 51 59 49 4d 64 55 59 62 65 59 59 5a 56 44 50 50 58 4c 64 48 55 59 57 43 47 54 4c 53 47 51 49 4f 22 3a 31 2c 22 49 5a 42 54 64 46 50 66 42 4b 53 41 45 4c 53 58 5a 4d 64 4c 64 52 4d 4e 55 52 65 22 3a 31 2c 22 5a 63 53 49 63 63 65 4e 4a 4d 46 63 4f 65 51 4e 55 50 47 55 66 4a 4b 44 4b 61 54 22 3a 31 2c 22 61 57 51 4f 63 62 4a 66 45 44 42 4f 53 4d 65 65 41 46 53 55 43 4b 56 65 45 4e 4b 65 22 3a 31 2c 22 4f 4f 49 42 54 56 58 49 4e 4c 63 4d 5a 4e 45 64 5a 41 47 42 66 54 4b 65 22 3a 31 2c 22 41 64 5a 5a 4d 51
                                                                                                                            Data Ascii: 85dccPTceMbVZEHe":1,"PcVeJeIfMPXcRFRWZXJXRAXZZBOFO":2,"feaSLAZWAcFCNBTLEKXJYXT":1,"cQYIMdUYbeYYZVDPPXLdHUYWCGTLSGQIO":1,"IZBTdFPfBKSAELSXZMdLdRMNURe":1,"ZcSIcceNJMFcOeQNUPGUfJKDKaT":1,"aWQOcbJfEDBOSMeeAFSUCKVeENKe":1,"OOIBTVXINLcMZNEdZAGBfTKe":1,"AdZZMQ


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            105192.168.2.454135188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:21 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:22 UTC731INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:22 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MNyFRP70ebTkMamVB6PZbd3ZKXx00DfOCF3lJw5W340zVRzTF8%2B4zaj652%2Fo2K0CGhi5nqz7cmBGORHfrjbi3SOa6AK1iqz9JU2mnmNuSXJxPj9lmpr2lJtFkEbEPXQA0g%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b5be9528ccc-EWR
                                                                                                                            2024-09-28 02:38:22 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            106192.168.2.454134188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:21 UTC777OUTPOST /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 30
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:21 UTC30OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 6c 61 73 74 5f 6d 73 67 5f 69 64 3d 36 30 35 39 30 30 39
                                                                                                                            Data Ascii: code=wakdl&last_msg_id=6059009
                                                                                                                            2024-09-28 02:38:22 UTC658INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:22 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WFcFsdOBF%2FuRqPnRJpczW40l4fZjFXFk7FQ0L092yRPLrDncZNh0Jo1ngjh7wVdizAxPcOzAgGQcPkjAQqGsVSaOFCfai7iIT5YI%2BXqd%2BhsM4YofkXmr%2B9c7ZgWoGXQa7A%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b5bcd777cae-EWR
                                                                                                                            2024-09-28 02:38:22 UTC51INData Raw: 32 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 22 4d 65 73 73 61 67 65 73 20 6e 6f 74 20 66 6f 75 6e 64 21 22 7d 0d 0a
                                                                                                                            Data Ascii: 2d{"status":false,"text":"Messages not found!"}
                                                                                                                            2024-09-28 02:38:22 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            107192.168.2.45413718.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:23 UTC1069OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhC2Bxpad7rBkhZNPRfETCJt%2FgmTrI%2B0JxRKnul6OEl0y1dJ557oF4nyB5%2Fa5i4Qn%2FpCERJ6OAwf4FCDjW1nF4ZdQ02BXlpO7vLWXWodH8NGtzYhktZLZlGcpqWKYWSxNqvh2Skcsc5h0q5J2SsSSWjATobmHqwwQyw%3D
                                                                                                                            2024-09-28 02:38:23 UTC2784INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:23 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800,"group":"default"}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:23 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:46 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhAS3w%2BzKIF8PH3kbVHzCRrpzcaiVaQ1VIjoRFyDDemhVwjD1yZx5wNog2SI1jfsQz%2BUkl7WxE5rwF6a7mTeuydN9Cz0v%2BN1HGgFRXHN93XYmOWSLhH1V9uKZdtImFQNRPlCaB6Fu2T65IDSYuYNzU4Tog0PI1EAm5I%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:23 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:23 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            content-security-policy-report-only: base-uri 'none'; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=146&pid=13ca128fc9a304b9&e=UmFuZG9tSVYkc2RlIyh9YYYdGuViorKPsSUc2aN_YOR0Lyb0JwXYD-jvZvyAN7dD; script-src 'self' 'nonce-wT7sJ0LXO1ouciv' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' 'sha256-iry7oJKoKJ+9HSjmU3E1TlRlpSesJWZ1vapuUz2MP38='
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 a51af242bb87a51c6b17ed13ee788db8.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: lmVqwv7bwAr1Bm2Q3grDPJ8bDm6lKDxmPkMlLj3_WzYhR94gGqZmXQ==
                                                                                                                            2024-09-28 02:38:24 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 77 54 37 73 4a 30 4c 58 4f 31 6f 75 63 69 76 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="wT7sJ0LXO1ouciv"
                                                                                                                            2024-09-28 02:38:24 UTC15434INData Raw: 33 63 34 32 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 3c42<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:24 UTC16384INData Raw: 31 38 37 65 32 0d 0a 65 6e 27 2c 0a 22 62 5f 68 61 73 5f 76 61 6c 69 64 5f 64 61 74 65 73 22 3a 20 30 2c 0a 22 62 5f 63 6f 75 6e 74 72 79 63 6f 64 65 22 20 3a 20 27 27 2c 0a 22 62 5f 67 75 65 73 74 5f 63 6f 75 6e 74 72 79 22 20 3a 20 27 75 73 27 2c 0a 22 62 5f 6c 6f 63 61 6c 65 22 20 3a 20 27 65 6e 2d 75 73 27 2c 0a 22 62 5f 6c 61 6e 67 5f 66 6f 72 5f 75 72 6c 22 20 3a 20 27 65 6e 2d 75 73 27 2c 0a 22 62 5f 74 68 69 73 5f 75 72 63 68 69 6e 22 20 3a 20 27 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 6c 61 62 65 6c 3d 67 65 6e 31 37 33 6e 72 2d 31 46 43 41 45 6f 67 67 49 34 36 41 64 49 4d 31 67 45 61 4b 63 43 69 41 45 42 6d 41 45 78 75 41 45 58 79 41 45 4d 32 41 45 42 36 41 45 42 2d 41 45 43 69 41 49 42 71 41 49 44 75 41 4b 66 32 4e 32 33 42 73 41 43 41 64 49 43 4a
                                                                                                                            Data Ascii: 187e2en',"b_has_valid_dates": 0,"b_countrycode" : '',"b_guest_country" : 'us',"b_locale" : 'en-us',"b_lang_for_url" : 'en-us',"b_this_urchin" : '/index.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AECiAIBqAIDuAKf2N23BsACAdICJ
                                                                                                                            2024-09-28 02:38:24 UTC16384INData Raw: 34 65 33 36 64 37 34 65 66 65 64 39 33 64 61 66 37 34 66 32 62 34 66 66 37 30 2e 63 73 73 27 2c 0a 61 73 79 6e 63 5f 6c 69 73 74 73 5f 6a 73 3a 20 27 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6a 73 2f 61 73 79 6e 63 5f 6c 69 73 74 73 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2f 32 31 36 62 32 66 35 37 33 63 31 39 65 62 61 36 36 33 66 36 38 36 64 64 38 66 37 63 64 34 37 34 37 61 34 64 34 63 62 37 2e 6a 73 27 2c 0a 61 73 79 6e 63 5f 77 70 6d 5f 6f 76 65 72 6c 61 79 5f 63 73 73 3a 20 27 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 63 73 73 2f 61 73 79 6e 63 5f 77 70 6d 5f 6f 76 65 72 6c 61 79 5f 61 73 73 65 74 73 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2e 69 71 5f
                                                                                                                            Data Ascii: 4e36d74efed93daf74f2b4ff70.css',async_lists_js: 'https://cf.bstatic.com/static/js/async_lists_cloudfront_sd/216b2f573c19eba663f686dd8f7cd4747a4d4cb7.js',async_wpm_overlay_css: 'https://cf.bstatic.com/static/css/async_wpm_overlay_assets_cloudfront_sd.iq_
                                                                                                                            2024-09-28 02:38:24 UTC16384INData Raw: 22 2c 0a 62 5f 6f 66 66 69 63 69 61 6c 5f 63 6f 6e 74 69 6e 65 6e 74 3a 20 22 22 2c 0a 62 5f 64 65 61 6c 73 5f 63 6f 6e 74 69 6e 65 6e 74 73 20 3a 20 22 22 2c 0a 62 5f 6d 65 73 73 65 6e 67 65 72 5f 75 72 6c 3a 20 27 27 2c 0a 62 5f 6f 70 65 6e 5f 6d 65 73 73 65 6e 67 65 72 3a 20 66 61 6c 73 65 2c 0a 62 5f 69 73 5f 61 73 69 61 6e 5f 75 73 65 72 3a 20 27 27 2c 0a 62 5f 64 61 79 73 5f 74 6f 5f 63 68 65 63 6b 69 6e 3a 20 27 27 2c 0a 62 5f 65 78 74 72 61 5f 61 6a 61 78 5f 68 65 61 64 65 72 73 3a 20 7b 7d 2c 0a 65 74 5f 64 65 62 75 67 5f 6c 65 76 65 6c 3a 20 27 30 27 2c 0a 63 6e 5f 6d 6f 64 61 6c 5f 65 78 70 5f 65 6c 69 67 69 62 6c 65 3a 20 22 22 2c 0a 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 71 75 65 61 6b 73 3a 20 7b 0a 7d 2c 0a 66 65 5f 69 73 5f 63 6e 61 6d
                                                                                                                            Data Ascii: ",b_official_continent: "",b_deals_continents : "",b_messenger_url: '',b_open_messenger: false,b_is_asian_user: '',b_days_to_checkin: '',b_extra_ajax_headers: {},et_debug_level: '0',cn_modal_exp_eligible: "",notification_squeaks: {},fe_is_cnam
                                                                                                                            2024-09-28 02:38:24 UTC16384INData Raw: 4d 4c 5a 61 61 4e 52 66 43 65 4d 4a 59 47 49 57 65 22 3a 31 2c 22 54 57 55 4c 44 45 5a 52 45 48 44 57 4e 50 4a 4a 41 53 45 43 64 55 57 42 5a 45 57 61 53 64 4f 58 5a 65 5a 46 65 43 65 59 58 54 22 3a 31 2c 22 63 43 48 4f 62 56 64 42 45 55 53 50 57 52 66 51 62 44 62 45 66 58 5a 51 62 43 22 3a 31 2c 22 50 63 56 46 48 4d 50 61 53 64 49 65 5a 4e 4e 41 46 4c 57 45 5a 66 65 4b 65 22 3a 32 2c 22 48 42 4f 41 49 45 63 41 44 44 62 64 45 50 51 42 54 4b 65 22 3a 31 2c 22 4f 4d 54 56 42 45 4e 4e 52 59 58 63 43 48 48 52 48 62 62 4c 58 4d 48 4f 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 51 63 44 61 49 50 61 4d 4e 66 51 43 63 62 4e 58 47 44 4a 61 65 22 3a 31 2c 22 59 64 58 66 54 48 42 66 50 53 59 4e 4a 63 48 49 66 58 49 56 58 53 4b 54 4e 43 22 3a 31 2c 22 64 4c 48 4f 51 42
                                                                                                                            Data Ascii: MLZaaNRfCeMJYGIWe":1,"TWULDEZREHDWNPJJASECdUWBZEWaSdOXZeZFeCeYXT":1,"cCHObVdBEUSPWRfQbDbEfXZQbC":1,"PcVFHMPaSdIeZNNAFLWEZfeKe":2,"HBOAIEcADDbdEPQBTKe":1,"OMTVBENNRYXcCHHRHbbLXMHO":1,"dLYHMRFeRQcDaIPaMNfQCcbNXGDJae":1,"YdXfTHBfPSYNJcHIfXIVXSKTNC":1,"dLHOQB
                                                                                                                            2024-09-28 02:38:24 UTC16384INData Raw: 62 46 43 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 4c 42 42 56 59 55 54 44 58 62 45 41 54 5a 46 50 43 53 4f 4f 4e 43 22 3a 31 2c 22 5a 4f 4f 4b 54 66 47 43 62 45 43 45 46 53 65 66 51 4a 46 62 58 62 59 41 5a 45 43 45 51 4c 56 42 48 56 4a 49 4e 46 65 54 58 65 22 3a 31 2c 22 65 57 66 43 44 42 4f 53 56 49 48 51 63 61 4d 45 41 61 52 5a 45 47 63 43 53 52 50 4c 53 45 64 4c 52 53 55 57 65 22 3a 31 2c 22 49 55 4c 44 45 5a 52 45 46 63 55 63 53 54 61 57 59 45 50 42 43 59 4f 22 3a 32 2c 22 61 58 54 66 48 41 45 44 42 4f 53 56 61 63 44 4e 64 52 64 4a 46 4b 63 53 48 55 62 51 57 65 22 3a 31 2c 22 48 4d 62 43 58 4a 4c 62 42 42 63 50 66 53 47 58 41 46 55 54 55 65 65 64 48 55 48 65 22 3a 31 2c 22 48 4f 64 49 49 43 4e 42 55 50 46 44 55 53 55 49 43 46 63 65 48 45 56 46 4b 4d
                                                                                                                            Data Ascii: bFC":1,"dLYHMRFeRLBBVYUTDXbEATZFPCSOONC":1,"ZOOKTfGCbECEFSefQJFbXbYAZECEQLVBHVJINFeTXe":1,"eWfCDBOSVIHQcaMEAaRZEGcCSRPLSEdLRSUWe":1,"IULDEZREFcUcSTaWYEPBCYO":2,"aXTfHAEDBOSVacDNdRdJFKcSHUbQWe":1,"HMbCXJLbBBcPfSGXAFUTUeedHUHe":1,"HOdIICNBUPFDUSUICFceHEVFKM
                                                                                                                            2024-09-28 02:38:24 UTC16384INData Raw: 31 2c 22 61 57 51 4f 63 54 45 59 44 4d 59 45 50 48 65 4f 5a 54 5a 64 44 43 22 3a 31 2c 22 63 43 48 4f 62 4d 4b 64 46 45 41 51 64 4f 42 66 53 63 64 44 52 66 42 53 43 44 57 4f 4f 43 22 3a 31 2c 22 61 58 42 4e 54 66 5a 48 59 48 51 44 56 43 58 64 55 46 44 65 54 51 51 56 44 61 56 59 45 4f 22 3a 31 2c 22 48 57 41 46 59 42 66 50 44 42 45 44 48 49 57 44 62 4b 49 64 44 5a 42 65 45 62 46 44 50 64 41 45 49 45 42 47 5a 57 55 4c 65 4e 43 22 3a 31 2c 22 55 4f 54 45 4c 4a 4b 41 46 5a 66 48 47 4a 63 62 57 45 57 42 4f 66 4b 59 49 49 42 63 4d 43 4d 61 52 54 22 3a 31 2c 22 4f 4f 49 42 54 42 42 4c 58 4f 51 63 51 42 63 50 62 5a 49 56 46 47 57 66 64 54 4a 62 48 54 22 3a 31 2c 22 54 44 58 62 45 42 52 52 43 62 47 53 52 61 50 53 5a 57 54 65 44 44 45 66 59 43 65 48 48 51 65 46 58
                                                                                                                            Data Ascii: 1,"aWQOcTEYDMYEPHeOZTZdDC":1,"cCHObMKdFEAQdOBfScdDRfBSCDWOOC":1,"aXBNTfZHYHQDVCXdUFDeTQQVDaVYEO":1,"HWAFYBfPDBEDHIWDbKIdDZBeEbFDPdAEIEBGZWULeNC":1,"UOTELJKAFZfHGJcbWEWBOfKYIIBcMCMaRT":1,"OOIBTBBLXOQcQBcPbZIVFGWfdTJbHT":1,"TDXbEBRRCbGSRaPSZWTeDDEfYCeHHQeFX
                                                                                                                            2024-09-28 02:38:24 UTC2027INData Raw: 50 58 47 53 43 5a 46 63 4e 53 54 4c 45 5a 4a 4f 22 3a 31 2c 22 48 57 41 46 59 44 45 5a 52 64 4a 66 64 48 64 46 65 4e 66 52 44 48 54 22 3a 31 2c 22 48 57 41 46 59 5a 66 65 62 58 64 47 56 4a 56 45 46 50 4a 46 41 65 53 48 54 22 3a 31 2c 22 42 43 54 48 65 55 41 46 66 66 62 64 66 4b 51 5a 47 4d 4b 41 61 46 59 4e 4c 65 52 59 56 54 22 3a 31 2c 22 48 4d 62 45 43 48 54 65 55 56 49 5a 64 52 52 54 22 3a 31 2c 22 48 57 41 46 59 44 45 5a 52 45 50 56 49 52 50 51 4a 62 53 59 54 22 3a 31 2c 22 4e 61 4d 50 4f 46 5a 59 48 55 53 55 48 59 59 66 50 59 61 66 44 65 44 43 22 3a 31 2c 22 65 57 48 4d 63 43 63 43 63 43 53 4b 42 5a 4d 50 58 4b 58 59 52 56 63 65 4e 4d 47 42 44 4e 4a 65 51 44 59 42 43 22 3a 31 2c 22 4f 54 66 64 41 53 46 4d 4e 62 51 4d 64 43 4e 45 54 57 65 5a 4c 4f 22
                                                                                                                            Data Ascii: PXGSCZFcNSTLEZJO":1,"HWAFYDEZRdJfdHdFeNfRDHT":1,"HWAFYZfebXdGVJVEFPJFAeSHT":1,"BCTHeUAFffbdfKQZGMKAaFYNLeRYVT":1,"HMbECHTeUVIZdRRT":1,"HWAFYDEZREPVIRPQJbSYT":1,"NaMPOFZYHUSUHYYfPYafDeDC":1,"eWHMcCcCcCSKBZMPXKXYRVceNMGBDNJeQDYBC":1,"OTfdASFMNbQMdCNETWeZLO"
                                                                                                                            2024-09-28 02:38:24 UTC16384INData Raw: 31 37 66 66 32 0d 0a 5a 44 59 42 4c 63 4f 63 4f 49 49 65 53 47 54 49 4b 64 46 48 61 4f 22 3a 31 2c 22 4e 56 4e 5a 57 55 61 4d 5a 58 52 55 52 4e 65 4a 4d 42 59 47 61 65 50 54 57 45 55 64 50 43 22 3a 31 2c 22 4f 4f 49 42 54 56 58 4f 43 5a 42 4b 65 4a 61 44 43 43 44 46 51 46 61 4c 64 50 65 47 59 4f 22 3a 31 2c 22 41 64 52 59 47 4d 48 4f 48 4e 53 42 59 51 4f 53 52 4b 56 66 50 45 4e 57 43 5a 56 4f 22 3a 31 2c 22 50 55 54 43 44 43 63 42 55 61 63 45 66 42 61 55 45 49 51 4a 42 65 61 54 22 3a 31 2c 22 65 44 58 4a 59 53 47 51 43 64 42 53 59 4e 54 55 66 53 56 54 22 3a 31 2c 22 41 64 52 4e 52 57 53 64 55 50 4d 63 48 5a 5a 57 49 65 58 46 47 42 5a 46 4b 4d 42 58 4f 22 3a 31 2c 22 41 42 56 59 55 49 59 42 64 4f 46 56 4e 5a 4f 58 45 48 65 22 3a 31 2c 22 64 4c 59 48 4d 52
                                                                                                                            Data Ascii: 17ff2ZDYBLcOcOIIeSGTIKdFHaO":1,"NVNZWUaMZXRURNeJMBYGaePTWEUdPC":1,"OOIBTVXOCZBKeJaDCCDFQFaLdPeGYO":1,"AdRYGMHOHNSBYQOSRKVfPENWCZVO":1,"PUTCDCcBUacEfBaUEIQJBeaT":1,"eDXJYSGQCdBSYNTUfSVT":1,"AdRNRWSdUPMcHZZWIeXFGBZFKMBXO":1,"ABVYUIYBdOFVNZOXEHe":1,"dLYHMR


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            108192.168.2.454139188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:23 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:23 UTC733INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:23 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=32NfAK2qGqdmKda0lhiLhSUIyk1E1BCfgkNYUFsJIQzbXq3Xb1KOGWfOFl3ujGvgYw3VYs0Pp1d7pkvus%2FZJyx9i6yQg%2BOW1u2%2FImZhRihpcqFvRae758Qno80mG5FdBKA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b647f8742af-EWR
                                                                                                                            2024-09-28 02:38:23 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            109192.168.2.454140188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:23 UTC402OUTGET /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:23 UTC609INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:23 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=boCVJsoHvFOm%2BzSoNkAmmveGNl04LahBuLtJkcanMqJHHiT94p9wYnl5s8w21%2FwOpY2kqsw%2B%2Ba01yGUiErZwtQcui3qyjov1cXOlEUP5S2%2FWrsZeLl14GCfdKeTgo3Digw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b652c6d42eb-EWR
                                                                                                                            2024-09-28 02:38:23 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            110192.168.2.454146188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:24 UTC782OUTPOST /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 10
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:24 UTC10OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c
                                                                                                                            Data Ascii: code=wakdl
                                                                                                                            2024-09-28 02:38:25 UTC660INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:25 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vCpMSq7c2ExljDRx78jGVM8%2BuUkgPkvDwXXVPnRTxu07rT%2FGmpldYNUSSA8%2B0o34yLyEA8NmVPi4st9KgXJl0ezZF%2BOIagjmpKITP%2BhnI8aUq8FvGu6rKYR54HyPlTgq5w%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b6c583c8c5f-EWR
                                                                                                                            2024-09-28 02:38:25 UTC22INData Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a
                                                                                                                            Data Ascii: 10{"status":false}
                                                                                                                            2024-09-28 02:38:25 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            111192.168.2.45414418.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:24 UTC1069OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhC2Bxpad7rBkhZNPRfETCJt%2FgmTrI%2B0JxRKnul6OEl0y1dJ557oF4nyB5%2Fa5i4Qn%2FpCERJ6OAwf4FCDjW1nF4ZdQ02BXlpO7vLWXWodH8NGtzYhktZLZlGcpqWKYWSxNqvh2Skcsc5h0q5J2SsSSWjATobmHqwwQyw%3D
                                                                                                                            2024-09-28 02:38:24 UTC2784INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:24 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default"}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:24 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:48 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaIju58pnnq5aMWrhktmGh%2FPre3dvTX1ryWoHCWLCUd17LT0pevvSYN0Qf7PCHzR3yD0MT5FN2zBw9ulVN9Z5eAA7EXBWWQc1tIRQ697%2Fy%2BND8RfcWj3CJsAo%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:24 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:24 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            content-security-policy-report-only: base-uri 'none'; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=146&pid=72191290481603fa&e=UmFuZG9tSVYkc2RlIyh9YYYdGuViorKPDwnD01ftdVkWApXCxVeL2Zhhj1a6D9wn; script-src 'self' 'nonce-xR2R5E9A4BHWw8g' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' 'sha256-iry7oJKoKJ+9HSjmU3E1TlRlpSesJWZ1vapuUz2MP38='
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 f7bf54ada21ef4f1f7e0646051894136.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: jDfuoZQcOprl2H0jXEaRDxapFMPliSHxXYHYX9OnoGdmtmI78_Pi0Q==
                                                                                                                            2024-09-28 02:38:24 UTC8951INData Raw: 32 32 65 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 52 32 52 35 45 39 41 34 42 48 57 77 38 67 22
                                                                                                                            Data Ascii: 22ef<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="xR2R5E9A4BHWw8g"
                                                                                                                            2024-09-28 02:38:25 UTC3124INData Raw: 63 32 64 0d 0a 37 64 35 64 32 61 31 33 2e 63 73 73 22 20 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 63 73 73 2f 67 70 72 6f 66 5f 69 63 6f 6e 73 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2e 69 71 5f 6c 74 72 2f 33 30 38 34 33 36 63 61 32 36 61 61 63 66 36 61 37 35 35 33 65 34 63 30 63 66 32 39 38 64 30 66 37 38 30 37 32 37 61 32 2e 63 73 73 22 20 2f 3e 20 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 63 73 73 2f 78 70 2d 69 6e 64 65
                                                                                                                            Data Ascii: c2d7d5d2a13.css" /><link rel="stylesheet" href="https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css" /> <link rel="stylesheet" type="text/css" href="https://cf.bstatic.com/static/css/xp-inde
                                                                                                                            2024-09-28 02:38:25 UTC8950INData Raw: 32 32 65 65 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 22ee<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:25 UTC16384INData Raw: 33 66 66 39 0d 0a 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 73 76 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 53 76 65 6e 73 6b 61 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 64 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 64 61 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 44 61 6e 73 6b 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 63 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 73 2e 68 74 6d
                                                                                                                            Data Ascii: 3ff9ng.com/index.sv.html" title="Svenska"/><link rel="alternate" type="text/html" hreflang="da" href="https://www.booking.com/index.da.html" title="Dansk"/><link rel="alternate" type="text/html" hreflang="cs" href="https://www.booking.com/index.cs.htm
                                                                                                                            2024-09-28 02:38:25 UTC16384INData Raw: 0a 34 30 30 30 0d 0a 22 6e 61 6d 65 5f 66 72 6f 6d 22 3a 22 4a 75 6e 65 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 4a 75 6e 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 4a 75 6e 22 2c 22 6e 61 6d 65 5f 77 69 74 68 5f 79 65 61 72 5f 6f 6e 6c 79 22 3a 22 4a 75 6e 65 22 2c 22 6e 61 6d 65 5f 75 63 22 3a 22 4a 75 6e 65 22 2c 22 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 4a 75 6e 65 22 2c 22 6e 61 6d 65 5f 64 65 66 5f 61 72 74 69 63 6c 65 5f 75 63 22 3a 22 54 68 65 20 4a 75 6e 65 22 7d 2c 22 37 22 3a 7b 22 6e 61 6d 65 5f 6f 74 68 65 72 22 3a 22 4a 75 6c 79 22 2c 22 67 65 6e 69 74 69 76 65 5f 75 63 22 3a 22 4a 75 6c 79 22 2c 22 6e 61 6d 65 5f 69 6e 22 3a 22 4a 75 6c 79 22 2c 22 6e 61 6d 65 22 3a 22 4a 75 6c 79 22 2c 22 6d 6f 6e 74 68 5f 31 22 3a
                                                                                                                            Data Ascii: 4000"name_from":"June","short_name_only":"Jun","short_name":"Jun","name_with_year_only":"June","name_uc":"June","name_only":"June","name_def_article_uc":"The June"},"7":{"name_other":"July","genitive_uc":"July","name_in":"July","name":"July","month_1":
                                                                                                                            2024-09-28 02:38:25 UTC9INData Raw: 79 4c 54 52 6a 59 32 0d 0a
                                                                                                                            Data Ascii: yLTRjY2
                                                                                                                            2024-09-28 02:38:25 UTC16384INData Raw: 31 39 65 66 35 0d 0a 59 74 4e 44 4d 30 4f 43 31 68 4d 54 59 78 4c 57 4e 6c 5a 44 59 33 4e 44 52 6b 4d 54 56 6d 59 39 67 43 42 65 41 43 41 51 26 73 69 64 3d 39 37 32 64 34 66 37 31 63 32 32 39 66 64 37 32 39 38 38 35 66 33 31 65 36 31 38 32 37 38 61 63 22 2c 0a 62 5f 72 65 67 5f 75 73 65 72 5f 66 69 76 65 5f 62 6f 6f 6b 69 6e 67 73 5f 63 68 61 6c 6c 65 6e 67 65 3a 20 22 22 2c 0a 62 5f 72 65 67 5f 75 73 65 72 5f 64 65 74 61 69 6c 5f 6e 61 6d 65 5f 65 6d 61 69 6c 5f 68 61 73 68 3a 20 22 22 2c 0a 62 5f 75 73 65 72 5f 69 73 5f 67 72 61 70 5f 65 6c 69 67 69 62 6c 65 3a 20 22 22 2c 0a 62 5f 67 72 61 70 5f 72 65 6d 6f 76 65 5f 72 61 66 5f 63 68 65 63 6b 73 3a 20 31 2c 0a 62 5f 69 73 5f 62 62 74 6f 6f 6c 5f 61 64 6d 69 6e 3a 20 22 22 2c 0a 62 5f 69 73 5f 62 62 74
                                                                                                                            Data Ascii: 19ef5YtNDM0OC1hMTYxLWNlZDY3NDRkMTVmY9gCBeACAQ&sid=972d4f71c229fd729885f31e618278ac",b_reg_user_five_bookings_challenge: "",b_reg_user_detail_name_email_hash: "",b_user_is_grap_eligible: "",b_grap_remove_raf_checks: 1,b_is_bbtool_admin: "",b_is_bbt
                                                                                                                            2024-09-28 02:38:25 UTC16384INData Raw: 5a 55 54 50 56 4c 42 4c 62 63 5a 54 54 45 4b 56 4f 22 3a 30 2c 22 42 4b 65 57 49 45 63 48 61 5a 46 62 4d 57 63 4e 66 57 64 55 45 55 47 48 54 22 3a 30 2c 22 59 64 58 66 43 44 57 4f 4f 57 4e 54 51 43 4d 5a 46 4c 4d 4a 66 4c 54 22 3a 30 2c 22 48 56 51 65 59 46 52 55 52 55 52 59 54 62 4e 61 47 61 62 4a 55 63 5a 56 61 43 42 58 47 43 22 3a 30 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 5a 55 54 50 54 51 4d 4f 42 66 53 54 62 46 4b 42 64 42 65 57 65 22 3a 31 2c 22 4f 41 42 42 61 4a 59 54 54 64 62 63 66 46 64 48 4d 4f 64 58 48 47 55 56 49 46 41 5a 45 55 62 4e 58 47 44 4a 45 42 42 56 59 59 54 22 3a 31 2c 22 48 57 41 46 59 48 49 45 55 58 50 4e 4d 57 65 22 3a 30 2c 22 61 57 51 4f 63 61 62 63 52 46 59 54 42 66 4b 41 4c 52 56 53 4c 44 4a 58 49 63 48 43 62 58 66 58 65 22 3a 30
                                                                                                                            Data Ascii: ZUTPVLBLbcZTTEKVO":0,"BKeWIEcHaZFbMWcNfWdUEUGHT":0,"YdXfCDWOOWNTQCMZFLMJfLT":0,"HVQeYFRURURYTbNaGabJUcZVaCBXGC":0,"YdXfdKNKNKZUTPTQMOBfSTbFKBdBeWe":1,"OABBaJYTTdbcfFdHMOdXHGUVIFAZEUbNXGDJEBBVYYT":1,"HWAFYHIEUXPNMWe":0,"aWQOcabcRFYTBfKALRVSLDJXIcHCbXfXe":0
                                                                                                                            2024-09-28 02:38:25 UTC16384INData Raw: 66 45 56 53 47 46 47 5a 4a 45 53 65 48 54 22 3a 31 2c 22 48 42 4f 41 49 45 63 41 44 44 62 64 45 50 51 42 54 4b 65 22 3a 31 2c 22 4f 41 5a 4f 58 48 48 48 58 46 5a 50 65 5a 65 4e 52 42 63 4f 48 54 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 4c 42 42 56 59 55 48 53 43 4c 52 45 48 47 55 53 55 5a 59 45 57 42 65 62 66 46 56 62 49 46 5a 61 61 4c 54 22 3a 31 2c 22 59 54 54 48 62 58 65 65 56 4a 57 63 57 50 61 44 4d 57 4f 4d 48 54 63 4e 53 44 45 57 43 41 57 64 50 5a 4b 65 22 3a 31 2c 22 61 62 50 50 57 61 5a 55 41 41 56 66 44 66 4e 5a 46 5a 65 61 50 51 65 46 65 64 46 4b 55 64 64 56 43 55 43 22 3a 32 2c 22 50 55 54 4b 64 46 66 55 59 51 4e 55 54 45 59 44 56 5a 56 43 47 49 63 43 63 43 63 43 43 22 3a 31 2c 22 59 64 58 66 43 44 57 4f 4f 57 4e 45 61 55 50 66 53 43 4d 65 4a
                                                                                                                            Data Ascii: fEVSGFGZJESeHT":1,"HBOAIEcADDbdEPQBTKe":1,"OAZOXHHHXFZPeZeNRBcOHT":1,"dLYHMRFeRLBBVYUHSCLREHGUSUZYEWBebfFVbIFZaaLT":1,"YTTHbXeeVJWcWPaDMWOMHTcNSDEWCAWdPZKe":1,"abPPWaZUAAVfDfNZFZeaPQeFedFKUddVCUC":2,"PUTKdFfUYQNUTEYDVZVCGIcCcCcCC":1,"YdXfCDWOOWNEaUPfSCMeJ
                                                                                                                            2024-09-28 02:38:25 UTC16384INData Raw: 22 48 57 41 46 59 57 4c 4a 57 63 57 4f 54 50 65 58 65 22 3a 31 2c 22 55 61 44 45 4c 61 42 57 50 56 43 42 54 4d 42 61 61 4f 22 3a 31 2c 22 4e 41 46 4c 66 4f 64 41 53 55 54 62 57 58 47 64 41 65 63 4c 55 54 64 57 4e 41 49 4b 47 50 41 4d 49 47 44 5a 48 58 52 54 22 3a 31 2c 22 4f 4f 49 42 54 56 58 4d 41 63 5a 45 4a 57 63 57 4b 56 53 53 5a 52 65 22 3a 31 2c 22 41 64 5a 5a 42 4a 4f 54 58 4e 4f 51 5a 4a 46 4a 61 64 4d 58 62 49 50 52 61 4f 22 3a 32 2c 22 56 56 4f 63 54 57 59 57 5a 53 56 62 61 42 5a 55 48 5a 4a 46 61 4e 63 43 42 61 51 44 61 62 48 61 44 48 54 22 3a 31 2c 22 63 43 50 65 59 47 49 5a 65 56 54 4e 56 51 63 66 46 4b 56 62 4f 4e 65 62 45 57 63 44 61 57 65 22 3a 31 2c 22 61 57 51 4f 63 4d 57 44 62 57 4e 50 48 42 47 44 63 4f 49 50 47 4a 49 4f 59 49 4b 65 22
                                                                                                                            Data Ascii: "HWAFYWLJWcWOTPeXe":1,"UaDELaBWPVCBTMBaaO":1,"NAFLfOdASUTbWXGdAecLUTdWNAIKGPAMIGDZHXRT":1,"OOIBTVXMAcZEJWcWKVSSZRe":1,"AdZZBJOTXNOQZJFJadMXbIPRaO":2,"VVOcTWYWZSVbaBZUHZJFaNcCBaQDabHaDHT":1,"cCPeYGIZeVTNVQcfFKVbONebEWcDaWe":1,"aWQOcMWDbWNPHBGDcOIPGJIOYIKe"


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            112192.168.2.454145188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:24 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:24 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:38:25 UTC654INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:24 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N70VdglF3c%2F3fw50LRezJfhdf6aZtMo13XMGHmDM9Hx9tCnaG3RdIh1NZ4m7uSCv5qhMmI1U4RKpRgmKr4yJJ2upJglBvC1nNrPclTo6QtXTeGbFNcU17%2FZLATDBQllMnw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b6c5a5e8c17-EWR
                                                                                                                            2024-09-28 02:38:25 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            113192.168.2.454147188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:24 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:25 UTC735INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:25 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NAi5lRavUx4MlVHcXU3hykoZUnF7qWBirVZwFjpoiXtPhOlEu%2FskAu6RlFm1xQdoaByCIF%2Bbj3ergaU41BHH9DiKWS21P%2B%2FrCwBdD467ddBFuahNSUXI45oOcFUdAc3ijg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b6d28fb7ce2-EWR
                                                                                                                            2024-09-28 02:38:25 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            114192.168.2.45415018.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:25 UTC1067OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaIju58pnnq5aMWrhktmGh%2FPre3dvTX1ryWoHCWLCUd17LT0pevvSYN0Qf7PCHzR3yD0MT5FN2zBw9ulVN9Z5eAA7EXBWWQc1tIRQ697%2Fy%2BND8RfcWj3CJsAo%3D
                                                                                                                            2024-09-28 02:38:26 UTC2349INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:26 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"max_age":604800,"report_to":"default"}
                                                                                                                            report-to: {"group":"default","max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}]}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:26 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:52 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBK6LEtX6%2Blc%2BRtdHZzU16aCxqewqQu3KkRtC5sHfksh2yaHXG3X9nfVhYGkpu1lsbhny9kuE0uWBXHfhVUcxlR9qPWdfzVmlGkavqMmrMiWAHsHr1TggvWQ28dfYWC8GlYzVlXXXQ2O2uOtihT7g%2B1qj%2BUidJm%2BVA0%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:26 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:26 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 5b17764336ffdab7d2a3e7707394867a.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: lcXzxnr5MXM3V3JJoV6OtW3ycP6Vmmzh9sjqJ4QAVauOhTCOe1AJDQ==
                                                                                                                            2024-09-28 02:38:26 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 46 47 4c 75 48 73 64 62 52 78 67 58 56 61 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="xFGLuHsdbRxgXVa"
                                                                                                                            2024-09-28 02:38:26 UTC16384INData Raw: 36 30 30 30 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 6000<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:26 UTC8200INData Raw: 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 5f 75 6e 74 69 6c 7d 22 2c 22 64 61 79 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 79 65 61 72 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d 65 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 73 68 6f 72 74 5f 64 61 74 65 5f 77 69 74 68 5f 77 65 65 6b 64 61 79 5f 77 69 74 68 6f 75 74 5f 79 65 61 72 22 3a 22 7b 73 68 6f 72 74 5f 77 65 65 6b 64 61 79 7d 2c 20 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 22 2c 22 6e 75 6d 65 72 69 63 5f 64 61 79 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 74 69 6d 65 5f 62 65 66 6f 72 65 22 3a 22 62 65 66 6f 72 65 20 7b 74 69 6d 65 7d 20 6f 6e 20 7b 6d 6f 6e
                                                                                                                            Data Ascii: of_month_until}, {full_year_until}","day_short_month_year":"{short_month_name} {day_name}, {full_year}","short_date_with_weekday_without_year":"{short_weekday}, {short_month_name} {day_of_month}","numeric_day_month_year_time_before":"before {time} on {mon
                                                                                                                            2024-09-28 02:38:26 UTC16384INData Raw: 37 66 66 61 0d 0a 2c 22 6e 61 6d 65 5f 74 6f 22 3a 22 41 70 72 69 6c 22 7d 2c 22 35 22 3a 7b 22 6e 61 6d 65 5f 74 6f 22 3a 22 4d 61 79 22 2c 22 67 65 6e 69 74 69 76 65 5f 75 63 22 3a 22 4d 61 79 22 2c 22 6d 6f 6e 74 68 5f 32 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 64 65 66 5f 61 72 74 69 63 6c 65 5f 6c 63 22 3a 22 74 68 65 20 4d 61 79 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 66 72 6f 6d 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 77 69 74 68 5f 79 65 61 72 5f 6f 6e 6c 79 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 4d 61 79 22 2c 22 74 6f 5f 6d 6f 6e 74 68 5f 6c 63 22 3a 22 74 6f 20 4d 61 79 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 75 63 22 3a
                                                                                                                            Data Ascii: 7ffa,"name_to":"April"},"5":{"name_to":"May","genitive_uc":"May","month_2":"May","name_def_article_lc":"the May","short_name":"May","name_from":"May","name_with_year_only":"May","name_only":"May","to_month_lc":"to May","short_name_only":"May","name_uc":
                                                                                                                            2024-09-28 02:38:26 UTC16384INData Raw: 75 61 67 65 3d 65 6e 22 2c 0a 62 5f 61 63 74 69 6f 6e 3a 20 22 69 6e 64 65 78 22 2c 0a 62 5f 73 69 74 65 5f 69 6e 66 6f 3a 20 7b 22 69 73 5f 69 61 6d 5f 61 75 74 68 5f 61 6c 6c 6f 77 65 64 22 3a 31 2c 22 69 73 5f 62 6f 6f 6b 69 6e 67 73 5f 6f 77 6e 65 64 22 3a 31 7d 2c 0a 62 5f 73 69 74 65 5f 74 79 70 65 3a 20 22 77 77 77 22 2c 0a 62 5f 63 6f 6d 70 61 6e 79 6e 61 6d 65 3a 20 22 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 0a 62 5f 72 65 67 5f 75 73 65 72 5f 66 75 6c 6c 5f 6e 61 6d 65 3a 20 22 22 2c 0a 62 5f 69 73 5f 67 65 6e 69 75 73 5f 62 72 61 6e 64 65 64 3a 20 22 30 22 2c 0a 62 5f 72 65 67 5f 75 73 65 72 5f 69 73 5f 67 65 6e 69 75 73 3a 20 22 22 2c 0a 62 5f 67 65 6e 69 75 73 5f 64 61 73 68 62 6f 61 72 64 5f 65 78 70 69 72 79 5f 64 65 73 74 66 69 6e 64 65 72
                                                                                                                            Data Ascii: uage=en",b_action: "index",b_site_info: {"is_iam_auth_allowed":1,"is_bookings_owned":1},b_site_type: "www",b_companyname: "Booking.com",b_reg_user_full_name: "",b_is_genius_branded: "0",b_reg_user_is_genius: "",b_genius_dashboard_expiry_destfinder
                                                                                                                            2024-09-28 02:38:26 UTC16384INData Raw: 0d 0a 37 65 65 35 0d 0a 41 5a 4f 58 48 48 5a 44 4f 51 63 61 4e 59 43 4c 57 63 66 62 62 57 64 57 4f 47 41 4d 66 58 4c 4d 45 4f 22 3a 30 2c 22 64 4c 63 58 4a 56 4f 54 63 63 43 54 59 59 53 54 66 4e 63 65 49 57 55 44 58 4b 65 22 3a 30 2c 22 49 5a 56 42 42 56 59 55 4f 48 53 46 56 4a 54 64 4d 48 46 42 64 63 45 55 43 22 3a 30 2c 22 5a 4f 64 47 4a 51 46 63 46 5a 57 42 5a 45 57 61 53 64 49 42 66 46 64 48 56 54 22 3a 31 2c 22 50 49 5a 54 4f 46 52 55 52 55 52 4e 4a 42 43 44 43 59 54 57 4e 5a 56 43 44 64 48 4a 65 66 41 46 65 59 41 46 43 22 3a 31 2c 22 61 57 51 4f 63 61 62 63 52 46 59 54 42 66 4b 41 4c 52 56 53 4c 44 4a 58 49 63 48 43 62 58 66 58 65 22 3a 30 2c 22 49 5a 42 54 64 46 50 66 42 4b 53 55 61 58 53 54 42 47 43 64 4b 42 4a 62 43 53 64 61 64 56 5a 4e 4d 50 48
                                                                                                                            Data Ascii: 7ee5AZOXHHZDOQcaNYCLWcfbbWdWOGAMfXLMEO":0,"dLcXJVOTccCTYYSTfNceIWUDXKe":0,"IZVBBVYUOHSFVJTdMHFBdcEUC":0,"ZOdGJQFcFZWBZEWaSdIBfFdHVT":1,"PIZTOFRURURNJBCDCYTWNZVCDdHJefAFeYAFC":1,"aWQOcabcRFYTBfKALRVSLDJXIcHCbXfXe":0,"IZBTdFPfBKSUaXSTBGCdKBJbCSdadVZNMPH
                                                                                                                            2024-09-28 02:38:26 UTC16111INData Raw: 52 55 44 62 59 48 52 59 4b 65 22 3a 31 2c 22 62 51 47 42 56 49 5a 64 52 4a 47 49 4e 59 54 46 49 59 61 58 52 4f 5a 45 50 59 4b 44 63 64 43 22 3a 31 2c 22 59 54 42 59 4e 61 58 54 62 47 62 63 47 4f 41 59 53 59 43 22 3a 31 2c 22 61 58 54 62 53 46 59 54 42 48 4d 48 48 56 62 52 65 49 59 42 42 56 59 55 66 46 64 48 4d 4e 51 4a 54 65 45 52 58 57 58 46 5a 45 56 43 22 3a 31 2c 22 47 43 53 58 48 48 56 51 49 5a 44 46 4a 4e 4c 63 4f 64 50 45 62 64 55 57 50 61 65 4b 66 4e 5a 46 5a 65 61 50 52 65 22 3a 31 2c 22 5a 64 66 62 44 42 58 53 43 46 50 43 57 4f 58 61 5a 50 66 59 65 48 55 48 4f 42 4e 48 43 22 3a 31 2c 22 54 57 55 4c 48 4a 45 66 48 55 59 62 46 44 41 56 62 42 48 4d 63 4f 22 3a 31 2c 22 48 57 41 46 59 54 66 50 45 53 48 42 5a 57 41 55 44 41 4f 54 66 4d 47 50 56 58 54
                                                                                                                            Data Ascii: RUDbYHRYKe":1,"bQGBVIZdRJGINYTFIYaXROZEPYKDcdC":1,"YTBYNaXTbGbcGOAYSYC":1,"aXTbSFYTBHMHHVbReIYBBVYUfFdHMNQJTeERXWXFZEVC":1,"GCSXHHVQIZDFJNLcOdPEbdUWPaeKfNZFZeaPRe":1,"ZdfbDBXSCFPCWOXaZPfYeHUHOBNHC":1,"TWULHJEfHUYbFDAVbBHMcO":1,"HWAFYTfPESHBZWAUDAOTfMGPVXT
                                                                                                                            2024-09-28 02:38:26 UTC16384INData Raw: 35 34 32 62 0d 0a 43 53 58 48 48 56 51 49 5a 44 46 4a 4e 4c 63 4f 64 5a 53 41 63 4a 48 44 46 58 58 63 63 42 50 4b 65 22 3a 31 2c 22 42 62 46 44 52 64 4a 63 41 51 44 49 57 53 42 61 4d 59 44 4e 4e 4c 54 53 48 61 54 22 3a 31 2c 22 41 45 55 61 59 50 5a 5a 47 62 64 55 4a 46 46 53 66 4c 58 54 22 3a 31 2c 22 41 45 41 46 53 58 5a 58 64 47 56 44 5a 53 64 53 55 57 44 62 43 54 48 4f 22 3a 31 2c 22 59 64 58 66 43 44 57 4f 4f 53 63 55 53 41 58 4b 64 63 45 49 5a 54 47 53 58 4e 51 42 53 42 62 51 62 43 22 3a 31 2c 22 49 53 53 66 59 57 5a 57 52 45 66 57 42 51 42 54 55 66 42 55 50 48 65 22 3a 32 2c 22 62 51 47 42 62 51 47 57 46 42 61 61 65 48 47 5a 4f 41 63 46 4d 42 52 4e 48 55 48 65 22 3a 31 2c 22 48 57 41 46 59 42 66 50 44 42 45 44 48 49 57 44 62 4b 49 64 44 5a 42 47 63
                                                                                                                            Data Ascii: 542bCSXHHVQIZDFJNLcOdZSAcJHDFXXccBPKe":1,"BbFDRdJcAQDIWSBaMYDNNLTSHaT":1,"AEUaYPZZGbdUJFFSfLXT":1,"AEAFSXZXdGVDZSdSUWDbCTHO":1,"YdXfCDWOOScUSAXKdcEIZTGSXNQBSBbQbC":1,"ISSfYWZWREfWBQBTUfBUPHe":2,"bQGBbQGWFBaaeHGZOAcFMBRNHUHe":1,"HWAFYBfPDBEDHIWDbKIdDZBGc
                                                                                                                            2024-09-28 02:38:26 UTC5171INData Raw: 65 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 44 63 54 42 65 4e 4a 61 53 47 61 64 48 4e 4f 4c 55 4e 65 5a 4f 53 42 5a 54 4e 43 4d 43 22 3a 31 2c 22 61 58 54 45 4b 4b 56 55 4e 56 66 55 5a 46 65 4e 42 4b 4b 59 63 59 52 43 4f 4d 49 4f 4f 49 42 42 4f 22 3a 31 2c 22 4f 4d 65 52 51 44 53 46 4c 46 5a 4e 41 64 42 41 46 56 4e 61 4c 61 45 54 65 44 64 57 65 22 3a 31 2c 22 47 43 53 58 5a 4c 44 65 41 42 61 4b 44 44 4b 49 48 65 63 62 4f 46 59 66 5a 58 58 64 64 4f 45 52 65 22 3a 31 2c 22 59 54 54 48 62 58 65 65 56 4c 43 42 4c 66 50 4d 50 53 58 57 65 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55 62 47 53 52 61 50 53 50 5a 42 53 4d 47 61 46 4e 52 64 53 63 59 41 5a 54 52 65 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 59 64 64 48 4d 4d 54 62 54 4a 54 4e 56 54 22 3a 31 2c 22 65 45 42 5a
                                                                                                                            Data Ascii: e":1,"TfNZeFcCDcTBeNJaSGadHNOLUNeZOSBZTNCMC":1,"aXTEKKVUNVfUZFeNBKKYcYRCOMIOOIBBO":1,"OMeRQDSFLFZNAdBAFVNaLaETeDdWe":1,"GCSXZLDeABaKDDKIHecbOFYfZXXddOERe":1,"YTTHbXeeVLCBLfPMPSXWe":1,"NAFQCJWZUbGSRaPSPZBSMGaFNRdScYAZTRe":1,"aWQOcYTBYddHMMTbTJTNVT":1,"eEBZ
                                                                                                                            2024-09-28 02:38:26 UTC16384INData Raw: 33 66 66 61 0d 0a 52 45 53 66 50 65 53 45 59 48 62 41 65 61 57 4e 5a 43 54 41 4c 56 54 22 3a 31 2c 22 4e 41 52 45 46 45 4a 4b 61 45 63 42 55 47 43 51 41 45 43 48 54 65 55 56 49 5a 64 52 52 54 22 3a 31 2c 22 61 58 54 66 48 41 45 44 42 4f 53 42 47 50 66 42 4b 57 4f 56 5a 4d 59 49 4f 22 3a 31 2c 22 59 54 54 48 62 58 65 65 56 65 43 46 5a 41 63 62 52 62 52 4f 66 4c 4d 54 65 43 59 48 44 52 46 63 4f 22 3a 31 2c 22 45 4c 53 58 48 62 63 4f 63 55 5a 42 4a 4f 54 58 4e 41 4c 4d 48 57 61 64 41 55 66 44 4d 63 4d 5a 4d 4f 22 3a 31 2c 22 59 64 58 66 4d 50 58 59 5a 61 54 61 54 61 42 45 55 63 4b 42 53 4d 46 65 4a 48 55 57 45 59 63 5a 62 4d 4b 4a 5a 4b 65 22 3a 31 2c 22 54 66 4e 5a 65 46 4f 42 4e 51 56 45 65 53 4e 64 52 54 22 3a 31 2c 22 48 57 41 46 59 54 62 65 59 53 53 45
                                                                                                                            Data Ascii: 3ffaRESfPeSEYHbAeaWNZCTALVT":1,"NAREFEJKaEcBUGCQAECHTeUVIZdRRT":1,"aXTfHAEDBOSBGPfBKWOVZMYIO":1,"YTTHbXeeVeCFZAcbRbROfLMTeCYHDRFcO":1,"ELSXHbcOcUZBJOTXNALMHWadAUfDMcMZMO":1,"YdXfMPXYZaTaTaBEUcKBSMFeJHUWEYcZbMKJZKe":1,"TfNZeFOBNQVEeSNdRT":1,"HWAFYTbeYSSE


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            115192.168.2.454152188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:25 UTC409OUTGET /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:26 UTC613INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:26 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PbJXaI1UwpI%2FvRrc1AHcCKdbnwTctd01kBzy9dkvJk7d2U%2FzR41%2FhRgHGiWf3uxPa%2FM00q9xd6ifepfgajpYAN3%2FoE7jmjg0T3fpKgXZ8koygYBpD09gE%2BwX%2B4VGbDnMAw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b74fc594379-EWR
                                                                                                                            2024-09-28 02:38:26 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            116192.168.2.454151188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:26 UTC412OUTGET /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:26 UTC609INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:26 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LrtqphadiHEmiXm7GodVpZm6oyum%2F5oNlj1DXRJQTJ9TCJ2AUCcf3lIgluEzpQ4TmdTL2%2FTujp%2BNUHKkED%2Foxso9VJOOkudMHsLo1icbgQpdP%2F12oY6FS0NteSLrSNZ5hA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b753bd07cae-EWR
                                                                                                                            2024-09-28 02:38:26 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            117192.168.2.454155188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:26 UTC777OUTPOST /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 30
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:26 UTC30OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 6c 61 73 74 5f 6d 73 67 5f 69 64 3d 36 30 35 39 30 30 39
                                                                                                                            Data Ascii: code=wakdl&last_msg_id=6059009
                                                                                                                            2024-09-28 02:38:27 UTC660INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:27 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4XFC4cezUJ86xDVGE%2BLDWKrABKhYOlsqRP%2Bv36pjcXSinqQwBps%2FGPBfjtamRW9ryQXyVIN6ssF1rq%2FY%2B2D2jt07ydbaQVTbNk5VhwSh8C5esGvU09UeBgWmQ5cYRJctgg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b7b2d844313-EWR
                                                                                                                            2024-09-28 02:38:27 UTC51INData Raw: 32 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 22 4d 65 73 73 61 67 65 73 20 6e 6f 74 20 66 6f 75 6e 64 21 22 7d 0d 0a
                                                                                                                            Data Ascii: 2d{"status":false,"text":"Messages not found!"}
                                                                                                                            2024-09-28 02:38:27 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            118192.168.2.454156188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:27 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:27 UTC767INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:27 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U31sB9VBPQv2%2FTTctF%2Fk3NV03%2FkN7GBn94UCZ4Bhs%2B8whtslcV8LO2s4rwR8a1MNn94Q7qm6B2nawk0vFidDsjZ77GdTWAWWmORtNiKcC%2BFHXROQlaGAvIHUsZJ9gc7KHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b7c7f2c43c1-EWR
                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                            2024-09-28 02:38:27 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            119192.168.2.454160188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:28 UTC402OUTGET /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:28 UTC611INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:28 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=InMXDH%2BDkSLrqJ5GULEZz05U%2FM%2B2wqnP4l2YpzmC5JUzqkXyg4ZFL26YP07YtsbmarvebQN8z7jrnDpim%2BhTdZNlJWTzOxLcbeat%2BKCbpCLtiCf5y7NEfBou%2FdIbQJ1tgg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b82dd0b42a9-EWR
                                                                                                                            2024-09-28 02:38:28 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            120192.168.2.45415918.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:28 UTC1071OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBK6LEtX6%2Blc%2BRtdHZzU16aCxqewqQu3KkRtC5sHfksh2yaHXG3X9nfVhYGkpu1lsbhny9kuE0uWBXHfhVUcxlR9qPWdfzVmlGkavqMmrMiWAHsHr1TggvWQ28dfYWC8GlYzVlXXXQ2O2uOtihT7g%2B1qj%2BUidJm%2BVA0%3D
                                                                                                                            2024-09-28 02:38:28 UTC2349INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:28 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"max_age":604800,"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}]}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:28 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:56 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCp%2Fjvkhk4DTqDORsfEGMi4oH64XmoTg2UaB3SyPygGGaUGg6cSiCjtzQ%2Bg8fO67CTmj7KUh3PgjYbKzPshe6EY74Y%2FQoYtdQV5WkJgrTMTlavCFLQR5n8I6sxi7oh%2BxDou8n39%2BWbxjtUTt4VkbfUwC0bOYHj1RLA8%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:28 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:28 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 eb99f1f32a184a8c9c9c920381a7576a.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: 1thXw1zCZAAVdY3DR8jqvzHGnvLRXdxGEDamuuw-DDB2HR2reU2pZg==
                                                                                                                            2024-09-28 02:38:28 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 63 31 49 49 71 69 4a 4d 42 63 32 72 30 58 45 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="c1IIqiJMBc2r0XE"
                                                                                                                            2024-09-28 02:38:29 UTC15434INData Raw: 33 63 34 32 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 3c42<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:29 UTC16384INData Raw: 34 33 63 38 0d 0a 5f 76 61 6c 69 64 5f 64 61 74 65 73 22 3a 20 30 2c 0a 22 62 5f 63 6f 75 6e 74 72 79 63 6f 64 65 22 20 3a 20 27 27 2c 0a 22 62 5f 67 75 65 73 74 5f 63 6f 75 6e 74 72 79 22 20 3a 20 27 75 73 27 2c 0a 22 62 5f 6c 6f 63 61 6c 65 22 20 3a 20 27 65 6e 2d 75 73 27 2c 0a 22 62 5f 6c 61 6e 67 5f 66 6f 72 5f 75 72 6c 22 20 3a 20 27 65 6e 2d 75 73 27 2c 0a 22 62 5f 74 68 69 73 5f 75 72 63 68 69 6e 22 20 3a 20 27 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 6c 61 62 65 6c 3d 67 65 6e 31 37 33 6e 72 2d 31 46 43 41 45 6f 67 67 49 34 36 41 64 49 4d 31 67 45 61 4b 63 43 69 41 45 42 6d 41 45 78 75 41 45 58 79 41 45 4d 32 41 45 42 36 41 45 42 2d 41 45 43 69 41 49 42 71 41 49 44 75 41 4b 6b 32 4e 32 33 42 73 41 43 41 64 49 43 4a 47 56 6b 5a 54 5a 69 4f 54 51 78 4c
                                                                                                                            Data Ascii: 43c8_valid_dates": 0,"b_countrycode" : '',"b_guest_country" : 'us',"b_locale" : 'en-us',"b_lang_for_url" : 'en-us',"b_this_urchin" : '/index.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AECiAIBqAIDuAKk2N23BsACAdICJGVkZTZiOTQxL
                                                                                                                            2024-09-28 02:38:29 UTC976INData Raw: 33 64 61 66 37 34 66 32 62 34 66 66 37 30 2e 63 73 73 27 2c 0a 61 73 79 6e 63 5f 6c 69 73 74 73 5f 6a 73 3a 20 27 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6a 73 2f 61 73 79 6e 63 5f 6c 69 73 74 73 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2f 32 31 36 62 32 66 35 37 33 63 31 39 65 62 61 36 36 33 66 36 38 36 64 64 38 66 37 63 64 34 37 34 37 61 34 64 34 63 62 37 2e 6a 73 27 2c 0a 61 73 79 6e 63 5f 77 70 6d 5f 6f 76 65 72 6c 61 79 5f 63 73 73 3a 20 27 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 63 73 73 2f 61 73 79 6e 63 5f 77 70 6d 5f 6f 76 65 72 6c 61 79 5f 61 73 73 65 74 73 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2e 69 71 5f 6c 74 72 2f 61 62 62 33 30 34 62 66
                                                                                                                            Data Ascii: 3daf74f2b4ff70.css',async_lists_js: 'https://cf.bstatic.com/static/js/async_lists_cloudfront_sd/216b2f573c19eba663f686dd8f7cd4747a4d4cb7.js',async_wpm_overlay_css: 'https://cf.bstatic.com/static/css/async_wpm_overlay_assets_cloudfront_sd.iq_ltr/abb304bf
                                                                                                                            2024-09-28 02:38:29 UTC16384INData Raw: 33 66 66 61 0d 0a 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 26 23 34 37 3b 27 2c 0a 62 5f 74 68 69 73 5f 75 72 6c 20 3a 20 27 2f 69
                                                                                                                            Data Ascii: 3ffa4e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.booking.com&#47;',b_this_url : '/i
                                                                                                                            2024-09-28 02:38:29 UTC16384INData Raw: 0d 0a 34 66 65 36 0d 0a 67 6e 73 53 70 75 6e 5f 72 65 6d 69 6e 64 65 72 4d 6f 64 61 6c 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 43 54 4f 59 45 53 45 56 66 46 54 64 4a 56 44 42 61 55 58 53 5a 57 63 50 58 51 55 4a 64 44 42 4b 43 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 4f 51 48 46 52 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 41 48 49 63 61 57 47 4e 50 5a 53 56 5a 4d 59 49 4f 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73 5f 69 6e 64 65
                                                                                                                            Data Ascii: 4fe6gnsSpun_reminderModalDismiss_index: 'TDXRPCTOYESEVfFTdJVDBaUXSZWcPXQUJdDBKC',gnsInsCrd_bannerView_index: 'TDXRPVRBKKJVbFPbVCMIWIOQHFRYDEZRae',gnsInsCrd_bannerCtaClick_index: 'TDXRPVRBKKJVbFPbVCMIWIAHIcaWGNPZSVZMYIO',gnsInsCrd_bannerDismiss_inde
                                                                                                                            2024-09-28 02:38:29 UTC4080INData Raw: 66 53 4c 42 47 56 50 52 65 22 3a 31 2c 22 65 44 45 4d 66 53 4a 62 51 4a 51 52 58 5a 56 55 62 51 50 42 48 48 55 48 61 4f 22 3a 31 2c 22 4e 41 52 45 44 4d 46 58 65 53 43 4e 5a 57 4d 56 43 22 3a 31 2c 22 65 57 66 43 44 42 4f 53 56 49 48 51 63 61 4d 45 41 62 58 63 54 43 61 49 62 53 58 54 22 3a 32 2c 22 48 57 41 46 59 57 4d 64 56 5a 4d 59 43 45 4b 4b 45 51 66 4b 43 55 4b 4f 52 65 22 3a 31 2c 22 48 42 4f 41 49 45 63 5a 59 66 50 65 43 49 41 46 49 52 65 22 3a 31 2c 22 48 42 41 45 52 64 4f 50 52 61 66 66 58 4a 48 53 57 65 64 4e 44 65 51 66 46 52 57 65 22 3a 31 2c 22 64 4c 63 58 4a 65 49 54 50 56 4e 65 4a 4d 42 61 53 61 61 4f 22 3a 31 2c 22 65 45 42 5a 46 4a 5a 65 4f 51 5a 47 62 63 47 47 54 46 48 66 4f 4a 63 61 54 22 3a 31 2c 22 47 61 59 50 64 51 56 58 56 58 63 43
                                                                                                                            Data Ascii: fSLBGVPRe":1,"eDEMfSJbQJQRXZVUbQPBHHUHaO":1,"NAREDMFXeSCNZWMVC":1,"eWfCDBOSVIHQcaMEAbXcTCaIbSXT":2,"HWAFYWMdVZMYCEKKEQfKCUKORe":1,"HBOAIEcZYfPeCIAFIRe":1,"HBAERdOPRaffXJHSWedNDeQfFRWe":1,"dLcXJeITPVNeJMBaSaaO":1,"eEBZFJZeOQZGbcGGTFHfOJcaT":1,"GaYPdQVXVXcC
                                                                                                                            2024-09-28 02:38:29 UTC16384INData Raw: 33 66 66 61 0d 0a 4b 4c 52 45 63 5a 65 62 57 4e 57 65 22 3a 31 2c 22 59 64 58 66 43 44 57 4f 4f 57 4e 54 51 4f 48 65 4e 43 46 44 58 50 64 52 65 22 3a 31 2c 22 64 61 47 4e 66 58 57 61 48 59 53 64 49 4f 52 49 64 4c 48 65 22 3a 31 2c 22 47 43 53 58 5a 4c 44 65 41 42 61 4b 44 44 4b 49 48 65 63 62 4f 46 59 66 5a 58 58 64 64 4f 45 52 65 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 53 64 66 43 4f 4e 65 62 45 43 22 3a 31 2c 22 48 57 41 46 59 42 66 50 44 42 64 4c 45 61 42 58 65 22 3a 31 2c 22 48 56 55 42 59 48 44 57 4e 5a 47 53 52 61 50 53 5a 65 44 55 48 59 62 56 53 4b 48 52 62 64 46 49 4b 65 22 3a 31 2c 22 48 4d 62 42 51 62 46 46 44 66 61 56 63 50 46 58 62 4f 64 55 4d 4a 61 43 4e 48 55 48 65 22 3a 31 2c 22 4f 56 59 50 53 4d 41 48 48 62 50 49 52 5a 5a 42 52 66 4e 44 4a
                                                                                                                            Data Ascii: 3ffaKLREcZebWNWe":1,"YdXfCDWOOWNTQOHeNCFDXPdRe":1,"daGNfXWaHYSdIORIdLHe":1,"GCSXZLDeABaKDDKIHecbOFYfZXXddOERe":1,"TfNZeFcCSdfCONebEC":1,"HWAFYBfPDBdLEaBXe":1,"HVUBYHDWNZGSRaPSZeDUHYbVSKHRbdFIKe":1,"HMbBQbFFDfaVcPFXbOdUMJaCNHUHe":1,"OVYPSMAHHbPIRZZBRfNDJ
                                                                                                                            2024-09-28 02:38:29 UTC16384INData Raw: 0d 0a 38 30 30 30 0d 0a 52 59 57 4d 44 48 65 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 44 65 48 64 48 4a 5a 56 63 5a 49 65 50 47 50 54 57 46 44 4f 4a 63 61 54 22 3a 32 2c 22 63 43 48 4f 62 54 50 65 41 65 4d 4a 4a 66 4e 51 62 48 56 45 5a 59 52 45 48 47 57 50 48 44 44 57 65 22 3a 31 2c 22 59 54 54 48 62 58 65 65 56 4a 57 63 46 4b 4a 50 46 4e 4a 51 56 56 45 62 4d 4b 58 65 22 3a 32 2c 22 61 58 62 53 62 63 42 55 59 57 59 48 61 52 4d 53 41 64 52 54 55 4f 4f 49 42 42 4f 22 3a 31 2c 22 48 56 4c 44 54 4c 55 65 45 43 56 58 62 47 51 44 62 54 46 4e 4e 45 42 4f 61 61 4b 52 65 22 3a 31 2c 22 55 45 54 54 4a 62 5a 57 4d 5a 66 50 41 4a 4e 4c 4a 50 47 45 62 66 57 45 42 4f 5a 51 4e 50 63 5a 52 58 65 22 3a 31 2c 22 48 56 51 65 59 57 50 48 44 44 5a 58 62 54 42 55 64 4f 59 49 66
                                                                                                                            Data Ascii: 8000RYWMDHe":1,"TfNZeFcCDeHdHJZVcZIePGPTWFDOJcaT":2,"cCHObTPeAeMJJfNQbHVEZYREHGWPHDDWe":1,"YTTHbXeeVJWcFKJPFNJQVVEbMKXe":2,"aXbSbcBUYWYHaRMSAdRTUOOIBBO":1,"HVLDTLUeECVXbGQDbTFNNEBOaaKRe":1,"UETTJbZWMZfPAJNLJPGEbfWEBOZQNPcZRXe":1,"HVQeYWPHDDZXbTBUdOYIf
                                                                                                                            2024-09-28 02:38:29 UTC16384INData Raw: 65 65 56 4c 44 4b 5a 65 56 41 5a 4e 64 41 59 62 51 49 64 52 65 4c 4a 57 63 43 22 3a 31 2c 22 66 58 47 57 43 61 66 58 4a 4b 44 4b 61 54 22 3a 31 2c 22 41 42 56 59 55 59 4e 61 58 54 61 58 48 42 59 65 4e 54 44 56 58 4f 52 65 22 3a 31 2c 22 5a 64 5a 61 59 50 5a 50 42 51 4a 62 4c 62 4f 4d 46 63 5a 4c 57 5a 48 4f 66 41 55 52 41 66 50 56 54 22 3a 31 2c 22 61 58 54 66 48 41 45 44 42 4f 53 56 61 63 44 4e 64 52 64 4a 46 4b 63 53 48 55 62 51 57 65 22 3a 31 2c 22 63 43 48 4f 62 64 52 64 4a 53 59 65 4a 47 66 43 44 41 54 42 62 44 44 55 57 65 22 3a 31 2c 22 63 43 48 4f 62 43 42 57 61 45 64 49 50 50 53 66 44 63 49 53 51 5a 44 64 4d 4d 4e 49 52 48 5a 53 4a 63 43 63 43 63 43 43 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 4c 50 59 4b 44 63 64 44 47 4f 4c 4c 43 42 51 53 59 53
                                                                                                                            Data Ascii: eeVLDKZeVAZNdAYbQIdReLJWcC":1,"fXGWCafXJKDKaT":1,"ABVYUYNaXTaXHBYeNTDVXORe":1,"ZdZaYPZPBQJbLbOMFcZLWZHOfAURAfPVT":1,"aXTfHAEDBOSVacDNdRdJFKcSHUbQWe":1,"cCHObdRdJSYeJGfCDATBbDDUWe":1,"cCHObCBWaEdIPPSfDcISQZDdMMNIRHZSJcCcCcCC":1,"dLYHMRFeRLPYKDcdDGOLLCBQSYS


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            121192.168.2.454161188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:28 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:28 UTC729INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:28 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Og00A2Vj4hEHbbEiDvCinCQYXt%2BZE13zPCLhmL9fZXN66VVnYxo52B1Kn6S3l27ULu4meh4Kk5jlKHzfSJ7mBkxc9JM1W6Hism8feK4G4IYQ64zc15kHlikssuFQzXwwrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b84fd844379-EWR
                                                                                                                            2024-09-28 02:38:28 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            122192.168.2.454165188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:29 UTC782OUTPOST /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 10
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:29 UTC10OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c
                                                                                                                            Data Ascii: code=wakdl
                                                                                                                            2024-09-28 02:38:29 UTC660INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:29 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hXR2ZngLgk7JwomDXAdP5duEsqJ32dE0fD5wXcm4UJn4bbnXnScw7d3LDRTPlAuhdWEGQQ%2BEFFNIk4KE%2B6BEu7XWFby0%2BkxO1E9G8g7Hdr%2BQVWiybPsnOZ91f1a0XCJJ%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b8a4fa80c82-EWR
                                                                                                                            2024-09-28 02:38:29 UTC22INData Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a
                                                                                                                            Data Ascii: 10{"status":false}
                                                                                                                            2024-09-28 02:38:29 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            123192.168.2.454167188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:29 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:29 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:38:29 UTC652INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:29 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eMN7WaZ79rlL72tzQwhkq6qZanqXv9U0Z5pMTcy2MtFtOvj6I6BVY3YhOsZ2UIrb0jv2bMqGtEid9V3WAQYowWr4IRQSFzNF3%2F9oUeIoBUC0xx0BfdworQ77o8I19tDrbA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b8aacdd7288-EWR
                                                                                                                            2024-09-28 02:38:29 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            124192.168.2.45416618.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:29 UTC1071OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBK6LEtX6%2Blc%2BRtdHZzU16aCxqewqQu3KkRtC5sHfksh2yaHXG3X9nfVhYGkpu1lsbhny9kuE0uWBXHfhVUcxlR9qPWdfzVmlGkavqMmrMiWAHsHr1TggvWQ28dfYWC8GlYzVlXXXQ2O2uOtihT7g%2B1qj%2BUidJm%2BVA0%3D
                                                                                                                            2024-09-28 02:38:30 UTC2786INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:30 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default"}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:29 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:16:58 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzkssVfMmPBJG%2BWaws7xtXQXoRTRDu7eYv8BUrqRj6fgBGNQCsFxXKsI4WLXvoY2MZtM56jBh2qUFsvRqYweILKf9RM%2FPelx3mI1gvZieq7D6tx8r3Lvqv3f%2FJSAkM35C1BGdNaJ0NzuUjlVt5esxP5lS%2FbgdLIS8dU%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:30 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:30 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            content-security-policy-report-only: base-uri 'none'; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=146&pid=88ec12924d660250&e=UmFuZG9tSVYkc2RlIyh9YYYdGuViorKP__rp49iSj1jE7ViNaz42-SHXf8j08rEQ; script-src 'self' 'nonce-yKvMFfr7S6icuix' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' 'sha256-iry7oJKoKJ+9HSjmU3E1TlRlpSesJWZ1vapuUz2MP38='
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 6ce3814cb60a4c907ac701e60e4c1e5a.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: uuHrXbNlgEuq5xm7plhe_fJrZvoy717w_VBUy_NIbDaqHi4yAkPqyw==
                                                                                                                            2024-09-28 02:38:30 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 79 4b 76 4d 46 66 72 37 53 36 69 63 75 69 78 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="yKvMFfr7S6icuix"
                                                                                                                            2024-09-28 02:38:30 UTC16384INData Raw: 31 32 66 33 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20
                                                                                                                            Data Ascii: 12f3a<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:30 UTC16384INData Raw: 7b 77 65 65 6b 64 61 79 7d 2c 20 7b 62 65 67 69 6e 5f 6d 61 72 6b 65 72 7d 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 7b 65 6e 64 5f 6d 61 72 6b 65 72 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 20 66 72 6f 6d 20 7b 74 69 6d 65 7d 22 2c 22 64 61 74 65 5f 77 69 74 68 5f 77 65 65 6b 64 61 79 5f 77 69 74 68 5f 6d 61 72 6b 65 72 73 22 3a 22 7b 77 65 65 6b 64 61 79 7d 2c 20 7b 62 65 67 69 6e 5f 6d 61 72 6b 65 72 7d 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 7b 65 6e 64 5f 6d 61 72 6b 65 72 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 6e 75 6d 65 72 69 63 5f 64 61 79 5f 6d 6f 6e 74 68 5f 79 65 61 72 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 30 7d 2f 7b 64 61 79 5f 6e 61 6d 65 5f
                                                                                                                            Data Ascii: {weekday}, {begin_marker}{month_name} {day_of_month}{end_marker}, {full_year} from {time}","date_with_weekday_with_markers":"{weekday}, {begin_marker}{month_name} {day_of_month}{end_marker}, {full_year}","numeric_day_month_year":"{month_name_0}/{day_name_
                                                                                                                            2024-09-28 02:38:30 UTC16384INData Raw: 63 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 26 23 34 37 3b 27 2c 0a 62 5f 74 68 69
                                                                                                                            Data Ascii: c73a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.booking.com&#47;',b_thi
                                                                                                                            2024-09-28 02:38:30 UTC16384INData Raw: 42 42 4e 50 4d 50 53 58 57 65 27 2c 0a 67 6e 73 53 70 75 6e 5f 72 65 6d 69 6e 64 65 72 4d 6f 64 61 6c 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 43 54 4f 59 45 53 45 56 66 46 54 64 4a 56 44 42 61 55 58 53 5a 57 63 50 58 51 55 4a 64 44 42 4b 43 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 4f 51 48 46 52 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 41 48 49 63 61 57 47 4e 50 5a 53 56 5a 4d 59 49 4f 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73
                                                                                                                            Data Ascii: BBNPMPSXWe',gnsSpun_reminderModalDismiss_index: 'TDXRPCTOYESEVfFTdJVDBaUXSZWcPXQUJdDBKC',gnsInsCrd_bannerView_index: 'TDXRPVRBKKJVbFPbVCMIWIOQHFRYDEZRae',gnsInsCrd_bannerCtaClick_index: 'TDXRPVRBKKJVbFPbVCMIWIAHIcaWGNPZSVZMYIO',gnsInsCrd_bannerDismiss
                                                                                                                            2024-09-28 02:38:30 UTC12099INData Raw: 52 52 59 64 64 42 62 4e 58 47 44 4a 45 63 51 4d 64 42 63 41 45 48 59 4f 22 3a 31 2c 22 4e 41 46 4c 66 4f 64 41 53 55 54 62 4a 46 4a 59 42 61 51 63 57 54 4e 55 43 22 3a 31 2c 22 62 5a 57 4d 53 47 45 4e 49 62 66 64 65 44 63 4e 5a 57 4f 43 66 49 64 4f 65 66 55 55 54 42 53 48 4c 61 61 4f 22 3a 31 2c 22 59 54 42 59 4e 4a 58 43 63 66 54 4a 58 4e 41 4c 59 50 66 64 54 53 50 57 50 48 44 44 57 65 22 3a 31 2c 22 4e 41 46 4c 65 4f 65 4a 59 54 42 4e 41 46 51 56 46 61 58 49 46 54 64 50 65 43 49 59 59 54 22 3a 32 2c 22 48 57 41 46 59 46 54 66 66 52 65 51 51 4a 59 63 41 4c 44 4f 52 4d 54 66 4c 54 22 3a 31 2c 22 56 4d 58 4e 48 44 52 58 49 55 55 49 48 4f 45 4f 22 3a 31 2c 22 62 4c 64 4c 4f 4c 4f 4c 4f 54 59 56 4f 56 66 4c 65 56 55 63 54 41 4b 56 54 51 57 55 5a 62 65 4b 52
                                                                                                                            Data Ascii: RRYddBbNXGDJEcQMdBcAEHYO":1,"NAFLfOdASUTbJFJYBaQcWTNUC":1,"bZWMSGENIbfdeDcNZWOCfIdOefUUTBSHLaaO":1,"YTBYNJXCcfTJXNALYPfdTSPWPHDDWe":1,"NAFLeOeJYTBNAFQVFaXIFTdPeCIYYT":2,"HWAFYFTffReQQJYcALDORMTfLT":1,"VMXNHDRXIUUIHOEO":1,"bLdLOLOLOTYVOVfLeVUcTAKVTQWUZbeKR
                                                                                                                            2024-09-28 02:38:30 UTC16384INData Raw: 32 61 36 31 39 0d 0a 58 4c 4d 45 53 47 5a 58 4e 52 65 22 3a 31 2c 22 55 45 54 54 4a 62 5a 57 4d 5a 66 50 63 56 44 5a 42 4f 49 4f 41 49 45 63 56 49 5a 64 52 52 54 22 3a 31 2c 22 59 54 42 61 58 45 62 51 46 50 49 45 45 42 42 63 46 50 49 57 4a 62 48 46 52 54 22 3a 31 2c 22 63 51 44 4a 47 50 48 41 5a 61 53 64 56 58 53 41 44 63 54 42 5a 4c 4f 22 3a 31 2c 22 66 65 66 53 4b 65 45 46 43 4e 42 62 63 4d 4d 49 59 54 45 54 22 3a 31 2c 22 47 62 4a 41 48 48 45 64 51 62 54 64 46 56 4e 61 44 4e 4c 46 4e 5a 66 43 22 3a 31 2c 22 64 4f 58 4b 66 51 46 41 65 4a 51 46 62 4a 49 56 4f 22 3a 31 2c 22 65 44 53 64 55 66 41 4a 41 5a 64 4a 41 49 4e 51 57 42 4f 66 57 56 57 4e 59 4f 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55 62 47 51 44 61 44 46 58 58 63 63 42 50 4b 65 22 3a 31 2c 22 4e
                                                                                                                            Data Ascii: 2a619XLMESGZXNRe":1,"UETTJbZWMZfPcVDZBOIOAIEcVIZdRRT":1,"YTBaXEbQFPIEEBBcFPIWJbHFRT":1,"cQDJGPHAZaSdVXSADcTBZLO":1,"fefSKeEFCNBbcMMIYTET":1,"GbJAHHEdQbTdFVNaDNLFNZfC":1,"dOXKfQFAeJQFbJIVO":1,"eDSdUfAJAZdJAINQWBOfWVWNYO":1,"NAFQCJWZUbGQDaDFXXccBPKe":1,"N
                                                                                                                            2024-09-28 02:38:30 UTC16384INData Raw: 22 48 4d 62 64 44 4a 58 63 4d 4b 41 61 46 59 4e 4c 57 4c 64 4e 48 57 54 52 54 66 49 5a 66 51 48 4f 22 3a 31 2c 22 61 58 62 53 62 63 4f 51 50 43 50 52 57 58 64 42 47 5a 58 65 59 42 42 56 59 59 54 22 3a 31 2c 22 61 58 54 66 48 41 45 44 64 55 4a 46 55 46 63 55 4b 4d 42 4b 56 5a 4d 59 43 49 53 49 42 42 4f 22 3a 31 2c 22 54 48 48 53 4f 44 49 4c 4a 62 62 66 59 46 5a 49 4a 65 50 49 43 61 65 46 59 54 45 54 22 3a 31 2c 22 48 57 41 46 59 4a 4b 49 42 56 4f 54 48 54 22 3a 31 2c 22 54 65 43 4f 65 4a 63 49 58 45 51 52 62 43 41 43 61 57 4e 4c 4d 42 55 49 50 62 56 61 4b 62 4e 56 43 4d 49 51 5a 66 41 43 22 3a 31 2c 22 5a 4e 54 44 56 43 44 64 50 46 43 44 4a 51 61 43 52 62 4e 5a 42 55 62 53 51 41 62 56 45 54 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 4c 42 42 56 59 55 48 53
                                                                                                                            Data Ascii: "HMbdDJXcMKAaFYNLWLdNHWTRTfIZfQHO":1,"aXbSbcOQPCPRWXdBGZXeYBBVYYT":1,"aXTfHAEDdUJFUFcUKMBKVZMYCISIBBO":1,"THHSODILJbbfYFZIJePICaeFYTET":1,"HWAFYJKIBVOTHT":1,"TeCOeJcIXEQRbCACaWNLMBUIPbVaKbNVCMIQZfAC":1,"ZNTDVCDdPFCDJQaCRbNZBUbSQAbVET":1,"dLYHMRFeRLBBVYUHS
                                                                                                                            2024-09-28 02:38:30 UTC16384INData Raw: 4e 4b 48 62 64 4a 4d 57 42 44 4c 4c 58 63 42 61 4f 48 65 22 3a 32 2c 22 62 51 47 42 62 51 47 57 46 42 61 61 65 48 47 5a 4f 41 63 46 4d 42 52 4e 48 55 48 65 22 3a 31 2c 22 4f 4f 49 42 54 43 65 4d 4a 59 47 49 48 52 62 64 46 49 4b 65 22 3a 31 2c 22 59 64 58 66 43 44 57 4f 4f 44 53 53 43 61 49 66 57 63 48 4f 52 65 65 48 65 22 3a 31 2c 22 63 43 48 4f 62 49 56 49 41 44 49 42 4e 47 53 64 4f 4e 62 43 4e 4c 4f 4c 4f 4c 4d 4f 22 3a 31 2c 22 45 4c 53 58 48 62 63 4f 63 55 5a 42 4a 4f 54 58 4e 41 4c 4d 48 57 61 64 41 55 66 44 4d 63 4d 5a 4d 4f 22 3a 31 2c 22 49 5a 41 4c 4f 4c 4f 4c 4f 49 43 57 52 64 47 4f 48 48 41 42 4e 61 53 64 46 61 4c 62 46 43 22 3a 31 2c 22 62 51 47 42 41 57 51 4e 41 63 51 61 50 55 50 63 44 4f 52 4d 54 66 4c 54 22 3a 31 2c 22 54 66 4e 5a 65 46 4f
                                                                                                                            Data Ascii: NKHbdJMWBDLLXcBaOHe":2,"bQGBbQGWFBaaeHGZOAcFMBRNHUHe":1,"OOIBTCeMJYGIHRbdFIKe":1,"YdXfCDWOODSSCaIfWcHOReeHe":1,"cCHObIVIADIBNGSdONbCNLOLOLMO":1,"ELSXHbcOcUZBJOTXNALMHWadAUfDMcMZMO":1,"IZALOLOLOICWRdGOHHABNaSdFaLbFC":1,"bQGBAWQNAcQaPUPcDORMTfLT":1,"TfNZeFO
                                                                                                                            2024-09-28 02:38:30 UTC16384INData Raw: 54 22 3a 31 2c 22 41 45 41 46 50 4b 49 4a 53 48 58 64 52 54 22 3a 31 2c 22 59 64 58 66 4d 4f 61 4b 5a 49 63 46 44 53 43 64 52 4b 5a 58 52 54 22 3a 31 2c 22 42 49 55 4a 4c 4d 4a 56 66 4e 61 62 4d 64 4c 45 52 45 4e 5a 44 4d 51 50 4e 4b 54 5a 49 4b 64 46 48 61 4f 22 3a 31 2c 22 59 54 42 55 49 48 4f 64 56 4c 42 4c 42 47 56 50 51 57 49 62 64 50 58 49 4c 4d 55 43 22 3a 31 2c 22 42 4b 41 54 59 53 43 5a 44 56 52 47 43 4d 52 44 66 55 46 46 45 63 50 55 46 4b 4d 4f 62 58 57 52 46 45 49 4b 65 22 3a 31 2c 22 4f 4d 59 64 56 4e 4e 52 62 47 41 44 44 42 44 4f 4c 45 50 42 50 55 4a 63 58 65 22 3a 31 2c 22 56 4f 54 63 48 4b 63 4d 4b 57 4d 41 63 51 50 65 50 41 5a 5a 4f 4a 41 43 22 3a 33 2c 22 4f 62 55 44 5a 4d 55 4c 41 46 45 4a 4b 61 45 63 61 4d 45 41 66 64 53 52 66 41 41 58
                                                                                                                            Data Ascii: T":1,"AEAFPKIJSHXdRT":1,"YdXfMOaKZIcFDSCdRKZXRT":1,"BIUJLMJVfNabMdLERENZDMQPNKTZIKdFHaO":1,"YTBUIHOdVLBLBGVPQWIbdPXILMUC":1,"BKATYSCZDVRGCMRDfUFFEcPUFKMObXWRFEIKe":1,"OMYdVNNRbGADDBDOLEPBPUJcXe":1,"VOTcHKcMKWMAcQPePAZZOJAC":3,"ObUDZMULAFEJKaEcaMEAfdSRfAAX


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            125192.168.2.454168188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:29 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:30 UTC735INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:30 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uijsH%2BCFUNcyyHKf0zaNZeTxwz927ZRRVuk0giDFNH%2B3zm0zleYEPJewlDzLPF%2BIXnSiu9YoRbqPzNfmJ6knVPo7EvN66CsmhmF7cG%2F53WymJFOVhieDiBydwFjm7fdGVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b8cbf3878e1-EWR
                                                                                                                            2024-09-28 02:38:30 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            126192.168.2.454170188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:30 UTC412OUTGET /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:31 UTC637INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:31 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8iMhq2%2BNEbJj7rOATJGbCQB6KDWLSfpm0WxOF3YeK8wPIOPze9%2F1v%2FqLVvsOStWlwAWVdTSxbQiTPiufZ9B3wzVmGrWNpYBkjoC9MvXMeIG3mnOna2N3JJvr8B%2FppNqOIg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b929937c342-EWR
                                                                                                                            alt-svc: h3=":443"; ma=86400
                                                                                                                            2024-09-28 02:38:31 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            127192.168.2.45417118.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:31 UTC1069OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzkssVfMmPBJG%2BWaws7xtXQXoRTRDu7eYv8BUrqRj6fgBGNQCsFxXKsI4WLXvoY2MZtM56jBh2qUFsvRqYweILKf9RM%2FPelx3mI1gvZieq7D6tx8r3Lvqv3f%2FJSAkM35C1BGdNaJ0NzuUjlVt5esxP5lS%2FbgdLIS8dU%3D
                                                                                                                            2024-09-28 02:38:31 UTC2343INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:31 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default"}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:31 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:17:02 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPeekx4DW18uO%2FtR8Fl8tPO6gvNdQXMp9ncoZChmk9olvylmHjc8UAby%2FqAcmETTMpZYnsMOH8xtdv5qYiBF1bfaRAnAn3H1NLcB3NCb4jhqqsN82pt3YTPKRB7w5AptG2NYYMkKYvjXRlPigfaxrQncopxUcFUw4vA0%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:31 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:31 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 dc57cbf9d7336ae929f762b5ada2ed98.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: v5Ma0g4sEZNtRG7sym6CwUlrbyAPRbgVO3V-az4qNqWdvETHKdnIzg==
                                                                                                                            2024-09-28 02:38:31 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 65 46 4c 52 47 79 49 59 31 38 6b 76 39 47 73 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="eFLRGyIY18kv9Gs"
                                                                                                                            2024-09-28 02:38:31 UTC13986INData Raw: 33 36 39 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 369a<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:31 UTC16384INData Raw: 33 66 66 61 0d 0a 6c 61 63 65 28 27 6e 6f 4a 53 27 2c 20 27 27 29 20 2b 20 27 20 68 61 73 4a 53 27 3b 0a 76 61 72 20 62 5f 65 78 70 65 72 69 6d 65 6e 74 73 20 3d 20 7b 7d 2c 20 57 49 44 54 48 2c 20 42 20 3d 20 77 69 6e 64 6f 77 2e 62 6f 6f 6b 69 6e 67 20 3d 20 7b 0a 5f 6f 6e 66 6c 79 3a 20 5b 5d 2c 20 2f 2f 20 22 6f 6e 20 74 68 65 20 66 6c 79 22 20 66 75 6e 63 74 69 6f 6e 73 2c 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 20 61 73 20 73 6f 6f 6e 20 61 73 20 65 78 74 65 72 6e 61 6c 20 6a 73 20 66 69 6c 65 73 20 77 65 72 65 20 6c 6f 61 64 65 64 0a 64 65 76 54 6f 6f 6c 73 3a 20 7b 0a 74 72 61 63 6b 65 64 45 78 70 65 72 69 6d 65 6e 74 73 3a 20 5b 5d 0a 7d 2c 0a 75 73 65 72 3a 20 7b 0a 7d 2c 0a 65 6e 76 20 3a 20 7b 0a 69 73 52 65 74 69 6e 61 20 3a 20 77
                                                                                                                            Data Ascii: 3ffalace('noJS', '') + ' hasJS';var b_experiments = {}, WIDTH, B = window.booking = {_onfly: [], // "on the fly" functions, will be executed as soon as external js files were loadeddevTools: {trackedExperiments: []},user: {},env : {isRetina : w
                                                                                                                            2024-09-28 02:38:32 UTC16384INData Raw: 0d 0a 39 39 34 36 0d 0a 67 68 74 65 73 74 3a 20 22 23 46 46 46 30 46 30 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 64 61 72 6b 3a 20 22 23 30 30 36 36 30 37 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 3a 20 22 23 30 30 38 30 30 39 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 3a 20 22 23 39 37 45 35 39 43 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 72 3a 20 22 23 45 37 46 44 45 39 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 73 74 3a 20 22 23 46 31 46 45 46 32 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 3a 20 22 23 30 30 37 31 43
                                                                                                                            Data Ascii: 9946ghtest: "#FFF0F0",bui_color_constructive_dark: "#006607",bui_color_constructive: "#008009",bui_color_constructive_light: "#97E59C",bui_color_constructive_lighter: "#E7FDE9",bui_color_constructive_lightest: "#F1FEF2",bui_color_action: "#0071C
                                                                                                                            2024-09-28 02:38:32 UTC16384INData Raw: 2d 38 35 2d 6b 79 34 78 4f 58 2d 4c 65 79 65 67 47 78 4e 56 51 4d 6d 53 6f 6d 53 6b 5f 36 2d 69 51 30 4d 46 6e 77 56 75 69 54 6d 64 37 68 4a 5f 67 38 4a 38 63 51 30 47 4a 4d 51 62 37 32 2d 6d 66 41 62 62 74 48 58 76 63 59 44 6c 44 65 61 35 79 48 38 39 30 76 76 32 78 67 5f 6c 49 46 47 76 58 5f 6b 59 6b 41 45 47 61 31 39 68 41 75 6d 41 79 34 37 39 64 48 32 56 37 46 36 72 2d 47 6f 36 39 58 6f 41 78 72 35 77 74 77 2d 64 36 6e 48 45 4c 71 68 5f 36 48 4a 63 45 4a 36 6a 4e 61 30 53 45 70 5a 61 33 76 5f 61 33 4b 63 61 45 30 32 64 52 4a 58 6a 39 73 62 48 79 6b 2d 4e 6b 6f 57 53 43 7a 67 34 7a 58 37 75 47 51 54 6d 34 52 37 79 30 64 31 4e 4f 72 33 7a 42 42 31 61 50 34 38 34 72 54 61 76 35 68 6c 67 41 43 32 42 38 70 62 79 56 50 49 57 74 30 4f 72 2d 52 61 64 7a 2d 75
                                                                                                                            Data Ascii: -85-ky4xOX-LeyegGxNVQMmSomSk_6-iQ0MFnwVuiTmd7hJ_g8J8cQ0GJMQb72-mfAbbtHXvcYDlDea5yH890vv2xg_lIFGvX_kYkAEGa19hAumAy479dH2V7F6r-Go69XoAxr5wtw-d6nHELqh_6HJcEJ6jNa0SEpZa3v_a3KcaE02dRJXj9sbHyk-NkoWSCzg4zX7uGQTm4R7y0d1NOr3zBB1aP484rTav5hlgAC2B8pbyVPIWt0Or-Radz-u
                                                                                                                            2024-09-28 02:38:32 UTC6480INData Raw: 42 63 4d 43 4d 61 52 54 22 3a 31 2c 22 66 65 62 64 53 41 59 46 63 61 46 55 59 4b 47 5a 4a 41 52 47 4e 4b 43 46 4b 4f 66 43 53 52 42 4a 45 55 58 50 4e 4d 57 65 22 3a 31 2c 22 4e 56 46 56 63 66 54 62 64 4e 4e 4a 64 44 42 4b 44 44 4a 4b 44 4b 47 64 48 5a 63 4b 5a 61 54 61 54 61 45 54 22 3a 31 2c 22 61 57 51 4f 63 54 45 59 44 42 4f 53 64 55 57 58 51 42 4f 61 62 63 4e 56 44 53 66 41 55 48 63 56 54 22 3a 31 2c 22 59 64 58 66 43 44 57 4f 4f 53 43 61 49 66 57 63 55 58 57 41 63 62 45 44 47 58 65 22 3a 31 2c 22 56 4f 62 64 5a 5a 61 42 66 43 43 64 44 65 51 66 59 59 54 22 3a 31 2c 22 59 54 42 59 4e 61 58 54 61 53 4a 4b 62 4e 43 64 44 5a 54 61 50 66 4c 52 42 64 53 4d 48 45 54 22 3a 31 2c 22 48 49 4e 5a 4a 4c 65 55 58 53 61 5a 62 64 4b 4e 4b 4e 4b 50 4a 64 42 4a 4f 54
                                                                                                                            Data Ascii: BcMCMaRT":1,"febdSAYFcaFUYKGZJARGNKCFKOfCSRBJEUXPNMWe":1,"NVFVcfTbdNNJdDBKDDJKDKGdHZcKZaTaTaET":1,"aWQOcTEYDBOSdUWXQBOabcNVDSfAUHcVT":1,"YdXfCDWOOSCaIfWcUXWAcbEDGXe":1,"VObdZZaBfCCdDeQfYYT":1,"YTBYNaXTaSJKbNCdDZTaPfLRBdSMHET":1,"HINZJLeUXSaZbdKNKNKPJdBJOT
                                                                                                                            2024-09-28 02:38:32 UTC16384INData Raw: 33 66 66 61 0d 0a 49 66 57 63 41 43 56 56 4c 5a 50 65 63 4f 45 4f 22 3a 31 2c 22 4f 4d 61 58 61 65 50 4c 53 49 52 53 48 54 22 3a 31 2c 22 47 43 53 58 48 48 56 51 49 5a 44 46 4a 4e 4c 63 4f 64 48 4b 4c 59 5a 57 64 4b 59 61 46 50 65 4e 57 4f 45 58 4b 51 4c 4e 4a 43 22 3a 31 2c 22 59 54 42 4f 51 63 4c 50 51 4c 4d 48 57 61 64 42 4a 4f 54 58 4e 41 55 45 4a 57 63 43 22 3a 31 2c 22 64 4c 63 58 4a 65 49 54 50 56 4e 65 4a 4d 42 4d 57 5a 4e 4e 4f 65 62 51 41 59 58 54 22 3a 31 2c 22 49 5a 64 46 53 58 49 48 45 52 64 61 61 58 57 58 41 48 47 4f 22 3a 31 2c 22 4f 4d 42 4b 4f 4d 61 57 51 4f 63 5a 62 4a 53 57 65 22 3a 31 2c 22 4f 4c 52 56 5a 4c 42 55 66 44 64 62 64 4c 48 63 57 58 54 22 3a 31 2c 22 4f 4d 48 4d 62 4d 50 4d 5a 62 46 44 53 46 53 65 66 57 63 48 53 57 65 64 4e
                                                                                                                            Data Ascii: 3ffaIfWcACVVLZPecOEO":1,"OMaXaePLSIRSHT":1,"GCSXHHVQIZDFJNLcOdHKLYZWdKYaFPeNWOEXKQLNJC":1,"YTBOQcLPQLMHWadBJOTXNAUEJWcC":1,"dLcXJeITPVNeJMBMWZNNOebQAYXT":1,"IZdFSXIHERdaaXWXAHGO":1,"OMBKOMaWQOcZbJSWe":1,"OLRVZLBUfDdbdLHcWXT":1,"OMHMbMPMZbFDSFSefWcHSWedN
                                                                                                                            2024-09-28 02:38:32 UTC16384INData Raw: 0d 0a 39 62 62 30 0d 0a 3a 31 2c 22 49 5a 42 54 64 46 50 66 42 4b 53 41 45 4c 53 58 48 58 53 48 46 64 56 66 57 49 48 43 41 64 50 65 48 54 22 3a 31 2c 22 66 65 66 53 4b 65 45 44 57 48 43 4a 5a 41 52 65 62 46 65 64 5a 55 44 4f 43 44 57 4f 4f 43 22 3a 31 2c 22 49 4e 46 64 42 4f 53 45 43 64 4a 4c 55 55 58 56 53 55 66 46 63 58 5a 4f 46 4b 46 5a 53 41 5a 4c 65 4b 65 22 3a 31 2c 22 50 50 58 47 53 43 5a 44 44 4a 4c 48 46 44 49 48 63 46 49 54 43 22 3a 31 2c 22 59 64 58 66 4d 4f 62 57 4a 5a 4c 42 4b 42 61 55 65 63 55 55 57 65 22 3a 31 2c 22 66 54 5a 61 54 61 54 61 42 59 4e 5a 53 42 4a 49 52 45 56 53 47 44 4d 53 64 43 22 3a 31 2c 22 42 49 55 4a 4c 4d 4a 56 66 4e 61 62 4d 64 4c 45 52 45 4e 5a 44 4d 51 50 4e 4b 54 5a 49 4b 64 46 48 61 4f 22 3a 31 2c 22 4f 41 5a 4f 58
                                                                                                                            Data Ascii: 9bb0:1,"IZBTdFPfBKSAELSXHXSHFdVfWIHCAdPeHT":1,"fefSKeEDWHCJZARebFedZUDOCDWOOC":1,"INFdBOSECdJLUUXVSUfFcXZOFKFZSAZLeKe":1,"PPXGSCZDDJLHFDIHcFITC":1,"YdXfMObWJZLBKBaUecUUWe":1,"fTZaTaTaBYNZSBJIREVSGDMSdC":1,"BIUJLMJVfNabMdLERENZDMQPNKTZIKdFHaO":1,"OAZOX
                                                                                                                            2024-09-28 02:38:32 UTC16384INData Raw: 4f 4d 5a 46 66 49 4f 44 64 4d 53 42 53 57 43 47 56 54 66 55 55 59 4c 58 41 53 4b 65 22 3a 31 2c 22 62 5a 57 4d 53 47 45 4e 49 62 66 64 65 44 63 4e 65 4a 58 56 57 4d 44 4e 52 66 54 55 4b 65 22 3a 31 2c 22 66 65 62 49 55 4f 4e 53 46 48 42 4f 41 49 45 63 56 49 5a 64 52 52 54 22 3a 31 2c 22 65 52 59 50 48 45 4b 4e 64 4c 4c 59 58 63 42 64 48 52 4b 54 47 51 62 54 44 41 63 56 54 22 3a 31 2c 22 61 57 51 4f 63 48 4b 64 58 64 44 50 4e 44 4a 64 51 4a 45 63 54 65 4b 48 4d 65 54 43 22 3a 31 2c 22 4e 56 4e 5a 59 65 4a 42 43 58 61 54 46 4b 47 48 59 62 4f 58 57 43 22 3a 31 2c 22 66 45 4f 4d 4e 56 4c 57 50 47 47 4d 52 62 42 59 57 4b 4f 4c 50 59 4b 44 63 64 43 22 3a 31 2c 22 42 50 48 41 66 61 52 49 4d 4a 52 42 48 4c 64 52 54 4b 65 65 50 65 43 64 52 62 50 59 46 4a 43 22 3a
                                                                                                                            Data Ascii: OMZFfIODdMSBSWCGVTfUUYLXASKe":1,"bZWMSGENIbfdeDcNeJXVWMDNRfTUKe":1,"febIUONSFHBOAIEcVIZdRRT":1,"eRYPHEKNdLLYXcBdHRKTGQbTDAcVT":1,"aWQOcHKdXdDPNDJdQJEcTeKHMeTC":1,"NVNZYeJBCXaTFKGHYbOXWC":1,"fEOMNVLWPGGMRbBYWKOLPYKDcdC":1,"BPHAfaRIMJRBHLdRTKeePeCdRbPYFJC":
                                                                                                                            2024-09-28 02:38:32 UTC7098INData Raw: 42 58 65 22 3a 31 2c 22 65 52 59 59 55 42 49 55 4a 4c 4d 53 4b 42 63 55 56 44 59 4d 4f 22 3a 31 2c 22 61 58 42 4e 54 66 55 57 52 46 4d 65 4a 41 45 54 66 41 43 51 54 50 52 58 55 54 56 54 61 52 62 64 46 49 4b 65 22 3a 31 2c 22 48 57 41 46 59 42 66 50 44 42 45 44 48 49 57 44 62 4b 49 64 44 5a 42 65 45 62 46 44 50 64 41 45 49 45 42 47 5a 57 55 4c 65 4e 43 22 3a 31 2c 22 48 56 50 5a 45 59 64 49 62 4e 45 49 45 42 46 4b 43 54 58 4a 4d 62 66 49 5a 54 66 62 4a 41 52 47 4e 4b 43 46 4b 58 65 22 3a 31 2c 22 63 4a 55 4a 44 62 66 47 59 55 58 41 55 41 44 61 52 41 42 47 4f 22 3a 31 2c 22 62 51 47 42 62 51 47 57 46 42 61 61 65 48 47 5a 4f 54 50 63 65 59 57 44 46 52 53 47 51 43 42 59 4b 65 22 3a 31 2c 22 4f 4d 54 56 42 45 4e 4e 52 59 58 63 43 48 48 52 48 62 45 4e 48 4b 4b
                                                                                                                            Data Ascii: BXe":1,"eRYYUBIUJLMSKBcUVDYMO":1,"aXBNTfUWRFMeJAETfACQTPRXUTVTaRbdFIKe":1,"HWAFYBfPDBEDHIWDbKIdDZBeEbFDPdAEIEBGZWULeNC":1,"HVPZEYdIbNEIEBFKCTXJMbfIZTfbJARGNKCFKXe":1,"cJUJDbfGYUXAUADaRABGO":1,"bQGBbQGWFBaaeHGZOTPceYWDFRSGQCBYKe":1,"OMTVBENNRYXcCHHRHbENHKK


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            128192.168.2.454173188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:31 UTC409OUTGET /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:31 UTC607INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:31 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=62f2MOrPAjUjVwaeagVhgX1%2Bt0xJARFA%2BKWyDPpf8aJfXhaal%2FQJ4x1fM8eaV8qYpcruXL2ouxg2pPaWWyObNjQMO1D01J1W4pDAlke%2FsEI1z8x3nuOEyfF9cQ1Tt6q1pw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b961c6b42d8-EWR
                                                                                                                            2024-09-28 02:38:31 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            129192.168.2.454176188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:31 UTC777OUTPOST /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 30
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:31 UTC30OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 6c 61 73 74 5f 6d 73 67 5f 69 64 3d 36 30 35 39 30 30 39
                                                                                                                            Data Ascii: code=wakdl&last_msg_id=6059009
                                                                                                                            2024-09-28 02:38:32 UTC662INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:32 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RtxRFi%2FtXKBK4LqyWR2C%2BFnDzUWjmPwLNvOyETDorVCxsEfu67kTrTC136dglzrgmkFGXi6qQ9ywvXOwcMFxGtez2827cAnyDNZ7%2FsZ1u%2Fy%2BgrJvwoHK0%2BPss867KuzsKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b9a49074262-EWR
                                                                                                                            2024-09-28 02:38:32 UTC51INData Raw: 32 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 22 4d 65 73 73 61 67 65 73 20 6e 6f 74 20 66 6f 75 6e 64 21 22 7d 0d 0a
                                                                                                                            Data Ascii: 2d{"status":false,"text":"Messages not found!"}
                                                                                                                            2024-09-28 02:38:32 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            130192.168.2.454177188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:32 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:32 UTC735INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:32 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PowFvb9jYXfTjebU5qrA%2B5TDQ0Qd2X0E5mjpFdDO509afKh1Cl2et69xB9G66KMicRMVDvPcQf4plM5H7kfJRHpUenwWwkLSOOrXU1fP%2BN%2BqgmtA4ed05%2Ff53QuUPXdccw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05b9bbcf418c4-EWR
                                                                                                                            2024-09-28 02:38:32 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            131192.168.2.454181188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:33 UTC402OUTGET /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:33 UTC603INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:33 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dwzztH8YfwgvECjl4pzFD1kmTQO0IpBNDxxGc9Fidr%2FC6WRfhcJ6qzU7aUlzGXcIk87f5amiIskeUQnDBke1dYnWEjH3DCnni6GCRAo3Hyes%2FQsu346VmotkAuzNzItPbA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ba2cec22361-EWR
                                                                                                                            2024-09-28 02:38:33 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            132192.168.2.45418018.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:33 UTC1065OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPeekx4DW18uO%2FtR8Fl8tPO6gvNdQXMp9ncoZChmk9olvylmHjc8UAby%2FqAcmETTMpZYnsMOH8xtdv5qYiBF1bfaRAnAn3H1NLcB3NCb4jhqqsN82pt3YTPKRB7w5AptG2NYYMkKYvjXRlPigfaxrQncopxUcFUw4vA0%3D
                                                                                                                            2024-09-28 02:38:33 UTC2782INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:33 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"max_age":604800,"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}]}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:33 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:17:06 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaIju58pnnq5aMscn9a1KkR5ye4JsuluH4g6kqM7ouCM80ZiJ0OWZ7of2Ea4%2FdXdXyVILD7W1zNyK5VYX3Q8SEBAq5A3DHzzRDu%2F8ozPqjvEry464l0M1Dum0%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:33 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:33 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            content-security-policy-report-only: base-uri 'none'; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=146&pid=b4ed129492ca02d3&e=UmFuZG9tSVYkc2RlIyh9YYYdGuViorKPlLwYph_3bEYeo3amROvesOiMJ8-bV3bF; script-src 'self' 'nonce-QotwJzDqoLq5mAu' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' 'sha256-iry7oJKoKJ+9HSjmU3E1TlRlpSesJWZ1vapuUz2MP38='
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 b99111dfd026a3c99d0e66063beb0544.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: DPt5YkoukOtROeaJn8ZAah1UyZIRuS8bZc8-t-_qPqb8tdbKOnUO5A==
                                                                                                                            2024-09-28 02:38:33 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 51 6f 74 77 4a 7a 44 71 6f 4c 71 35 6d 41 75 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="QotwJzDqoLq5mAu"
                                                                                                                            2024-09-28 02:38:34 UTC16384INData Raw: 31 36 35 64 64 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20
                                                                                                                            Data Ascii: 165dd<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:34 UTC16384INData Raw: 72 6b 65 72 7d 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 7b 65 6e 64 5f 6d 61 72 6b 65 72 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 20 66 72 6f 6d 20 7b 74 69 6d 65 7d 20 75 6e 74 69 6c 20 7b 74 69 6d 65 5f 75 6e 74 69 6c 7d 22 2c 22 6d 6f 6e 74 68 5f 77 69 74 68 5f 79 65 61 72 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 77 69 74 68 5f 79 65 61 72 5f 6f 6e 6c 79 7d 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 79 5f 6d 6f 6e 74 68 5f 79 65 61 72 5f 6f 6e 22 3a 22 6f 6e 20 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6e 61 6d 65 7d 2c 20 7b 66 75 6c 6c 5f 79 65 61 72 7d 22 2c 22 64 61 74 65 5f 72 61 6e 67 65 5f 77 69 74 68 5f 73 68 6f 72 74 5f 77 65 65 6b 64 61 79 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 22
                                                                                                                            Data Ascii: rker}{month_name} {day_of_month}{end_marker}, {full_year} from {time} until {time_until}","month_with_year":"{month_name_with_year_only} {full_year}","day_month_year_on":"on {month_name} {day_name}, {full_year}","date_range_with_short_weekday_short_month"
                                                                                                                            2024-09-28 02:38:34 UTC16384INData Raw: 63 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 26 23 34 37 3b 27 2c 0a 62 5f 74 68 69
                                                                                                                            Data Ascii: c73a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.booking.com&#47;',b_thi
                                                                                                                            2024-09-28 02:38:34 UTC16384INData Raw: 53 5a 57 63 50 58 51 55 4a 64 44 42 4b 43 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 56 69 65 77 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 4f 51 48 46 52 59 44 45 5a 52 61 65 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 43 74 61 43 6c 69 63 6b 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 57 49 41 48 49 63 61 57 47 4e 50 5a 53 56 5a 4d 59 49 4f 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 62 61 6e 6e 65 72 44 69 73 6d 69 73 73 5f 69 6e 64 65 78 3a 20 27 54 44 58 52 50 56 52 42 4b 4b 4a 56 62 46 50 62 56 43 4d 49 4a 65 42 4f 62 56 49 53 63 66 46 64 48 56 54 27 2c 0a 67 6e 73 49 6e 73 43 72 64 5f 6d 6f 64 61 6c 56 69 65 77 5f 69 6e 64 65 78 3a 20
                                                                                                                            Data Ascii: SZWcPXQUJdDBKC',gnsInsCrd_bannerView_index: 'TDXRPVRBKKJVbFPbVCMIWIOQHFRYDEZRae',gnsInsCrd_bannerCtaClick_index: 'TDXRPVRBKKJVbFPbVCMIWIAHIcaWGNPZSVZMYIO',gnsInsCrd_bannerDismiss_index: 'TDXRPVRBKKJVbFPbVCMIJeBObVIScfFdHVT',gnsInsCrd_modalView_index:
                                                                                                                            2024-09-28 02:38:34 UTC16384INData Raw: 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 5a 55 54 50 54 51 45 62 48 65 46 55 50 65 63 4c 55 54 4f 48 65 4e 43 46 43 22 3a 31 2c 22 61 58 54 66 48 41 45 44 42 4f 53 4d 65 45 66 45 49 54 4e 50 66 61 53 64 42 55 4c 51 45 57 48 51 48 44 44 48 59 59 66 50 48 65 22 3a 31 2c 22 66 65 61 53 4c 41 5a 57 41 63 46 43 4e 42 54 4c 45 4b 58 4a 59 58 54 22 3a 31 2c 22 5a 4f 4d 55 52 43 57 45 59 63 5a 62 4d 48 53 55 48 63 57 43 63 4e 66 4e 61 48 4d 4f 22 3a 31 2c 22 47 44 49 63 64 53 5a 63 59 41 5a 45 54 59 63 62 57 64 59 4b 49 4c 53 4e 43 22 3a 31 2c 22 4e 56 50 4f 46 4a 63 66 46 58 50 47 57 41 54 55 5a 53 64 63 46 48 62 63 52 65 22 3a 31 2c 22 65 45 42 5a 46 4a 5a 65 4f 51 5a 47 62 63 47 47 54 46 48 66 4f 4a 63 61 54 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 59 52 59 4e
                                                                                                                            Data Ascii: :1,"YdXfdKNKNKZUTPTQEbHeFUPecLUTOHeNCFC":1,"aXTfHAEDBOSMeEfEITNPfaSdBULQEWHQHDDHYYfPHe":1,"feaSLAZWAcFCNBTLEKXJYXT":1,"ZOMURCWEYcZbMHSUHcWCcNfNaHMO":1,"GDIcdSZcYAZETYcbWdYKILSNC":1,"NVPOFJcfFXPGWATUZSdcFHbcRe":1,"eEBZFJZeOQZGbcGGTFHfOJcaT":1,"aWQOcYTBYRYN
                                                                                                                            2024-09-28 02:38:34 UTC9702INData Raw: 66 4c 4d 56 4e 5a 54 4d 50 49 4d 62 49 5a 44 46 44 4f 52 4d 54 66 4c 54 22 3a 31 2c 22 4e 41 52 45 46 42 43 4f 65 66 46 4e 65 43 57 55 64 42 4b 65 22 3a 31 2c 22 48 56 55 42 59 42 42 56 59 55 41 44 44 62 64 45 63 4c 63 44 4e 4f 4c 56 59 5a 45 54 22 3a 32 2c 22 4f 4d 49 5a 64 4a 4e 51 63 42 42 4d 48 4f 22 3a 31 2c 22 42 43 64 47 55 4b 43 4d 65 58 43 65 51 63 4a 48 58 49 46 54 64 50 58 66 51 65 48 54 22 3a 31 2c 22 61 58 62 53 47 59 57 59 48 62 65 4e 50 49 41 52 54 59 54 22 3a 31 2c 22 48 4d 62 56 5a 56 43 47 43 63 4f 4f 49 42 42 4f 22 3a 31 2c 22 48 57 41 46 4e 52 57 53 64 55 42 58 46 53 64 42 65 62 54 4e 4f 5a 5a 61 5a 53 41 64 4b 43 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 48 55 53 63 57 45 59 5a 4c 50 4e 4d 46 64 46 4c 47 50 42 49 4f 22 3a 31 2c 22
                                                                                                                            Data Ascii: fLMVNZTMPIMbIZDFDORMTfLT":1,"NAREFBCOefFNeCWUdBKe":1,"HVUBYBBVYUADDbdEcLcDNOLVYZET":2,"OMIZdJNQcBBMHO":1,"BCdGUKCMeXCeQcJHXIFTdPXfQeHT":1,"aXbSGYWYHbeNPIARTYT":1,"HMbVZVCGCcOOIBBO":1,"HWAFNRWSdUBXFSdBebTNOZZaZSAdKC":1,"YdXfdKNKNKHUScWEYZLPNMFdFLGPBIO":1,"
                                                                                                                            2024-09-28 02:38:34 UTC16384INData Raw: 65 65 63 32 0d 0a 3a 31 2c 22 4e 41 52 45 46 63 43 63 43 63 43 44 53 4a 52 4e 66 62 58 55 43 65 65 57 58 46 5a 45 56 43 22 3a 31 2c 22 4f 41 5a 4f 58 5a 65 57 52 42 62 65 64 4f 54 64 54 55 43 22 3a 31 2c 22 5a 64 5a 62 61 54 61 54 61 42 42 55 63 4a 50 51 66 51 41 59 66 65 44 49 56 61 4b 45 63 4e 54 42 50 57 5a 4a 61 65 22 3a 31 2c 22 48 57 41 46 4e 51 62 48 56 45 5a 4e 48 53 65 50 50 46 66 4f 44 4a 4b 61 5a 57 4e 57 65 22 3a 31 2c 22 4e 56 46 56 63 66 54 62 64 4e 4e 57 57 44 58 63 49 5a 55 49 57 48 55 57 50 48 44 44 57 65 22 3a 31 2c 22 66 65 62 64 53 41 59 46 63 61 46 55 59 4b 47 5a 65 56 41 42 4b 54 56 66 50 66 58 49 42 63 63 51 4e 46 53 64 64 55 5a 53 4e 64 4b 4e 4b 4e 4b 48 59 59 66 50 48 65 22 3a 31 2c 22 59 64 58 66 4d 4f 66 5a 50 44 48 43 4f 4c 5a
                                                                                                                            Data Ascii: eec2:1,"NAREFcCcCcCDSJRNfbXUCeeWXFZEVC":1,"OAZOXZeWRBbedOTdTUC":1,"ZdZbaTaTaBBUcJPQfQAYfeDIVaKEcNTBPWZJae":1,"HWAFNQbHVEZNHSePPFfODJKaZWNWe":1,"NVFVcfTbdNNWWDXcIZUIWHUWPHDDWe":1,"febdSAYFcaFUYKGZeVABKTVfPfXIBccQNFSddUZSNdKNKNKHYYfPHe":1,"YdXfMOfZPDHCOLZ
                                                                                                                            2024-09-28 02:38:34 UTC16384INData Raw: 61 45 52 4d 4a 44 57 58 56 58 65 52 65 22 3a 31 2c 22 4f 4d 47 66 48 4d 63 51 59 49 4d 64 55 66 45 4a 53 57 65 22 3a 31 2c 22 4f 4d 65 52 51 46 43 46 65 61 52 58 55 62 5a 46 4c 4d 5a 47 48 43 54 52 64 49 65 4d 65 4f 58 62 62 46 4a 46 43 22 3a 31 2c 22 42 4f 65 61 59 59 66 50 59 4e 59 48 4e 50 4d 4d 4e 49 52 48 63 45 46 65 4c 48 59 4f 22 3a 31 2c 22 62 5a 57 4d 53 47 45 4e 49 62 66 64 65 44 63 4e 46 56 52 5a 61 65 66 55 4f 65 61 4e 4c 61 41 46 5a 4b 58 65 22 3a 31 2c 22 41 45 55 61 59 50 5a 5a 47 62 64 45 4b 51 52 56 4a 63 51 59 49 4d 64 55 54 53 44 50 43 4a 57 58 65 22 3a 32 2c 22 48 57 41 46 4e 4c 4f 52 42 46 49 5a 4c 44 45 5a 52 45 65 65 5a 41 44 4b 43 4e 58 51 50 59 65 61 48 4b 65 22 3a 31 2c 22 64 4c 59 48 4d 52 46 65 52 4c 50 59 4b 44 63 64 46 63 65
                                                                                                                            Data Ascii: aERMJDWXVXeRe":1,"OMGfHMcQYIMdUfEJSWe":1,"OMeRQFCFeaRXUbZFLMZGHCTRdIeMeOXbbFJFC":1,"BOeaYYfPYNYHNPMMNIRHcEFeLHYO":1,"bZWMSGENIbfdeDcNFVRZaefUOeaNLaAFZKXe":1,"AEUaYPZZGbdEKQRVJcQYIMdUTSDPCJWXe":2,"HWAFNLORBFIZLDEZREeeZADKCNXQPYeaHKe":1,"dLYHMRFeRLPYKDcdFce
                                                                                                                            2024-09-28 02:38:34 UTC16384INData Raw: 62 64 46 49 4b 65 22 3a 31 2c 22 55 45 54 54 4a 63 4a 54 50 43 58 4a 4c 62 42 42 63 62 46 44 61 4e 53 64 66 42 50 4b 65 22 3a 31 2c 22 4e 41 46 4c 53 52 61 52 52 65 66 64 51 42 54 44 65 58 4e 4f 41 56 64 4e 48 57 54 52 54 66 49 5a 4b 65 22 3a 31 2c 22 48 57 41 46 59 65 45 4e 66 55 4d 56 42 46 55 57 65 22 3a 31 2c 22 54 65 43 4f 65 4a 50 4c 53 50 4d 4b 50 45 63 42 42 4d 57 51 55 65 5a 4f 50 58 54 62 42 57 42 49 62 51 54 4e 43 22 3a 31 2c 22 66 65 62 4b 43 42 50 52 46 48 52 58 4d 4a 47 42 42 47 51 58 42 4b 54 53 64 5a 50 64 4b 4e 4b 4e 4b 57 65 22 3a 31 2c 22 4f 54 66 64 41 53 46 47 63 45 4a 44 4b 42 52 55 44 62 59 48 52 59 4b 65 22 3a 31 2c 22 4e 41 46 51 43 4a 57 5a 55 61 65 5a 65 5a 46 5a 56 42 58 42 48 59 51 65 59 57 65 22 3a 31 2c 22 61 57 51 4f 63 59
                                                                                                                            Data Ascii: bdFIKe":1,"UETTJcJTPCXJLbBBcbFDaNSdfBPKe":1,"NAFLSRaRRefdQBTDeXNOAVdNHWTRTfIZKe":1,"HWAFYeENfUMVBFUWe":1,"TeCOeJPLSPMKPEcBBMWQUeZOPXTbBWBIbQTNC":1,"febKCBPRFHRXMJGBBGQXBKTSdZPdKNKNKWe":1,"OTfdASFGcEJDKBRUDbYHRYKe":1,"NAFQCJWZUaeZeZFZVBXBHYQeYWe":1,"aWQOcY


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            133192.168.2.454182188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:33 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:34 UTC735INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:34 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i8o8qIbv9isiw%2BPvUJcfEmWiPLNtE%2Fvh1M%2BdoDL12mfhaztdM2D5uWyx9hc3pGwh95GTrBmNROomJvgGY%2F5i9lyCl8NSm9ocDFFsg0IvT5t3aNEU1BIrFzl1jqLuBbNPbw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ba4db84424a-EWR
                                                                                                                            2024-09-28 02:38:34 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            134192.168.2.454186188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:34 UTC782OUTPOST /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 10
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:34 UTC10OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c
                                                                                                                            Data Ascii: code=wakdl
                                                                                                                            2024-09-28 02:38:34 UTC654INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:34 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jb9fKoePC2Rl1fmFbLRumeT7u4blj2nCoHYqFZUrEcMRbj%2Bze4Ckj9il4Il%2F9mipPUg08jRQez7dmx3duwRgE77NOajCAC5VD5QoGdAQVPbpPi74zrtd5E7cg9MlXDcpaw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ba9ec9d8ce8-EWR
                                                                                                                            2024-09-28 02:38:34 UTC22INData Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a
                                                                                                                            Data Ascii: 10{"status":false}
                                                                                                                            2024-09-28 02:38:34 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            135192.168.2.454185188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:34 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:34 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:38:34 UTC658INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:34 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z6rgHIJaHE05EYvg65bYuCOL%2B%2FHdXrx5V5l5QPwHdmzgKLx4AP%2FTEVySlod3quThQEYpC9oFPsFvBNYzcxhbfWAMw0Idi8U78PpdZDvHrp71kWnzM5mK2Xmf%2BXpXbg1wng%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05ba9eca4422b-EWR
                                                                                                                            2024-09-28 02:38:34 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            136192.168.2.45418818.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:34 UTC1065OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaIju58pnnq5aMscn9a1KkR5ye4JsuluH4g6kqM7ouCM80ZiJ0OWZ7of2Ea4%2FdXdXyVILD7W1zNyK5VYX3Q8SEBAq5A3DHzzRDu%2F8ozPqjvEry464l0M1Dum0%3D
                                                                                                                            2024-09-28 02:38:36 UTC2347INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:35 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"max_age":604800,"report_to":"default"}
                                                                                                                            report-to: {"max_age":604800,"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}]}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:35 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:17:10 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefnCYslHtOOqQsVuinKi4OXEwpAboEgzVOyjnWAEzWsP72OzjOt%2BPGp8IE2uhjjBP88ZFgR8yL2TYJaVOXk2esa6JXC7p9N5xexWGQfvFlm44ZNifi6OPRr9bRJT2hYggABzFAOe0dCVmJ7MLPf7V%2F641cOAn%2Bdg%2FU%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:35 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:35 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 79a075303cab256e952b4b0679e1182c.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: mVO295QcLQwV4IdVYLjSRZPMrY7nv_OSnKpUUkcoIYJVUtQFolRSng==
                                                                                                                            2024-09-28 02:38:36 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 37 53 62 7a 66 39 66 37 5a 70 36 45 63 35 4e 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="7Sbzf9f7Zp6Ec5N"
                                                                                                                            2024-09-28 02:38:36 UTC8200INData Raw: 32 30 30 30 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 2000<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:36 UTC16384INData Raw: 34 66 31 61 0d 0a 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 63 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 61 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 43 61 74 61 6c c3 a0 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 69 6e 64 65 78 2e 69 74 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 49 74 61 6c 69 61 6e 6f 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 68 72 65 66 6c 61 6e 67 3d 22 70 74 2d
                                                                                                                            Data Ascii: 4f1al" hreflang="ca" href="https://www.booking.com/index.ca.html" title="Catal"/><link rel="alternate" type="text/html" hreflang="it" href="https://www.booking.com/index.it.html" title="Italiano"/><link rel="alternate" type="text/html" hreflang="pt-
                                                                                                                            2024-09-28 02:38:36 UTC3874INData Raw: 6d 65 5f 75 63 22 3a 22 41 70 72 69 6c 22 2c 22 6e 61 6d 65 5f 6f 74 68 65 72 22 3a 22 41 70 72 69 6c 22 7d 2c 22 35 22 3a 7b 22 6e 61 6d 65 5f 75 63 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 6f 74 68 65 72 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 69 6e 22 3a 22 4d 61 79 22 2c 22 6f 6e 5f 64 61 79 5f 6d 6f 6e 74 68 22 3a 22 30 35 22 2c 22 6e 61 6d 65 5f 64 65 66 5f 61 72 74 69 63 6c 65 5f 75 63 22 3a 22 54 68 65 20 4d 61 79 22 2c 22 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 4d 61 79 22 2c 22 6e 61 6d 65 5f 64 65 66 5f 61 72 74 69 63 6c 65 5f 6c 63 22 3a 22 74 68 65 20 4d 61 79 22 2c 22 67 65 6e 69 74 69 76 65 5f 75 63 22 3a 22 4d 61 79 22 2c 22 67 65 6e 69 74 69 76 65 5f 6c 63 22 3a 22 4d 61 79 22 2c 22 6d 6f 6e 74 68 5f 31 22 3a 22 4d 61 79 22 2c 22 6e 61 6d
                                                                                                                            Data Ascii: me_uc":"April","name_other":"April"},"5":{"name_uc":"May","name_other":"May","name_in":"May","on_day_month":"05","name_def_article_uc":"The May","name_only":"May","name_def_article_lc":"the May","genitive_uc":"May","genitive_lc":"May","month_1":"May","nam
                                                                                                                            2024-09-28 02:38:36 UTC14472INData Raw: 33 38 38 30 0d 0a 2c 22 6e 61 6d 65 22 3a 22 53 61 74 75 72 64 61 79 22 2c 22 73 68 6f 72 74 65 73 74 22 3a 22 53 61 22 2c 22 6e 61 6d 65 5f 66 72 6f 6d 5f 70 72 65 70 6f 73 69 74 69 6f 6e 22 3a 22 46 72 6f 6d 20 53 61 74 75 72 64 61 79 22 2c 22 73 68 6f 72 74 5f 75 63 22 3a 22 53 61 74 22 2c 22 6e 61 6d 65 5f 6c 63 22 3a 22 53 61 74 75 72 64 61 79 22 2c 22 6e 61 6d 65 5f 74 6f 22 3a 22 53 61 74 75 72 64 61 79 22 7d 2c 22 37 22 3a 7b 22 6e 61 6d 65 5f 6f 6e 22 3a 22 53 75 6e 64 61 79 22 2c 22 6e 61 6d 65 5f 6f 74 68 65 72 5f 75 63 22 3a 22 53 75 6e 64 61 79 22 2c 22 6e 61 6d 65 5f 6f 74 68 65 72 22 3a 22 53 75 6e 64 61 79 22 2c 22 73 68 6f 72 74 22 3a 22 53 75 6e 22 2c 22 6e 61 6d 65 5f 75 63 22 3a 22 53 75 6e 64 61 79 22 2c 22 6e 61 6d 65 5f 74 6f 22 3a
                                                                                                                            Data Ascii: 3880,"name":"Saturday","shortest":"Sa","name_from_preposition":"From Saturday","short_uc":"Sat","name_lc":"Saturday","name_to":"Saturday"},"7":{"name_on":"Sunday","name_other_uc":"Sunday","name_other":"Sunday","short":"Sun","name_uc":"Sunday","name_to":
                                                                                                                            2024-09-28 02:38:36 UTC8951INData Raw: 32 32 65 66 0d 0a 70 6f 73 65 3d 62 75 73 69 6e 65 73 73 22 2c 0a 66 65 5f 72 65 73 65 72 76 61 74 69 6f 6e 73 5f 75 72 6c 5f 74 72 61 76 65 6c 5f 70 75 72 70 6f 73 65 5f 6c 65 69 73 75 72 65 3a 20 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 6d 79 72 65 73 65 72 76 61 74 69 6f 6e 73 2e 68 74 6d 6c 3f 6c 61 62 65 6c 3d 67 65 6e 31 37 33 6e 72 2d 31 46 43 41 45 6f 67 67 49 34 36 41 64 49 4d 31 67 45 61 4b 63 43 69 41 45 42 6d 41 45 78 75 41 45 58 79 41 45 4d 32 41 45 42 36 41 45 42 2d 41 45 43 69 41 49 42 71 41 49 44 75 41 4b 72 32 4e 32 33 42 73 41 43 41 64 49 43 4a 44 6c 6c 4e 7a 49 7a 4d 54 45 7a 4c 54 51 31 4e 44 55 74 4e 44 5a 68 5a 53 30 35 4e 6a 68 6b 4c 54 46 6b 5a 54 49 79 59 54 41 77 59 57 45 35 5a 74 67 43
                                                                                                                            Data Ascii: 22efpose=business",fe_reservations_url_travel_purpose_leisure: "https://secure.booking.com/myreservations.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AECiAIBqAIDuAKr2N23BsACAdICJDllNzIzMTEzLTQ1NDUtNDZhZS05NjhkLTFkZTIyYTAwYWE5ZtgC
                                                                                                                            2024-09-28 02:38:36 UTC16384INData Raw: 33 66 66 61 0d 0a 6e 74 72 79 3a 20 27 65 65 42 61 57 42 4c 48 46 65 42 61 55 45 41 46 51 46 66 42 4e 50 62 65 66 52 4c 54 27 2c 0a 62 65 61 63 68 5f 68 6f 6c 69 64 61 79 73 5f 72 65 73 75 6c 74 73 3a 20 27 65 65 42 61 57 42 4c 48 46 65 42 61 55 45 41 46 51 46 66 42 4e 50 62 65 62 61 4f 52 65 27 2c 0a 69 6e 64 65 78 3a 20 27 65 65 42 61 57 42 4c 48 46 65 56 5a 4d 59 49 4f 27 2c 0a 7d 2c 0a 71 75 69 7a 5f 64 61 74 61 5f 66 61 69 6c 65 64 3a 20 7b 0a 62 65 61 63 68 5f 68 6f 6c 69 64 61 79 73 3a 20 27 65 65 42 61 57 64 62 66 5a 4a 56 48 57 45 4b 4a 46 59 57 59 48 62 64 62 45 4a 4e 5a 4a 53 55 43 27 2c 0a 62 65 61 63 68 5f 68 6f 6c 69 64 61 79 73 5f 63 6f 6e 74 69 6e 65 6e 74 3a 20 27 65 65 42 61 57 64 62 66 5a 4a 56 48 57 45 4b 4a 46 59 57 59 48 62 64 62 45
                                                                                                                            Data Ascii: 3ffantry: 'eeBaWBLHFeBaUEAFQFfBNPbefRLT',beach_holidays_results: 'eeBaWBLHFeBaUEAFQFfBNPbebaORe',index: 'eeBaWBLHFeVZMYIO',},quiz_data_failed: {beach_holidays: 'eeBaWdbfZJVHWEKJFYWYHbdbEJNZJSUC',beach_holidays_continent: 'eeBaWdbfZJVHWEKJFYWYHbdbE
                                                                                                                            2024-09-28 02:38:36 UTC9875INData Raw: 0d 0a 32 36 38 39 0d 0a 5a 64 54 59 4d 49 4b 65 22 3a 31 2c 22 4f 4f 49 42 42 51 4d 41 4c 48 59 59 66 50 4e 65 4f 59 57 4b 64 54 4b 44 41 64 55 52 65 22 3a 31 2c 22 54 57 55 4c 64 4b 4a 42 59 57 4b 56 48 4a 45 66 48 55 4e 5a 57 4f 4c 66 4f 64 52 41 4e 4d 4f 22 3a 31 2c 22 48 4d 62 42 58 61 66 45 52 57 62 53 41 50 50 61 65 62 57 4e 57 65 22 3a 31 2c 22 4f 4d 4e 4e 53 43 5a 53 4f 47 58 43 63 5a 43 42 4b 65 4a 62 57 50 58 58 4f 22 3a 31 2c 22 63 43 47 61 59 53 64 64 4f 45 47 63 48 4e 41 64 55 44 55 43 52 50 51 46 41 65 4a 51 46 52 55 52 55 52 4e 63 48 65 22 3a 31 2c 22 48 57 41 46 59 54 62 56 59 4f 49 4f 57 41 55 43 22 3a 31 2c 22 48 57 41 46 59 44 45 5a 52 45 45 64 52 57 53 64 65 4a 4f 55 4a 47 50 58 50 52 4c 4f 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b
                                                                                                                            Data Ascii: 2689ZdTYMIKe":1,"OOIBBQMALHYYfPNeOYWKdTKDAdURe":1,"TWULdKJBYWKVHJEfHUNZWOLfOdRANMO":1,"HMbBXafERWbSAPPaebWNWe":1,"OMNNSCZSOGXCcZCBKeJbWPXXO":1,"cCGaYSddOEGcHNAdUDUCRPQFAeJQFRURURNcHe":1,"HWAFYTbVYOIOWAUC":1,"HWAFYDEZREEdRWSdeJOUJGPXPRLO":1,"YdXfdKNKNK
                                                                                                                            2024-09-28 02:38:36 UTC16384INData Raw: 62 66 66 61 0d 0a 31 2c 22 41 45 41 46 50 4b 49 4a 53 48 58 64 52 54 22 3a 31 2c 22 61 58 42 4e 54 66 5a 48 59 48 51 44 56 43 58 64 55 46 44 65 54 51 51 56 44 61 56 59 45 4f 22 3a 31 2c 22 66 65 62 64 53 41 4e 46 52 57 64 4e 48 49 51 46 52 55 52 55 52 48 65 22 3a 32 2c 22 4f 61 61 4b 51 5a 5a 4d 63 54 63 5a 64 49 41 41 56 56 57 61 49 49 61 63 4d 53 65 62 64 61 4e 43 46 65 4c 54 22 3a 31 2c 22 42 49 55 4a 4c 4d 4a 56 66 4e 61 66 4d 55 66 42 46 47 46 56 49 5a 64 52 52 54 22 3a 31 2c 22 4e 41 46 4c 53 44 64 63 66 65 4a 52 53 59 45 56 4a 44 66 64 46 63 61 65 22 3a 31 2c 22 4e 56 4e 5a 57 55 61 4d 5a 58 52 55 52 4e 65 4a 4d 42 59 47 61 65 50 54 57 45 55 59 54 45 54 22 3a 31 2c 22 48 4f 50 51 4c 52 42 47 64 4e 4f 4b 54 66 47 43 66 43 62 58 42 65 4c 51 4d 41 4c
                                                                                                                            Data Ascii: bffa1,"AEAFPKIJSHXdRT":1,"aXBNTfZHYHQDVCXdUFDeTQQVDaVYEO":1,"febdSANFRWdNHIQFRURURHe":2,"OaaKQZZMcTcZdIAAVVWaIIacMSebdaNCFeLT":1,"BIUJLMJVfNafMUfBFGFVIZdRRT":1,"NAFLSDdcfeJRSYEVJDfdFcae":1,"NVNZWUaMZXRURNeJMBYGaePTWEUYTET":1,"HOPQLRBGdNOKTfGCfCbXBeLQMAL
                                                                                                                            2024-09-28 02:38:36 UTC16384INData Raw: 62 53 46 59 54 42 48 4d 48 48 56 62 52 65 49 59 47 59 66 50 4e 50 63 52 58 4a 64 44 42 4b 53 61 54 66 52 65 22 3a 31 2c 22 66 45 4f 4d 66 64 62 51 64 52 49 59 64 58 46 4e 50 49 49 54 66 44 48 43 4f 4c 63 4f 22 3a 31 2c 22 62 51 62 59 57 58 46 5a 45 56 57 4b 4d 54 55 42 56 58 61 43 4e 46 4e 41 44 5a 57 4e 57 65 22 3a 32 2c 22 48 57 41 46 59 4e 46 49 59 4a 4b 4f 46 62 53 64 65 55 55 4e 57 65 22 3a 31 2c 22 48 56 55 42 4e 4e 65 52 42 4e 65 50 65 45 42 56 55 57 56 59 52 45 48 47 43 22 3a 31 2c 22 63 43 48 4f 62 45 43 56 56 44 44 4f 52 4d 54 66 46 45 49 5a 45 48 61 5a 56 55 62 43 42 4d 4e 4c 56 54 22 3a 31 2c 22 48 57 41 46 59 4e 46 49 59 4a 4b 4f 46 61 59 44 4a 4f 22 3a 31 2c 22 65 52 59 50 48 45 44 4e 50 62 56 55 4d 4b 41 63 54 55 61 49 51 4c 48 52 62 64 46
                                                                                                                            Data Ascii: bSFYTBHMHHVbReIYGYfPNPcRXJdDBKSaTfRe":1,"fEOMfdbQdRIYdXFNPIITfDHCOLcO":1,"bQbYWXFZEVWKMTUBVXaCNFNADZWNWe":2,"HWAFYNFIYJKOFbSdeUUNWe":1,"HVUBNNeRBNePeEBVUWVYREHGC":1,"cCHObECVVDDORMTfFEIZEHaZVUbCBMNLVT":1,"HWAFYNFIYJKOFaYDJO":1,"eRYPHEDNPbVUMKAcTUaIQLHRbdF


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            137192.168.2.454189188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:35 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:36 UTC737INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:35 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZSH8U25jaVn3MB8H%2F2u5eiqDtqmG0oaBJQ2DjS%2F%2Bx9oa2x2szAHCiZY%2FakJUNj04sz98obBqEsWYz124O%2BBUNHSwcsltbVoZmsHr0YTgAW1t8W5gP0nFQAjol4SXwKtoSw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05bad9f85c3ee-EWR
                                                                                                                            2024-09-28 02:38:36 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            138192.168.2.454192188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:36 UTC409OUTGET /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:36 UTC605INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:36 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=07qbt54eyq%2F8UcK9x13CFyD1SmAJ7LLhxqfN9LzDLm0rRDzhLHc6KENI6xneU0T1kkt%2Fydi2w3VBKkCBguGs3CXCx6baVbPOHcjgAlp%2F0qajgHA80ZKTJHhJZ1daus88PA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05bb66be941b4-EWR
                                                                                                                            2024-09-28 02:38:36 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            139192.168.2.454193188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:36 UTC412OUTGET /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:36 UTC607INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:36 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NJqVf%2FqoZAKONQAYjkXAg8eEEaoh7xb7rLR7zh9UtHpwFqg3UK1V5X2cjngpVgE4HxTp%2Ffg3ar3PMMKmJtlGkWu5I5y4zu2w6cpTp9xDtmBFIH0ElCgKjGju00OPO%2Bk%2BhA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05bb66abe0c8e-EWR
                                                                                                                            2024-09-28 02:38:36 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            140192.168.2.45419518.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:37 UTC1069OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefnCYslHtOOqQsVuinKi4OXEwpAboEgzVOyjnWAEzWsP72OzjOt%2BPGp8IE2uhjjBP88ZFgR8yL2TYJaVOXk2esa6JXC7p9N5xexWGQfvFlm44ZNifi6OPRr9bRJT2hYggABzFAOe0dCVmJ7MLPf7V%2F641cOAn%2Bdg%2FU%3D
                                                                                                                            2024-09-28 02:38:37 UTC2349INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:37 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:37 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:17:14 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaImXzEdh1oXRB42IZPFt1DEGgc6sa5%2FSqInM0F%2FiyU379UhZpA5%2FEHLd65gaBR2FmpKYjYThPoxJDmhcvDJMp0DmO6lQ0dgUZba2Tvnjv%2FzSrH9h0neb%2FtGA%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:37 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:37 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 c1e31c801257ebc563cbb890e887cb1e.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: 4-AvYckRxp4f7AbgsCBpfxCpDL8MC-C90ObihVfjm2LfmXm3jYNRpw==
                                                                                                                            2024-09-28 02:38:37 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 66 6d 43 57 74 71 54 5a 67 4a 54 68 51 71 57 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="fmCWtqTZgJThQqW"
                                                                                                                            2024-09-28 02:38:38 UTC13986INData Raw: 33 36 39 61 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 369a<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:38 UTC16384INData Raw: 33 66 66 61 0d 0a 6c 61 63 65 28 27 6e 6f 4a 53 27 2c 20 27 27 29 20 2b 20 27 20 68 61 73 4a 53 27 3b 0a 76 61 72 20 62 5f 65 78 70 65 72 69 6d 65 6e 74 73 20 3d 20 7b 7d 2c 20 57 49 44 54 48 2c 20 42 20 3d 20 77 69 6e 64 6f 77 2e 62 6f 6f 6b 69 6e 67 20 3d 20 7b 0a 5f 6f 6e 66 6c 79 3a 20 5b 5d 2c 20 2f 2f 20 22 6f 6e 20 74 68 65 20 66 6c 79 22 20 66 75 6e 63 74 69 6f 6e 73 2c 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 20 61 73 20 73 6f 6f 6e 20 61 73 20 65 78 74 65 72 6e 61 6c 20 6a 73 20 66 69 6c 65 73 20 77 65 72 65 20 6c 6f 61 64 65 64 0a 64 65 76 54 6f 6f 6c 73 3a 20 7b 0a 74 72 61 63 6b 65 64 45 78 70 65 72 69 6d 65 6e 74 73 3a 20 5b 5d 0a 7d 2c 0a 75 73 65 72 3a 20 7b 0a 7d 2c 0a 65 6e 76 20 3a 20 7b 0a 69 73 52 65 74 69 6e 61 20 3a 20 77
                                                                                                                            Data Ascii: 3ffalace('noJS', '') + ' hasJS';var b_experiments = {}, WIDTH, B = window.booking = {_onfly: [], // "on the fly" functions, will be executed as soon as external js files were loadeddevTools: {trackedExperiments: []},user: {},env : {isRetina : w
                                                                                                                            2024-09-28 02:38:38 UTC991INData Raw: 0d 0a 33 64 36 0d 0a 67 68 74 65 73 74 3a 20 22 23 46 46 46 30 46 30 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 64 61 72 6b 3a 20 22 23 30 30 36 36 30 37 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 3a 20 22 23 30 30 38 30 30 39 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 3a 20 22 23 39 37 45 35 39 43 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 72 3a 20 22 23 45 37 46 44 45 39 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 6c 69 67 68 74 65 73 74 3a 20 22 23 46 31 46 45 46 32 22 2c 0a 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 3a 20 22 23 30 30 37 31 43 32
                                                                                                                            Data Ascii: 3d6ghtest: "#FFF0F0",bui_color_constructive_dark: "#006607",bui_color_constructive: "#008009",bui_color_constructive_light: "#97E59C",bui_color_constructive_lighter: "#E7FDE9",bui_color_constructive_lightest: "#F1FEF2",bui_color_action: "#0071C2
                                                                                                                            2024-09-28 02:38:38 UTC16384INData Raw: 33 66 66 61 0d 0a 5f 76 32 5f 63 6e 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2f 62 64 37 65 37 61 64 62 66 39 37 33 31 38 31 30 61 37 39 62 61 64 63 35 36 37 63 64 34 38 34 36 62 31 61 62 34 64 36 38 2e 6a 73 27 2c 0a 61 73 79 6e 63 5f 61 74 6c 61 73 5f 76 32 5f 6e 6f 6e 5f 63 6e 5f 6a 73 3a 20 27 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6a 73 2f 61 73 79 6e 63 5f 61 74 6c 61 73 5f 76 32 5f 6e 6f 6e 5f 63 6e 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2f 38 38 30 36 37 32 38 32 33 64 33 34 61 36 63 63 31 33 36 36 66 64 33 38 66 39 38 63 36 62 34 66 66 39 30 66 63 66 32 30 2e 6a 73 27 2c 0a 69 6d 61 67 65 5f 67 61 6c 6c 65 72 79 5f 6a 73 3a 20 27 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f
                                                                                                                            Data Ascii: 3ffa_v2_cn_cloudfront_sd/bd7e7adbf9731810a79badc567cd4846b1ab4d68.js',async_atlas_v2_non_cn_js: 'https://cf.bstatic.com/static/js/async_atlas_v2_non_cn_cloudfront_sd/880672823d34a6cc1366fd38f98c6b4ff90fcf20.js',image_gallery_js: 'https://cf.bstatic.co
                                                                                                                            2024-09-28 02:38:38 UTC11578INData Raw: 0d 0a 32 64 33 30 0d 0a 30 2c 22 4f 4d 52 22 3a 33 2c 22 50 59 47 22 3a 30 2c 22 55 47 58 22 3a 30 2c 22 45 43 53 22 3a 30 2c 22 47 4e 46 22 3a 30 2c 22 49 44 52 22 3a 30 2c 22 52 55 42 22 3a 30 2c 22 54 57 44 22 3a 30 2c 22 4d 47 41 22 3a 30 2c 22 52 57 46 22 3a 30 2c 22 4b 57 44 22 3a 33 2c 22 4a 50 59 22 3a 30 2c 22 49 53 4b 22 3a 30 2c 22 4c 41 4b 22 3a 30 2c 22 4d 5a 4d 22 3a 30 2c 22 44 4a 46 22 3a 30 2c 22 49 51 44 22 3a 33 2c 22 58 41 46 22 3a 30 2c 22 42 49 46 22 3a 30 2c 22 4c 59 44 22 3a 33 2c 22 58 50 46 22 3a 30 2c 22 54 4e 44 22 3a 33 2c 22 64 65 66 61 75 6c 74 22 3a 32 2c 22 41 46 41 22 3a 30 2c 22 54 4a 52 22 3a 30 2c 22 58 4f 46 22 3a 30 2c 22 54 4d 4d 22 3a 30 2c 22 48 55 46 22 3a 30 2c 22 4b 52 57 22 3a 30 2c 22 56 55 56 22 3a 30 2c 22
                                                                                                                            Data Ascii: 2d300,"OMR":3,"PYG":0,"UGX":0,"ECS":0,"GNF":0,"IDR":0,"RUB":0,"TWD":0,"MGA":0,"RWF":0,"KWD":3,"JPY":0,"ISK":0,"LAK":0,"MZM":0,"DJF":0,"IQD":3,"XAF":0,"BIF":0,"LYD":3,"XPF":0,"TND":3,"default":2,"AFA":0,"TJR":0,"XOF":0,"TMM":0,"HUF":0,"KRW":0,"VUV":0,"
                                                                                                                            2024-09-28 02:38:38 UTC16384INData Raw: 34 37 61 36 0d 0a 5a 51 4d 41 53 57 65 22 3a 31 2c 22 48 57 41 46 4e 51 54 62 56 53 47 4e 56 42 55 4b 63 61 5a 64 50 4c 65 4e 4c 61 65 22 3a 31 2c 22 50 63 56 46 48 4d 50 61 53 64 49 65 5a 4e 4e 41 46 4c 57 45 50 59 4b 44 63 64 44 44 53 54 53 45 51 47 4f 22 3a 31 2c 22 4f 4f 49 42 42 51 4d 41 4c 48 59 59 66 50 4e 65 4f 59 57 4b 64 54 4b 44 41 64 55 52 65 22 3a 31 2c 22 61 58 62 53 62 63 4f 51 65 63 44 4b 41 4a 44 4b 56 48 62 56 44 5a 61 54 61 54 61 45 54 22 3a 31 2c 22 61 64 55 41 41 49 46 63 4f 63 64 45 48 4c 45 54 4c 49 53 4f 44 55 4d 56 62 45 41 4b 65 22 3a 31 2c 22 42 4b 62 56 5a 57 4e 48 51 48 44 44 50 43 62 61 64 57 49 52 63 62 59 44 4d 64 4c 61 65 22 3a 31 2c 22 48 57 41 46 4e 52 4e 52 49 50 4b 61 48 49 63 4e 4c 52 4b 47 43 66 54 4c 4b 47 42 66 43
                                                                                                                            Data Ascii: 47a6ZQMASWe":1,"HWAFNQTbVSGNVBUKcaZdPLeNLae":1,"PcVFHMPaSdIeZNNAFLWEPYKDcdDDSTSEQGO":1,"OOIBBQMALHYYfPNeOYWKdTKDAdURe":1,"aXbSbcOQecDKAJDKVHbVDZaTaTaET":1,"adUAAIFcOcdEHLETLISODUMVbEAKe":1,"BKbVZWNHQHDDPCbadWIRcbYDMdLae":1,"HWAFNRNRIPKaHIcNLRKGCfTLKGBfC
                                                                                                                            2024-09-28 02:38:38 UTC1966INData Raw: 56 56 55 44 4f 52 4d 54 66 4c 54 22 3a 31 2c 22 62 51 47 42 49 55 65 42 41 48 55 5a 65 57 4e 5a 4a 4b 62 49 59 55 4e 66 53 65 56 53 54 64 54 55 43 22 3a 31 2c 22 62 51 4b 50 46 4e 47 64 42 53 53 64 4a 65 4c 64 4b 56 49 65 43 50 4b 53 50 48 65 22 3a 31 2c 22 65 45 42 50 42 4a 46 4a 5a 65 4f 51 50 42 4f 42 54 55 57 54 4e 55 43 22 3a 31 2c 22 49 5a 56 42 45 48 62 56 46 62 58 55 43 65 65 44 4e 51 55 5a 41 52 59 66 59 4f 22 3a 31 2c 22 56 4f 62 64 5a 5a 61 42 66 43 43 64 44 65 51 66 59 59 54 22 3a 31 2c 22 47 43 53 58 5a 4c 44 65 41 42 61 4b 44 44 4b 49 48 65 63 62 4f 46 59 66 5a 58 58 64 64 4f 45 52 65 22 3a 31 2c 22 4f 61 61 4b 51 5a 5a 4d 63 42 66 46 64 48 4d 5a 51 62 44 4e 46 4d 59 43 65 56 44 62 50 61 54 22 3a 31 2c 22 63 43 63 43 63 43 44 50 43 44 43 63
                                                                                                                            Data Ascii: VVUDORMTfLT":1,"bQGBIUeBAHUZeWNZJKbIYUNfSeVSTdTUC":1,"bQKPFNGdBSSdJeLdKVIeCPKSPHe":1,"eEBPBJFJZeOQPBOBTUWTNUC":1,"IZVBEHbVFbXUCeeDNQUZARYfYO":1,"VObdZZaBfCCdDeQfYYT":1,"GCSXZLDeABaKDDKIHecbOFYfZXXddOERe":1,"OaaKQZZMcBfFdHMZQbDNFMYCeVDbPaT":1,"cCcCcCDPCDCc
                                                                                                                            2024-09-28 02:38:38 UTC16384INData Raw: 33 66 66 61 0d 0a 42 63 43 63 43 63 43 43 22 3a 32 2c 22 59 54 42 54 52 59 50 4f 48 42 64 45 48 4b 48 65 4a 59 62 65 5a 45 45 45 4d 49 50 47 4f 22 3a 31 2c 22 59 64 58 66 43 5a 4e 54 61 59 50 65 59 64 46 48 57 50 62 54 50 46 65 5a 4b 55 49 52 43 66 50 58 65 43 22 3a 31 2c 22 4f 4f 49 42 54 4b 42 4f 4d 44 5a 49 42 4e 44 52 4d 45 54 22 3a 31 2c 22 62 5a 57 4d 5a 66 48 62 47 64 48 53 65 4f 4e 57 48 57 50 61 44 4d 57 58 46 5a 45 56 43 22 3a 31 2c 22 66 65 66 64 4c 57 45 59 51 47 58 59 49 65 42 5a 53 4a 4f 45 49 4b 5a 42 41 43 48 42 52 61 65 4b 56 56 43 4c 54 22 3a 31 2c 22 48 57 41 46 59 4e 46 49 59 4a 4b 56 53 53 56 48 59 44 4a 4f 22 3a 31 2c 22 48 57 41 46 4e 65 4f 59 53 55 61 65 63 66 62 56 43 4d 49 4c 53 63 58 51 4f 56 57 65 22 3a 31 2c 22 48 57 41 46 4e
                                                                                                                            Data Ascii: 3ffaBcCcCcCC":2,"YTBTRYPOHBdEHKHeJYbeZEEEMIPGO":1,"YdXfCZNTaYPeYdFHWPbTPFeZKUIRCfPXeC":1,"OOIBTKBOMDZIBNDRMET":1,"bZWMZfHbGdHSeONWHWPaDMWXFZEVC":1,"fefdLWEYQGXYIeBZSJOEIKZBACHBRaeKVVCLT":1,"HWAFYNFIYJKVSSVHYDJO":1,"HWAFNeOYSUaecfbVCMILScXQOVWe":1,"HWAFN
                                                                                                                            2024-09-28 02:38:38 UTC16384INData Raw: 0d 0a 34 30 30 30 0d 0a 4d 4f 22 3a 31 2c 22 55 45 54 54 4a 5a 54 4c 62 51 49 4b 4c 63 45 4a 50 49 4f 57 4c 45 43 48 59 4c 54 22 3a 31 2c 22 50 50 58 47 53 43 5a 57 4e 4f 54 45 62 57 63 4b 5a 49 58 58 63 66 66 57 65 22 3a 32 2c 22 63 43 48 4f 62 4b 64 42 5a 58 5a 41 56 43 4d 49 51 52 4d 65 62 66 54 49 62 52 48 59 59 66 50 48 65 22 3a 31 2c 22 55 42 4b 65 4a 4f 4d 66 46 64 48 4d 62 4c 59 42 55 4a 63 62 54 64 44 49 58 41 65 4d 64 4d 53 42 46 4f 45 49 45 59 58 54 22 3a 31 2c 22 62 51 47 42 62 51 47 57 46 42 61 61 65 48 47 5a 4f 41 63 46 4d 42 52 4e 48 55 48 65 22 3a 31 2c 22 63 43 48 4f 62 4b 64 63 5a 4e 4d 51 4d 4c 65 62 54 5a 57 4b 4e 55 66 46 64 48 4d 4f 4f 49 42 42 4f 22 3a 31 2c 22 59 64 58 66 64 4b 4e 4b 4e 4b 50 5a 5a 57 4c 4b 56 48 4e 54 58 61 4a 4e
                                                                                                                            Data Ascii: 4000MO":1,"UETTJZTLbQIKLcEJPIOWLECHYLT":1,"PPXGSCZWNOTEbWcKZIXXcffWe":2,"cCHObKdBZXZAVCMIQRMebfTIbRHYYfPHe":1,"UBKeJOMfFdHMbLYBUJcbTdDIXAeMdMSBFOEIEYXT":1,"bQGBbQGWFBaaeHGZOAcFMBRNHUHe":1,"cCHObKdcZNMQMLebTZWKNUfFdHMOOIBBO":1,"YdXfdKNKNKPZZWLKVHNTXaJN


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            141192.168.2.454197188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:37 UTC777OUTPOST /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 30
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/chat/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:37 UTC30OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 6c 61 73 74 5f 6d 73 67 5f 69 64 3d 36 30 35 39 30 30 39
                                                                                                                            Data Ascii: code=wakdl&last_msg_id=6059009
                                                                                                                            2024-09-28 02:38:37 UTC662INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:37 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=917bW0wsXqdsHlioZy%2BYTa1mFdwm%2FrnZxycZxg2O%2Fy16e8I5%2Fovnj8FitDoNLxMWrM35AyWWVZ9JNc9m5hT6Ac3Q7yh8J5ycXIvN%2BnQchI3FjiUrS6qYidyYlYOe%2FTSvIg%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05bbc1b6fc481-EWR
                                                                                                                            2024-09-28 02:38:37 UTC51INData Raw: 32 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 22 4d 65 73 73 61 67 65 73 20 6e 6f 74 20 66 6f 75 6e 64 21 22 7d 0d 0a
                                                                                                                            Data Ascii: 2d{"status":false,"text":"Messages not found!"}
                                                                                                                            2024-09-28 02:38:37 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            142192.168.2.454198188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:37 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:37 UTC733INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:37 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AHAUStM683kiBAZ16tlTN%2FRB3VFlzytfKj9B1fz3JSaNayT%2BGcFavrrDQasHjADmHMmFRB3OP0e9xyNCYYrBh7FXtmuvMQCYLT3yZ6kqbbbJQirFDJHh%2B2SljJhpFkIlRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05bbdbbd98cbd-EWR
                                                                                                                            2024-09-28 02:38:37 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            143192.168.2.454202188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:38 UTC402OUTGET /ajax/msg_check.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:38 UTC609INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:38 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Location: /
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s9J%2FBzRQGmR4XYgPrRPwtgsqnlV4EGBQRema9utMMVECmA2hODTCBNKJ%2B4mvXXBsCtgq5OLLR0nJb%2B89%2FVK3b973EgQtTyA726Q08u9HkUqEbNu5cTtRL13wRdcj9vgw%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05bc45f1bc40e-EWR
                                                                                                                            2024-09-28 02:38:38 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            144192.168.2.45420118.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:38 UTC1071OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaImXzEdh1oXRB42IZPFt1DEGgc6sa5%2FSqInM0F%2FiyU379UhZpA5%2FEHLd65gaBR2FmpKYjYThPoxJDmhcvDJMp0DmO6lQ0dgUZba2Tvnjv%2FzSrH9h0neb%2FtGA%3D
                                                                                                                            2024-09-28 02:38:39 UTC2798INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:39 GMT
                                                                                                                            vary: Accept-Encoding, User-Agent
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"report_to":"default","max_age":604800}
                                                                                                                            report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800,"group":"default"}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:38 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:17:16 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3U%2BqItYuKF1ffFfyBVfBv8%2FLj78%2B%2F5fGnkDtllPkEA2rUvi%2FYpav%2FD%2BVN87osJpbjnFaQjj0xjs5j%2Fe4thOwR8rkp1hL3lPdiDU9w5uLIiPI8lQfIzAopgwqVI3WKMGnclW01B7y0f%2FuCcfIkrtDFcVyFXxUHy9PgQ%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:39 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:39 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            content-security-policy-report-only: base-uri 'none'; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=146&pid=38a4129754eb03d5&e=UmFuZG9tSVYkc2RlIyh9YYYdGuViorKPpsB9xX5eOu40bGTpsVZ59bJjUWzrTuSs; script-src 'self' 'nonce-6WRMhboSbOkh0Py' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' 'sha256-iry7oJKoKJ+9HSjmU3E1TlRlpSesJWZ1vapuUz2MP38='
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 bd96095bb3c15c742ab4d72d1fecba6c.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: 6SpS3eRCDKmYpegwDJEzw6FOPYvQiprEEmUTxCtuZCKE7hTkg907Sg==
                                                                                                                            2024-09-28 02:38:39 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 36 57 52 4d 68 62 6f 53 62 4f 6b 68 30 50 79 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="6WRMhboSbOkh0Py"
                                                                                                                            2024-09-28 02:38:39 UTC16384INData Raw: 38 35 64 65 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 85de<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:39 UTC16384INData Raw: 74 68 5f 6e 61 6d 65 5f 6f 6e 6c 79 22 3a 22 7b 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 6e 6f 6d 7d 22 2c 22 64 61 74 65 5f 72 61 6e 67 65 5f 77 69 74 68 5f 73 68 6f 72 74 5f 77 65 65 6b 64 61 79 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 22 3a 22 7b 73 68 6f 72 74 5f 77 65 65 6b 64 61 79 7d 2c 20 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 7d 20 e2 80 93 20 7b 73 68 6f 72 74 5f 77 65 65 6b 64 61 79 5f 75 6e 74 69 6c 7d 2c 20 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 5f 75 6e 74 69 6c 7d 20 7b 64 61 79 5f 6f 66 5f 6d 6f 6e 74 68 5f 75 6e 74 69 6c 7d 20 22 2c 22 64 61 79 5f 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 74 69 6d 65 5f 62 65 74 77 65 65 6e 22 3a 22 7b 73 68 6f 72 74 5f 6d 6f 6e 74 68 5f 6e 61 6d 65 7d 20
                                                                                                                            Data Ascii: th_name_only":"{month_name_nom}","date_range_with_short_weekday_short_month":"{short_weekday}, {short_month_name} {day_of_month} {short_weekday_until}, {short_month_name_until} {day_of_month_until} ","day_short_month_time_between":"{short_month_name}
                                                                                                                            2024-09-28 02:38:39 UTC1510INData Raw: 37 33 61 31 35 33 33 63 39 62 31 33 37 64 31 35 34 65 34 31 32 61 66 35 38 62 30 62 36 61 37 34 65 32 30 39 61 35 2e 63 73 73 27 2c 0a 65 6d 70 74 79 3a 20 27 27 0a 7d 2c 0a 66 65 5f 65 6e 61 62 6c 65 5f 66 70 73 5f 67 6f 61 6c 5f 77 69 74 68 5f 76 61 6c 75 65 3a 20 31 2c 0a 62 5f 65 6d 61 69 6c 5f 76 61 6c 69 64 61 74 69 6f 6e 5f 72 65 67 65 78 20 3a 20 2f 5e 28 5b 5c 77 2d 5c 2e 5c 2b 5d 2b 40 28 5b 5c 77 2d 5d 2b 5c 2e 29 2b 5b 5c 77 2d 5d 7b 32 2c 31 34 7d 29 3f 24 2f 2c 0a 62 5f 64 6f 6d 61 69 6e 5f 65 6e 64 20 3a 20 27 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 27 2c 0a 62 5f 6f 72 69 67 69 6e 61 6c 5f 75 72 6c 20 3a 20 27 68 74 74 70 73 3a 26 23 34 37 3b 26 23 34 37 3b 77 77 77 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 26 23 34 37 3b 27 2c 0a 62 5f 74 68 69 73
                                                                                                                            Data Ascii: 73a1533c9b137d154e412af58b0b6a74e209a5.css',empty: ''},fe_enable_fps_goal_with_value: 1,b_email_validation_regex : /^([\w-\.\+]+@([\w-]+\.)+[\w-]{2,14})?$/,b_domain_end : '.booking.com',b_original_url : 'https:&#47;&#47;www.booking.com&#47;',b_this
                                                                                                                            2024-09-28 02:38:39 UTC8644INData Raw: 32 31 62 63 0d 0a 6c 61 6e 67 75 61 67 65 5f 63 6f 75 6e 74 72 79 5f 66 6c 61 67 3a 20 27 75 73 27 2c 0a 70 61 67 65 76 69 65 77 5f 69 64 3a 20 27 33 38 61 34 31 32 39 37 35 34 65 62 30 33 64 35 27 2c 0a 61 69 64 3a 20 27 33 30 34 31 34 32 27 2c 0a 62 5f 63 73 72 66 5f 74 6f 6b 65 6e 3a 20 27 62 71 54 33 5a 67 41 41 41 41 41 3d 6b 4a 71 51 35 62 34 61 79 34 4a 51 34 54 75 66 73 78 7a 5a 44 6c 49 6f 4a 47 62 4c 39 53 71 43 36 72 63 6c 39 69 38 76 63 31 71 38 44 4b 6b 62 33 6d 51 77 37 46 61 76 48 4a 31 31 6f 57 46 32 59 35 38 64 34 6a 61 48 67 74 6a 59 48 47 43 33 41 39 5f 46 4e 52 71 43 55 39 43 75 46 6f 4b 37 56 70 49 6c 34 6e 34 4a 39 6f 68 5f 6b 6f 77 78 71 58 75 70 41 59 68 57 41 75 73 4d 73 49 78 6d 53 79 6a 78 71 34 66 64 4f 75 72 6b 63 49 36 57 64
                                                                                                                            Data Ascii: 21bclanguage_country_flag: 'us',pageview_id: '38a4129754eb03d5',aid: '304142',b_csrf_token: 'bqT3ZgAAAAA=kJqQ5b4ay4JQ4TufsxzZDlIoJGbL9SqC6rcl9i8vc1q8DKkb3mQw7FavHJ11oWF2Y58d4jaHgtjYHGC3A9_FNRqCU9CuFoK7VpIl4n4J9oh_kowxqXupAYhWAusMsIxmSyjxq4fdOurkcI6Wd
                                                                                                                            2024-09-28 02:38:39 UTC8950INData Raw: 32 32 65 65 0d 0a 73 73 22 2c 0a 66 65 5f 72 65 73 65 72 76 61 74 69 6f 6e 73 5f 75 72 6c 5f 74 72 61 76 65 6c 5f 70 75 72 70 6f 73 65 5f 6c 65 69 73 75 72 65 3a 20 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 6d 79 72 65 73 65 72 76 61 74 69 6f 6e 73 2e 68 74 6d 6c 3f 6c 61 62 65 6c 3d 67 65 6e 31 37 33 6e 72 2d 31 46 43 41 45 6f 67 67 49 34 36 41 64 49 4d 31 67 45 61 4b 63 43 69 41 45 42 6d 41 45 78 75 41 45 58 79 41 45 4d 32 41 45 42 36 41 45 42 2d 41 45 43 69 41 49 42 71 41 49 44 75 41 4b 75 32 4e 32 33 42 73 41 43 41 64 49 43 4a 47 49 30 5a 6a 63 34 4e 32 51 32 4c 54 68 6b 4e 44 6b 74 4e 44 49 79 4e 69 30 35 4d 54 41 77 4c 54 59 35 4e 54 59 7a 59 54 59 32 59 32 52 6c 59 64 67 43 42 65 41 43 41 51 26 73 69 64 3d
                                                                                                                            Data Ascii: 22eess",fe_reservations_url_travel_purpose_leisure: "https://secure.booking.com/myreservations.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AECiAIBqAIDuAKu2N23BsACAdICJGI0Zjc4N2Q2LThkNDktNDIyNi05MTAwLTY5NTYzYTY2Y2RlYdgCBeACAQ&sid=
                                                                                                                            2024-09-28 02:38:39 UTC16384INData Raw: 33 66 66 61 0d 0a 5f 63 6f 6e 74 69 6e 65 6e 74 3a 20 27 65 65 42 61 57 42 4c 48 46 65 42 61 55 45 41 46 51 46 66 42 4e 50 62 65 66 65 4b 4f 57 42 42 4f 27 2c 0a 62 65 61 63 68 5f 68 6f 6c 69 64 61 79 73 5f 63 6f 75 6e 74 72 79 3a 20 27 65 65 42 61 57 42 4c 48 46 65 42 61 55 45 41 46 51 46 66 42 4e 50 62 65 66 52 4c 54 27 2c 0a 62 65 61 63 68 5f 68 6f 6c 69 64 61 79 73 5f 72 65 73 75 6c 74 73 3a 20 27 65 65 42 61 57 42 4c 48 46 65 42 61 55 45 41 46 51 46 66 42 4e 50 62 65 62 61 4f 52 65 27 2c 0a 69 6e 64 65 78 3a 20 27 65 65 42 61 57 42 4c 48 46 65 56 5a 4d 59 49 4f 27 2c 0a 7d 2c 0a 71 75 69 7a 5f 64 61 74 61 5f 66 61 69 6c 65 64 3a 20 7b 0a 62 65 61 63 68 5f 68 6f 6c 69 64 61 79 73 3a 20 27 65 65 42 61 57 64 62 66 5a 4a 56 48 57 45 4b 4a 46 59 57 59 48
                                                                                                                            Data Ascii: 3ffa_continent: 'eeBaWBLHFeBaUEAFQFfBNPbefeKOWBBO',beach_holidays_country: 'eeBaWBLHFeBaUEAFQFfBNPbefRLT',beach_holidays_results: 'eeBaWBLHFeBaUEAFQFfBNPbebaORe',index: 'eeBaWBLHFeVZMYIO',},quiz_data_failed: {beach_holidays: 'eeBaWdbfZJVHWEKJFYWYH
                                                                                                                            2024-09-28 02:38:39 UTC10479INData Raw: 0d 0a 32 38 65 35 0d 0a 2c 22 45 4a 51 4b 45 5a 66 65 62 4c 53 58 63 52 41 45 66 4d 4b 4f 65 64 4a 4e 48 49 55 49 4f 22 3a 31 2c 22 59 57 59 48 61 55 57 50 48 44 44 50 43 62 4a 4f 44 4b 50 49 50 4f 44 57 65 22 3a 31 2c 22 42 43 45 58 46 61 47 4d 58 46 53 64 43 58 4a 51 4c 59 58 51 64 4a 47 47 56 50 48 57 50 61 44 4d 57 58 46 5a 45 56 43 22 3a 31 2c 22 59 54 42 59 4e 61 58 54 61 53 4a 4b 62 4e 43 64 44 5a 54 61 50 66 4c 52 42 64 53 4d 48 45 54 22 3a 31 2c 22 49 5a 56 50 56 49 52 50 4c 65 55 4d 5a 4e 59 52 42 61 47 52 65 22 3a 31 2c 22 61 58 54 66 48 41 45 44 42 4f 53 56 61 63 44 4e 64 52 64 4a 46 4b 63 53 48 55 62 51 57 65 22 3a 31 2c 22 48 57 41 46 4e 55 56 53 5a 59 49 44 4b 44 49 58 49 4a 59 49 57 65 22 3a 31 2c 22 48 56 4c 44 54 4c 55 65 64 4b 4e 4b 4e
                                                                                                                            Data Ascii: 28e5,"EJQKEZfebLSXcRAEfMKOedJNHIUIO":1,"YWYHaUWPHDDPCbJODKPIPODWe":1,"BCEXFaGMXFSdCXJQLYXQdJGGVPHWPaDMWXFZEVC":1,"YTBYNaXTaSJKbNCdDZTaPfLRBdSMHET":1,"IZVPVIRPLeUMZNYRBaGRe":1,"aXTfHAEDBOSVacDNdRdJFKcSHUbQWe":1,"HWAFNUVSZYIDKDIXIJYIWe":1,"HVLDTLUedKNKN
                                                                                                                            2024-09-28 02:38:39 UTC16384INData Raw: 33 66 66 61 0d 0a 50 49 4f 57 4c 45 43 48 59 4c 54 22 3a 31 2c 22 5a 4f 4d 55 52 43 57 45 59 63 5a 62 4d 48 53 55 48 63 57 43 63 4e 66 4e 61 48 4d 4f 22 3a 31 2c 22 61 57 51 4f 63 4e 5a 5a 42 54 65 4e 4a 50 52 43 22 3a 31 2c 22 4f 4d 47 66 48 4d 66 45 4a 53 57 65 22 3a 31 2c 22 41 42 56 59 55 49 59 42 64 4f 46 56 59 47 55 50 54 41 65 45 4a 55 43 22 3a 31 2c 22 59 54 54 48 62 58 65 65 56 56 41 4e 54 49 42 48 4f 52 65 65 48 65 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 62 50 4d 66 42 5a 56 4e 4c 4c 41 65 45 46 53 57 65 22 3a 31 2c 22 42 49 55 4a 4c 4d 46 50 41 41 4d 62 54 42 59 62 42 48 55 53 54 44 4c 4f 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 53 53 61 48 66 54 4c 52 52 4b 65 22 3a 31 2c 22 62 51 47 42 58 56 55 63 45 53 47 51 43 64 45 64 4a 4d 4f 22 3a 31 2c 22
                                                                                                                            Data Ascii: 3ffaPIOWLECHYLT":1,"ZOMURCWEYcZbMHSUHcWCcNfNaHMO":1,"aWQOcNZZBTeNJPRC":1,"OMGfHMfEJSWe":1,"ABVYUIYBdOFVYGUPTAeEJUC":1,"YTTHbXeeVVANTIBHOReeHe":1,"aWQOcYTBbPMfBZVNLLAeEFSWe":1,"BIUJLMFPAAMbTBYbBHUSTDLO":1,"TfNZeFcCSSaHfTLRRKe":1,"bQGBXVUcESGQCdEdJMO":1,"
                                                                                                                            2024-09-28 02:38:39 UTC16384INData Raw: 0d 0a 34 30 30 30 0d 0a 4f 49 42 42 51 4d 41 4c 5a 55 54 50 49 62 4e 56 4e 65 55 62 5a 46 61 46 64 42 66 57 48 54 22 3a 31 2c 22 5a 4f 43 44 4d 63 42 45 43 61 62 54 48 47 61 57 5a 64 4a 66 42 65 46 4e 65 44 62 4a 54 56 57 63 4d 62 66 4a 64 49 45 4c 58 4c 54 22 3a 31 2c 22 4f 4d 54 56 42 45 4e 4e 46 5a 46 4a 46 52 4c 52 47 4f 22 3a 31 2c 22 59 4e 61 58 54 62 57 4e 50 49 4d 4c 5a 61 61 4e 52 66 43 65 4d 4a 59 47 49 57 65 22 3a 31 2c 22 48 42 41 64 57 41 42 54 58 4e 50 55 5a 61 65 55 46 44 51 59 54 22 3a 31 2c 22 64 4a 51 63 49 61 4f 4c 42 58 65 22 3a 31 2c 22 4f 4f 49 42 54 56 58 4d 41 63 5a 45 57 4d 4d 4f 4f 64 62 45 57 61 48 65 50 4c 53 49 52 4c 54 22 3a 31 2c 22 49 4e 4c 47 50 5a 50 66 45 43 49 41 45 4b 4b 55 48 41 62 45 43 48 54 65 59 54 22 3a 31 2c 22
                                                                                                                            Data Ascii: 4000OIBBQMALZUTPIbNVNeUbZFaFdBfWHT":1,"ZOCDMcBECabTHGaWZdJfBeFNeDbJTVWcMbfJdIELXLT":1,"OMTVBENNFZFJFRLRGO":1,"YNaXTbWNPIMLZaaNRfCeMJYGIWe":1,"HBAdWABTXNPUZaeUFDQYT":1,"dJQcIaOLBXe":1,"OOIBTVXMAcZEWMMOOdbEWaHePLSIRLT":1,"INLGPZPfECIAEKKUHAbECHTeYT":1,"


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            145192.168.2.454203188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:38 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:39 UTC731INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:39 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zF3V7es3MX8iMPHkfd1nB9izkUjlq4idREjLdhICwQEHdNdiUpeX%2BLYcd2qqFtChfNEq5odgEkk18xjWS77pYlnQ1bWLxts8G0TkFFHgbhf%2BwKCjHU0TNYDD98wkxlcU3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05bc5cdb543b7-EWR
                                                                                                                            2024-09-28 02:38:39 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            146192.168.2.454207188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:39 UTC782OUTPOST /ajax/payment_card_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 10
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:39 UTC10OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c
                                                                                                                            Data Ascii: code=wakdl
                                                                                                                            2024-09-28 02:38:39 UTC656INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:39 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uM5GqRBo0P9SiZtKcNVo8%2FCI1F6uXExVNNJCvIo9Ochc040EPA7LEslhOGe4L8BwI1QYhBrkZcqtfqtLPBEr6LLMCBc8n%2Fra38WAfp%2FVNUjD8Y4fPqFZPZjSfq2epvloyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05bc8c8f50f3a-EWR
                                                                                                                            2024-09-28 02:38:39 UTC22INData Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a
                                                                                                                            Data Ascii: 10{"status":false}
                                                                                                                            2024-09-28 02:38:39 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            147192.168.2.454206188.114.96.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:39 UTC779OUTPOST /ajax/user_send_status.php HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            Content-Length: 33
                                                                                                                            sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                                                                                            Accept: application/json, text/javascript, */*; q=0.01
                                                                                                                            Content-Type: application/x-www-form-urlencoded; charset=UTF-8
                                                                                                                            X-Requested-With: XMLHttpRequest
                                                                                                                            sec-ch-ua-mobile: ?0
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            sec-ch-ua-platform: "Windows"
                                                                                                                            Origin: https://ramadawynd.com
                                                                                                                            Sec-Fetch-Site: same-origin
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Referer: https://ramadawynd.com/wakdl
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:39 UTC33OUTData Raw: 63 6f 64 65 3d 77 61 6b 64 6c 26 74 79 70 65 3d 62 6f 6f 6b 69 6e 67 26 70 61 67 65 3d 69 6e 66 6f
                                                                                                                            Data Ascii: code=wakdl&type=booking&page=info
                                                                                                                            2024-09-28 02:38:39 UTC658INHTTP/1.1 200 OK
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:39 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3iggViM%2BiinS7MI2Lgco3aY6n7p1oa9x7YeNRBO7d%2Bp%2BbdrznLTJeRHKj1IRjUslIkahB5aRt1YYAWshXMwjSRmWi%2ByAEqKTELfQkv0jZb1WeZZLJz9AL6SIwmbxeBrFvA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05bc8da7932e4-EWR
                                                                                                                            2024-09-28 02:38:39 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            148192.168.2.45421018.245.60.74435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:40 UTC1071OUTGET / HTTP/1.1
                                                                                                                            Host: www.booking.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: px_init=0; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmWRWR+u9soBpACiAfv7ngQKC1IRe4CdruwWuDhBjZTMXv3pm2sJSH5bMshbZj2K9TJfCqsXrunTkLxnMKGiX1gBmASZVh0qHhIViOgPmZJzHd6vpm1C6h9EKRinb60UaKf98L38K/; pcm_consent=analytical%3Dtrue%26countryCode%3DUS%26consentId%3D49a598ac-27d2-43e0-8f81-04215f1b7607%26consentedAt%3D2024-09-28T02%3A37%3A54.799Z%26expiresAt%3D2025-03-27T02%3A37%3A54.799Z%26implicit%3Dtrue%26marketing%3Dtrue%26regionCode%3DNY%26regulation%3Dnone%26legacyRegulation%3Dnone; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv6D4N3gsbyVA6TaKJ2TWCoCUsW6bdLTMW73OP3tHSaImXzEdh1oXRB42IZPFt1DEGgc6sa5%2FSqInM0F%2FiyU379UhZpA5%2FEHLd65gaBR2FmpKYjYThPoxJDmhcvDJMp0DmO6lQ0dgUZba2Tvnjv%2FzSrH9h0neb%2FtGA%3D
                                                                                                                            2024-09-28 02:38:40 UTC2349INHTTP/1.1 200 OK
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            server: nginx
                                                                                                                            date: Sat, 28 Sep 2024 02:38:40 GMT
                                                                                                                            vary: User-Agent, Accept-Encoding
                                                                                                                            link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/308436ca26aacf6a7553e4c0cf298d0f780727a2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/8c4382cb776a747249815b8dfc6e41527a56143e.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/2ee63c50562eff5b15bd5494ec6df807b8ad79c2.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/22870d2036e5b5667d39fb7d0c2c8e937d5d2a13.css>; rel=preload; as=style
                                                                                                                            link: <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
                                                                                                                            nel: {"max_age":604800,"report_to":"default"}
                                                                                                                            report-to: {"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800}
                                                                                                                            set-cookie: _implmdnbl=2__1__0; path=/; expires=Mon, 30-Sep-2019 02:38:40 GMT; HttpOnly
                                                                                                                            set-cookie: px_init=0; domain=booking.com; expires=Fri, 25-Aug-2079 05:17:20 GMT; SameSite=Strict; secure; HttpOnly
                                                                                                                            set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpDaJTBtMfaZtgSZoueRebqei8r3AcFct6QVyMlUJQ%2BLzJVehJ%2FLCYYl0WIJua%2Bz2JIdOre1NSrA1gD%2B23OBnM7R3blG6jIZNLrDWFU9p3UNhsyqPE%2Fh9F2qo2wFaRbf0b5EBTR033CrtESnRQrOvN1FGNXz87f4RU%3D; domain=.booking.com; path=/; expires=Thu, 27-Sep-2029 02:38:40 GMT; Secure; HTTPOnly; SameSite=None
                                                                                                                            set-cookie: pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Thu, 27-Mar-2025 02:38:40 GMT; Secure; HTTPOnly
                                                                                                                            strict-transport-security: max-age=63072000; includeSubDomains; preload
                                                                                                                            x-content-type-options: nosniff
                                                                                                                            x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
                                                                                                                            x-terms-of-service: https://www.booking.com/content/terms.html
                                                                                                                            x-xss-protection: 1; mode=block
                                                                                                                            X-Cache: Miss from cloudfront
                                                                                                                            Via: 1.1 dc57cbf9d7336ae929f762b5ada2ed98.cloudfront.net (CloudFront)
                                                                                                                            X-Amz-Cf-Pop: FRA60-P5
                                                                                                                            X-Amz-Cf-Id: nIqwo2-LMIdyPZ2GOjoL8V6E4yEVUGbkFvlK-duJtKJ6rS0XydVILQ==
                                                                                                                            2024-09-28 02:38:40 UTC12068INData Raw: 32 66 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 63 6f 75 6c 64 20 62 65 20 67 65 74 74 69 6e 67 20 70 61 69 64 20 74 6f 20 70 6f 6b 65 20 61 72 6f 75 6e 64 20 69 6e 20 6f 75 72 20 63 6f 64 65 3f 0a 57 65 27 72 65 20 68 69 72 69 6e 67 20 64 65 73 69 67 6e 65 72 73 20 61 6e 64 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 77 6f 72 6b 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 3a 0a 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 2f 0a 2d 2d 3e 0a 3c 21 2d 2d 20 77 64 6f 74 2d 38 30 32 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 50 4e 6b 55 36 35 39 6e 47 35 74 4b 61 65 7a 22
                                                                                                                            Data Ascii: 2f1c<!DOCTYPE html>...You know you could be getting paid to poke around in our code?We're hiring designers and developers to work in Amsterdam:https://careers.booking.com/-->... wdot-802 --><script type="text/javascript" nonce="PNkU659nG5tKaez"
                                                                                                                            2024-09-28 02:38:40 UTC15434INData Raw: 33 63 34 32 0d 0a 3c 74 69 74 6c 65 3e 0a 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 7c 20 4f 66 66 69 63 69 61 6c 20 73 69 74 65 20 7c 20 54 68 65 20 62 65 73 74 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 20 26 20 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 73 20 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 74 68 65 20 77 6f 72 6c 64 20 77 69 74 68 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 2e 20 42 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 68 6f 6d 65 73 2c 20 68 6f 74 65 6c 73 2c 20 66 6c 69 67 68 74 73 2c 20 63 61 72 20 72 65 6e 74 61 6c 73 2c 20 74 61 78 69 73 2c 20 61 6e 64 20 61 74 74 72 61 63 74 69 6f 6e 73 20 e2
                                                                                                                            Data Ascii: 3c42<title>Booking.com | Official site | The best hotels, flights, car rentals & accommodations </title><meta name="description" content="Explore the world with Booking.com. Big savings on homes, hotels, flights, car rentals, taxis, and attractions
                                                                                                                            2024-09-28 02:38:40 UTC16384INData Raw: 37 36 61 38 0d 0a 5f 76 61 6c 69 64 5f 64 61 74 65 73 22 3a 20 30 2c 0a 22 62 5f 63 6f 75 6e 74 72 79 63 6f 64 65 22 20 3a 20 27 27 2c 0a 22 62 5f 67 75 65 73 74 5f 63 6f 75 6e 74 72 79 22 20 3a 20 27 75 73 27 2c 0a 22 62 5f 6c 6f 63 61 6c 65 22 20 3a 20 27 65 6e 2d 75 73 27 2c 0a 22 62 5f 6c 61 6e 67 5f 66 6f 72 5f 75 72 6c 22 20 3a 20 27 65 6e 2d 75 73 27 2c 0a 22 62 5f 74 68 69 73 5f 75 72 63 68 69 6e 22 20 3a 20 27 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 6c 61 62 65 6c 3d 67 65 6e 31 37 33 6e 72 2d 31 46 43 41 45 6f 67 67 49 34 36 41 64 49 4d 31 67 45 61 4b 63 43 69 41 45 42 6d 41 45 78 75 41 45 58 79 41 45 4d 32 41 45 42 36 41 45 42 2d 41 45 43 69 41 49 42 71 41 49 44 75 41 4b 77 32 4e 32 33 42 73 41 43 41 64 49 43 4a 47 59 79 4e 57 46 6c 5a 6a 6c 6d 4c
                                                                                                                            Data Ascii: 76a8_valid_dates": 0,"b_countrycode" : '',"b_guest_country" : 'us',"b_locale" : 'en-us',"b_lang_for_url" : 'en-us',"b_this_urchin" : '/index.html?label=gen173nr-1FCAEoggI46AdIM1gEaKcCiAEBmAExuAEXyAEM2AEB6AEB-AECiAIBqAIDuAKw2N23BsACAdICJGYyNWFlZjlmL
                                                                                                                            2024-09-28 02:38:40 UTC14000INData Raw: 33 64 61 66 37 34 66 32 62 34 66 66 37 30 2e 63 73 73 27 2c 0a 61 73 79 6e 63 5f 6c 69 73 74 73 5f 6a 73 3a 20 27 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6a 73 2f 61 73 79 6e 63 5f 6c 69 73 74 73 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2f 32 31 36 62 32 66 35 37 33 63 31 39 65 62 61 36 36 33 66 36 38 36 64 64 38 66 37 63 64 34 37 34 37 61 34 64 34 63 62 37 2e 6a 73 27 2c 0a 61 73 79 6e 63 5f 77 70 6d 5f 6f 76 65 72 6c 61 79 5f 63 73 73 3a 20 27 68 74 74 70 73 3a 2f 2f 63 66 2e 62 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 63 73 73 2f 61 73 79 6e 63 5f 77 70 6d 5f 6f 76 65 72 6c 61 79 5f 61 73 73 65 74 73 5f 63 6c 6f 75 64 66 72 6f 6e 74 5f 73 64 2e 69 71 5f 6c 74 72 2f 61 62 62 33 30 34 62 66
                                                                                                                            Data Ascii: 3daf74f2b4ff70.css',async_lists_js: 'https://cf.bstatic.com/static/js/async_lists_cloudfront_sd/216b2f573c19eba663f686dd8f7cd4747a4d4cb7.js',async_wpm_overlay_css: 'https://cf.bstatic.com/static/css/async_wpm_overlay_assets_cloudfront_sd.iq_ltr/abb304bf
                                                                                                                            2024-09-28 02:38:40 UTC16384INData Raw: 35 61 36 38 0d 0a 75 72 6c 3a 20 22 22 2c 0a 62 5f 69 73 5f 72 65 67 5f 75 73 65 72 5f 63 69 74 79 5f 67 75 69 64 65 5f 69 6e 5f 6c 61 6e 67 5f 61 76 61 69 6c 61 62 6c 65 3a 20 22 30 22 2c 0a 62 5f 61 73 70 69 72 69 6e 67 5f 75 73 65 72 5f 66 69 66 74 68 5f 62 6f 6f 6b 69 6e 67 5f 75 66 69 20 3a 20 22 22 2c 0a 62 5f 72 65 67 5f 75 73 65 72 5f 61 73 70 69 72 69 6e 67 5f 64 61 74 61 3a 20 22 22 2c 0a 62 5f 64 75 6d 6d 79 5f 76 61 72 5f 66 6f 72 5f 74 72 61 69 6c 69 6e 67 5f 63 6f 6d 6d 61 3a 20 66 61 6c 73 65 2c 0a 62 5f 69 70 5f 63 6f 75 6e 74 72 79 3a 20 22 22 2c 0a 62 5f 67 75 65 73 74 5f 63 6f 75 6e 74 72 79 3a 20 22 75 73 22 2c 0a 62 5f 61 67 65 6e 74 5f 69 73 5f 6e 6f 5f 72 6f 62 6f 74 3a 20 31 2c 0a 62 5f 70 61 67 65 5f 6e 61 6d 65 20 3a 20 22 69 6e
                                                                                                                            Data Ascii: 5a68url: "",b_is_reg_user_city_guide_in_lang_available: "0",b_aspiring_user_fifth_booking_ufi : "",b_reg_user_aspiring_data: "",b_dummy_var_for_trailing_comma: false,b_ip_country: "",b_guest_country: "us",b_agent_is_no_robot: 1,b_page_name : "in
                                                                                                                            2024-09-28 02:38:40 UTC6768INData Raw: 59 53 47 50 52 58 65 22 3a 30 2c 22 4f 4d 54 56 42 45 54 62 4e 54 61 4c 45 55 61 59 4c 66 64 65 42 56 4f 53 65 4b 65 22 3a 30 2c 22 48 56 51 65 59 46 52 55 52 55 52 59 54 62 4e 61 47 61 62 4a 55 63 5a 56 61 43 42 58 47 43 22 3a 30 2c 22 4f 4f 49 42 42 51 4d 41 4c 48 59 59 66 50 59 54 61 53 54 52 66 49 4d 4c 61 46 4c 45 43 46 50 57 65 22 3a 31 2c 22 42 4b 41 54 59 57 50 48 44 44 48 66 4c 65 62 62 4d 45 4b 4b 41 63 51 4a 46 66 57 65 22 3a 30 2c 22 49 5a 56 42 42 56 59 55 66 4b 54 55 53 47 62 64 4d 48 46 42 64 63 45 55 43 22 3a 31 2c 22 4f 41 42 42 61 4a 65 57 4b 4e 4b 4e 4e 42 5a 45 4c 64 63 41 4b 57 4c 62 4f 4d 4e 4d 54 62 61 54 61 54 61 45 54 22 3a 31 2c 22 4f 4f 49 42 42 51 4d 41 4c 5a 57 4c 4b 56 42 42 56 59 55 65 44 55 62 4e 62 49 55 4f 4e 53 46 54 55
                                                                                                                            Data Ascii: YSGPRXe":0,"OMTVBETbNTaLEUaYLfdeBVOSeKe":0,"HVQeYFRURURYTbNaGabJUcZVaCBXGC":0,"OOIBBQMALHYYfPYTaSTRfIMLaFLECFPWe":1,"BKATYWPHDDHfLebbMEKKAcQJFfWe":0,"IZVBBVYUfKTUSGbdMHFBdcEUC":1,"OABBaJeWKNKNNBZELdcAKWLbOMNMTbaTaTaET":1,"OOIBBQMALZWLKVBBVYUeDUbNbIUONSFTU
                                                                                                                            2024-09-28 02:38:40 UTC11920INData Raw: 32 65 38 38 0d 0a 5a 4d 51 4d 4c 53 57 64 52 64 4a 63 65 42 65 57 65 22 3a 31 2c 22 65 57 66 61 59 48 47 55 49 51 63 43 4f 46 53 62 58 55 43 65 65 57 58 46 5a 45 56 43 22 3a 31 2c 22 50 50 58 47 57 50 48 44 44 5a 4b 5a 4b 43 42 5a 64 42 64 50 57 63 44 61 57 65 22 3a 31 2c 22 49 5a 64 48 55 59 57 45 53 64 4d 57 57 48 44 43 53 56 5a 58 64 47 56 44 5a 53 64 53 55 57 44 62 49 55 4f 59 53 49 55 43 22 3a 31 2c 22 48 4d 62 56 41 47 66 50 44 61 52 43 47 62 62 4e 48 55 48 65 22 3a 31 2c 22 42 4b 41 54 59 53 43 5a 44 56 52 47 43 4d 52 44 66 55 46 46 45 50 51 42 54 62 58 44 43 51 52 61 48 62 4d 4b 58 65 22 3a 31 2c 22 50 57 42 4a 42 43 43 61 4e 55 55 57 63 62 44 66 58 51 45 57 65 61 52 62 64 46 49 4b 65 22 3a 31 2c 22 56 58 53 45 4c 4c 4f 46 65 66 46 61 58 62 41 50
                                                                                                                            Data Ascii: 2e88ZMQMLSWdRdJceBeWe":1,"eWfaYHGUIQcCOFSbXUCeeWXFZEVC":1,"PPXGWPHDDZKZKCBZdBdPWcDaWe":1,"IZdHUYWESdMWWHDCSVZXdGVDZSdSUWDbIUOYSIUC":1,"HMbVAGfPDaRCGbbNHUHe":1,"BKATYSCZDVRGCMRDfUFFEPQBTbXDCQRaHbMKXe":1,"PWBJBCCaNUUWcbDfXQEWeaRbdFIKe":1,"VXSELLOFefFaXbAP
                                                                                                                            2024-09-28 02:38:41 UTC16384INData Raw: 35 31 37 32 0d 0a 4a 4d 46 63 4e 52 66 44 52 4b 65 22 3a 31 2c 22 63 51 5a 4e 44 62 44 41 41 54 50 46 65 5a 4b 55 49 46 54 44 53 4a 46 4b 59 66 57 56 57 4e 59 4f 22 3a 31 2c 22 42 4b 65 57 49 45 63 59 54 42 48 61 5a 46 62 51 61 53 49 4e 62 45 59 55 4c 61 49 4f 52 65 22 3a 31 2c 22 64 4c 63 58 4a 65 49 54 50 56 4e 65 4a 4d 42 4d 57 5a 4e 4e 4f 65 62 51 41 59 58 54 22 3a 31 2c 22 62 4c 64 4c 4f 4c 4f 4c 4f 4f 54 49 4e 55 46 44 49 4e 46 50 49 57 42 48 54 22 3a 31 2c 22 4f 4c 51 51 52 54 57 66 42 4e 51 4b 53 51 50 43 63 43 62 50 64 42 56 47 57 65 22 3a 31 2c 22 66 65 66 53 4b 65 45 46 56 46 4b 4f 55 59 4c 51 57 58 58 64 56 4c 59 4c 44 63 44 61 5a 61 54 61 54 61 45 54 22 3a 31 2c 22 59 64 58 66 54 50 65 56 48 41 46 50 42 4c 41 53 56 54 4d 49 59 64 58 66 45 4b
                                                                                                                            Data Ascii: 5172JMFcNRfDRKe":1,"cQZNDbDAATPFeZKUIFTDSJFKYfWVWNYO":1,"BKeWIEcYTBHaZFbQaSINbEYULaIORe":1,"dLcXJeITPVNeJMBMWZNNOebQAYXT":1,"bLdLOLOLOOTINUFDINFPIWBHT":1,"OLQQRTWfBNQKSQPCcCbPdBVGWe":1,"fefSKeEFVFKOUYLQWXXdVLYLDcDaZaTaTaET":1,"YdXfTPeVHAFPBLASVTMIYdXfEK
                                                                                                                            2024-09-28 02:38:41 UTC4474INData Raw: 4f 48 59 59 66 50 48 65 22 3a 31 2c 22 48 4d 62 42 4f 53 49 65 57 63 49 55 54 59 4a 4b 62 49 46 52 5a 44 44 55 57 65 22 3a 31 2c 22 48 43 5a 41 4e 48 44 64 4c 59 42 59 58 42 61 66 49 53 57 45 53 56 49 41 46 45 54 22 3a 31 2c 22 66 65 66 64 4c 57 45 59 51 47 58 59 49 65 42 5a 53 4a 4f 45 49 4b 5a 42 41 43 48 42 52 61 65 4b 56 56 43 4c 54 22 3a 31 2c 22 48 57 41 46 59 45 45 54 66 59 50 61 64 52 57 53 45 55 4e 50 4c 48 4a 64 46 4f 22 3a 31 2c 22 65 44 58 4a 59 53 47 51 43 64 42 53 59 4e 54 55 66 53 56 54 22 3a 31 2c 22 50 50 58 47 53 43 5a 57 4e 54 50 46 65 5a 4b 55 49 4a 5a 54 4f 65 54 57 58 46 5a 45 56 43 22 3a 31 2c 22 54 66 4e 5a 65 46 63 43 57 55 46 4f 4a 46 49 4a 42 50 48 4c 41 55 43 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 4f 51 51 62 48 56 45 5a 59 52
                                                                                                                            Data Ascii: OHYYfPHe":1,"HMbBOSIeWcIUTYJKbIFRZDDUWe":1,"HCZANHDdLYBYXBafISWESVIAFET":1,"fefdLWEYQGXYIeBZSJOEIKZBACHBRaeKVVCLT":1,"HWAFYEETfYPadRWSEUNPLHJdFO":1,"eDXJYSGQCdBSYNTUfSVT":1,"PPXGSCZWNTPFeZKUIJZTOeTWXFZEVC":1,"TfNZeFcCWUFOJFIJBPHLAUC":1,"aWQOcYTBOQQbHVEZYR
                                                                                                                            2024-09-28 02:38:41 UTC8950INData Raw: 32 32 65 65 0d 0a 22 65 44 53 64 55 61 53 64 46 61 4c 62 46 53 4d 57 64 54 58 4a 62 46 62 52 49 4c 54 22 3a 32 2c 22 4e 41 52 45 46 59 54 42 61 63 54 54 4e 41 49 4f 46 57 43 22 3a 31 2c 22 42 62 65 50 64 4b 4e 4b 4e 4b 5a 55 54 50 4f 48 48 57 63 5a 5a 42 4c 5a 57 56 42 47 43 63 63 51 52 43 4d 5a 43 22 3a 31 2c 22 63 51 59 49 4d 64 55 59 62 65 59 59 5a 56 44 50 50 58 4c 64 48 55 59 57 43 47 54 51 46 53 55 43 4b 58 65 22 3a 31 2c 22 65 55 46 4a 5a 56 61 63 4b 64 5a 4a 56 56 55 44 4f 52 4d 54 66 4c 54 22 3a 31 2c 22 48 57 41 46 59 42 66 50 44 42 64 4a 66 59 53 62 46 58 52 43 22 3a 31 2c 22 4e 41 44 50 46 42 62 53 46 63 46 58 65 55 4e 5a 57 50 50 4c 52 45 4e 5a 46 66 42 55 4c 51 45 57 57 65 22 3a 31 2c 22 61 57 51 4f 63 59 54 42 58 55 46 63 4e 4c 5a 64 59 66
                                                                                                                            Data Ascii: 22ee"eDSdUaSdFaLbFSMWdTXJbFbRILT":2,"NAREFYTBacTTNAIOFWC":1,"BbePdKNKNKZUTPOHHWcZZBLZWVBGCccQRCMZC":1,"cQYIMdUYbeYYZVDPPXLdHUYWCGTQFSUCKXe":1,"eUFJZVacKdZJVVUDORMTfLT":1,"HWAFYBfPDBdJfYSbFXRC":1,"NADPFBbSFcFXeUNZWPPLRENZFfBULQEWWe":1,"aWQOcYTBXUFcNLZdYf


                                                                                                                            Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                            149192.168.2.454212188.114.97.34435088C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            TimestampBytes transferredDirectionData
                                                                                                                            2024-09-28 02:38:40 UTC384OUTGET / HTTP/1.1
                                                                                                                            Host: ramadawynd.com
                                                                                                                            Connection: keep-alive
                                                                                                                            User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                                                                                            Accept: */*
                                                                                                                            Sec-Fetch-Site: none
                                                                                                                            Sec-Fetch-Mode: cors
                                                                                                                            Sec-Fetch-Dest: empty
                                                                                                                            Accept-Encoding: gzip, deflate, br
                                                                                                                            Accept-Language: en-US,en;q=0.9
                                                                                                                            Cookie: PHPSESSID=jrootop87gg13f0ob9ikpdkc3l
                                                                                                                            2024-09-28 02:38:40 UTC733INHTTP/1.1 302 Found
                                                                                                                            Date: Sat, 28 Sep 2024 02:38:40 GMT
                                                                                                                            Content-Type: text/html; charset=UTF-8
                                                                                                                            Transfer-Encoding: chunked
                                                                                                                            Connection: close
                                                                                                                            Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                            Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                            Pragma: no-cache
                                                                                                                            Location: https://booking.com
                                                                                                                            CF-Cache-Status: DYNAMIC
                                                                                                                            Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0npE9%2Fklfewoj8ux5%2FzZgIB%2BtxR2KuG0Glnr1abQvy8PNUHJAtK9z7vc2fu2uuqGm5g0EQyMIbxSmywrZJOneN3naRZKsj7IW4bAl7JEAhryqPQ9Xo2oDarEqkGeNlFR7w%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                            NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                            Speculation-Rules: "/cdn-cgi/speculation"
                                                                                                                            Server: cloudflare
                                                                                                                            CF-RAY: 8ca05bcdff0d41ff-EWR
                                                                                                                            2024-09-28 02:38:40 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                            Data Ascii: 0


                                                                                                                            Statistics

                                                                                                                            CPU Usage

                                                                                                                            Click to jump to process

                                                                                                                            Memory Usage

                                                                                                                            Click to jump to process

                                                                                                                            Behavior

                                                                                                                            Click to jump to process

                                                                                                                            System Behavior

                                                                                                                            General

                                                                                                                            Target ID:0
                                                                                                                            Start time:22:37:33
                                                                                                                            Start date:27/09/2024
                                                                                                                            Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            Wow64 process (32bit):false
                                                                                                                            Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
                                                                                                                            Imagebase:0x7ff76e190000
                                                                                                                            File size:3'242'272 bytes
                                                                                                                            MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                                                                                                            Has elevated privileges:true
                                                                                                                            Has administrator privileges:true
                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                            Reputation:low
                                                                                                                            Has exited:false

                                                                                                                            General

                                                                                                                            Target ID:2
                                                                                                                            Start time:22:37:37
                                                                                                                            Start date:27/09/2024
                                                                                                                            Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            Wow64 process (32bit):false
                                                                                                                            Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1992,i,13184340910222023404,7207311649821444817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
                                                                                                                            Imagebase:0x7ff76e190000
                                                                                                                            File size:3'242'272 bytes
                                                                                                                            MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                                                                                                            Has elevated privileges:true
                                                                                                                            Has administrator privileges:true
                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                            Reputation:low
                                                                                                                            Has exited:false

                                                                                                                            General

                                                                                                                            Target ID:3
                                                                                                                            Start time:22:37:40
                                                                                                                            Start date:27/09/2024
                                                                                                                            Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            Wow64 process (32bit):false
                                                                                                                            Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ramadawynd.com/wakdl"
                                                                                                                            Imagebase:0x7ff76e190000
                                                                                                                            File size:3'242'272 bytes
                                                                                                                            MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                                                                                                            Has elevated privileges:true
                                                                                                                            Has administrator privileges:true
                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                            Reputation:low
                                                                                                                            Has exited:true

                                                                                                                            General

                                                                                                                            Target ID:5
                                                                                                                            Start time:22:37:56
                                                                                                                            Start date:27/09/2024
                                                                                                                            Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            Wow64 process (32bit):false
                                                                                                                            Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4044 --field-trial-handle=1992,i,13184340910222023404,7207311649821444817,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
                                                                                                                            Imagebase:0x7ff76e190000
                                                                                                                            File size:3'242'272 bytes
                                                                                                                            MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                                                                                                            Has elevated privileges:false
                                                                                                                            Has administrator privileges:false
                                                                                                                            Programmed in:C, C++ or other language
                                                                                                                            Reputation:low
                                                                                                                            Has exited:false

                                                                                                                            Disassembly

                                                                                                                            ⊘No disassembly